kayg/infraternal
Watch
1
0
Fork
You've already forked infraternal
 0
Code Issues 356 Pull requests Projects Releases Packages Wiki Activity Actions

Launch QA P1: setup screen's setup-token command fails for a system service #252

New issue
Open
opened 2026-10-21 21:03:02 +00:00 by kayg · 106 comments
kayg commented 2026-10-21 21:03:02 +00:00
Owner
Copy link

Impact

The first-owner setup is blocked for a system service when the operator follows the command printed by /install exactly. The page shows infraternal server setup-token, but that command cannot locate the system service's data directory.

Reproduction

On stable release 0.1.0 built from origin/dev 5868ef5360770f0c634bd264b7ec5473a155decf, install the server as a system service with data at /var/lib/infraternal, then open /install.

  • The setup screen instructs the operator to run infraternal server setup-token.
  • Executed exactly, the command exits 1.
  • infraternal server setup-token --data /var/lib/infraternal exits 0.

Both command outputs were discarded to keep the one-time token private; it was not read, displayed, or stored.

Expected

The setup screen should print a command that works for the configured system service, including its data directory, or the CLI should discover that directory. The next action should not require guessing the hidden --data value.

Found during #247 P1 dry run. Existing issue search found related setup-token socket/auth work but no duplicate for the displayed command failing.

## Impact The first-owner setup is blocked for a system service when the operator follows the command printed by `/install` exactly. The page shows `infraternal server setup-token`, but that command cannot locate the system service's data directory. ## Reproduction On stable release 0.1.0 built from `origin/dev` `5868ef5360770f0c634bd264b7ec5473a155decf`, install the server as a system service with data at `/var/lib/infraternal`, then open `/install`. - The setup screen instructs the operator to run `infraternal server setup-token`. - Executed exactly, the command exits 1. - `infraternal server setup-token --data /var/lib/infraternal` exits 0. Both command outputs were discarded to keep the one-time token private; it was not read, displayed, or stored. ## Expected The setup screen should print a command that works for the configured system service, including its data directory, or the CLI should discover that directory. The next action should not require guessing the hidden `--data` value. Found during #247 P1 dry run. Existing issue search found related setup-token socket/auth work but no duplicate for the displayed command failing.
findings.md
3.5 KiB
after-1440-light.png
131 KiB
system-service-setup-token-smoke.png
42 KiB
after-checks.json
1.4 KiB
iterate-after-tokio.log
196 KiB
iterate-after-cli.log
175 KiB
phone-before.log
3.1 KiB
setup-output-after-clean.log
2 KiB
agent-daemon-shell-ready.log
3.5 KiB
iterate-after-cli-clean.log
200 KiB
phone-after.log
2.3 KiB
system-service-setup-token-command.png
42 KiB
vt-credit-baseline-after-cli.log
2.7 KiB
server-scope-clippy.log
1.4 KiB
agent-daemon-shell-ready.log
3.5 KiB
focused-merge.log
3.9 KiB
setup-tests.log
11 KiB
path-matrix.log
455 B
baseline-static.log
8.7 KiB
head-static-sizes.json
162 B
system-service-setup-token-command.png
42 KiB
server-scope-status-test.log
6.6 KiB
renamed-probe.log
128 B
size-comparison.log
568 B
iterate-after-server.log
202 KiB
iterate-final.log
208 KiB
cleanup.json
817 B
vt-credit-origin-dev.log
2.7 KiB
system-service-setup-token-command.png
42 KiB
agent-queues-shell-ready.log
496 B
R252-01.log
2.4 KiB
system-service-setup-token-command.png
42 KiB
tracer-system-service-playwright.log
2.2 KiB
sizes.json
251 B
static-checks.log
933 B
R252-02.log
1.1 KiB
playwright-setup-token.log
2.2 KiB
setup-output-final.log
629 B
iterate-after-tracer-ui.log
202 KiB
static-builds.log
18 KiB
vt-credit-origin-dev-after-ui.log
2.7 KiB
static-cap-tests.log
287 B
R252-03.log
1.1 KiB
iterate-after-queue-fix.log
205 KiB
before-393-dark.png
42 KiB
before-375-dark.png
34 KiB
after-375-dark.png
35 KiB
baseline-static.log
9.8 KiB
verify-fast.log
476 KiB
final-sizes.json
120 B
agent-review-shell-ready-final.log
2.2 KiB
verify-fast-final.log
246 KiB
R252-04.log
2.4 KiB
cleanup.json
549 B
before-393-light.png
56 KiB
before-375-light.png
50 KiB
before-1440-dark.png
116 KiB
s2-setup-token-command-instructions.png
137 KiB
iterate-shell-neutral-final.log
194 KiB
s2-token-command.md
678 B
shim-session-path.log
526 B
session-bounds-review-final.log
422 B
verify-fast-head.log
462 KiB
R252-05.log
3.2 KiB
ui-sudo-393.png
200 KiB
cargo-deny-tokio.log
14 B
merge-base-static-x86.log
56 KiB
clippy-tokio-deprecation.log
1.7 KiB
browser-head.log
2.2 KiB
ui-plain-393.png
174 KiB
iterate-after-shim-framing.log
196 KiB
merge-base-static-x86-retry.log
6.5 KiB
size-delta.txt
96 B
ui-sudo-375.png
166 KiB
system-service-setup-token-command.png
42 KiB
ui-checks.json
2 KiB
static-size-ratchet-test.log
287 B
setup-r2.log
881 B
baseline-size.txt
9 B
after-393-dark.png
41 KiB
shim-ring-wrap-rerun.log
896 B
contract.log
7.4 KiB
final-integrity.json
499 B
shim-ring-wrap-rerun.log
896 B
verify-fast-final-head.log
200 KiB
after-393-light.png
58 KiB
after-1440-dark.png
112 KiB
shim-ring-wrap-fixed.log
896 B
vt-credit-origin-dev-final-fast.log
3.3 KiB
public-status.log
5.3 KiB
after-375-light.png
49 KiB
before-1440-light.png
125 KiB
before-checks.json
1.4 KiB
test-integrity.txt
581 B
rust-focused.log
1.3 KiB
shim-ring-wrap-suite.log
1.9 KiB
clippy-tokio-register.log
498 B
shim-ring-wrap-clippy.log
3 KiB
ts-fast-final.log
70 KiB
agent-transport.log
1.2 KiB
verify-fast-head.log
510 KiB
iterate-after-shim-marker.log
198 KiB
review-checks.log
4.6 KiB
agent-session-registration.log
831 B
vt-credit-baseline.log
3.3 KiB
verify-fast.log
510 KiB
browser.log
2.3 KiB
system-service-setup-token-command.png
42 KiB
findings.md
3.6 KiB
sizes.json
275 B
baseline-static.log
8.9 KiB
baseline-size.txt
9 B
static-recheck.log
12 KiB
cleanup.json
259 B
artifact-head.log
77 B
shim-ring-wrap-final.log
451 B
after-1440-light.png system-service-setup-token-smoke.png system-service-setup-token-command.png system-service-setup-token-command.png system-service-setup-token-command.png system-service-setup-token-command.png before-393-dark.png before-375-dark.png after-375-dark.png before-393-light.png before-375-light.png before-1440-dark.png s2-setup-token-command-instructions.png ui-sudo-393.png ui-plain-393.png ui-sudo-375.png system-service-setup-token-command.png after-393-dark.png after-393-light.png after-1440-dark.png after-375-light.png before-1440-light.png system-service-setup-token-command.png
kayg commented 2026-10-21 21:03:41 +00:00
Author
Owner
Copy link

Evidence from the #247 P1 dry run: setup-token screen and safe command exit check. The no-data command returned exit 1; the same command with --data /var/lib/infraternal returned exit 0. Both outputs were discarded, so no token was exposed.

Evidence from the #247 P1 dry run: [setup-token screen](https://git.kayg.org/attachments/e1a671e8-651e-4c92-87c9-56361a59f289) and [safe command exit check](https://git.kayg.org/attachments/58de0194-edac-4853-8ab8-016736fa57bd). The no-data command returned exit 1; the same command with `--data /var/lib/infraternal` returned exit 0. Both outputs were discarded, so no token was exposed.
kayg commented 2026-10-21 22:26:49 +00:00
Author
Owner
Copy link

Starting #252 on branch setup-token-data, based on origin/dev at 5868ef5360770f0c634bd264b7ec5473a155decf. Prior issue history confirms the repeated browser run and #252 reproduce the exact command failure. I’ll add a failing system-service CLI regression first, then fix data-dir discovery, setup command display, help, and matching docs.

Starting #252 on branch `setup-token-data`, based on `origin/dev` at `5868ef5360770f0c634bd264b7ec5473a155decf`. Prior issue history confirms the repeated browser run and #252 reproduce the exact command failure. I’ll add a failing system-service CLI regression first, then fix data-dir discovery, setup command display, help, and matching docs.
kayg commented 2026-10-21 22:30:02 +00:00
Author
Owner
Copy link

Finding: crates/infraternal/src/install.rs writes the absolute data path in the system unit's ExecStart; crates/infraternal/src/main.rs still defaults server and server setup-token to ./data. crates/infraternal-status/src/lib.rs already discovers installed units but only extracts --state. The setup page and copy action hardcode the same command in apps/tracer/src/onboarding.ts.

Implementation choice: extend the existing unit reader to expose --data; resolve explicit --data first, then the installed system server unit, then ./data. Add an additive setup_token_command field to public auth status, backed by a non-secret service-scope marker written only into system service units. That lets /install show the working sudo command without guessing scope. Root help will add nested action summaries from the registered definitions. Tests will use temporary unit roots; no installed service or token output is read.

Finding: `crates/infraternal/src/install.rs` writes the absolute data path in the system unit's `ExecStart`; `crates/infraternal/src/main.rs` still defaults `server` and `server setup-token` to `./data`. `crates/infraternal-status/src/lib.rs` already discovers installed units but only extracts `--state`. The setup page and copy action hardcode the same command in `apps/tracer/src/onboarding.ts`. Implementation choice: extend the existing unit reader to expose `--data`; resolve explicit `--data` first, then the installed system server unit, then `./data`. Add an additive `setup_token_command` field to public auth status, backed by a non-secret service-scope marker written only into system service units. That lets `/install` show the working sudo command without guessing scope. Root help will add nested action summaries from the registered definitions. Tests will use temporary unit roots; no installed service or token output is read.
kayg commented 2026-10-21 22:48:01 +00:00
Author
Owner
Copy link

Finding: crates/infraternal/tests/setup_output.rs::setup_token_finds_the_data_dir_from_a_system_service_without_flags fails on the base CLI. It launches infraternal server setup-token with no flags, with a temporary system unit whose ExecStart points to the fixture data directory, and the command exits nonzero. This reproduces #252 without reading an installed service or exposing a token; the only socket response is synthetic.

Finding: `crates/infraternal/tests/setup_output.rs::setup_token_finds_the_data_dir_from_a_system_service_without_flags` fails on the base CLI. It launches `infraternal server setup-token` with no flags, with a temporary system unit whose `ExecStart` points to the fixture data directory, and the command exits nonzero. This reproduces #252 without reading an installed service or exposing a token; the only socket response is synthetic.
kayg commented 2026-10-21 23:39:20 +00:00
Author
Owner
Copy link

Host disk fell from 37 GB to 13 GB free while the Rust suite waited for a build slot; the queued command has not started writing to the target. I will recheck capacity before static builds and remove only this job's disposable artifacts if needed.

Host disk fell from 37 GB to 13 GB free while the Rust suite waited for a build slot; the queued command has not started writing to the target. I will recheck capacity before static builds and remove only this job's disposable artifacts if needed.
kayg commented 2026-10-21 23:52:55 +00:00
Author
Owner
Copy link

Disk capacity recovered to 65 GB free (df -h /home/kayg/.cache/codex-scratch/setup-token-data); the focused Rust suite remains queued and has not started.

Disk capacity recovered to 65 GB free (`df -h /home/kayg/.cache/codex-scratch/setup-token-data`); the focused Rust suite remains queued and has not started.
kayg commented 2026-10-22 00:03:28 +00:00
Author
Owner
Copy link

Focused Rust suite reached the CLI integration tests. setup_token_finds_the_data_dir_from_a_system_service_without_flags passed, while unreadable_system_service_data_prints_one_sudo_command_line found the formatter omitted the executable: actual sudo server setup-token, expected sudo infraternal server setup-token. Fixing the action-derived formatter before rerunning.

Focused Rust suite reached the CLI integration tests. `setup_token_finds_the_data_dir_from_a_system_service_without_flags` passed, while `unreadable_system_service_data_prints_one_sudo_command_line` found the formatter omitted the executable: actual `sudo server setup-token`, expected `sudo infraternal server setup-token`. Fixing the action-derived formatter before rerunning.
kayg commented 2026-10-22 00:17:18 +00:00
Author
Owner
Copy link

Rust implementation step complete. infraternal-status: 13 passed; infraternal --bin: 102 passed, 1 ignored; setup-output CLI integration: 3 passed; root-help regression: 1 passed; public auth status: 1 passed. The initial permission diagnostic omitted infraternal; the shared action-derived formatter now prints the required full command. cargo fmt --all -- --check and git diff --check pass.

Rust implementation step complete. `infraternal-status`: 13 passed; `infraternal --bin`: 102 passed, 1 ignored; setup-output CLI integration: 3 passed; root-help regression: 1 passed; public auth status: 1 passed. The initial permission diagnostic omitted `infraternal`; the shared action-derived formatter now prints the required full command. `cargo fmt --all -- --check` and `git diff --check` pass.
kayg commented 2026-10-22 00:25:37 +00:00
Author
Owner
Copy link

The TypeScript gate started after acquiring a slot but stopped before checking sources: TS2688 could not find bun-types or node from apps/tracer/tsconfig.json. The workspace dependencies were not installed in this worktree. I will run bun install --frozen-lockfile through the build-slot wrapper and repeat the check.

The TypeScript gate started after acquiring a slot but stopped before checking sources: `TS2688` could not find `bun-types` or `node` from apps/tracer/tsconfig.json. The workspace dependencies were not installed in this worktree. I will run `bun install --frozen-lockfile` through the build-slot wrapper and repeat the check.
kayg commented 2026-10-22 00:27:09 +00:00
Author
Owner
Copy link

Frontend check complete. bun run check passed. Production-build Playwright test system-service setup shows and copies its sudo command passed on unique port 51252 at 393×852, checking the displayed command and clipboard text. Screenshot: system-service-setup-token-command.png

Frontend check complete. `bun run check` passed. Production-build Playwright test `system-service setup shows and copies its sudo command` passed on unique port 51252 at 393×852, checking the displayed command and clipboard text. Screenshot: ![system-service-setup-token-command.png](https://git.kayg.org/attachments/f3427757-d7c8-4271-91ab-042c14871eb7)
kayg commented 2026-10-22 00:53:23 +00:00
Author
Owner
Copy link

During scripts/verify iterate, the job target reached 33 GB while the host had 42 GB free (df -h and du -sh under /home/kayg/.cache/codex-scratch/setup-token-data). I will monitor capacity and prune only this job's disposable debug artifacts before static size builds if needed.

During `scripts/verify iterate`, the job target reached 33 GB while the host had 42 GB free (`df -h` and `du -sh` under /home/kayg/.cache/codex-scratch/setup-token-data). I will monitor capacity and prune only this job's disposable debug artifacts before static size builds if needed.
kayg commented 2026-10-29 12:13:25 +00:00
Author
Owner
Copy link

Resumed #252 on branch setup-token-data at WIP checkpoint 21cb399472cf80d8394def20f269181118f00d72, based on origin/dev 5868ef5360770f0c634bd264b7ec5473a155decf. I’m restoring the checkpoint changes, reviewing them for atomic commits, then continuing the required gates. No deploy.

Resumed #252 on branch `setup-token-data` at WIP checkpoint `21cb399472cf80d8394def20f269181118f00d72`, based on `origin/dev` `5868ef5360770f0c634bd264b7ec5473a155decf`. I’m restoring the checkpoint changes, reviewing them for atomic commits, then continuing the required gates. No deploy.
kayg commented 2026-10-29 12:16:03 +00:00
Author
Owner
Copy link

Finding: while resuming, origin/dev had advanced from the checkpoint base 5868ef536 to 81962ab09 (#247). That change moved setup UI into apps/tracer/src/onboarding-setup.on-demand.ts; the checkpoint edits the prior onboarding.ts setup body. I’m carrying the setup command through the new loader/module boundary and preserving the original behavior. No token output or service data was read.

Finding: while resuming, `origin/dev` had advanced from the checkpoint base `5868ef536` to `81962ab09` (#247). That change moved setup UI into `apps/tracer/src/onboarding-setup.on-demand.ts`; the checkpoint edits the prior `onboarding.ts` setup body. I’m carrying the setup command through the new loader/module boundary and preserving the original behavior. No token output or service data was read.
kayg commented 2026-10-29 12:18:08 +00:00
Author
Owner
Copy link

Finding: two local server-data readers still default to ./data: server restart in crates/infraternal/src/main.rs:1751 and release actions in crates/infraternal/src/release_cli.rs:68-71. Both accept an optional --data, so I’ll route their implicit defaults through the same installed-system-unit resolver while preserving explicit paths. There is no server status action; infraternal status reports installed service state through infraternal-status and does not open the server database.

Finding: two local server-data readers still default to `./data`: `server restart` in `crates/infraternal/src/main.rs:1751` and release actions in `crates/infraternal/src/release_cli.rs:68-71`. Both accept an optional `--data`, so I’ll route their implicit defaults through the same installed-system-unit resolver while preserving explicit paths. There is no `server status` action; `infraternal status` reports installed service state through `infraternal-status` and does not open the server database.
kayg commented 2026-10-29 12:20:47 +00:00
Author
Owner
Copy link

Finding: resumed worktree bun run check stopped before source checking with TS2688 for missing bun-types and node type definitions. cargo fmt --all -- --check and both diff checks pass. I’m installing the frozen tracer dependencies through the shared build-slot wrapper, then will rerun the TypeScript gate.

Finding: resumed worktree `bun run check` stopped before source checking with TS2688 for missing `bun-types` and `node` type definitions. `cargo fmt --all -- --check` and both diff checks pass. I’m installing the frozen tracer dependencies through the shared build-slot wrapper, then will rerun the TypeScript gate.
kayg commented 2026-10-29 12:21:22 +00:00
Author
Owner
Copy link

Finding: once frozen dependencies were installed, bun run check reached the changed source and failed at apps/tracer/src/onboarding-load.test.ts:39,46,52: the loader's new required command argument broke existing three-argument callers. I’ll keep the existing call shape and add the command as an optional fourth argument.

Finding: once frozen dependencies were installed, `bun run check` reached the changed source and failed at `apps/tracer/src/onboarding-load.test.ts:39,46,52`: the loader's new required command argument broke existing three-argument callers. I’ll keep the existing call shape and add the command as an optional fourth argument.
kayg commented 2026-10-29 12:24:09 +00:00
Author
Owner
Copy link

Step: data-path and TypeScript compatibility checks pass on rebased base 81962ab09. CARGO_TARGET_DIR=$HOME/.cache/codex-scratch/setup-token-data/target cargo test -p infraternal-status: 13 passed, 0 failed, including installed_system_server_data_comes_from_its_effective_execstart. apps/tracer: bun run check passed; bun test src/onboarding-load.test.ts: 3 passed, 0 failed. The infraternal --test setup_output CLI integration run is queued in the build-slot wrapper.

Step: data-path and TypeScript compatibility checks pass on rebased base `81962ab09`. `CARGO_TARGET_DIR=$HOME/.cache/codex-scratch/setup-token-data/target cargo test -p infraternal-status`: 13 passed, 0 failed, including `installed_system_server_data_comes_from_its_effective_execstart`. `apps/tracer`: `bun run check` passed; `bun test src/onboarding-load.test.ts`: 3 passed, 0 failed. The `infraternal --test setup_output` CLI integration run is queued in the build-slot wrapper.
kayg commented 2026-10-29 12:31:08 +00:00
Author
Owner
Copy link

Contract detail for the requested install screen: public status adds setup_token_command with only the registered default or system-service sudo command. It adds no identity or credential data and remains no-store. This lets /install display and copy the command for the installed service scope.

Contract detail for the requested install screen: public `status` adds `setup_token_command` with only the registered default or system-service sudo command. It adds no identity or credential data and remains no-store. This lets `/install` display and copy the command for the installed service scope.
kayg commented 2026-10-29 12:37:39 +00:00
Author
Owner
Copy link

Finding: the first cargo test -p infraternal --test setup_output build stopped before tests with E0308 at crates/infraternal/src/release_cli.rs:115: the resolver returns PathBuf and release_service expects &Path. The test command exited 101. I am correcting the borrow and will rerun.

Finding: the first `cargo test -p infraternal --test setup_output` build stopped before tests with E0308 at `crates/infraternal/src/release_cli.rs:115`: the resolver returns `PathBuf` and `release_service` expects `&Path`. The test command exited 101. I am correcting the borrow and will rerun.
kayg commented 2026-10-29 12:38:24 +00:00
Author
Owner
Copy link

The rerun after borrowing data for release_service found the paired ownership error at crates/infraternal/src/release_cli.rs:88: symlink_metadata(data) moved the PathBuf before data.join(...); the build exited 101 before tests. I am borrowing it for metadata as well.

The rerun after borrowing `data` for `release_service` found the paired ownership error at `crates/infraternal/src/release_cli.rs:88`: `symlink_metadata(data)` moved the `PathBuf` before `data.join(...)`; the build exited 101 before tests. I am borrowing it for metadata as well.
kayg commented 2026-10-29 12:39:45 +00:00
Author
Owner
Copy link

CLI integration step: cargo test -p infraternal --test setup_output passed 3/3, including the system-unit no-flags setup-token reproduction and the single-line sudo diagnostic. Final run output is in $HOME/.cache/codex-scratch/setup-token-data/evidence/setup-output-final.log. cargo fmt --all -- --check also passed.

CLI integration step: `cargo test -p infraternal --test setup_output` passed 3/3, including the system-unit no-flags setup-token reproduction and the single-line sudo diagnostic. Final run output is in `$HOME/.cache/codex-scratch/setup-token-data/evidence/setup-output-final.log`. `cargo fmt --all -- --check` also passed.
kayg commented 2026-10-29 12:40:42 +00:00
Author
Owner
Copy link

Browser step: the system-service setup command test passed 1/1 against the production tracer build on TRACER_TEST_PORT=55252. It verified the displayed command and exact clipboard contents. The 393x852 screenshot and test logs are attached:
system-service-setup-token-command.png
playwright-setup-token.log
setup-output-final.log

Browser step: the system-service setup command test passed 1/1 against the production tracer build on `TRACER_TEST_PORT=55252`. It verified the displayed command and exact clipboard contents. The 393x852 screenshot and test logs are attached: ![system-service-setup-token-command.png](https://git.kayg.org/attachments/65ef0f97-8cf7-452d-9d00-3b93040ab1c6) [playwright-setup-token.log](https://git.kayg.org/attachments/97571888-51c1-48d9-aa13-4fa7e0ddbdfc) [setup-output-final.log](https://git.kayg.org/attachments/11971885-0abe-45bf-a5a4-b333deec2695)
kayg commented 2026-10-29 12:46:31 +00:00
Author
Owner
Copy link

The status slice iterate gate found one clippy error at crates/infraternal-status/src/lib.rs:302: collapsible_if in the installed-unit resolver. The gate exited through clippy with -D warnings; I will collapse the equivalent conditions and rerun the gate.

The status slice iterate gate found one clippy error at `crates/infraternal-status/src/lib.rs:302`: `collapsible_if` in the installed-unit resolver. The gate exited through clippy with `-D warnings`; I will collapse the equivalent conditions and rerun the gate.
kayg commented 2026-10-29 12:55:55 +00:00
Author
Owner
Copy link

Resumed #252 on branch setup-token-data at rebased origin/dev head/base 81962ab09. The checkpoint's soft reset and rebase are already recorded in the reflog; its restored status resolver changes are staged. Continuing from those changes with the remaining review and gates. No deploy.

Resumed #252 on branch `setup-token-data` at rebased `origin/dev` head/base `81962ab09`. The checkpoint's soft reset and rebase are already recorded in the reflog; its restored status resolver changes are staged. Continuing from those changes with the remaining review and gates. No deploy.
kayg commented 2026-10-29 12:57:10 +00:00
Author
Owner
Copy link

Finding while reconciling the interrupted checkout: the rebase left the status resolver's 2 files staged, while the saved worktree stash holds the other 21 changed files (23 files total, 614 insertions and 90 deletions across the restored state). The stash index contains only crates/infraternal-status/src/lib.rs and src/tests.rs; I’m applying the remaining saved changes on top of 81962ab09 and keeping the stash until commits are pushed.

Finding while reconciling the interrupted checkout: the rebase left the status resolver's 2 files staged, while the saved worktree stash holds the other 21 changed files (23 files total, 614 insertions and 90 deletions across the restored state). The stash index contains only `crates/infraternal-status/src/lib.rs` and `src/tests.rs`; I’m applying the remaining saved changes on top of `81962ab09` and keeping the stash until commits are pushed.
kayg commented 2026-10-29 12:58:53 +00:00
Author
Owner
Copy link

Finding: on the rebased worktree, cargo test -p infraternal-status passed 13/13, including the installed system service data lookup. cargo clippy -p infraternal-status --all-targets -- -D warnings failed at crates/infraternal-status/src/lib.rs:302 with clippy::collapsible_if, matching the prior run's finding. I’m collapsing the nested condition without changing lookup behavior, then rerunning both checks.

Finding: on the rebased worktree, `cargo test -p infraternal-status` passed 13/13, including the installed system service data lookup. `cargo clippy -p infraternal-status --all-targets -- -D warnings` failed at `crates/infraternal-status/src/lib.rs:302` with `clippy::collapsible_if`, matching the prior run's finding. I’m collapsing the nested condition without changing lookup behavior, then rerunning both checks.
kayg commented 2026-10-29 12:59:43 +00:00
Author
Owner
Copy link

Step complete: 0014fa998 (fix(status): read installed server data path (#252)) is committed and pushed to origin/setup-token-data. The existing unit parser now exposes the installed system server's absolute --data path and tests its effective drop-in precedence. Gate: cargo test -p infraternal-status — 13 passed; cargo clippy -p infraternal-status --all-targets -- -D warnings — passed; cargo fmt --all -- --check — passed. Running scripts/verify iterate before the next commit.

Step complete: `0014fa998` (`fix(status): read installed server data path (#252)`) is committed and pushed to `origin/setup-token-data`. The existing unit parser now exposes the installed system server's absolute `--data` path and tests its effective drop-in precedence. Gate: `cargo test -p infraternal-status` — 13 passed; `cargo clippy -p infraternal-status --all-targets -- -D warnings` — passed; `cargo fmt --all -- --check` — passed. Running `scripts/verify iterate` before the next commit.
kayg commented 2026-10-29 13:01:28 +00:00
Author
Owner
Copy link

Finding: scripts/verify iterate reached workspace clippy and flagged assert!(output.stdout.is_empty()) at crates/infraternal/tests/setup_output.rs:138 (clippy::assert_is_empty). The status crate's prior lint is clean. I’ll use the slice equality assertion clippy requests, then rerun the gate after the next slice is ready.

Finding: `scripts/verify iterate` reached workspace clippy and flagged `assert!(output.stdout.is_empty())` at `crates/infraternal/tests/setup_output.rs:138` (`clippy::assert_is_empty`). The status crate's prior lint is clean. I’ll use the slice equality assertion clippy requests, then rerun the gate after the next slice is ready.
kayg commented 2026-10-29 13:04:10 +00:00
Author
Owner
Copy link

Finding: scripts/verify iterate failed crates/infraternal/tests/agent_daemon.rs::real_binary_preserves_input_and_output_across_24_abrupt_stops. scripts/agent_fixture.py timed out waiting for shim-test after 1 second while reading the test daemon stream; the test process returned 101. This is outside the named #118 host-load exceptions, so I’ll require a passing rerun before continuing. No agent-daemon code changed.

Finding: `scripts/verify iterate` failed `crates/infraternal/tests/agent_daemon.rs::real_binary_preserves_input_and_output_across_24_abrupt_stops`. `scripts/agent_fixture.py` timed out waiting for `shim-test` after 1 second while reading the test daemon stream; the test process returned 101. This is outside the named #118 host-load exceptions, so I’ll require a passing rerun before continuing. No agent-daemon code changed.
kayg commented 2026-10-29 13:05:17 +00:00
Author
Owner
Copy link

Finding: the same scripts/verify iterate run also failed the shim process-per-user check before compilation completed. scripts/build-vt could not copy infraternal_snapshot.zig because the job target's generated ghostty-source/src parent was absent (target/vt-tools/native-8c2ee…/ghostty-source/src). I’ll isolate and rerun that check after inspecting the build script; no shim source changed.

Finding: the same `scripts/verify iterate` run also failed the `shim process-per-user` check before compilation completed. `scripts/build-vt` could not copy `infraternal_snapshot.zig` because the job target's generated `ghostty-source/src` parent was absent (`target/vt-tools/native-8c2ee…/ghostty-source/src`). I’ll isolate and rerun that check after inspecting the build script; no shim source changed.
kayg commented 2026-10-29 13:07:20 +00:00
Author
Owner
Copy link

Correction with the exact VT cache evidence: the verified archive contains ghostty-a887df42c56f6de86c0fe6da9c4eeca37931e083/src/lib_vt.zig; the 38 MiB partial cache at $HOME/.cache/codex-scratch/setup-token-data/target/vt-tools/native-8c2ee87ef710c819ac457957a5001834efccd47866cd83bbcb92718c8298c0f8/ghostty-source has no src/ directory. This is a stale partial extraction from the prior disk-full run. I’ll remove only that directory and rerun the process-per-user check.

Correction with the exact VT cache evidence: the verified archive contains `ghostty-a887df42c56f6de86c0fe6da9c4eeca37931e083/src/lib_vt.zig`; the 38 MiB partial cache at `$HOME/.cache/codex-scratch/setup-token-data/target/vt-tools/native-8c2ee87ef710c819ac457957a5001834efccd47866cd83bbcb92718c8298c0f8/ghostty-source` has no `src/` directory. This is a stale partial extraction from the prior disk-full run. I’ll remove only that directory and rerun the process-per-user check.
kayg commented 2026-10-29 13:07:25 +00:00
Author
Owner
Copy link

Finding: cargo-deny fails advisories because the unchanged base lockfile has Tokio 1.53.2 at Cargo.lock:268 (RUSTSEC-2026-0386, unsafe AsyncFd constructors); the advisory names 1.53.3 as the patched version. Cargo.toml and Cargo.lock were unchanged by the task slice. cargo tree -e features -i tokio confirms the existing runtime/features and no new feature selection. I’ll update only Tokio to the patched 1.53.3 in a separate lockfile commit, retaining the existing async runtime, then measure its static-size cost.

Finding: `cargo-deny` fails advisories because the unchanged base lockfile has Tokio 1.53.2 at `Cargo.lock:268` (`RUSTSEC-2026-0386`, unsafe `AsyncFd` constructors); the advisory names 1.53.3 as the patched version. `Cargo.toml` and `Cargo.lock` were unchanged by the task slice. `cargo tree -e features -i tokio` confirms the existing runtime/features and no new feature selection. I’ll update only Tokio to the patched 1.53.3 in a separate lockfile commit, retaining the existing async runtime, then measure its static-size cost.
kayg commented 2026-10-29 13:13:40 +00:00
Author
Owner
Copy link

Finding: after rebuilding the stale VT cache, cargo test --locked -p infraternal-shim --features process-per-user --lib compiled and ran 218 tests: 198 passed, 1 failed, 19 ignored. session::user_host::tests::session_constructor_retains_only_the_bound_socket_path failed at crates/infraternal-shim/src/user_host.rs:1744 because its fixture path under $HOME/.cache/codex-scratch/process-per-user/ctor<PID> plus /sessions/<32-byte-id>.sock exceeds Linux sun_path. This is a test-fixture path-length issue, not product behavior; I’ll shorten the fixture root and create its parent explicitly, then rerun the focused test.

Finding: after rebuilding the stale VT cache, `cargo test --locked -p infraternal-shim --features process-per-user --lib` compiled and ran 218 tests: 198 passed, 1 failed, 19 ignored. `session::user_host::tests::session_constructor_retains_only_the_bound_socket_path` failed at `crates/infraternal-shim/src/user_host.rs:1744` because its fixture path under `$HOME/.cache/codex-scratch/process-per-user/ctor<PID>` plus `/sessions/<32-byte-id>.sock` exceeds Linux `sun_path`. This is a test-fixture path-length issue, not product behavior; I’ll shorten the fixture root and create its parent explicitly, then rerun the focused test.
kayg commented 2026-10-29 13:16:39 +00:00
Author
Owner
Copy link

Step: pushed f5d8f876f (test(shim): shorten socket path fixture (#252)) to origin/setup-token-data. The process-per-user socket-path test passed 1/1 after moving its fixture under .cache/codex-scratch/ppu<PID> and creating the parent. Default infraternal-shim clippy, formatting, and diff checks passed. The opt-in process-per-user clippy invocation reports existing warnings on unchanged code (terminal.rs:104, user_host.rs:874,1008,1227,1229,1235); the feature-enabled test itself passes. Test log: https://git.kayg.org/attachments/833608bd-53bd-4051-a549-12e51b6d28d4

Step: pushed `f5d8f876f` (`test(shim): shorten socket path fixture (#252)`) to `origin/setup-token-data`. The process-per-user socket-path test passed 1/1 after moving its fixture under `.cache/codex-scratch/ppu<PID>` and creating the parent. Default `infraternal-shim` clippy, formatting, and diff checks passed. The opt-in `process-per-user` clippy invocation reports existing warnings on unchanged code (`terminal.rs:104`, `user_host.rs:874,1008,1227,1229,1235`); the feature-enabled test itself passes. Test log: https://git.kayg.org/attachments/833608bd-53bd-4051-a549-12e51b6d28d4
kayg commented 2026-10-29 13:17:27 +00:00
Author
Owner
Copy link

Step: pushed 309110943 (deps: patch Tokio AsyncFd advisory for #252) to origin/setup-token-data. Only the Tokio lockfile version and checksum changed; cargo tree -e features -i tokio --locked shows Tokio 1.53.3 with the same enabled features. cargo deny check advisories passes (advisories ok). Static-size delta will be reported after the final comparison build. cargo-deny-tokio.log

Step: pushed `309110943` (`deps: patch Tokio AsyncFd advisory for #252`) to `origin/setup-token-data`. Only the Tokio lockfile version and checksum changed; `cargo tree -e features -i tokio --locked` shows Tokio 1.53.3 with the same enabled features. `cargo deny check advisories` passes (`advisories ok`). Static-size delta will be reported after the final comparison build. [cargo-deny-tokio.log](https://git.kayg.org/attachments/4a498719-7664-46cf-97b2-35f67b48a875)
kayg commented 2026-10-29 13:20:10 +00:00
Author
Owner
Copy link

Finding: the 1.53.3 advisory fix makes AsyncFd::new deprecated, so cargo clippy --locked -p infraternal --all-targets -- -D warnings fails at four existing call sites: crates/infraternal-agent/src/process_exits_linux.rs:55, sessions.rs:458,494, and transport.rs:43. I’m checking Tokio 1.53.3’s documented register API and will migrate those wrappers before the next commit. clippy-tokio-deprecation.log

Finding: the 1.53.3 advisory fix makes `AsyncFd::new` deprecated, so `cargo clippy --locked -p infraternal --all-targets -- -D warnings` fails at four existing call sites: `crates/infraternal-agent/src/process_exits_linux.rs:55`, `sessions.rs:458,494`, and `transport.rs:43`. I’m checking Tokio 1.53.3’s documented `register` API and will migrate those wrappers before the next commit. [clippy-tokio-deprecation.log](https://git.kayg.org/attachments/ddfd3096-d511-4ce2-bffe-11fcd722ae72)
kayg commented 2026-10-29 13:24:56 +00:00
Author
Owner
Copy link

Correction to my previous note: the workspace root sets unsafe_code = "forbid" (Cargo.toml:83). Clippy rejects direct AsyncFd::register calls and an unsafe inherited-socket API, so I will not weaken that project-wide rule. I’ll retain Tokio’s safe AsyncFd::new wrapper with narrowly scoped deprecation allowances and comments documenting descriptor ownership/stability. The earlier failed clippy receipt is attached above.

Correction to my previous note: the workspace root sets `unsafe_code = "forbid"` (`Cargo.toml:83`). Clippy rejects direct `AsyncFd::register` calls and an unsafe inherited-socket API, so I will not weaken that project-wide rule. I’ll retain Tokio’s safe `AsyncFd::new` wrapper with narrowly scoped deprecation allowances and comments documenting descriptor ownership/stability. The earlier failed clippy receipt is attached above.
kayg commented 2026-10-29 13:28:04 +00:00
Author
Owner
Copy link

Step: pushed 539bcfe4f (deps: keep Tokio fd wrappers lint-clean (#252)) to origin/setup-token-data. The Tokio 1.53.3 patch remains in place; descriptor-owning wrappers keep the workspace's unsafe_code = "forbid" rule and use narrow deprecation allowances. cargo clippy --locked -p infraternal --all-targets -- -D warnings passed; transport integration tests passed 2/2; the session restart integration passed 1/1; formatting and diff checks passed. Receipts: clippy, transport tests, session test.

Step: pushed `539bcfe4f` (`deps: keep Tokio fd wrappers lint-clean (#252)`) to `origin/setup-token-data`. The Tokio 1.53.3 patch remains in place; descriptor-owning wrappers keep the workspace's `unsafe_code = "forbid"` rule and use narrow deprecation allowances. `cargo clippy --locked -p infraternal --all-targets -- -D warnings` passed; transport integration tests passed 2/2; the session restart integration passed 1/1; formatting and diff checks passed. Receipts: [clippy](https://git.kayg.org/attachments/c3fea124-b2ed-4a4d-8831-9db12b59d4ba), [transport tests](https://git.kayg.org/attachments/4bcd4ec9-b7ab-4085-862f-1041b8f90149), [session test](https://git.kayg.org/attachments/da87456d-efd3-4e39-be56-d770ba526f76).
kayg commented 2026-10-29 13:37:14 +00:00
Author
Owner
Copy link

Finding: the second full scripts/verify iterate still fails real_binary_preserves_input_and_output_across_24_abrupt_stops (crates/infraternal/tests/agent_daemon.rs:6). The fixture's socket read exceeded its 20-second budget while waiting for shim-test (scripts/verify-agent.py:46); scripts/agent_fixture.py:247 then waited one more second, and the daemon was still alive. The other Rust rows passed, including shim process-per-user (199 passed, 0 failed, 19 ignored) and cargo-deny. I’m reproducing this test alone and tracing the PTY launch/output path before changing anything. iterate-after-tokio.log

Finding: the second full `scripts/verify iterate` still fails `real_binary_preserves_input_and_output_across_24_abrupt_stops` (`crates/infraternal/tests/agent_daemon.rs:6`). The fixture's socket read exceeded its 20-second budget while waiting for `shim-test` (`scripts/verify-agent.py:46`); `scripts/agent_fixture.py:247` then waited one more second, and the daemon was still alive. The other Rust rows passed, including shim process-per-user (199 passed, 0 failed, 19 ignored) and cargo-deny. I’m reproducing this test alone and tracing the PTY launch/output path before changing anything. [iterate-after-tokio.log](https://git.kayg.org/attachments/52b823f0-7b6c-4ed7-89e4-3e932cf2215e)
kayg commented 2026-10-29 13:45:13 +00:00
Author
Owner
Copy link

Root cause confirmed: the test fixture waited for shim-test from its zsh-only .zshrc, but the build VM launched Bash. The PTY and shim were alive; the shell was waiting for input, so the prompt marker never appeared. I replaced those prompt waits with Binary.wait_for_shell(), which sends a command whose output marker cannot match the echoed input. The real-binary abrupt-stop test now passes 1/1, including all 24 restart positions. agent-daemon-shell-ready.log

Root cause confirmed: the test fixture waited for `shim-test` from its zsh-only `.zshrc`, but the build VM launched Bash. The PTY and shim were alive; the shell was waiting for input, so the prompt marker never appeared. I replaced those prompt waits with `Binary.wait_for_shell()`, which sends a command whose output marker cannot match the echoed input. The real-binary abrupt-stop test now passes 1/1, including all 24 restart positions. [agent-daemon-shell-ready.log](https://git.kayg.org/attachments/b6e00f65-82e7-4eb1-93d6-4b2bc4d16c21)
kayg commented 2026-10-29 13:45:53 +00:00
Author
Owner
Copy link

Step: pushed fc4386dc8 (test(agent): wait for shell output across login shells (#252)) to origin/setup-token-data. cargo test --locked -p infraternal --test agent_daemon -- --nocapture passed 1/1; all 24 abrupt-stop positions replayed exact input/output. git diff --check passed. The full scripts/verify iterate rerun is next. agent-daemon-shell-ready.log

Step: pushed `fc4386dc8` (`test(agent): wait for shell output across login shells (#252)`) to `origin/setup-token-data`. `cargo test --locked -p infraternal --test agent_daemon -- --nocapture` passed 1/1; all 24 abrupt-stop positions replayed exact input/output. `git diff --check` passed. The full `scripts/verify iterate` rerun is next. [agent-daemon-shell-ready.log](https://git.kayg.org/attachments/ab734b64-4664-4f41-b23b-41fde9d10bde)
kayg commented 2026-10-29 13:53:41 +00:00
Author
Owner
Copy link

Full scripts/verify iterate after fc4386dc8: fmt PASS; VT native fmt PASS; CLI plugin compile-out PASS; clippy PASS; SSH runtime test helper PASS; test FAIL (101); SSH inode reuse fixture PASS; shim process-per-user PASS; cargo-deny PASS. agent_daemon passes 1/1 across all 24 abrupt stops. agent_queues::saturated_terminal_queues_preserve_every_byte_and_daemon_liveness fails because scripts/verify-agent-queues.py:27 still waits for shim-test, a zsh-only prompt; the launched shell is /usr/bin/bash. The daemon harness fix replaced that prompt wait with a shell-ready handshake. Raw output: iterate-final.log. I’m applying the same handshake to the queue harness, then rerunning the focused test and iterate.

Full `scripts/verify iterate` after `fc4386dc8`: fmt PASS; VT native fmt PASS; CLI plugin compile-out PASS; clippy PASS; SSH runtime test helper PASS; test FAIL (101); SSH inode reuse fixture PASS; shim process-per-user PASS; cargo-deny PASS. `agent_daemon` passes 1/1 across all 24 abrupt stops. `agent_queues::saturated_terminal_queues_preserve_every_byte_and_daemon_liveness` fails because `scripts/verify-agent-queues.py:27` still waits for `shim-test`, a zsh-only prompt; the launched shell is `/usr/bin/bash`. The daemon harness fix replaced that prompt wait with a shell-ready handshake. Raw output: [iterate-final.log](https://git.kayg.org/attachments/40f8fd80-7521-4f2f-a790-cfbb5a3d1549). I’m applying the same handshake to the queue harness, then rerunning the focused test and iterate.
kayg commented 2026-10-29 13:55:00 +00:00
Author
Owner
Copy link

Updated scripts/verify-agent-queues.py to use the shell-ready handshake already added to scripts/agent_fixture.py. Focused real-daemon test passes: cargo test --locked -p infraternal --test agent_queues -- --nocapture, 1 passed in 38.05s. Receipt: agent-queues-shell-ready.log. I’m running the full iterate gate with this fixture change and the setup-token work now.

Updated `scripts/verify-agent-queues.py` to use the shell-ready handshake already added to `scripts/agent_fixture.py`. Focused real-daemon test passes: `cargo test --locked -p infraternal --test agent_queues -- --nocapture`, 1 passed in 38.05s. Receipt: [agent-queues-shell-ready.log](https://git.kayg.org/attachments/c163bcef-784b-4101-89e7-43399a479aec). I’m running the full iterate gate with this fixture change and the setup-token work now.
kayg commented 2026-10-29 14:00:14 +00:00
Author
Owner
Copy link

Full scripts/verify iterate after 844ba32bd: fmt PASS; VT native fmt PASS; CLI plugin compile-out PASS; clippy PASS; SSH runtime test helper PASS; test FAIL (101); SSH inode reuse fixture PASS; shim process-per-user PASS; cargo-deny PASS. The queue saturation test now passes (1/1 in 38.47s). agent_review fails 8/8 before assertions because its fixtures wait for the zsh-only shim-test prompt; the host launches /usr/bin/bash. The failure points to verify-session-exit-credit.py, verify-agent-snapshot.py, verify-agent-isolation.py, verify-agent-writer-size.py, verify-agent-multi.py, verify-agent-resume.py, verify-agent-attach-credit.py, and verify-session-bounds.py. Raw gate output: iterate-after-queue-fix.log. I’m updating these fixtures to use the shared shell-ready handshake, then I’ll rerun the failing integration suite and full iterate.

Full `scripts/verify iterate` after `844ba32bd`: fmt PASS; VT native fmt PASS; CLI plugin compile-out PASS; clippy PASS; SSH runtime test helper PASS; test FAIL (101); SSH inode reuse fixture PASS; shim process-per-user PASS; cargo-deny PASS. The queue saturation test now passes (1/1 in 38.47s). `agent_review` fails 8/8 before assertions because its fixtures wait for the zsh-only `shim-test` prompt; the host launches `/usr/bin/bash`. The failure points to `verify-session-exit-credit.py`, `verify-agent-snapshot.py`, `verify-agent-isolation.py`, `verify-agent-writer-size.py`, `verify-agent-multi.py`, `verify-agent-resume.py`, `verify-agent-attach-credit.py`, and `verify-session-bounds.py`. Raw gate output: [iterate-after-queue-fix.log](https://git.kayg.org/attachments/60bd74c5-3dd0-47b6-b9ea-271712ce9206). I’m updating these fixtures to use the shared shell-ready handshake, then I’ll rerun the failing integration suite and full iterate.
kayg commented 2026-10-29 14:06:04 +00:00
Author
Owner
Copy link

Updated the eight agent_review fixture scripts to wait for shell-generated readiness markers, preserving the no-credit checks while removing assumptions about prompt text. cargo test --locked -p infraternal --test agent_review -- --nocapture now passes 8/8. The writer-size check uses the post-readiness input cursor; the delayed-credit checks generate marker output before granting Credit. Receipt: agent-review-shell-ready-final.log. I’m committing this test-harness step, then rerunning scripts/verify iterate.

Updated the eight `agent_review` fixture scripts to wait for shell-generated readiness markers, preserving the no-credit checks while removing assumptions about prompt text. `cargo test --locked -p infraternal --test agent_review -- --nocapture` now passes 8/8. The writer-size check uses the post-readiness input cursor; the delayed-credit checks generate marker output before granting Credit. Receipt: [agent-review-shell-ready-final.log](https://git.kayg.org/attachments/30110b58-3480-4d1f-a73a-08f99c06d4b5). I’m committing this test-harness step, then rerunning `scripts/verify iterate`.
kayg commented 2026-10-29 14:10:41 +00:00
Author
Owner
Copy link

Full scripts/verify iterate after 4e3c387e6: fmt PASS; VT native fmt PASS; CLI plugin compile-out PASS; clippy PASS; SSH runtime test helper PASS; test FAIL (101); SSH inode reuse fixture PASS; shim process-per-user PASS; cargo-deny PASS. The daemon, queue, and all 8 agent_review tests pass. session_bounds_review::attached_window_recovers_final_output_and_exit_after_shim_link_detaches fails only its FINAL_OUTPUT assertion in the --exit-after-detach branch; terminal exit status is observed. Raw output: iterate-shell-neutral-final.log. I’m inspecting the direct shim input path and will preserve the test’s delayed-credit and final-output assertions while fixing the shell-neutral setup.

Full `scripts/verify iterate` after `4e3c387e6`: fmt PASS; VT native fmt PASS; CLI plugin compile-out PASS; clippy PASS; SSH runtime test helper PASS; test FAIL (101); SSH inode reuse fixture PASS; shim process-per-user PASS; cargo-deny PASS. The daemon, queue, and all 8 `agent_review` tests pass. `session_bounds_review::attached_window_recovers_final_output_and_exit_after_shim_link_detaches` fails only its `FINAL_OUTPUT` assertion in the `--exit-after-detach` branch; terminal exit status is observed. Raw output: [iterate-shell-neutral-final.log](https://git.kayg.org/attachments/e26f5375-cab5-482f-a3b8-ede4b1589dc4). I’m inspecting the direct shim input path and will preserve the test’s delayed-credit and final-output assertions while fixing the shell-neutral setup.
kayg commented 2026-10-29 14:12:13 +00:00
Author
Owner
Copy link

The --exit-after-detach failure was in my test harness change: the direct local shim connection uses an unsequenced Input frame, but I had prepended the agent-side input cursor. The shell received fprintf and exited with status 7 without FINAL_OUTPUT; the diagnostic tail captured that exact line. I restored the legacy frame body and kept the shell-ready marker. Focused cargo test --locked -p infraternal --test session_bounds_review -- --nocapture passes 1/1. Receipt: session-bounds-review-final.log. I’m committing this harness correction before rerunning the full iterate gate.

The `--exit-after-detach` failure was in my test harness change: the direct local shim connection uses an unsequenced `Input` frame, but I had prepended the agent-side input cursor. The shell received `fprintf` and exited with status 7 without `FINAL_OUTPUT`; the diagnostic tail captured that exact line. I restored the legacy frame body and kept the shell-ready marker. Focused `cargo test --locked -p infraternal --test session_bounds_review -- --nocapture` passes 1/1. Receipt: [session-bounds-review-final.log](https://git.kayg.org/attachments/6c4167bb-f447-4035-ae5a-605af80e39b3). I’m committing this harness correction before rerunning the full iterate gate.
kayg commented 2026-10-29 14:16:29 +00:00
Author
Owner
Copy link

Full scripts/verify iterate after f39116bd1: fmt PASS; VT native fmt PASS; CLI plugin compile-out PASS; clippy PASS; SSH runtime test helper PASS; test FAIL (101); SSH inode reuse fixture PASS; shim process-per-user PASS; cargo-deny PASS. All setup-token, CLI review, daemon, queue, agent-review, and session-bounds tests pass. One unrelated shim::ring_wrap_snapshot_repaints_real_vim fails at crates/infraternal/tests/shim.rs:276 with WouldBlock during its initial frame read; the test does not touch setup-token code. Raw gate output: iterate-after-shim-framing.log. I’m rerunning that exact test alone to distinguish a transient read from a repeatable harness issue.

Full `scripts/verify iterate` after `f39116bd1`: fmt PASS; VT native fmt PASS; CLI plugin compile-out PASS; clippy PASS; SSH runtime test helper PASS; test FAIL (101); SSH inode reuse fixture PASS; shim process-per-user PASS; cargo-deny PASS. All setup-token, CLI review, daemon, queue, agent-review, and session-bounds tests pass. One unrelated `shim::ring_wrap_snapshot_repaints_real_vim` fails at `crates/infraternal/tests/shim.rs:276` with `WouldBlock` during its initial frame read; the test does not touch setup-token code. Raw gate output: [iterate-after-shim-framing.log](https://git.kayg.org/attachments/b95e058f-8624-406b-b3d2-742313754392). I’m rerunning that exact test alone to distinguish a transient read from a repeatable harness issue.
kayg commented 2026-10-29 14:20:07 +00:00
Author
Owner
Copy link

Resumed #252 on branch setup-token-data at f39116bd1, based on origin/dev 81962ab09. The exact ring_wrap_snapshot_repaints_real_vim rerun reproduces the full-iterate failure: the test waits 8.30 s then read_exact at crates/infraternal/tests/shim.rs:276 returns WouldBlock. Receipt: shim-ring-wrap-rerun.log. I’m making the fixture wait for shell output before sending the capture command, then I’ll rerun the focused test and iterate.

Resumed #252 on branch `setup-token-data` at `f39116bd1`, based on `origin/dev` `81962ab09`. The exact `ring_wrap_snapshot_repaints_real_vim` rerun reproduces the full-iterate failure: the test waits 8.30 s then `read_exact` at `crates/infraternal/tests/shim.rs:276` returns `WouldBlock`. Receipt: [shim-ring-wrap-rerun.log](https://git.kayg.org/attachments/1b862657-6c01-4b48-9eda-514fe9ba83fb). I’m making the fixture wait for shell output before sending the capture command, then I’ll rerun the focused test and iterate.
kayg commented 2026-10-29 14:21:28 +00:00
Author
Owner
Copy link

Finding: the shell-start marker got past the initial startup wait, but the focused test still timed out at shim.rs:276 after 8.20 s. The remaining wait follows Vim exit; sending a second shell command immediately after :q! can race Vim’s teardown. I’m changing the test command so the parent shell prints a completion marker after Vim returns, then the test sends its follow-up command. Receipt: shim-ring-wrap-fixed.log.

Finding: the shell-start marker got past the initial startup wait, but the focused test still timed out at `shim.rs:276` after 8.20 s. The remaining wait follows Vim exit; sending a second shell command immediately after `:q!` can race Vim’s teardown. I’m changing the test command so the parent shell prints a completion marker after Vim returns, then the test sends its follow-up command. Receipt: [shim-ring-wrap-fixed.log](https://git.kayg.org/attachments/2567bbf5-bb04-46eb-b1db-0be1a0cc33e6).
kayg commented 2026-10-29 14:23:06 +00:00
Author
Owner
Copy link

Step: pushed 33910af1d (test(shim): wait on shell markers around Vim (#252)) to origin/setup-token-data. ring_wrap_snapshot_repaints_real_vim passes 1/1 in 3.18 s; the complete shim integration suite passes 24/24 in 3.65 s; cargo clippy --locked -p infraternal --all-targets -- -D warnings, cargo fmt --all -- --check, and git diff --check pass. Receipts: focused test, full shim suite, clippy. Running scripts/verify iterate before the next feature commit.

Step: pushed `33910af1d` (`test(shim): wait on shell markers around Vim (#252)`) to `origin/setup-token-data`. `ring_wrap_snapshot_repaints_real_vim` passes 1/1 in 3.18 s; the complete shim integration suite passes 24/24 in 3.65 s; `cargo clippy --locked -p infraternal --all-targets -- -D warnings`, `cargo fmt --all -- --check`, and `git diff --check` pass. Receipts: [focused test](https://git.kayg.org/attachments/13048cc8-7c83-4a65-a3c8-acfd2b63c8c5), [full shim suite](https://git.kayg.org/attachments/ab22bdfb-4949-4aac-8643-2fd7952fed2b), [clippy](https://git.kayg.org/attachments/ae3e5403-3499-4a04-ad96-443e6c9096cf). Running `scripts/verify iterate` before the next feature commit.
kayg commented 2026-10-29 14:27:22 +00:00
Author
Owner
Copy link

Finding: scripts/verify iterate passes fmt, VT fmt, compile-out, clippy, daemon, queue, agent-review, CLI/setup-output, shim (24/24), process-per-user (199 passed, 19 ignored), and cargo-deny. Its test row fails only vt_credit::unaffordable_repaints_park_until_sufficient_credit (credit probe failed: t1-gate-approximate-1, 22.17 s). Per #118, I’m running that exact test on a detached origin/dev checkout in this load window before continuing. Full receipt: iterate-after-shim-marker.log.

Finding: `scripts/verify iterate` passes fmt, VT fmt, compile-out, clippy, daemon, queue, agent-review, CLI/setup-output, shim (24/24), process-per-user (199 passed, 19 ignored), and cargo-deny. Its test row fails only `vt_credit::unaffordable_repaints_park_until_sufficient_credit` (`credit probe failed: t1-gate-approximate-1`, 22.17 s). Per #118, I’m running that exact test on a detached `origin/dev` checkout in this load window before continuing. Full receipt: [iterate-after-shim-marker.log](https://git.kayg.org/attachments/fb0eb194-4501-4594-9150-e9305800be82).
kayg commented 2026-10-29 14:29:40 +00:00
Author
Owner
Copy link

#118 baseline comparison for the only iterate failure:

  • Task tree: thread 'unaffordable_repaints_park_until_sufficient_credit' panicked at crates/infraternal/tests/vt_credit.rs:33:13: credit probe failed: t1-gate-approximate-1; test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.17s.
  • Detached origin/dev at 81962ab09: same panic and probe text; test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.30s.

This reproduces the same host-load failure on baseline. All other iterate rows passed. Receipts: task-tree iterate, origin/dev test.

#118 baseline comparison for the only iterate failure: - Task tree: `thread 'unaffordable_repaints_park_until_sufficient_credit' panicked at crates/infraternal/tests/vt_credit.rs:33:13: credit probe failed: t1-gate-approximate-1`; `test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.17s`. - Detached `origin/dev` at `81962ab09`: same panic and probe text; `test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.30s`. This reproduces the same host-load failure on baseline. All other iterate rows passed. Receipts: [task-tree iterate](https://git.kayg.org/attachments/fb0eb194-4501-4594-9150-e9305800be82), [origin/dev test](https://git.kayg.org/attachments/5d826e18-c783-4495-a70b-e780c8e66802).
kayg commented 2026-10-29 14:32:01 +00:00
Author
Owner
Copy link

Step: pushed a68d6ce2c (fix(cli): resolve server data from installed service (#252)) to origin/setup-token-data. The iterate run covers the CLI changes: setup_output 3/3, CLI review 17/17 (including root_help_lists_server_init), CLI unit suite 103 passed / 1 ignored; fmt and clippy passed. Its only failing test was vt_credit, reproduced on detached origin/dev with the same probe failure (22.17 s task tree, 22.30 s baseline); both receipts are recorded above. Full gate log: iterate-after-shim-marker.log. Running iterate again before the next commit.

Step: pushed `a68d6ce2c` (`fix(cli): resolve server data from installed service (#252)`) to `origin/setup-token-data`. The iterate run covers the CLI changes: `setup_output` 3/3, CLI review 17/17 (including `root_help_lists_server_init`), CLI unit suite 103 passed / 1 ignored; fmt and clippy passed. Its only failing test was `vt_credit`, reproduced on detached `origin/dev` with the same probe failure (22.17 s task tree, 22.30 s baseline); both receipts are recorded above. Full gate log: [iterate-after-shim-marker.log](https://git.kayg.org/attachments/fb0eb194-4501-4594-9150-e9305800be82). Running iterate again before the next commit.
kayg commented 2026-10-29 14:35:10 +00:00
Author
Owner
Copy link

Finding: the post-a68d6ce2c iterate exposed cross-worktree Cargo artifacts from the #118 baseline comparison. The baseline reused this job's target; after its temporary worktree was removed, the later gate reused -Wl,-T,/home/agent/.cache/codex-scratch/setup-token-data/baseline/crates/infraternal/handoff-note.ld and failed to find that file. A stale baseline infraternal-status artifact also hid server_data_directory. The source function is present in the branch. I’m cleaning only this job's affected package artifacts, then rerunning the gate with the task worktree. Receipt: iterate-after-cli.log.

Finding: the post-`a68d6ce2c` iterate exposed cross-worktree Cargo artifacts from the #118 baseline comparison. The baseline reused this job's target; after its temporary worktree was removed, the later gate reused `-Wl,-T,/home/agent/.cache/codex-scratch/setup-token-data/baseline/crates/infraternal/handoff-note.ld` and failed to find that file. A stale baseline `infraternal-status` artifact also hid `server_data_directory`. The source function is present in the branch. I’m cleaning only this job's affected package artifacts, then rerunning the gate with the task worktree. Receipt: [iterate-after-cli.log](https://git.kayg.org/attachments/2dce89b7-eb90-4211-8810-0a757081935f).
kayg commented 2026-10-29 14:35:58 +00:00
Author
Owner
Copy link

Target recovery: the baseline worktree had been removed after its test, leaving task-target artifacts that referred to its linker script. cargo clean -p infraternal -p infraternal-status removed 4.4 GiB. Rebuilding the task CLI then passed setup_output 3/3, including the no-flags system-service setup-token case and the single-line sudo diagnostic. Receipt: setup-output-after-clean.log. I’m rerunning iterate with the task worktree artifacts rebuilt.

Target recovery: the baseline worktree had been removed after its test, leaving task-target artifacts that referred to its linker script. `cargo clean -p infraternal -p infraternal-status` removed 4.4 GiB. Rebuilding the task CLI then passed `setup_output` 3/3, including the no-flags system-service setup-token case and the single-line sudo diagnostic. Receipt: [setup-output-after-clean.log](https://git.kayg.org/attachments/1aee6948-9290-491a-b0a5-99e0a5693ea9). I’m rerunning iterate with the task worktree artifacts rebuilt.
kayg commented 2026-10-29 14:41:10 +00:00
Author
Owner
Copy link

Finding: after rebuilding the task worktree's package artifacts, scripts/verify iterate passes every row except vt_credit::unaffordable_repaints_park_until_sufficient_credit; the probe reports credit probe failed: t1-gate-approximate-1 in 22.21 s. All setup-token/CLI checks and the other Rust gate rows pass. I’m repeating the #118 detached origin/dev comparison in this same load window. Receipt: iterate-after-cli-clean.log.

Finding: after rebuilding the task worktree's package artifacts, `scripts/verify iterate` passes every row except `vt_credit::unaffordable_repaints_park_until_sufficient_credit`; the probe reports `credit probe failed: t1-gate-approximate-1` in 22.21 s. All setup-token/CLI checks and the other Rust gate rows pass. I’m repeating the #118 detached `origin/dev` comparison in this same load window. Receipt: [iterate-after-cli-clean.log](https://git.kayg.org/attachments/0546b242-3e07-45b9-94d7-5784c53e7293).
kayg commented 2026-10-29 14:41:59 +00:00
Author
Owner
Copy link

#118 comparison after the task-tree iterate:

  • Task tree: credit probe failed: t1-gate-approximate-1; test result failed at crates/infraternal/tests/vt_credit.rs:33:13 in 22.21 s.
  • Detached origin/dev 81962ab09: same probe failure and source line in 22.32 s.

All other iterate rows pass, including setup-output 3/3, CLI review 17/17, resolver tests, and shim 24/24. This is the documented host-load exception. Receipts: task-tree iterate, origin/dev baseline.

#118 comparison after the task-tree iterate: - Task tree: `credit probe failed: t1-gate-approximate-1`; test result failed at `crates/infraternal/tests/vt_credit.rs:33:13` in 22.21 s. - Detached `origin/dev` `81962ab09`: same probe failure and source line in 22.32 s. All other iterate rows pass, including setup-output 3/3, CLI review 17/17, resolver tests, and shim 24/24. This is the documented host-load exception. Receipts: [task-tree iterate](https://git.kayg.org/attachments/0546b242-3e07-45b9-94d7-5784c53e7293), [origin/dev baseline](https://git.kayg.org/attachments/d21979a5-874c-4242-8e73-699ce35ce7da).
kayg commented 2026-10-29 14:44:22 +00:00
Author
Owner
Copy link

Step: pushed 4e94fae65 (feat(server): return setup command for installed service (#252)) to origin/setup-token-data. cargo clippy --locked -p infraternal-server --all-targets -- -D warnings passed; auth::tests::public_status_and_discoverable_http_login passed 1/1, verifying both default and system-service command values and the no-store response. cargo fmt --all -- --check and git diff --check passed. Receipts: clippy, status test. Running iterate before the UI commit.

Step: pushed `4e94fae65` (`feat(server): return setup command for installed service (#252)`) to `origin/setup-token-data`. `cargo clippy --locked -p infraternal-server --all-targets -- -D warnings` passed; `auth::tests::public_status_and_discoverable_http_login` passed 1/1, verifying both default and system-service command values and the no-store response. `cargo fmt --all -- --check` and `git diff --check` passed. Receipts: [clippy](https://git.kayg.org/attachments/c8090322-5ada-40b4-bd5b-e12b520a0ca6), [status test](https://git.kayg.org/attachments/d0385a3b-3c44-4d6b-944c-b9bef7f19d5b). Running iterate before the UI commit.
kayg commented 2026-10-29 14:53:32 +00:00
Author
Owner
Copy link

Finding: scripts/verify iterate after 4e94fae65 finished with Rust rows fmt, VT native fmt, CLI plugin compile-out, clippy, SSH runtime test helper, SSH inode reuse fixture, shim process-per-user, and cargo-deny PASS; test returned 101 solely at vt_credit::unaffordable_repaints_park_until_sufficient_credit (credit probe failed: t1-gate-approximate-1, 22.27 s). Process-per-user passed 199, 0 failed, 19 ignored. Raw gate: iterate-after-server.log. I’m running this exact case on detached origin/dev under the same load window per #118.

Finding: `scripts/verify iterate` after `4e94fae65` finished with Rust rows fmt, VT native fmt, CLI plugin compile-out, clippy, SSH runtime test helper, SSH inode reuse fixture, shim process-per-user, and cargo-deny PASS; `test` returned 101 solely at `vt_credit::unaffordable_repaints_park_until_sufficient_credit` (`credit probe failed: t1-gate-approximate-1`, 22.27 s). Process-per-user passed 199, 0 failed, 19 ignored. Raw gate: [iterate-after-server.log](https://git.kayg.org/attachments/6d4a976f-5980-4969-b286-2e05e26150c8). I’m running this exact case on detached `origin/dev` under the same load window per #118.
kayg commented 2026-10-29 14:54:42 +00:00
Author
Owner
Copy link

#118 baseline comparison: detached origin/dev at 81962ab09 failed the same exact test, unaffordable_repaints_park_until_sufficient_credit, with credit probe failed: t1-gate-approximate-1 after 22.23 s (baseline); this branch failed it after 22.27 s. This confirms the lone test row failure is host-load-sensitive and not introduced by #252. Baseline receipt: vt-credit-origin-dev.log. I’m removing the detached worktree and clearing its overwritten package artifacts before continuing.

#118 baseline comparison: detached `origin/dev` at `81962ab09` failed the same exact test, `unaffordable_repaints_park_until_sufficient_credit`, with `credit probe failed: t1-gate-approximate-1` after 22.23 s (baseline); this branch failed it after 22.27 s. This confirms the lone `test` row failure is host-load-sensitive and not introduced by #252. Baseline receipt: [vt-credit-origin-dev.log](https://git.kayg.org/attachments/c146b1e4-686e-49a5-b174-dc8ee5c7eb9d). I’m removing the detached worktree and clearing its overwritten package artifacts before continuing.
kayg commented 2026-10-29 14:56:40 +00:00
Author
Owner
Copy link

Step complete: pushed 3d219fce4 (feat(tracer): show install-specific setup command (#252)) to origin/setup-token-data. The setup screen now displays the command supplied by server status and copies the same allowlisted value; token-rejection guidance points back to that row. bun run check passed. Production Playwright on port 5292 passed 1/1 at 393×852, verifying the system-service sudo command and exact clipboard contents. Browser plugin was unavailable; the repository Playwright workflow was used. Evidence: system-service-setup-token-command.png Playwright log. Running the full iterate gate before the documentation commit.

Step complete: pushed `3d219fce4` (`feat(tracer): show install-specific setup command (#252)`) to `origin/setup-token-data`. The setup screen now displays the command supplied by server status and copies the same allowlisted value; token-rejection guidance points back to that row. `bun run check` passed. Production Playwright on port 5292 passed 1/1 at 393×852, verifying the system-service `sudo` command and exact clipboard contents. Browser plugin was unavailable; the repository Playwright workflow was used. Evidence: ![system-service-setup-token-command.png](https://git.kayg.org/attachments/c9abb180-fb6f-4dc2-8283-088d53b95691) [Playwright log](https://git.kayg.org/attachments/fd26607c-b330-4e23-9be2-001cb801067a). Running the full iterate gate before the documentation commit.
kayg commented 2026-10-29 15:04:46 +00:00
Author
Owner
Copy link

Finding: scripts/verify iterate after 3d219fce4 reached all rows. fmt, VT native fmt, CLI plugin compile-out, clippy, SSH runtime test helper, SSH inode reuse fixture, shim process-per-user, and cargo-deny PASS; test returned 101 solely at vt_credit::unaffordable_repaints_park_until_sufficient_credit (credit probe failed: t1-gate-approximate-1, 22.25 s). Task tests include setup_output 3/3, agent_review 8/8, shim integration 24/24, and process-per-user 199 passed / 19 ignored. Raw gate: iterate-after-tracer-ui.log. I’m repeating the exact case on detached origin/dev under the same load window per #118.

Finding: `scripts/verify iterate` after `3d219fce4` reached all rows. fmt, VT native fmt, CLI plugin compile-out, clippy, SSH runtime test helper, SSH inode reuse fixture, shim process-per-user, and cargo-deny PASS; `test` returned 101 solely at `vt_credit::unaffordable_repaints_park_until_sufficient_credit` (`credit probe failed: t1-gate-approximate-1`, 22.25 s). Task tests include `setup_output` 3/3, `agent_review` 8/8, shim integration 24/24, and process-per-user 199 passed / 19 ignored. Raw gate: [iterate-after-tracer-ui.log](https://git.kayg.org/attachments/e1f6fb74-f376-4b10-b261-6c531863b97b). I’m repeating the exact case on detached `origin/dev` under the same load window per #118.
kayg commented 2026-10-29 15:06:07 +00:00
Author
Owner
Copy link

#118 baseline comparison: detached origin/dev at 81962ab09 failed the same exact unaffordable_repaints_park_until_sufficient_credit test with credit probe failed: t1-gate-approximate-1 after 22.33 s; this branch failed after 22.25 s. This confirms the lone test row failure is host-load-sensitive and unrelated to #252. Baseline receipt: vt-credit-origin-dev-after-ui.log. All other iterate rows passed, including the task-specific CLI, data-resolution, sudo diagnostic, help, shell/Vim, agent-review, and process-per-user suites. The detailed gate receipt is in the preceding comment.

#118 baseline comparison: detached `origin/dev` at `81962ab09` failed the same exact `unaffordable_repaints_park_until_sufficient_credit` test with `credit probe failed: t1-gate-approximate-1` after 22.33 s; this branch failed after 22.25 s. This confirms the lone `test` row failure is host-load-sensitive and unrelated to #252. Baseline receipt: [vt-credit-origin-dev-after-ui.log](https://git.kayg.org/attachments/bfcf779e-549e-4a50-91d8-96747054e882). All other iterate rows passed, including the task-specific CLI, data-resolution, sudo diagnostic, help, shell/Vim, agent-review, and process-per-user suites. The detailed gate receipt is in the preceding comment.
kayg commented 2026-10-29 15:06:45 +00:00
Author
Owner
Copy link

Step complete: pushed bdbe6d7d3 (docs(cli): explain installed server data defaults (#252)) to origin/setup-token-data. Updated tracer setup instructions, CLI service data resolution, and discoverable-auth status contract. git diff --check passed. The post-UI iterate gate passed every row except vt_credit; the exact baseline test on origin/dev failed with the same probe error, as recorded above. Starting final scripts/verify fast on the branch head.

Step complete: pushed `bdbe6d7d3` (`docs(cli): explain installed server data defaults (#252)`) to `origin/setup-token-data`. Updated tracer setup instructions, CLI service data resolution, and discoverable-auth status contract. `git diff --check` passed. The post-UI iterate gate passed every row except `vt_credit`; the exact baseline test on `origin/dev` failed with the same probe error, as recorded above. Starting final `scripts/verify fast` on the branch head.
kayg commented 2026-10-29 15:35:05 +00:00
Author
Owner
Copy link

Finding: final scripts/verify fast completed Rust gates with fmt, VT native fmt, CLI plugin compile-out, clippy, SSH runtime test helper, SSH inode reuse fixture, shim process-per-user, and cargo-deny PASS. test failed only in vt_credit (credit probe failed: t1-gate-approximate-1, 22.36 s); detached origin/dev reproduced this in the #118 comparisons above. Static linkage and trust passed, but current size caps need ratcheting to the measured artifacts: stripped x86_64 is 21,398,704 bytes (+9,472 over 21,389,232); stripped aarch64 is 19,572,664 (+11,008 over 19,561,656). Both are below D243’s 16 KiB threshold. Raw gate: verify-fast-final.log. I’m measuring the x86_64 merge-base artifact with the same static recipe before updating the caps; the Rust gate stopped before the TypeScript row, which will rerun on the final head.

Finding: final `scripts/verify fast` completed Rust gates with fmt, VT native fmt, CLI plugin compile-out, clippy, SSH runtime test helper, SSH inode reuse fixture, shim process-per-user, and cargo-deny PASS. `test` failed only in `vt_credit` (`credit probe failed: t1-gate-approximate-1`, 22.36 s); detached `origin/dev` reproduced this in the #118 comparisons above. Static linkage and trust passed, but current size caps need ratcheting to the measured artifacts: stripped x86_64 is 21,398,704 bytes (+9,472 over 21,389,232); stripped aarch64 is 19,572,664 (+11,008 over 19,561,656). Both are below D243’s 16 KiB threshold. Raw gate: [verify-fast-final.log](https://git.kayg.org/attachments/8e51e169-185d-4b83-a68c-7bf142297447). I’m measuring the x86_64 merge-base artifact with the same static recipe before updating the caps; the Rust gate stopped before the TypeScript row, which will rerun on the final head.
kayg commented 2026-10-29 15:35:56 +00:00
Author
Owner
Copy link

Finding: the first detached merge-base static build stopped before producing a binary because its separate comparison target had not been initialized with the pinned Zig toolchain. libsqlite3-sys and openssl-sys reported $CARGO_TARGET_DIR/auth-tools/zig/zig: No such file or directory; this is a comparison setup issue, not a source failure. Receipt: merge-base-static-x86.log. I’ll initialize scripts/auth-toolchain in that comparison target and repeat the same build.

Finding: the first detached merge-base static build stopped before producing a binary because its separate comparison target had not been initialized with the pinned Zig toolchain. `libsqlite3-sys` and `openssl-sys` reported `$CARGO_TARGET_DIR/auth-tools/zig/zig: No such file or directory`; this is a comparison setup issue, not a source failure. Receipt: [merge-base-static-x86.log](https://git.kayg.org/attachments/02ba50c4-c86b-4994-ad65-3e333fc0fa78). I’ll initialize `scripts/auth-toolchain` in that comparison target and repeat the same build.
kayg commented 2026-10-29 15:42:31 +00:00
Author
Owner
Copy link

Measured-size finding for D243: the stripped x86_64 artifact from origin/dev 81962ab09 is 21,389,232 bytes; this branch is 21,398,704 bytes, a +9,472-byte delta (+0.044%). The same final gate measured aarch64 at 19,572,664 bytes, +11,008 over its prior cap. Both growth values are below 16 KiB. The increase covers the requested installed-service data discovery and setup-command response; keeping the no-extra-flags path was preferred over dropping that behavior or asking operators to copy a hidden --data path. Receipts: merge-base build, size comparison. I’m ratcheting both D243 caps to these exact stripped sizes.

Measured-size finding for D243: the stripped x86_64 artifact from `origin/dev` `81962ab09` is 21,389,232 bytes; this branch is 21,398,704 bytes, a +9,472-byte delta (+0.044%). The same final gate measured aarch64 at 19,572,664 bytes, +11,008 over its prior cap. Both growth values are below 16 KiB. The increase covers the requested installed-service data discovery and setup-command response; keeping the no-extra-flags path was preferred over dropping that behavior or asking operators to copy a hidden `--data` path. Receipts: [merge-base build](https://git.kayg.org/attachments/1213b163-d8ac-4ee3-9bec-d8916eae299a), [size comparison](https://git.kayg.org/attachments/0e0f4943-ae96-421b-9e26-d84aa386dd2e). I’m ratcheting both D243 caps to these exact stripped sizes.
kayg commented 2026-10-29 15:43:31 +00:00
Author
Owner
Copy link

Step complete: pushed a6ba23ef3 (build(size): ratchet service setup binary limits (#252)) to origin/setup-token-data. Merge-base 81962ab09 is 21,389,232 bytes stripped static x86_64; branch is 21,398,704 (+9,472). aarch64 is 19,572,664 (+11,008), with both under 16 KiB. scripts/test-static-size.py passed exact-cap acceptance, one-byte-over rejection, shrink-ratchet, and unsupported-target checks for both architectures. Receipt: static-size-ratchet-test.log. Running final scripts/verify fast on this head.

Step complete: pushed `a6ba23ef3` (`build(size): ratchet service setup binary limits (#252)`) to `origin/setup-token-data`. Merge-base `81962ab09` is 21,389,232 bytes stripped static x86_64; branch is 21,398,704 (+9,472). aarch64 is 19,572,664 (+11,008), with both under 16 KiB. `scripts/test-static-size.py` passed exact-cap acceptance, one-byte-over rejection, shrink-ratchet, and unsupported-target checks for both architectures. Receipt: [static-size-ratchet-test.log](https://git.kayg.org/attachments/ca47ec49-356b-4042-adbc-b691bdc39d3e). Running final `scripts/verify fast` on this head.
kayg commented 2026-10-29 15:48:07 +00:00
Author
Owner
Copy link

Final-head scripts/verify fast on a6ba23ef3: fmt, VT native fmt, CLI plugin compile-out, clippy, SSH runtime test helper, SSH inode reuse fixture, shim process-per-user, cargo-deny, and static builds PASS. Both stripped size checks pass exactly: x86_64 21,398,704/21,398,704; aarch64 19,572,664/19,572,664. test returned 101 solely because vt_credit::unaffordable_repaints_park_until_sufficient_credit failed with credit probe failed: t1-gate-approximate-1 in 22.26 s. The TypeScript sub-gate is skipped by the verify dispatcher after that Rust failure; I’ll run it separately after the required #118 baseline comparison. Raw final gate: verify-fast-final-head.log.

Final-head `scripts/verify fast` on `a6ba23ef3`: fmt, VT native fmt, CLI plugin compile-out, clippy, SSH runtime test helper, SSH inode reuse fixture, shim process-per-user, cargo-deny, and static builds PASS. Both stripped size checks pass exactly: x86_64 21,398,704/21,398,704; aarch64 19,572,664/19,572,664. `test` returned 101 solely because `vt_credit::unaffordable_repaints_park_until_sufficient_credit` failed with `credit probe failed: t1-gate-approximate-1` in 22.26 s. The TypeScript sub-gate is skipped by the verify dispatcher after that Rust failure; I’ll run it separately after the required #118 baseline comparison. Raw final gate: [verify-fast-final-head.log](https://git.kayg.org/attachments/068f22ff-a8f4-4ab6-848a-f0f196bb80e4).
kayg commented 2026-10-29 15:50:24 +00:00
Author
Owner
Copy link

#118 baseline comparison for the final fast run: detached origin/dev at 81962ab09 failed the same exact unaffordable_repaints_park_until_sufficient_credit test with credit probe failed: t1-gate-approximate-1 after 22.28 s; final branch failed after 22.26 s. This confirms the only Rust gate failure is host-load-sensitive and not introduced by #252. Baseline receipt: vt-credit-origin-dev-final-fast.log. Every other final fast Rust row passed, including both exact static size caps. I’m removing the baseline checkout and will run the skipped TypeScript sub-gate separately.

#118 baseline comparison for the final fast run: detached `origin/dev` at `81962ab09` failed the same exact `unaffordable_repaints_park_until_sufficient_credit` test with `credit probe failed: t1-gate-approximate-1` after 22.28 s; final branch failed after 22.26 s. This confirms the only Rust gate failure is host-load-sensitive and not introduced by #252. Baseline receipt: [vt-credit-origin-dev-final-fast.log](https://git.kayg.org/attachments/033758f0-0467-4302-99d2-3daa503544c1). Every other final fast Rust row passed, including both exact static size caps. I’m removing the baseline checkout and will run the skipped TypeScript sub-gate separately.
kayg commented 2026-10-29 15:52:55 +00:00
Author
Owner
Copy link

Finish: setup-token-data is pushed at head a6ba23ef39bff241c3b53015229c8a71c80c726b. No deploy was performed.

Final scripts/verify fast Rust table, verbatim:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | FAIL (101)   |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

The command exited 1 only because vt_credit::unaffordable_repaints_park_until_sufficient_credit failed with credit probe failed: t1-gate-approximate-1 in 22.26 s. Detached origin/dev 81962ab09 failed the same exact test with the same message in 22.28 s; the #118 baseline exception is confirmed. All static checks passed: stripped x86_64 21,398,704 bytes and aarch64 19,572,664 bytes, both exactly at cap. Against merge base, x86_64 is +9,472 bytes (+0.044%); aarch64 is +11,008 bytes.

Because the Rust exception stops the verify dispatcher before TypeScript, I ran ts_verify_fast separately; it exited 0. The protocol suite passed 39 tests / 36,135 expectations; production critical transfer was gzip 305,933/307,200 and Brotli 254,886/256,000 bytes. The system-service production Playwright case passed 1/1 at 393×852 and verified the displayed and copied sudo command. bun run check passed.

Full final gate receipt: verify-fast-final-head.log. Baseline receipt: vt-credit-origin-dev-final-fast.log. TypeScript receipt: ts-fast-final.log. Setup screenshot: system-service-setup-token-command.png

Finish: `setup-token-data` is pushed at head `a6ba23ef39bff241c3b53015229c8a71c80c726b`. No deploy was performed. Final `scripts/verify fast` Rust table, verbatim: ``` +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | FAIL (101) | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ``` The command exited 1 only because `vt_credit::unaffordable_repaints_park_until_sufficient_credit` failed with `credit probe failed: t1-gate-approximate-1` in 22.26 s. Detached `origin/dev` `81962ab09` failed the same exact test with the same message in 22.28 s; the #118 baseline exception is confirmed. All static checks passed: stripped x86_64 21,398,704 bytes and aarch64 19,572,664 bytes, both exactly at cap. Against merge base, x86_64 is +9,472 bytes (+0.044%); aarch64 is +11,008 bytes. Because the Rust exception stops the verify dispatcher before TypeScript, I ran `ts_verify_fast` separately; it exited 0. The protocol suite passed 39 tests / 36,135 expectations; production critical transfer was gzip 305,933/307,200 and Brotli 254,886/256,000 bytes. The system-service production Playwright case passed 1/1 at 393×852 and verified the displayed and copied sudo command. `bun run check` passed. Full final gate receipt: [verify-fast-final-head.log](https://git.kayg.org/attachments/068f22ff-a8f4-4ab6-848a-f0f196bb80e4). Baseline receipt: [vt-credit-origin-dev-final-fast.log](https://git.kayg.org/attachments/033758f0-0467-4302-99d2-3daa503544c1). TypeScript receipt: [ts-fast-final.log](https://git.kayg.org/attachments/97d57c4c-5c47-4372-918a-ac2f5fd60502). Setup screenshot: ![system-service-setup-token-command.png](https://git.kayg.org/attachments/c9abb180-fb6f-4dc2-8283-088d53b95691)
kayg commented 2026-10-29 15:54:33 +00:00
Author
Owner
Copy link

Additional browser smoke receipt: /install?mock=1 loaded with title infraternal; setup content was present; framework overlay count 0; console/page errors 0; the displayed and copied command matched sudo infraternal server setup-token. Screenshot: system-service-setup-token-smoke.png. The temporary server on port 5294 was stopped after the check.

Additional browser smoke receipt: `/install?mock=1` loaded with title `infraternal`; setup content was present; framework overlay count 0; console/page errors 0; the displayed and copied command matched `sudo infraternal server setup-token`. Screenshot: ![system-service-setup-token-smoke.png](https://git.kayg.org/attachments/583121a9-7b61-49c3-a848-c3c897459f93). The temporary server on port 5294 was stopped after the check.
kayg commented 2026-10-29 16:03:03 +00:00
Author
Owner
Copy link

Starting the dev integration for #252 on branch setup-token-data, head/base a6ba23ef39bff241c3b53015229c8a71c80c726b (original dev base 81962ab09a84384abcf1a58814e377ca71e781a4). Merging origin/dev 4a6202a5299329411fcf94deef6b0181b054957c; its reviewed #255 Tokio/owned-descriptor implementation supersedes this branch's independent workaround. Then rebuild both pinned static images, ratchet exact D243 caps, run #252 tests and full fast gate, and push this branch only.

Starting the dev integration for #252 on branch `setup-token-data`, head/base `a6ba23ef39bff241c3b53015229c8a71c80c726b` (original dev base `81962ab09a84384abcf1a58814e377ca71e781a4`). Merging `origin/dev` `4a6202a5299329411fcf94deef6b0181b054957c`; its reviewed #255 Tokio/owned-descriptor implementation supersedes this branch's independent workaround. Then rebuild both pinned static images, ratchet exact D243 caps, run #252 tests and full fast gate, and push this branch only.
kayg commented 2026-10-29 16:03:46 +00:00
Author
Owner
Copy link

Merge resolution: nine conflicts. Dev wins in crates/infraternal-agent/src/process_exits_linux.rs, process_exits_macos.rs, sessions.rs, transport.rs, crates/plugins/ssh/src/stdio.rs, and crates/infraternal/tests/agent_sessions.rs: reviewed #255 owned-descriptor registrations replace all branch allowances. Also restored dev's exact daemon_gone_tests.rs and gone_scale_review_tests.rs despite clean auto-merges, removing the branch's borrowed-descriptor workaround. Cargo.lock is byte-identical to dev. Dev's shared fixture-state constructor wins in crates/infraternal-shim/src/user_host.rs; #252 shell-generated readiness and post-Vim completion markers remain in crates/infraternal/tests/shim.rs; scripts/verify.d/rust.sh retains dev's fixture-path row and caps pending measurement. All #252 product files remain intact. Running iterate before committing the merge.

Merge resolution: nine conflicts. Dev wins in `crates/infraternal-agent/src/process_exits_linux.rs`, `process_exits_macos.rs`, `sessions.rs`, `transport.rs`, `crates/plugins/ssh/src/stdio.rs`, and `crates/infraternal/tests/agent_sessions.rs`: reviewed #255 owned-descriptor registrations replace all branch allowances. Also restored dev's exact `daemon_gone_tests.rs` and `gone_scale_review_tests.rs` despite clean auto-merges, removing the branch's borrowed-descriptor workaround. `Cargo.lock` is byte-identical to dev. Dev's shared fixture-state constructor wins in `crates/infraternal-shim/src/user_host.rs`; #252 shell-generated readiness and post-Vim completion markers remain in `crates/infraternal/tests/shim.rs`; `scripts/verify.d/rust.sh` retains dev's fixture-path row and caps pending measurement. All #252 product files remain intact. Running iterate before committing the merge.
kayg commented 2026-10-29 16:18:41 +00:00
Author
Owner
Copy link

Merge iterate result: fmt, VT native fmt, CLI plugin compile-out, clippy, SSH runtime test helper, real-binary fixture paths, SSH inode reuse fixture, shim process-per-user, cargo-deny PASS. Workspace test row failed only session_bounds_review::attached_window_recovers_final_output_and_exit_after_shim_link_detaches: scripts/verify-session-exit-credit.py:42 timed out inside readiness client.wait_ack() before final-output assertions. This is outside the named #118 exception; rerunning it alone before committing. CLI unit suite passed 103/103 with 1 ignored; root-help regression passed. No product code has been changed to address this failure.

Merge iterate result: fmt, VT native fmt, CLI plugin compile-out, clippy, SSH runtime test helper, real-binary fixture paths, SSH inode reuse fixture, shim process-per-user, cargo-deny PASS. Workspace test row failed only `session_bounds_review::attached_window_recovers_final_output_and_exit_after_shim_link_detaches`: `scripts/verify-session-exit-credit.py:42` timed out inside readiness `client.wait_ack()` before final-output assertions. This is outside the named #118 exception; rerunning it alone before committing. CLI unit suite passed 103/103 with 1 ignored; root-help regression passed. No product code has been changed to address this failure.
kayg commented 2026-10-29 16:22:12 +00:00
Author
Owner
Copy link

Merge pushed: 0099ca23e24b42ef515bb06acf347d9b72b86e80. Dev’s reviewed #255 sources and lockfile are byte-identical to dev; the #252 product files survive intact. The reproducible exit-credit fixture timeout is resolved by taking dev’s fixture, which relies on its new pre-attach portable shell preparation. Focused results: session_bounds_review 1/1, setup_output 3/3, cli_review 17/17, shim 24/24; status resolver 13/13; public auth-status 1/1; TypeScript check and onboarding loader 3/3; production-browser sudo-command display/copy 1/1 on unique port 55252. Screenshot attached for review; no visual-quality claim. Sequential pinned static builds are running under one host build slot.

focused-merge.log
setup-tests.log
system-service-setup-token-command.png

Merge pushed: `0099ca23e24b42ef515bb06acf347d9b72b86e80`. Dev’s reviewed #255 sources and lockfile are byte-identical to dev; the #252 product files survive intact. The reproducible exit-credit fixture timeout is resolved by taking dev’s fixture, which relies on its new pre-attach portable shell preparation. Focused results: session_bounds_review 1/1, setup_output 3/3, cli_review 17/17, shim 24/24; status resolver 13/13; public auth-status 1/1; TypeScript check and onboarding loader 3/3; production-browser sudo-command display/copy 1/1 on unique port 55252. Screenshot attached for review; no visual-quality claim. Sequential pinned static builds are running under one host build slot. [focused-merge.log](https://git.kayg.org/attachments/76b050e9-4790-4cc7-aeb4-52602058b03a) [setup-tests.log](https://git.kayg.org/attachments/bf5f00e8-9a70-4be9-bc31-05e1d191f9e9) ![system-service-setup-token-command.png](https://git.kayg.org/attachments/397401d0-39c5-4be7-9d9a-4bf96876a7f3)
kayg commented 2026-10-29 16:32:32 +00:00
Author
Owner
Copy link

D243 step pushed: 75baaecad sets both exact caps in scripts/verify.d/rust.sh and the docs/PROCESS.md table, with a short #252 delta paragraph. Pinned scripts/static-cargo builds ran sequentially inside one /usr/local/bin/build-slot.sh invocation on 8by64-compute02. Stripped static images: x86_64 21,399,568 bytes (+13,056 against dev 4a6202a52 21,386,512); aarch64 19,574,552 bytes (+10,944 against 19,563,608). Both deltas are below 16 KiB. The increase retains installed-service data resolution and the setup-command response, with dev’s reviewed #255 runtime code and exact lockfile unchanged. Static-size exact acceptance, +1-byte rejection, shrink-ratchet and unsupported-target checks pass. Full scripts/verify fast is now running on this head.

static-builds.log
static-cap-tests.log

D243 step pushed: `75baaecad` sets both exact caps in `scripts/verify.d/rust.sh` and the `docs/PROCESS.md` table, with a short #252 delta paragraph. Pinned `scripts/static-cargo` builds ran sequentially inside one `/usr/local/bin/build-slot.sh` invocation on 8by64-compute02. Stripped static images: x86_64 21,399,568 bytes (+13,056 against dev `4a6202a52` 21,386,512); aarch64 19,574,552 bytes (+10,944 against 19,563,608). Both deltas are below 16 KiB. The increase retains installed-service data resolution and the setup-command response, with dev’s reviewed #255 runtime code and exact lockfile unchanged. Static-size exact acceptance, +1-byte rejection, shrink-ratchet and unsupported-target checks pass. Full `scripts/verify fast` is now running on this head. [static-builds.log](https://git.kayg.org/attachments/768c2803-0469-422d-bb48-e552c92596df) [static-cap-tests.log](https://git.kayg.org/attachments/5a350e0a-d4ff-469d-b30e-96b2c4a62a04)
kayg commented 2026-10-29 16:44:27 +00:00
Author
Owner
Copy link

Finished #252 dev integration on setup-token-data, pushed head 75baaecad85b9c371d30791ac2e62f41b691892b (merge 0099ca23e24b42ef515bb06acf347d9b72b86e80, exact-cap commit 75baaecad85b9c371d30791ac2e62f41b691892b). Worktree is clean and origin matches HEAD. Dev 4a6202a52's #255 Tokio/AsyncFd sources and lockfile remain byte-identical; all #252 product changes are retained. Merge message lists all nine conflicted files, their resolutions and why the reviewed #255 implementation supersedes the branch patch. The additional exit-credit fixture integration repair uses dev's pre-attach shell preparation; its existing regression passed on the final head.

Measured final-head stripped static sizes: x86_64 21,399,568 bytes, aarch64 19,574,552 bytes. Both exact caps match in rust.sh and PROCESS.md. Deltas against dev 4a6202a52 are +13,056 / +10,944 bytes, both below 16 KiB. Sequential pinned builds, static linkage/strip status, production trust and D244 native key-memory gate passed; the aarch64 runtime key-memory check is reported as not executed on the x86_64 host by the gate.

Final scripts/verify fast: PASS, exit 0, on 75baaecad85b9c371d30791ac2e62f41b691892b. All Rust rows, TypeScript checks/tests, production build, transfer budget and protocol tests passed. #252 resolver, setup-output, help, auth status and onboarding loader regressions passed. vt_credit::unaffordable_repaints_park_until_sufficient_credit passed in the full head gate, so no flake reruns were needed. Final-head production-browser setup-command display and exact clipboard check passed 1/1 on unique port 55252. Screenshot attached for review; no visual-quality claim.

Self-review checked conflict completeness, exact dev lockfile/descriptor source equality, product preservation, exact matching caps, regression results and clean pushed history. Cleanup confirmed: Cargo removed 119707 files (42.3 GiB); /home/agent/.cache/codex-scratch/setup-token-data/target no longer exists. Evidence remains outside the checkout.

verify-fast-head.log
browser-head.log
system-service-setup-token-command.png

Full final scripts/verify fast output, verbatim:


==> Repository artifact size gate
repository artifact gate: PASS (36 changed path(s), merge base 4a6202a52993)

==> Release deployment functional checks
.....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained
.Build deferred: host capacity limit reached
.........
----------------------------------------------------------------------
Ran 15 tests in 0.627s

OK
.
----------------------------------------------------------------------
Ran 1 test in 0.057s

OK
bun test v1.4.2 (744846f84)

scripts/release/deploy-review.test.ts:
REMOTE_ADMISSION unsigned_x86_payload=true refused=true
(pass) remote admission refuses an x86 payload outside the signed manifest [105.83ms]
{"state": "deployed", "ca_unlocked": true}
WEB_ONLY_RECORD candidate_binary_recorded=false
(pass) web-only deployment does not record the candidate as the running binary [109.41ms]
ALIAS_RECOVERY restart_requests=2
(pass) alias restoration failure still requests the retained warm rollback [104.66ms]

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [324.00ms]
PASS proxy_forwarding samples=3 timed=false

==> fmt
(fmt: 2s)

==> VT native fmt
(VT native fmt: 0s)

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
warning: function `print_progress` is never used
   --> crates/infraternal/src/cli/output.rs:592:8
    |
592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) {
    |        ^^^^^^^^^^^^^^
    |
    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default

warning: function `write_output` is never used
   --> crates/infraternal/src/cli/output.rs:616:8
    |
616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) {
    |        ^^^^^^^^^^^^

warning: `infraternal` (bin "infraternal" test) generated 2 warnings
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.13s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal-fe1c5abfd68beec3)

running 37 tests
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
{"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok

test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s

    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.20s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal-0a149f42b54b04db)

running 104 tests
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
{"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok
test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok
test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 5.24s

    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.44s
     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_agent-f4f0113fecf22aee)

running 1 test
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 75 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_mesh-c7263890e5528429)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_ssh-b96e878b9907f3df)

running 1 test
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s

(CLI plugin compile-out: 7s)

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 14.71s
(clippy: 15s)

==> SSH runtime test helper
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.19s
(SSH runtime test helper: 0s)

==> real-binary fixture paths
...
----------------------------------------------------------------------
Ran 3 tests in 0.004s

OK
(real-binary fixture paths: 0s)

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.48s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal-6fb500f025e14506)

running 104 tests
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
ok
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok
test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok
test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 5.38s

     Running tests/agent_daemon.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/agent_daemon-07be34f79332b165)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.24s

     Running tests/agent_queues.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/agent_queues-230c59a5cd906663)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.09s

     Running tests/agent_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/agent_review-84c86525ad0fea2c)

running 8 tests
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 13.67s

     Running tests/agent_sessions.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/agent_sessions-03d7a30371f14a27)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s

     Running tests/cli_envelope.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/cli_envelope-80a08214b8a5d410)

running 8 tests
test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok
test status_exits_0_on_a_machine_with_nothing_installed ... ok
test a_missing_server_is_not_found_exit_4 ... ok
test bare_infraternal_is_the_overview_and_points_to_help ... ok
test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok
test read_only_commands_answer_in_the_envelope ... ok
test status_exits_5_when_something_that_should_run_is_down ... ok
test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/cli_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/cli_review-3291d67404d26089)

running 17 tests
test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok
test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok
test a_malformed_host_id_is_a_usage_error_exit_2 ... ok
test a_group_with_one_command_says_so_in_the_singular ... ok
test a_dry_run_plan_keeps_its_line_breaks ... ok
test no_compiled_python_is_tracked ... ok
test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok
test a_subcommand_does_not_advertise_options_it_ignores ... ok
test an_unknown_skill_is_not_found_exit_4 ... ok
test root_help_fits_80_columns ... ok
test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok
test root_help_lists_server_init ... ok
test user_facing_text_never_says_agent_alone ... ok
test json_help_and_version_are_envelopes_too ... ok
test a_dumb_terminal_gets_neither_colour_nor_marks ... ok
test an_empty_no_color_is_ignored ... ok
test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok

test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.83s

     Running tests/cli_review_r2.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/cli_review_r2-23cf4131d1988fa6)

running 11 tests
test a_failed_later_page_emits_only_the_failure_envelope ... ok
test a_paged_listing_is_still_one_envelope ... ok
test an_unknown_skill_does_not_echo_what_was_typed ... ok
test three_pages_preserve_order_and_only_the_final_cursor ... ok
test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok
test status_text_does_not_call_an_unanswered_unit_not_running ... ok
test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok
test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok
test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok
test ctrl_c_in_a_script_loop_stops_the_loop ... ok
test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.00s

     Running tests/cli_review_r3.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/cli_review_r3-be7640ccd9aa03ea)

running 4 tests
test signal_fixture ... ok
test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok
test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok
test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/cli_review_r3_arguments.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/cli_review_r3_arguments-212cdc3ed0a05eb1)

running 1 test
test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/idle_canary.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/idle_canary-5d1908992b4ff473)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.05s

     Running tests/key_memory.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/key_memory-4d4f4cc5516ea6b4)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/remote_output.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/remote_output-9105ebfda268049c)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/session_bounds_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/session_bounds_review-ea0b23d91d052373)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.86s

     Running tests/session_exit_events.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/session_exit_events-d98ed6fbf136b0d7)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.63s

     Running tests/session_retention.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/session_retention-8b939159efa2d0ab)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.55s

     Running tests/setup_output.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/setup_output-702013ba02916bdd)

running 3 tests
test unreadable_system_service_data_prints_one_sudo_command_line ... ok
test setup_output_keeps_legacy_and_versioned_readers ... ok
test setup_token_finds_the_data_dir_from_a_system_service_without_flags ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/shim.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/shim-30417b82dff06cc8)

running 24 tests
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok
test attached_backpressure_and_detached_progress ... ok
test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok
test independent_shared_writers_wait_for_the_same_global_queue ... ok
test parked_shared_writer_does_not_stop_detached_pty_progress ... ok
test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test replacement_connection_and_malformed_limit ... ok
test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok
test shared_writer_coexists_and_replayed_input_is_written_once ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test shared_writer_restores_durable_geometry_after_another_writer_types ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test legacy_output_subscription_unblocks_deferred_shared_input ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.50s

     Running tests/ssh_askpass.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/ssh_askpass-16fbd1b96c4af4ca)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.93s

     Running tests/ssh_connector_policy.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/ssh_connector_policy-dd9b13bec3dd9638)

running 1 test
test connector_preserves_configured_bind_address_refusal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s

     Running tests/user_host.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/user_host-4bee401db2fda08c)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/vt_credit.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/vt_credit-dd383ed03c38b306)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.88s

     Running tests/vt_reconnect.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/vt_reconnect-a0009109e49304ab)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.18s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_agent-b93583fbcebe1fd6)

running 168 tests
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok
test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok
test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok
test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::reply_capacity_tests::full_reply_reservations_cannot_spend_keyboard_capacity ... ok
test daemon::session_commands::reply_capacity_tests::sixteen_replies_and_eight_typing_commands_retain_their_order ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok
test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok
test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok
test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok
test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok
test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok
test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok
test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok
test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok
test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok
test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok
test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok
test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok
test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok
test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok
test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok
test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok
test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok
test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok
test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok
test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok
test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok
test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok
test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok
test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok
test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok
test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok
test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok
test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok
test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok
test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok
test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok
test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok
test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok
test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged.
test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged.
test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok
test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock.
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok
test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok
test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok
test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok
test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace.
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok
test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok

test result: ok. 148 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 11.12s

     Running tests/transport.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/transport-8f7e25a883145d8d)

running 3 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test replacing_the_callers_descriptor_cannot_redirect_registered_io ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_mesh-7fce9c81f3753067)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/default_arrow-718a820b17567011)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/properties-9b39f53037898c73)

running 14 tests
test directional_grants_union_and_minimal_updates ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test names_versions_and_backend_status ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.62s

     Running tests/rotation_time.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/rotation_time-d8fd70ac7360bfd5)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_api-49f4d2771da6f777)

running 32 tests
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test host_name::tests::numeric_invalid_and_unnamed_inputs_give_no_name ... ok
test host_name::tests::addresses_and_hostnames_give_a_machine_name ... ok
test host_name::tests::odd_and_overlong_hostnames_give_no_name ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok
test present::tests::pairs_align_values_and_wrap_under_them ... ok
test present::tests::a_table_has_a_header_only_from_two_rows ... ok
test present::tests::tint_wraps_text_after_padding_is_measured ... ok
test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok
test server_path::tests::legacy_link_omits_the_optional_source_port ... ok
test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes.
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok

test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/routing_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/routing_review-6f6c1a928eb26a7f)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_backup-9fdc1ecb14af9cc8)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_canvas-1446da2b8a090ad7)

running 12 tests
test model::tests::graph_pin_coordinates_include_both_limits_but_refuse_the_next_integer ... ok
test model::tests::host_id_requires_canonical_lowercase_hyphenated_text ... ok
test model::tests::reference_document_has_strict_shape_and_bounds ... ok
test reducer::tests::concurrent_builtin_view_creation_preserves_existing_contents ... ok
test reducer::tests::nullable_resize_preserves_existing_values_and_absent_fields ... ok
test reducer::tests::sample_corpus_preserves_strict_variant_fields_and_round_trips ... ok
test socket::tests::descriptor_declares_server_only_actions_and_strict_subscription ... ok
test socket::tests::result_json_preserves_both_wire_shapes ... ok
test reducer::tests::split_divides_only_its_own_band ... ok
test reducer::tests::view_metadata_targets_and_column_neighbours_are_semantic ... ok
test reducer::tests::repeated_open_close_does_not_exhaust_column_capacity ... ok
test reducer::tests::independent_edits_commute_and_close_wins_in_both_orders ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_host_facts-8ccf6df635e66a77)

running 14 tests
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::static_facts_report_the_machines_hostname ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_mesh-27583060726d1618)

running 76 tests
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok
test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok
test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok
test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok
test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test node_actions::peer_page_tests::poll_cost ... ignored, measurement
test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok
test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok
test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::legacy_host_daemon_and_ip_record_do_not_leave_a_uuid_mesh_name ... ok
test node_presentation::tests::a_wide_table_stays_within_the_width ... ok
test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok
test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok
test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok
test node_presentation::tests::status_explains_the_observed_server_transport ... ok
test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers.
test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok
test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok
test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok
test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok
test node_coordination::tests::a_name_a_person_chose_is_kept ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes.
test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test presence::tests::a_page_cursor_is_followed ... ok
test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok
test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok
test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok
test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok
test presence::tests::an_unreadable_node_is_no_reading ... ok
test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok
test presence::tests::replace_reports_only_visible_changes ... ok
test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok
test presence::tests::the_edge_of_the_session_window_is_still_online ... ok
test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok
test presence::tests::traffic_proves_a_session_until_it_ends ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok
test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok
test node_coordination::tests::placeholder_names_become_the_machines_names ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok
test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok
test node_coordination::tests::two_hosts_reporting_the_same_hostname_receive_distinct_names ... ok
test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok
test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok

test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 0.34s

     Running tests/access_updates.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/access_updates-401a785178272a85)

running 8 tests
test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace
test compact_identity_support_requires_an_explicit_strict_probe ... ok
test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok
test default_tightening_at_1000_peers_fits_one_round_trip ... ok
test range_objects_reject_unknown_duplicate_and_positional_fields ... ok
test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok

test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/authorized_local_binding.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/authorized_local_binding-9eb78243673aa0ef)

running 2 tests
test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.
test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/canonical_host_binding.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canonical_host_binding-77332b5113aa5170)

running 1 test
test enrollment_requires_canonical_host_uuid_spelling ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/configuration.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/configuration-edd5af664e4aa790)

running 5 tests
test edition_default_is_explicit_and_build_selected ... ok
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s

     Running tests/kernel.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/kernel-ae923fd8446e7953)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/naming.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/naming-7ef77dd298644e0e)

running 4 tests
test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok
test the_servers_names_are_kept_for_the_server ... ok
test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok
test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/policy_enrollment_binding.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/policy_enrollment_binding-109d95c10f4ea94b)

running 4 tests
test noncanonical_host_binding_is_refused ... ok
test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok
test refused_enrollment_preserves_removal_and_revision ... ok
test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/policy_enrollment_identity.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/policy_enrollment_identity-f0cf7a0229e540f5)

running 1 test
test unbound_enrollment_public_key_is_not_host_authority ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/policy_snapshot_ordering.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/policy_snapshot_ordering-7cc2ac94da47cd98)

running 6 tests
test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.
test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/presence.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/presence-3e1bc5e55745d7e3)

running 2 tests
test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok
test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/restart_route_ownership.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/restart_route_ownership-0dc4cc52f478fbf8)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_authorized_reenrollment.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_authorized_reenrollment-7a5ac950aac5a6a3)

running 2 tests
test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.
test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_endpoint_transaction-0ef0c911cceaab22)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_firewall_marker.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_firewall_marker-c4dbb35430ae2de6)

running 2 tests
test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173.
test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_ingress_translation-c0a4032b0502fe02)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_local_delivery-1712a7f25b19bf51)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_presence_r4.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_mesh_presence_r4-b35fd343e12c696d)

running 3 tests
test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok
test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok
test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_view_truth.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_mesh_view_truth-62e9d7f28a99b9eb)

running 6 tests
test an_address_that_is_an_ip_never_becomes_a_name ... ok
test a_remote_machine_cannot_be_called_server ... ok
test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok
test a_host_record_name_beats_another_machines_reported_hostname ... ok
test a_remote_machine_cannot_take_the_servers_hostname ... ok
test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.12s

     Running tests/review_mesh_view_truth_r2.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_mesh_view_truth_r2-f6106bc26caa5acf)

running 9 tests
test a_hex_ipv4_spelling_never_becomes_a_name ... ok
test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236)
test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok
test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok
test a_viewer_without_host_facts_still_sees_distinct_names ... ok
test a_person_can_take_a_name_a_machine_reported ... ok
test no_viewer_sees_a_remote_machine_called_server ... ok
test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok
test evidence_migrations_0026_and_0029_upgrade_a_realistic_database_without_churn ... ok

test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/review_mesh_view_truth_r3.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_mesh_view_truth_r3-acc7217987659c70)

running 5 tests
test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok
test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok
test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok
test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok
test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/review_mesh_view_truth_r4.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_mesh_view_truth_r4-c8f1176c83a6a2a1)

running 7 tests
test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok
test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok
test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok
test evidence_server_hostname_moves_only_with_server_rename_authority ... ok
test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok
test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok
test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.30s

     Running tests/review_restart_routes.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_restart_routes-012bc6e19af8712e)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_retire_ownership.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_retire_ownership-7e7abe5e49e18a66)

running 7 tests
test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft.
test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace.
test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace.
test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft.

test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_reverse_recreation.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_reverse_recreation-ba8322a4b4589131)

running 4 tests
test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.

test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_revoked_host_policy.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_revoked_host_policy-8f0b434cc4a6f49e)

running 1 test
test revoked_host_is_not_retained_in_compiled_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/review_route_inventory.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_route_inventory-db2612871fb84dbf)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_route_scope-7a63cc3e13aa42db)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_shutdown_budget-e6060242e37c449a)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_shutdown_restart-90e3bdbafd24755a)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/settings-b0c907b6b74ba896)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/store.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/store-0f17df0f12b6f327)

running 6 tests
test required_server_membership_cannot_be_deleted ... ok
test absent_discovery_preserves_the_last_known_endpoint ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok
test attach_cancelled_at_any_await_leaves_the_store_writable ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.47s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_relay-d3de297fc8337bde)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_release-1d54d564a3117987)

running 8 tests
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test latest::tests::cancellation_joins_verification ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.55s

     Running tests/review_pool.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_pool-51aabd0e805c8271)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.60s

     Running tests/review_restart.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_restart-c5f9f9cb62051e16)

running 4 tests
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification
test lookup_creates_private_staging_under_owner_restrictive_umask ... ok
test restarted_latest_reclaims_metadata_after_process_stop ... ok

test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_remote-ecf43ccc280cdfc1)

running 114 tests
test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance.
test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok
test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok
test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok
test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok
test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok
test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok
test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok
test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok
test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok
test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok
test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok
test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok
test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok
test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok
test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok
test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok
test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok
test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok
test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok
test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok
test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok
test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok
test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok
test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok
test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock
test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok
test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok
test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok
test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok
test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok
test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok
test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok
test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok
test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok
test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance.
test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok
test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok
test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok
test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok
test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers.
test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok
test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok
test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok
test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok
test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok
test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok
test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok
test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections.
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence.
test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections.
test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections.
test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok
test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok
test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock.
test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok
test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok
test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok
test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok
test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline.
test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok
test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok
test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok
test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok
test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok
test runtime_lock::tests::dump_datagrams_split_exactly ... ok
test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok
test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test
2
test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... ok
test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok
test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok
test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok
test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok
test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok
test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok

running 1 test
test runtime_lock::tests::split_device_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s

test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok
test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test
test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... ok
test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok
test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok

running 1 test
test runtime_lock::tests::foreign_inode_twin_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s

test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok
test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok
test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok
test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok
test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok
test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok
test uninstall::tests::review_planted_plan_is_never_followed ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test runtime_lock::tests::after_close_waits_for_a_slow_socket_snapshot ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok
test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok
test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok

test result: ok. 99 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 5.31s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_ssh-17b36253c8d69c86)

running 49 tests
test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok
test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok
test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok
test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_order::tests::pending_forwards_the_caller_deadline_to_its_selected_session ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok
test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok
test bootstrap::proof_tests::review_commit_clamps_outliers_and_releases_immediately ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test bootstrap::proof_tests::review_stalled_commit_cannot_outlive_attempt_cap ... ok
test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok
test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test install::tests::transfer_caps_accept_only_the_fixed_record ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only
test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok
test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok
test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok
test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok
test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok
test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok
test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok
test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok
test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok
test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok
test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok
test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok
test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok
test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok
test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok
test payload::tests::settings_changes_keep_at_most_four_entries ... ok
test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok
test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok
test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok
test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/already_added_breakit.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/already_added_breakit-e90e2f4c29cb707e)

running 1 test
test a_host_key_challenge_never_serializes_as_a_host_id ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/auth_order.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/auth_order-9968d66820e505cb)

running 11 tests
test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test manual_method_trust_refusal_never_loads_later_credentials ... ok
test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok
test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/build_removal-9eec37b95ad57c8e)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s

     Running tests/concurrency.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/concurrency-f30db03603f4997a)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/config_isolation-9a944d95ba4eed2e)

running 2 tests
test synthetic_master_socket_is_private_at_creation ... ok
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/credentials.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/credentials-6e4e4044489fb506)

running 4 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test kernel_running_helper_is_materialized_in_its_private_scope ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.86s

     Running tests/diagnostics.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/diagnostics-f0e6f7e48b04f404)

running 12 tests
test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test control_probe_statuses_preserve_actionable_setup_messages ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/event_metadata-8524db180f9a16df)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/foreground-10281428fe728d1d)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/host_trust.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/host_trust-50a4a769c45122d1)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/install-42c84fd1d4c4d48f)

running 95 tests
test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test breakit2_rollback_preserves_foreign_unit_new ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test breakit2_rollback_preserves_foreign_launcher_new ... ok
test active_transaction_is_live_between_ssh_setup_commands ... ok
test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test compound_join_failure_preserves_the_original_status_and_boundary ... ok
test compound_restaging_refuses_a_foreign_journal_before_upload ... ok
test buffering_setup_reader_receives_no_payload_until_selection ... ok
test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok
test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok
test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok
test compound_setup_keeps_owned_rollback_and_linger_warning ... ok
test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok
test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok
test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok
test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok
test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok
test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok
test early_staging_preserves_canonical_foreign_root_refusal ... ok
test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok
test commit_signal_retains_journal_until_proof_and_on_cancel ... ok
test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok
test framed_join_refusal_keeps_status_separate_from_upload ... ok
test crash_mid_install_can_roll_back_and_retry ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok
test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test installed_infraternal_agent_always_restarts_without_start_limit ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_acquisition_cleanup_receipt_can_resume ... ok
test full_payload_restaging_preserves_the_running_session_build ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test missing_payload_preserves_the_bootstrap_binary_remedy ... ok
test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok
test known_failed_setup_finishes_without_a_second_confirmation ... ok
test payload_reuse_never_adopts_a_foreign_cache_directory ... ok
test partial_full_upload_rebridges_from_a_verified_image ... ok
test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ignored, scripts/test-ssh-inode-reuse reports unsupported filesystems as ignored
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok
test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok
test reported_cache_digest_selects_reuse_without_sending_payload ... ok
test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534
test retry_resends_payload_when_cache_content_changes ... ok
test retry_reuses_verified_payload_after_owned_rollback ... ok
test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok
test review_live_relative_control_socket_preserves_its_receipt ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test setup_transaction_holds_a_live_lock_between_shell_commands ... ok
test review_restart_recovers_cleanup_after_base_retirement ... ok
test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok
test review_restart_recovers_cleanup_after_owner_retirement ... ok
test session_restaging_uses_one_compound_command ... ok
test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok
test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok
test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok
test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok
test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok
test restart_recovers_partial_stage_retirement ... ok
test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok
test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok

test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 6.55s

     Running tests/mesh_ssh.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/mesh_ssh-2fa83dcf733d059a)

running 1 test
test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/model.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/model-8dc28d474cf55d69)

running 6 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/payload_source-8da7588b1b1e7c2a)

running 2 tests
test verification_failure_names_step_and_stops_before_upload ... ok
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/previous_attempt_liveness_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/previous_attempt_liveness_review-ce46fa87480131ee)

running 1 test
test home_alias_keeps_open_setup_descriptor_live ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

     Running tests/previous_attempt_shell.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/previous_attempt_shell-b9d97aec39edc4d4)

running 1 test
test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.75s

     Running tests/probe_check.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/probe_check-376aad85da0f0af1)

running 3 tests
test breakit2_no_systemd_names_the_required_manager ... ok
test shell_startup_refusal_names_an_interactive_only_remedy ... ok
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/process.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/process-c3eab8acd9e98988)

running 10 tests
test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test unavailable_negotiated_codec_never_sends_invitation ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test negotiated_sources_require_an_exact_receipt_before_private_input ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test declared_payload_flows_before_receipts_and_private_input_waits ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.04s

     Running tests/proxy_policy.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/proxy_policy-ae5cb2b308a06ccf)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/publication.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/publication-0d82e771a08c3f68)

running 4 tests
test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok
test refused_publication_reports_failure_to_the_waiting_wizard ... ok
test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok
test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/real_ssh.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/real_ssh-bf1648c924584992)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/recovery_support.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/recovery_support-683687d40ea38ce9)

running 12 tests
test cleanup_script_requires_the_shipped_helper_level ... ok
test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok
test legacy_control_socket_in_spaced_home_preserves_receipt ... ok
test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image
test private_legacy_control_socket_preserves_receipt ... ok
test legacy_control_socket_in_newline_home_preserves_receipt ... ok
test review_bound_control_socket_before_listen_preserves_receipt ... ok
test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok
test review_live_session_socket_in_newline_home_blocks_cleanup ... ok
test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok
test review_live_session_socket_in_plain_home_blocks_cleanup ... ok
test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.31s

     Running tests/shadow_banner.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/shadow_banner-ec8803577a2b0cd0)

running 1 test
test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/shell_quoting.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/shell_quoting-e07d7690574ed5f8)

running 1 test
test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/single_connection-628041854be37518)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/source_completeness-4d7c035c7195b1ce)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/trust_round2-e8646687aedada12)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 8 tests
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_server-f1c601004c6d4da6)

running 685 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::migration_data_tests::original_migration_metadata_and_checksums_are_unchanged ... ok
test auth::migration_data_tests::quoted_text_and_comment_looking_literals_keep_their_values ... ok
test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::migration_data_tests::dev_v29_and_production_v30_upgrade_without_retagging_or_losing_ownership ... ok
test auth::migration_data_tests::fresh_schemas_defaults_indexes_and_foreign_keys_match_original_sql ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_accepts_legacy_and_job_scoped_roots ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_rejects_unscoped_and_escaping_paths ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::canvas::canvas_real_socket_commits_and_runtime_disable_preserve_control ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok
test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok
test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok
test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok
test auth::tests::socket_tests::close_logging::revocation_wake_on_busy_store_logs_authority_unavailable_not_resume_refused ... ok
test auth::tests::socket_tests::close_logging::revoked_busy_wake_records_stream_end_within_the_existing_wait ... ok
test auth::tests::socket_tests::close_logging::revoked_session_during_transient_stall_logs_resume_refused ... ok
test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok
test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::close_logging::unrelated_logout_during_transient_stall_keeps_the_terminal_socket ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok
test auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply ... ok
test auth::tests::socket_tests::review_authority_cap::retries_whose_select_waits_stay_within_the_authority_cap ... ok
test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok
test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok
test auth::tests::socket_tests::review_busy_wake::idle_busy_revocation_wake_sends_server_busy_close_code ... ok
test auth::tests::socket_tests::review_busy_wake::sixteen_woken_sockets_recover_application_authority_after_a_short_stall ... ok
test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok
test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok
test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok
test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_absolute_session_expiry ... ok
test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_logout_revocation ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input ... ok
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok
test bootstrap_runtime::remote_backend::admission_tests::missing_route_uses_link_scaled_bound_without_inventory_extensions ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_after_both_route_phases ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_at_600_ms ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_is_monotonic_for_zero_and_outlier_samples ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok
test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py
test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_lock_timing_runs_inside_the_nested_setup_shell ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_setup_timing_preserves_transfer_upload_status ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok
test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok
test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test canvas_store::tests::cancelled_commit_still_invalidates_a_durable_change ... ok
test canvas_store::tests::cas_retry_and_foreign_account_isolation ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test canvas_store::tests::permanent_receipts_keep_the_original_json_digest_recipe ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok
test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok
test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok
test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok
test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok
test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok
test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok
test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok
test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok
test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok
test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok
test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::expired_route_retires_full_consumer ... ok
test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok
test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok
test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok
test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok
test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok
test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok
test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok
test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok
test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok
test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok
test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock.
test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok
test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok
test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok
test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok
test embedded::regressions::path_tests::review_reply_bypasses_queued_typing_without_losing_its_cursor_or_bytes ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok
test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok
test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::reply_order_tests::browser_reply_follows_typing_across_both_forwarding_tasks ... ok
test embedded::reply_order_tests::full_reply_reservations_preserve_keyboard_bytes_and_all_eight_slots ... ok
test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok
test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok
test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok
test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok
test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok
test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok
test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok
test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok
test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok
test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok
test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test enrollment::migration_tests::canvas_layout_migration_upgrades_production_v27_and_fresh_schema_in_order ... ok
test enrollment::migration_tests::hostname_migration_allocates_around_retained_names ... ok
test enrollment::migration_tests::hostname_migration_upgrades_release6_copy_without_changing_canvas_or_checksums ... ok
test enrollment::migration_tests::old_uuid_mesh_placeholders_upgrade_to_audited_unnamed_labels ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok
test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok
test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok
test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok
test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok
test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok
test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok
test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok
test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok
test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok
test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok
test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok
test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok
test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok
test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok
test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_inventory::name_tests::an_ip_added_host_uses_its_cached_hostname_and_old_facts_do_not_clear_it ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_inventory::name_tests::inventory_hostname_changes_publish_once_and_preserve_hand_names ... ok
test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok
test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok
test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok
test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok
test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_inventory::name_tests::late_hostname_inventory_renames_the_attached_mesh_node_and_notifies_viewers ... ok
test remote_inventory::name_tests::reported_names_yield_to_records_and_collision_suffixes_and_server_identity_hold ... ok
test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok
test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok
test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok
test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok
test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok
test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok
test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok
test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok
test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok
test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok
test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok
test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok
test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required
test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok
test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok
test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok
test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok
test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok
test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok
test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok
test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok
test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok
test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok
test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok
test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok
test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok
test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok
test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok
test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok
test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok
test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok
test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok
test stream_close::tests::close_path_cost ... ignored, manual microbenchmark
test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok
test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok
test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok
test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok
test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok
test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok
test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok
test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok
test terminal_queries::review_tests::a_lagging_viewer_cannot_renew_a_deadline_after_the_first_viewer_answered ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test terminal_queries::review_tests::trimmed_output_refuses_its_answer_without_reopening_an_accepted_position ... ok
test terminal_queries::review_tests::two_positions_in_one_chunk_are_claimed_in_order_without_reopening_either ... ok
test terminal_queries::tests::deadline_includes_incomplete_query ... ok
test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok
test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok
test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok
test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok
test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok
test terminal_queries::tests::marked_flood_never_allocates_queries ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok
test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok
test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::probe_authority::review_closed_watch::closed_revocation_watch_is_unavailable_and_never_polls_the_write ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok
test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::cancelled_storm_returns_every_place_without_duplication ... ok
test websocket::writer_tests::authority_watchdog::authority_deadline_preserves_subsecond_session_expiry ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::deadline_storm_retains_exactly_four_places_then_recovers ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::pool_acquire_timeout_recovers_places_without_releasing_the_connection ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::ready_result_observed_after_deadline_retries_current_authority ... ok
test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok
test websocket::writer_tests::busy_edges::wall_expiry_and_monotonic_deadlines_keep_their_separate_roles ... ok
test websocket::writer_tests::resume_refusals_distinguish_connection_state_and_lost_token_rotation ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok
test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok
test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok
test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok
test websocket_transport::tests::visibility_notices_are_small_typed_transport_messages ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test terminal_queries::review_tests::all_session_tables_remain_bounded_at_the_registry_limit ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test websocket::writer_tests::busy_edges::revoked_probe_across_attempt_backoff_and_total_wait_edges ... ok
test websocket::writer_tests::busy_edges::expiry_crossing_a_stalled_read_refuses_both_deadline_callers ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::sqlite_busy_timeout_recovers_detached_storm_without_unlocking ... ok
test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok

test result: ok. 633 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 215.44s

     Running tests/canvas_convergence.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_convergence-1a7528827de3cb23)

running 20 tests
test a_tiled_import_cannot_duplicate_an_existing_graph_kind ... ok
test competing_bootstraps_merge_targets_and_retry_after_restart ... ok
test identical_and_empty_second_devices_do_not_advance_revision ... ok
test imports_use_account_wide_target_identity_and_keep_spanning_column_geometry ... ok
test importing_an_orphaned_recovery_view_does_not_create_another_recovery_name ... ok
test initialize_and_apply_repair_before_writing_and_notify_subscribers ... ok
test loading_repairs_only_matching_recovery_views_and_converges_clients ... ok
test merge_bounds_refuse_without_losing_the_existing_layout ... ok
test import_prefers_matching_names_before_the_first_view_of_its_kind ... ok
test simultaneous_first_devices_merge_disjoint_targets_into_one_view ... ok
test session_import_identity_ignores_labels_but_checks_account_ownership ... ok
test no_op_imports_keep_retry_receipts_and_do_not_clear_operation_history ... ok
test stale_noop_still_checks_numeric_bounds_before_committing ... ok
test split_retry_is_durable_and_changed_idempotency_input_is_refused ... ok
test owned_session_reference_and_all_bounds_are_transactional ... ok
test permanent_receipts_do_not_copy_large_bootstrap_documents ... ok
test two_devices_serialize_stale_edits_and_replay_every_committed_revision ... ok
test encoded_document_budget_is_enforced_by_the_host_transaction ... ok
test no_op_import_receipts_still_have_a_bounded_quota ... ok
test close_beats_move_resize_in_both_orders_and_survives_compaction ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.61s

     Running tests/canvas_receipt_count.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_receipt_count-dcb7b77ff3a854ab)

running 1 test
test historical_receipts_backfill_and_follow_transactions_and_account_removal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_receipt_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_receipt_review-f4b0654f8bb85a4f)

running 1 test
test historical_no_revision_receipts_preserve_replay_and_the_last_real_edit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.78s

     Running tests/canvas_recovery_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_recovery_review-f2d4bef103e06289)

running 5 tests
test repair_rebases_a_cursor_that_already_names_its_next_revision ... ok
test queued_close_of_unique_recovered_window_survives_repair ... ok
test queued_resize_keeps_its_membership_after_a_separate_read_repair ... ok
test independent_loads_and_base_edit_repair_exactly_once ... ok
test recovery_at_column_capacity_keeps_the_account_readable ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/canvas_replay_noop.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_replay_noop-f45368f3ae253f70)

running 1 test
test committed_noop_is_explicit_without_sending_all_closed_ids_to_clients ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_retired_reference.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_retired_reference-4ae1b19d3a90f2d6)

running 2 tests
test retired_reference_does_not_block_an_unrelated_edit ... ok
test retarget_checks_account_ownership_even_after_close ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_socket.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_socket-51aa35d48dc96a00)

running 1 test
test snapshot_then_ordered_commit_events_and_revocation_cancel_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_text_bounds.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_text_bounds-eb698aef9b5b9538)

running 2 tests
test text_uses_the_browser_utf16_bound ... ok
test imported_name_respects_the_browser_utf16_bound ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/catalog_startup.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/catalog_startup-c4f0c5c2b9e63826)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/enrollment-3533ffe0cf2749cb)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.22s

     Running tests/mesh_parser.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/mesh_parser-f3d43b86d3386706)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/mesh_review_plugin-1de5b08687140771)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/mesh_review_policy.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/mesh_review_policy-5801ffe603d49dec)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/mesh_review_role_scope-1867947f5f970cf5)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/native_probe_correlation_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/native_probe_correlation_review-0508c3491f4ab791)

running 25 tests
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok
test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test unissued_native_probe_reply_cannot_extend_readiness ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test healthy_real_socket_survives_a_150ms_server_stall ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/plugin_host_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/plugin_host_review-1f79717833c5fdb0)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_disable_answers_inflight_call ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s

     Running tests/plugin_settings_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/plugin_settings_review-8e826064dc44171b)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.61s

     Running tests/remote_plugin_contract.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/remote_plugin_contract-c936186fbcfd8885)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.39s

     Running tests/review_mesh_host_removal.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_mesh_host_removal-56ed2d75e836d36e)

running 1 test
test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_session-f2f326f18dc6b30e)

running 2 tests
test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok

running 1 test
test tests::fresh_exec_closes_dumpability_before_private_startup ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

test tests::fresh_exec_closes_dumpability_before_private_startup ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_shim-7c35453813e3afe4)

running 105 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap

running 1 test
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 104 filtered out; finished in 0.00s

test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 92 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 29.80s

     Running tests/detach.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/detach-6a47ad01fd5a59d3)

running 2 tests
test detached_child_restores_default_signals_without_changing_parent ... ok
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.10s

     Running tests/mouse.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/mouse-d13052bb88989529)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/ppu_reliability.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/ppu_reliability-2964f940e0c6068a)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/ppu_reliability_memory.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/ppu_reliability_memory-a754448942207ef2)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/process_exit_descriptor.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/process_exit_descriptor-c4b349d2a498ffa6)

running 2 tests
test invalid_pid_never_creates_a_descriptor ... ok
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_status-7910dde34bdac077)

running 13 tests
test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok
test tests::installed_system_server_data_comes_from_its_effective_execstart ... ok
test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok
test tests::nothing_installed_says_so ... ok
test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok
test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok
test tests::rootless_agent_is_read_from_the_user_manager ... ok
test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok
test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok
test tests::server_and_host_on_one_machine_is_both ... ok
test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok
test tests::the_headline_names_what_is_down_and_how_to_look ... ok
test tests::stopped_server_unit_is_stopped_not_unknown ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_canvas

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 2 tests
test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 56) - compile fail ... ok
test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 63) - compile fail ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

   Doc-tests infraternal_status

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

(test: 458s)

==> SSH inode reuse fixture
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.13s
     Running tests/install.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/install-f0d19bd45bc9bae9)

running 1 test
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 0.19s
(SSH inode reuse fixture: 0s)

==> shim process-per-user
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.07s
     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_shim-58e9712d9c0dc37c)

running 218 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::borrowed_output_keeps_frozen_bytes_and_refuses_before_batch_mutation ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::tests::batch_append_preserves_prefix_and_refuses_invalid_frames ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test heap_accounting::accounting_keeps_exact_layouts_and_balances_reallocation ... ok
test heap_accounting::transient_allocations_are_visible_after_their_storage_is_freed ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok

running 1 test
test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... 
running 1 test
test pty::output_readiness_tests::readable_byte_hint_preserves_the_complete_output_stream ... ok

running 1 test
test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... test ring::checks::tests::empty_append_keeps_lazy_storage_unallocated ... ok
test ring::checks::tests::borrowed_ranges_obey_absolute_offsets_across_physical_wrap ... ok
test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok
test ring::checks::tests::merge_review_pool_refusal_retains_exact_suffix_and_releases_charge ... ok
test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

test ring::checks::tests::shared_history_reservation_never_rounds_past_its_share ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::inputs::host_budget_tests::alternating_writers_cannot_expand_shared_host_bookkeeping_without_bound ... ok
test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok
test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok
test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::inputs::tests::host_legacy_writer_needs_no_heap_table ... ok
test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok
test session::inputs::reply_tests::host_replies_preserve_segment_budget_and_account_for_promoted_storage ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::bounded_flush_keeps_partial_frame_and_wire_order ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.03s

test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::user_host::lazy_bench::geometry_replay_materialization_cost ... ignored, perf VM only: measure cold materialization after bounded geometry replay
test session::user_host::reactor::tests::accounting_write_failure_disables_only_the_receipt ... ok
test session::user_host::reactor::tests::actual_output_selector_keeps_a_bulk_turn_after_granted_and_denied_promotions ... ok
test session::user_host::reactor::tests::cancelled_bulk_membership_reuses_the_existing_deque_entry ... ok
test session::user_host::reactor::tests::cheap_replies_share_a_turn_but_expired_output_yields_to_input ... ok
test session::user_host::child_checks::ordinary_housekeeping_does_not_probe_child_status ... ok
test session::user_host::child_checks::threaded_startup_is_refused_before_creating_session_state ... ok
test session::user_host::reactor::tests::inline_and_extra_descriptor_flags_merge_without_losing_generations ... ok
test session::user_host::reactor::tests::fresh_ack_fallback_avoids_writable_poll_and_finishes_with_new_input ... ok
test session::user_host::reactor::tests::exit_observed_before_settle_still_queues_one_retention_deadline ... ok
test session::user_host::reactor::tests::input_phase_retires_closed_identity_without_publishing_transient_interest ... ok
test session::user_host::reactor::tests::one_session_readiness_fits_240_requested_bytes ... ok
test session::user_host::reactor::tests::readiness_membership_stays_within_five_bytes_per_session ... ok
test session::user_host::reactor::tests::readiness_storage_registration_is_at_most_sixteen_bytes ... ok
test session::user_host::reactor::tests::readiness_storage_two_descriptors_are_allocation_free ... ok
test session::user_host::reactor::tests::ready_rows_clear_only_touched_slots_and_fence_round_wrap ... ok
test session::user_host::reactor::tests::ready_rows_keep_two_descriptor_turns_allocation_free_within_64_bytes_per_slot ... ok
test session::user_host::reactor::tests::replay_continues_after_its_frame_was_written_inline ... ok
test session::user_host::reactor::tests::ownership_receipt_separates_session_components_and_shared_capacities ... ok
test session::user_host::reactor::tests::queued_data_ack_needs_no_writable_poll_before_pty_service ... ok

running 1 test
test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... test session::user_host::reactor::tests::round_reset_and_wrap_preserve_bulk_membership_without_reviving_reads ... ok
test session::user_host::reactor::tests::short_output_cohort_yields_before_the_next_input_poll ... ok
test session::user_host::reactor::tests::single_ready_descriptor_needs_no_heap_allocation ... ok
test session::user_host::reactor::tests::timer_membership_survives_bulk_promotion_cancellation_and_round_wrap ... ok
test session::user_host::tests::admission_refuses_foreign_uid_duplicate_ids_and_geometry_before_spawn ... ok
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

test session::user_host::reactor::tests::unchanged_registration_sync_needs_no_heap_allocation ... ok
test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok
test session::user_host::tests::blocked_state_and_output_share_one_ordered_write_batch ... ok
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.07s

test session::user_host::tests::data_ack_can_wait_for_a_writable_visit_without_requiring_output ... ok
test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... ok
test session::user_host::tests::deferred_data_ack_and_available_output_share_one_ordered_batch ... ok
test session::user_host::tests::full_pool_reuses_ring_storage_for_newest_output ... ok
test session::user_host::tests::full_pool_typing_echo_latency ... ignored, timing measurement runs on the perf VM
test session::user_host::tests::bulk_turn_advances_sixteen_kib_and_yields_before_the_rest ... ok
test session::user_host::tests::full_pool_refuses_new_session_and_keeps_existing_session_working ... ok
test session::user_host::tests::host_pool_scales_with_machine_memory_within_bounds ... ok
test session::user_host::tests::idle_session_ownership_ledger ... ignored, perf VM only: per-session requested-byte ownership ledger at scale
test session::user_host::tests::geometry_transcript_materializes_at_its_event_bound ... ok

running 1 test
test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok
test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok
test session::user_host::tests::malformed_closed_peer_is_retired_once_and_keeps_its_sibling ... ok
test session::user_host::tests::lazy_prefix_materializes_exactly_before_overflow_and_resize ... ok
test session::user_host::tests::output_bound_replays_retained_geometry_before_new_bytes ... ok
test session::user_host::tests::medium_geometry_materializes_before_deferred_cell_work_exceeds_the_bound ... ok
test session::user_host::tests::prefix_threshold_preserves_unfinished_sequences ... ok
test session::user_host::tests::quiet_geometry_changes_remain_lazy_and_replay_in_order ... ok
test session::user_host::tests::same_geometry_input_selection_keeps_vt_unallocated ... ok
test session::user_host::tests::session_constructor_retains_only_the_bound_socket_path ... ok
test session::user_host::tests::state_fences_and_input_only_acks_bypass_coalescing ... ok
test session::user_host::tests::steady_replay_needs_no_payload_allocation ... ok
test session::user_host::tests::unchanged_geometry_retains_native_resize_side_effects ... ok
test session::user_host::tests::vt_panic_retires_one_real_pty_and_sibling_keeps_its_output ... ok
test session::user_host::tests::writable_peer_receives_state_and_output_before_another_readiness_turn ... ok
test session::user_host::tests::zero_ring_capacity_does_not_stall_a_live_pty ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok
test session::user_host::tests::exhausted_pool_drains_live_ptys_during_random_session_churn ... ok
test terminal::checks::snapshot_during_discard_preserves_the_unfinished_string_boundary ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test pty::handoff::tests::all_masters_survive_original_owner_drop_with_cloexec ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test session::user_host::tests::large_geometry_cannot_defer_a_long_first_snapshot_reflow_queue ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test session::user_host::tests::geometry_transcript_property_cases_match_eager_native_state ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::host_budget::erased_history_reset_and_geometry_return_native_memory ... ok
test terminal::host_budget::page_nodes_never_fill_the_ordinary_data_cap ... ok
test session::user_host::tests::pool_usage_never_exceeds_cap_under_open_write_close_sequences ... ok
test terminal::host_budget::shared_host_budget_bounds_the_sum_and_keeps_every_terminal_exact ... ok
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::ppu_memory_bench::fresh_shell_filler_snapshot_gap_is_independent_of_allocator_refusal ... ok
test terminal::ppu_memory_bench::native_session_allocations_settle_after_geometry_warmup ... ignored, perf VM only: native heap/resident accounting; set PPU_VT_ACCOUNT_SESSIONS
test terminal::ppu_memory_bench::quiet_resize_churn_does_not_keep_new_resident_pools ... ignored, perf VM only: sparse resize ownership at 900 quiet sessions
test terminal::ppu_memory_bench::small_history_does_not_retain_megabyte_page_quanta ... ignored, perf VM only: sparse history residency and native ownership
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::review_r2::review_r2_escape_command_inside_discard_matches_short_string ... ok
test terminal::review_r2::review_r2_escape_high_byte_does_not_start_a_hidden_string ... ok
test terminal::host_budget::report_native_memory_numbers ... ok
test terminal::host_budget::every_history_share_fills_and_recycles_inside_its_reservation ... ok
test terminal::host_budget::widening_a_full_history_stays_inside_its_share ... ok
test terminal::checks::control_strings_cannot_grow_session_carry_without_bound ... ok
test terminal::review_r2::review_r2_resize_with_full_history_share_stays_exact ... ok
test terminal::review_r2::review_r2_resize_storm_does_not_ratchet_native_memory ... ok
test terminal::review_r2::review_r2_limiter_is_transparent_for_short_control_mixtures ... ok
test terminal::review_r3::review_r3_four_hundred_laptop_screens_fit_the_host ... ok
test terminal::review_r3::review_r3_bounded_terminal_reflows_long_mixed_history ... ok
test terminal::review_r2::review_r2_host_history_share_fits_the_native_reservation ... ok
test terminal::host_budget::laptop_screens_come_from_their_floors_not_the_pool ... ok
test terminal::review_r3::review_r3_host_accounting_balances_through_recovery ... ok
test terminal::review_r2::review_r2_ground_c1_introducer_stays_within_the_session_share ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::review_r3::review_r3_recycled_unwrapped_history_keeps_exact_snapshot ... ok
test terminal::user_screen_pool_resize::taller_widening_keeps_history_rows_that_move_onto_the_screen ... ok
test terminal_limits::c1_tests::c1_string_inside_csi_has_a_seven_bit_replay_boundary ... ok
test terminal_limits::defensive_tests::executed_c0_between_escape_and_introducer_keeps_the_bound ... ok
test terminal_limits::tests::escape_after_discard_restarts_without_losing_the_next_command ... ok
test terminal_limits::tests::finite_sequences_are_identical_for_every_fragment_boundary ... ok
test terminal_limits::tests::fragmented_overflow_stays_discarded_until_a_real_terminator ... ok
test terminal_memory::payload_tests::oversized_payload_is_refused_before_allocation_while_tagged_pool_is_allowed ... ok
test terminal_memory::payload_tests::residency_query_observes_only_owned_page_mappings_without_faulting_payload ... ok
test terminal_memory::tests::allocation_budget_includes_overhead_and_refusal_is_recoverable ... ok
test terminal_memory::tests::screen_pages_are_zero_filled_and_page_aligned ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok
test terminal_native::owned_memory_tests::refused_resize_reclaims_every_owned_native_allocation ... ok
test terminal_native::owned_memory_tests::refusal_inside_reflow_never_touches_freed_pages ... ok
test terminal::review_r3::review_r3_history_share_without_ris_never_refuses ... ok
test terminal::review_r3::review_r3_recycled_history_matches_unbounded_reference ... ok
test terminal::review_r3::review_r3_noisy_neighbour_does_not_make_quiet_sessions_approximate ... ok
test terminal::review_r3::review_r3_thousand_sessions_and_one_flood ... ok
test terminal::review_r3::review_r3_hundred_laptop_sessions_keep_exact_state ... ok
test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact has been running for over 60 seconds
test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact ... ok

test result: ok. 199 passed; 0 failed; 19 ignored; 0 measured; 0 filtered out; finished in 80.02s

(shim process-per-user: 81s)

==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-server v0.1.0 (*)
         │   │   │   │   └── infraternal-session v0.1.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-canvas v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   ├── infraternal-server v0.1.0 (*)
         │   └── infraternal-session v0.1.0
         ├── (build) infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-canvas v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   ├── infraternal-plugin-ssh v0.1.0
                     │   │   ├── infraternal v0.1.0 (*)
                     │   │   ├── infraternal-fuzz v0.1.0 (*)
                     │   │   ├── infraternal-server v0.1.0
                     │   │   │   ├── infraternal v0.1.0 (*)
                     │   │   │   └── infraternal-fuzz v0.1.0 (*)
                     │   │   └── infraternal-session v0.1.0
                     │   └── infraternal-server v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   ├── infraternal-fuzz v0.1.0 (*)
                     │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   ├── infraternal-server v0.1.0 (*)
     │   │   │       │   └── infraternal-session v0.1.0
     │   │   │       ├── (build) infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-canvas v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.46
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.16
             └── rustls v0.23.46 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   └── infraternal-session v0.1.0
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   ├── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-session v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── infraternal-plugin-remote v0.1.0 (*)
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.46
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.16
     │               └── rustls v0.23.46 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-canvas v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── (dev) infraternal-status v0.1.0
         │   └── infraternal v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   └── infraternal-session v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-canvas v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   │   ├── infraternal-server v0.1.0 (*)
             │   │   │   │   └── infraternal-session v0.1.0
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-canvas v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:200:1
    │  
200 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
201 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-server v0.1.0
          │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   └── infraternal-session v0.1.0
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   ├── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-session v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── infraternal-plugin-remote v0.1.0 (*)
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.46
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.16
          │               └── rustls v0.23.46 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-canvas v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── (dev) infraternal-status v0.1.0
              │   └── infraternal v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:202:1
    │  
202 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
204 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   ├── infraternal-plugin-ssh v0.1.0
              │   │   ├── infraternal v0.1.0 (*)
              │   │   ├── infraternal-fuzz v0.1.0 (*)
              │   │   ├── infraternal-server v0.1.0
              │   │   │   ├── infraternal v0.1.0 (*)
              │   │   │   └── infraternal-fuzz v0.1.0 (*)
              │   │   └── infraternal-session v0.1.0
              │   └── infraternal-server v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:205:1
    │  
205 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:207:1
    │  
207 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
208 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
209 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │   └── infraternal-session v0.1.0
      │   │       ├── (build) infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   ├── infraternal-plugin-ssh v0.1.0
      │               │   │   ├── infraternal v0.1.0 (*)
      │               │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   │   ├── infraternal-server v0.1.0
      │               │   │   │   ├── infraternal v0.1.0 (*)
      │               │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │   │   └── infraternal-session v0.1.0
      │               │   └── infraternal-server v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-session v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.46
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.16
      │   │               └── rustls v0.23.46 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── (dev) infraternal-status v0.1.0
      │       │   └── infraternal v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:251:1
    │  
251 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
252 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   ├── infraternal-server v0.1.0 (*)
      │           │   │   └── infraternal-session v0.1.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   ├── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-session v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-canvas v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── infraternal-plugin-canvas v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   ├── infraternal-server v0.1.0
      │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   └── infraternal-session v0.1.0
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-canvas v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       └── infraternal-shim v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-fuzz v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── infraternal-server v0.1.0 (*)
      │           └── infraternal-session v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── (build) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.46
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.16
      │       │   │           └── rustls v0.23.46 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── (dev) infraternal-status v0.1.0
      │       │   │       │   └── infraternal v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.46 (*)
      │       │           └── rustls-webpki v0.103.16 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.46 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.3
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:254:1
    │  
254 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
255 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   ├── infraternal-server v0.1.0
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   └── infraternal-session v0.1.0
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:257:1
    │  
257 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
258 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   ├── infraternal-server v0.1.0
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-session v0.1.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:259:1
    │  
259 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
260 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   ├── infraternal-plugin-ssh v0.1.0
          │       │   │   ├── infraternal v0.1.0 (*)
          │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │   │   ├── infraternal-server v0.1.0
          │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │   │   └── infraternal-session v0.1.0
          │       │   └── infraternal-server v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-canvas v0.1.0
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:317:1
    │  
317 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
318 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── infraternal-plugin-remote v0.1.0
          │   ├── infraternal v0.1.0
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0
          │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-server v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   └── infraternal-session v0.1.0
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-fuzz v0.1.0 (*)
          │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.46
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.16
              └── rustls v0.23.46 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   ├── infraternal-plugin-ssh v0.1.0
      │               │       │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   ├── infraternal-server v0.1.0
      │               │       │   │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   └── infraternal-session v0.1.0
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-canvas v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               ├── infraternal v0.1.0 (*)
      │               └── infraternal-shim v0.1.0
      │                   ├── infraternal v0.1.0 (*)
      │                   ├── infraternal-agent v0.1.0 (*)
      │                   ├── infraternal-fuzz v0.1.0 (*)
      │                   ├── infraternal-plugin-remote v0.1.0 (*)
      │                   ├── infraternal-plugin-ssh v0.1.0 (*)
      │                   ├── infraternal-server v0.1.0 (*)
      │                   └── infraternal-session v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.3
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-canvas v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── infraternal-shim v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.3 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.3 (*)
      ├── tokio v1.53.3 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok
(cargo-deny: 1s)

==> static builds
x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently
native compiler metadata: path independent; platform/date retained; unexpected syntax refused
Rust remapping: differently named checkout roots produce identical stripped artifacts
.
----------------------------------------------------------------------
Ran 1 test in 0.001s

OK
    Finished `release` profile [optimized] target(s) in 0.29s
AES-128-GCM NIST vector encrypt/decrypt passed
production trust: PASS (staging-trust authority absent)
/home/agent/.cache/codex-scratch/setup-token-data/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21399568 bytes; cap: 21399568 bytes; delta: +0 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Key memory initialization=1; locked pages and dump exclusion enabled
    Finished `release` profile [optimized] target(s) in 0.19s
production trust: PASS (staging-trust authority absent)
/home/agent/.cache/codex-scratch/setup-token-data/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 19574552 bytes; cap: 19574552 bytes; delta: +0 bytes
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
x86_64-unknown-linux-musl: exact 21399568-byte cap PASS; 21399569 bytes rejected PASS; smaller artifact requires ratchet PASS
aarch64-unknown-linux-musl: exact 19574552-byte cap PASS; 19574553 bytes rejected PASS; smaller artifact requires ratchet PASS
unsupported target: rejected PASS
bun test v1.4.2 (744846f84)

scripts/release/static-metadata-review.test.ts:
(pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [34.01ms]
(pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [34.41ms]

 2 pass
 0 fail
 16 expect() calls
Ran 2 tests across 1 file. [85.00ms]
server subcommand: exit 2, versioned JSON unavailable result
agent group: exit 0, one parsed versioned JSON listing of its commands
(static builds: 20s)

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

==> Compiler metadata generator checks
bun test v1.4.2 (744846f84)

scripts/release/build-metadata.test.ts:
(pass) native metadata canonicalization retains version fields and refuses changed syntax [26.90ms]
(pass) Rust and cached target compiles receive every environment remap [283.35ms]

 2 pass
 0 fail
 121 expect() calls
Ran 2 tests across 1 file. [319.00ms]

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

Checked 38 installs across 69 packages (no changes) [2.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [15.15ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [14.65ms]
(pass) layout review fixtures ship only in explicitly enabled preview builds [5141.25ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [1.36ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.04ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.08ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.14ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.07ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.14ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.19ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.04ms]

src/stale-screen.test.ts:
(pass) a program that redraws after reattach never shows the note, not for a frame [0.25ms]
(pass) a redraw that arrived before the replay painted needs no wait at all [0.04ms]
(pass) a shell that stays silent shows the note once the wait has run out [0.11ms]
(pass) output that arrives later clears the note [0.05ms]
(pass) a dropped link takes the note down and cancels a wait that has not ended [0.03ms]
(pass) the wait grows with the round trip and stays bounded [0.07ms]

src/synchronized-output.test.ts:
(pass) synchronized terminal output > recognizes a private mode split across byte and string writes [2.08ms]
(pass) synchronized terminal output > preserves mode transitions for every pair of input chunk boundaries [2.44ms]
(pass) synchronized terminal output > ignores CSI-looking bytes inside control strings and other mode numbers [0.10ms]
(pass) synchronized terminal output > RIS clears an active mode [0.06ms]
(pass) synchronized terminal output > bounds an unfinished control sequence [0.32ms]
(pass) synchronized terminal output > paints queued output on the first frame after reset and timeout release [0.29ms]

src/terminal-fit-lifecycle.test.ts:
(pass) a queued fit stops when the terminal becomes closed [0.43ms]
(pass) a queued fit stops when the terminal becomes suspended [0.02ms]
(pass) a queued fit stops when the terminal becomes frozen [0.01ms]

src/account-storage.test.ts:
(pass) clearing one account leaves a second account and device preferences alone [0.50ms]
(pass) the last-account pointer of another account stays [0.05ms]
(pass) an unknown account clears every account's data and keeps preferences [0.06ms]
(pass) coalesced account writes stop permanently before sign-out clears storage [0.29ms]

src/offline-drawing.test.ts:
(pass) cached identity needs a matching layout and sign-out removes it [2.02ms]
(pass) sign-in caches only public drawing labels [0.14ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.74ms]
(pass) repeating the front item changes nothing [0.03ms]
(pass) the list is capped, so the oldest items fall off [0.03ms]
(pass) top skips items that are no longer live, without losing them [0.04ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.12ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.02ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.04ms]

src/canvas/status.test.ts:
(pass) a lost server connection is an error toast, never a success tick [0.45ms]
(pass) routine connection states stay out of the toast [0.04ms]
(pass) repeated connection closes do not reopen the persistent reason toast [0.06ms]
(pass) a repeated close does not retake the shared toast after a newer message replaces it [0.16ms]
(pass) a close reason stays visible through a quick reconnect and clears after a stable attach [672.59ms]

src/canvas/toolbar/palette-actions.test.ts:
(pass) a deferred split:right selection retains its original window [0.31ms]
(pass) a deferred new:below selection retains its original window [0.02ms]
(pass) a deferred close selection retains its original window [0.02ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [0.51ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.13ms]
(pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.26ms]
(pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.17ms]
(pass) facts the host did not report are omitted by default, not shown as unknown [0.16ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.13ms]
(pass) before facts arrive the host's platform names the header [0.12ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.07ms]

src/canvas/windows/session-hooks.test.ts:
(pass) a failed idle warm-up shows no toast and retries when the browser is back online [10.63ms]
(pass) a failed open shows the toast, and opening again after the network returns succeeds [10.55ms]
(pass) an open that joins a failing idle warm-up still shows the toast [5.23ms]

src/canvas/mesh/api-retry-budget.test.ts:
(pass) a retained watch outage bounds retry requests over two logical minutes [1.85ms]

src/canvas/mesh/layout-model.test.ts:
(pass) a pin moved by another device invalidates a same-count pin cache [1.95ms]
(pass) a recovered graph owns its node positions independently [0.11ms]
(pass) a negative pin is drawn by shifting the whole graph by whole grid cells; no pin is rewritten [0.19ms]
(pass) with no negative pin the origin is zero and nothing shifts [0.07ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [0.53ms]
(pass) without `access` (today's server) the person may view and may not edit [0.22ms]
(pass) fields the server does not send are absent, never invented [0.33ms]
(pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.06ms]
(pass) anything that is not a list is refused, whole [2.47ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.10ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.26ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.10ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.14ms]

src/canvas/mesh/api-recovery.test.ts:
(pass) failed watch refreshes retain one subscription through retry and release it on disposal [1.42ms]
(pass) a synchronous subscription refusal leaves retry able to install a new watch [0.36ms]
(pass) a changed Mesh revision refreshes a renamed host in the existing view model [0.47ms]
(pass) a pushed recovery cancels the scheduled retry [0.29ms]
(pass) a pushed recovery supersedes an outstanding retry failure [0.61ms]
(pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.36ms]
(pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.14ms]
(pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.53ms]
(pass) a forbidden withdrawal cancels retry work from the retained watch [0.31ms]
(pass) a withdrawn view ignores an earlier outstanding retry result [0.33ms]
(pass) initial Mesh list handles closed transport [0.25ms]
(pass) initial Mesh list handles liveness deadline [0.04ms]
(pass) initial Mesh list handles unreadable JSON [0.08ms]
(pass) initial Mesh list handles unavailable storage [0.11ms]
(pass) initial Mesh list handles forbidden action [0.06ms]
(pass) initial Mesh list handles invalid stored host [0.11ms]
(pass) Mesh watch withdrawal handles forbidden [0.12ms]
(pass) Mesh watch withdrawal handles mesh unavailable [0.07ms]
(pass) Mesh watch withdrawal handles plugin unavailable [0.01ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.29ms]
(pass) the layout is deterministic and does not depend on input order [3.66ms]
(pass) no two cards overlap, and every card lies inside the graph [12.13ms]
(pass) the sheet is wider than tall, roughly 16:10 [1.52ms]
(pass) a pinned node stays where it was put and the others do not move [1.93ms]
(pass) a pin beyond the sheet grows the graph [0.26ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.19ms]
(pass) 1,000 nodes lay out in a few milliseconds [8.00ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.36ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.20ms]
(pass) a view taller than the viewport is scaled down so it fits [0.03ms]
(pass) nearestStop picks the stop whose centre is closest [0.17ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.18ms]
(pass) a small graph keeps one stop per node column [0.15ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.06ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.08ms]
(pass) D309: with a floor, a narrow column gets a stop of its drawn width and each column is reachable [0.11ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.44ms]
(pass) closing the new half gives the layout back exactly, in the model [1.15ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.58ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.74ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.79ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.48ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.18ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.29ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.10ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.11ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [50.03ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.47ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.23ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.15ms]
(pass) a narrow right split grows both drawn tracks to the canonical minimum [0.12ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.61ms]
(pass) a chain of neighbours is pushed in turn [0.10ms]
(pass) display settlement clears disconnected overlaps while keeping its one anchor fixed [0.36ms]
(pass) review: a viewport width increase after settlement keeps the Settings anchor clear [0.47ms]
(pass) snapping rounds to whole cells [0.06ms]
(pass) reach follows grants through tags and keeps the relay [0.18ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.07ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms]
(pass) a desktop column is the same alone and in a strip [0.01ms]
(pass) D309: a touch screen draws every column at least MIN_TOUCH_COLUMN wide, never wider than a lone column; a fine pointer has no floor [0.06ms]
(pass) D309: the content is as wide as the drawn columns, so the camera reaches every column [0.06ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [1.55ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.31ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.24ms]
(pass) superseded status snapshots release records for sessions this device never opened [1.12ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.13ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.12ms]
(pass) a final Close before the first positive census never revives a new ID [0.11ms]
(pass) a later absence retires a new ID after its first positive census [0.07ms]
(pass) another host's census cannot clear a new shell's census fence [0.09ms]
(pass) another host's close cannot clear a new shell's census fence [0.05ms]
(pass) shared membership marks windows open without any local attachment [0.28ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [1.03ms]
(pass) a detected operating system supplies the live popover mark [0.66ms]

src/canvas/sessions/live.test.ts:
(pass) the toolbar sessions seam exposes admitted host state and routes by identity [0.97ms]
(pass) an enrolled host opens by UUID and splits keep that authority [0.13ms]
(pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.12ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.08ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.13ms]
(pass) an authoritative host snapshot replaces admission with one notification [0.15ms]
(pass) the embedded inventory identity still opens locally beside an equally named remote [0.07ms]
(pass) the embedded host's mark does not wait for an account name, and no account is invented [0.09ms]

src/canvas/sessions/hosts.test.ts:
(pass) fresh storage lists an offline host added by another browser [0.96ms]
(pass) every welcome reconciles without duplicate subscriptions or hosts [0.14ms]
(pass) a removal in another browser withdraws the host [0.21ms]
(pass) a malformed page cannot partially replace the authoritative inventory [0.15ms]
(pass) a socket-authority refusal withdraws previously admitted hosts [0.38ms]
(pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.28ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.42ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.16ms]

src/canvas/sessions/hosts-scale-review.test.ts:
(pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [12.06ms]
(pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [8.65ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [0.90ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.27ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.20ms]
(pass) oversized refusal JSON is ignored before parsing [0.10ms]

src/canvas/sessions/focus-intent.test.ts:
(pass) focusin supersedes every older focus intent [0.67ms]
(pass) pointerdown supersedes every older focus intent [0.02ms]
(pass) keydown supersedes every older focus intent [0.02ms]
(pass) input supersedes every older focus intent [0.01ms]

src/canvas/model/server-store.test.ts:
(pass) a negative drop on a 1,025-node mesh writes one pin, and the peer ends with every pin (#24) [28.54ms]
(pass) repeated pin moves reach both coordinate limits; the next move is refused and rolled back [1.62ms]
(pass) a layout gap or withdrawn worker requests one fresh snapshot with bounded backoff [1.43ms]
(pass) layout recovery restores Math.random after its virtual timer test [0.02ms]
(pass) event before Result and duplicate events do not apply an optimistic edit twice [0.52ms]
(pass) reconnect retries the exact request and an old receipt removes its optimistic overlay [0.52ms]
(pass) legacy import remains intact until canonical confirmation even if another device initialized [0.54ms]
(pass) dispose cancels late cache writes after sign-out [0.35ms]
(pass) a pending reference preserves unrelated edits across remote paints and is never sent [1.62ms]
(pass) closing an unsent shell removes its unresolved birth without blocking surviving children [0.55ms]
LAYOUT_RETRY_SCHEDULE subscribers=60 first_minute=753 following_5s=47 first_delay_slots=60
(pass) sixty withdrawn layout subscriptions spread their coalesced retry timers [13.78ms]
(pass) multi-subscriber retry scheduling restores Math.random [0.05ms]
(pass) an acknowledgement after its ordered event does not repaint the same layout [0.94ms]
(pass) review: a missing layout revision is recovered before the cached document is used again [0.37ms]
(pass) a bootstrap receipt before its canonical snapshot keeps the legacy layout drawable [0.36ms]
(pass) ready edits share one network round trip with a bounded in-flight window [0.60ms]
(pass) the optimistic semantic projection paints before any server receipt [0.45ms]
(pass) a no-op drawing capture does not trigger another paint [0.17ms]
(pass) an interrupted first load does not turn a revision-zero cache into an intentional empty layout [0.31ms]
(pass) review: a refused structural edit cannot strand later valid edits [0.39ms]
(pass) a definitive refusal paints rollback, persists it and never retries after reconnect [0.37ms]
(pass) a stale refusal cannot discard a new-connection retry [0.32ms]
(pass) review r2: refusal drains independent edits waiting behind four in-flight requests [1.21ms]
(pass) recovery coalesces gaps and errors, ignores operations until a snapshot, and survives reconnect [0.40ms]
(pass) a normal reconnect snapshot arrives before any replacement is requested [0.32ms]

src/canvas/model/review-null.test.ts:
(pass) a mixed nullable resize cannot invalidate the canonical drawing document [0.20ms]

src/canvas/model/operations.test.ts:
(pass) independent resize and move commute; close survives a stale move [0.34ms]
(pass) right split of a stack preserves the upper band [0.11ms]
(pass) reorder uses stable neighbours and emits no document [0.33ms]
(pass) a completed split emits its semantic intent rather than intermediate sizing edits [0.18ms]
(pass) a three-window reorder sends one semantic move [0.18ms]
(pass) a split before the first reference is journalled opens its anchor before splitting [0.23ms]
(pass) a drop sends the moved membership once, without derived neighbour geometry [0.17ms]
(pass) a narrow right split widens first so both halves remain valid [0.24ms]
(pass) a short down split grows the anchor first so both halves meet the height floor [0.26ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.37ms]
(pass) a document survives JSON and rebuilds the same columns [0.28ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.13ms]
(pass) parseDocument rejects anything that is not a document of this format [0.16ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.09ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.20ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.19ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.04ms]
(pass) D309: the saved weights do not depend on how a touch screen draws the columns [0.17ms]
(pass) D309: a view this device pushed clear for display is saved where the layout has it [0.07ms]
(pass) an offscreen graph keeps its shared pins before any nodes are rendered [0.09ms]
(pass) a captured graph document is independent of the next pin drag [0.05ms]

src/canvas/model/sync.test.ts:
(pass) a pending session never delays other edits or waits for a network receipt [0.55ms]
(pass) inventory includes shared memberships that this device cannot render [0.63ms]
(pass) temporary flow windows are never treated as unsubmitted shared windows [0.12ms]

src/canvas/model/review-span.test.ts:
(pass) a down split shifts every column in a transitively connected group [0.13ms]

src/canvas/model/reducer-property.test.ts:
layout property: 32 seeds, 4096 operations, 4015 accepted, zero divergences
(pass) property: accepted random operation sequences match the real server reducer [6457.79ms]

src/canvas/model/cache.test.ts:
(pass) damaged pending opens cannot stall offline drawing [1.41ms]
(pass) a valid unresolved reference remains local and replayable [0.12ms]
(pass) a valid offline journal is retained beyond a short burst [0.94ms]

src/canvas/model/review-boundary-r2.test.ts:
review r2 boundary comparison: 8 seeds, 4096 operations, 3198 accepted
(pass) review r2: longer boundary-weighted sequences preserve every accepted projection [1415.15ms]

src/canvas/model/reconcile.test.ts:
(pass) review: removing the current shared view selects a surviving camera anchor [1.48ms]
(pass) a remote negative pin and node update preserve the world position of an unchanged card [0.86ms]

src/canvas/model/journal.test.ts:
(pass) an offline birth keeps its identity through hydration and reference completion [0.59ms]

src/canvas/addhost/setup-feed.test.ts:
(pass) createSetupFeed > subscribes with the host and window, then hands over events in order [0.80ms]
(pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.22ms]
(pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.65ms]
(pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.60ms]
(pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.32ms]
(pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [45.70ms]
(pass) review reconnect budget survives sockets that open then close without events [45.80ms]
(pass) review explicit retry resumes after the setup feed stops [46.37ms]

src/canvas/addhost/wizard.breakit2.test.ts:
(pass) breakit2 an explicit port on a listed host survives chip resolution [0.47ms]
(pass) breakit2 malformed bracketed IPv6 waits for correction [0.09ms]
(pass) listed host plus port retains its saved user in the serialized destination [0.15ms]
(pass) review listed inventory name plus port retains its resolved address [0.17ms]

src/canvas/addhost/setup-stages.test.ts:
(pass) parseSetupEvent > reads a well-formed event [0.07ms]
(pass) parseSetupEvent > drops anything malformed [0.05ms]
(pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.05ms]
(pass) foldSetup > stages before the event's are done, later ones pending [0.21ms]
(pass) foldSetup > a stage that reports done alone still finishes [0.04ms]
(pass) foldSetup > ready done completes the run [0.03ms]
(pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.10ms]
(pass) foldSetup > uploading belongs to install and the readiness check to ready [0.06ms]
(pass) setupGuide > says the other sessions keep working and what to do next, in plain words [0.10ms]
(pass) review malformed setup fields are dropped without coercion errors [0.09ms]
(pass) exhausted setup preserves eligibility and explains a new setup [0.09ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.18ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.04ms]
(pass) parsing the server's data > an install command needs a lifetime [0.04ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.80ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.15ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.67ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.19ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.13ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.06ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.21ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.26ms]
(pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.24ms]
(pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.11ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [3.29ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.24ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.12ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.07ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.08ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.22ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.08ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.06ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.08ms]
(pass) authLabel > names the method and a trusted network provider only [0.03ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.15ms]
(pass) guideFor > each failure kind names its fix [0.11ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.02ms]
(pass) parseTarget > reads user, host and port [0.07ms]
(pass) parseTarget > reads a pasted ssh command into the same fields [0.85ms]
(pass) parseTarget > reads an ssh:// address [0.07ms]
(pass) parseTarget > refuses garbage around an ssh command [0.07ms]
(pass) parseTarget > refuses what cannot name a host [0.03ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.32ms]
(pass) parseSshConfig > recognises config text [0.05ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.03ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.04ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.11ms]
(pass) only a completed canonical host identity becomes terminal authority [0.07ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.06ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.08ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.09ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.01ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.01ms]
(pass) install diagnostics name the failed step and public host error [0.05ms]
(pass) missing payload tells the operator the architecture and expected server path [0.03ms]
(pass) an already added host says so and offers opening its existing terminal [0.16ms]
(pass) release payload verification names the architecture step and plain reason [0.03ms]
(pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.08ms]
(pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.06ms]
(pass) early terminal publication selects only its canonical host-bound shim session [0.12ms]

src/canvas/addhost/already-added-breakit.test.ts:
(pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.09ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.46ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.37ms]
(pass) ready CA begins the requested installation mode without another prompt [0.12ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.30ms]
(pass) a typed root login requires explicit consent before any installation [0.14ms]

src/canvas/views/body.test.ts:
(pass) a clean terminal exit keeps the window while host setup can still fail [0.02ms]
(pass) clean exits still close ordinary windows, and failed exits stay visible [0.01ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.40ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.32ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.74ms]
(pass) a chunk that both sides use stays critical [0.12ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.10ms]
(pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.07ms]
(pass) automatic canonical painting loads after the first canvas draw [0.09ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [3.45ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [2.13ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [1.69ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [8.33ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [14.98ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [6.88ms]
(pass) abandoned word acknowledgement uploads nothing [2.39ms]
(pass) settled acknowledgement cannot upload later (dismissed) [2.23ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [1.67ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [1.20ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [0.91ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [1.09ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [0.83ms]
(pass) malformed or excessive remaining wait -1 is denied [1.09ms]
(pass) malformed or excessive remaining wait 0.5 is denied [0.96ms]
(pass) malformed or excessive remaining wait 172801 is denied [0.82ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [0.88ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.30ms]

test/link-doubt.test.ts:
(pass) a link doubt shows the indicator and keeps live replies and typing flowing [1.15ms]
(pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.34ms]
(pass) a notice type from a newer server is ignored, not a protocol failure [0.07ms]
(pass) the viewer announces the link-doubt capability in its Hello [1.95ms]

test/close-reasons.test.ts:
(pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.17ms]

src/close-reasons.test.ts:
(pass) a missed connection response keeps a plain and stable reason [0.02ms]
(pass) server and host close reasons identify why a terminal reconnects, in plain words [0.13ms]
(pass) routine detach and connection rotation reasons stay neutral [0.01ms]
(pass) a stream close that reattaches never says the terminal ended [0.07ms]
(pass) a recovering server link names its cause as routine status, never as a failure [0.03ms]
(pass) unknown close text is discarded instead of reaching the person or console [0.04ms]
(pass) a storm of closes prints one line per minute and counts the rest [0.31ms]
(pass) counted closes are reported when their window ends, without another close [0.04ms]

src/review-close-log.test.ts:
(pass) a reconnect the server refuses with a named Close frame still prints its console line [1.04ms]
(pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.04ms]

src/onboarding-load.test.ts:
(pass) a failed load says so in the error line, offers Try again, and mounts nothing [5.34ms]
(pass) the Try again button reloads the page: a failed import stays failed in the module map [5.31ms]
(pass) the online event retries by itself [5.31ms]

 356 pass
 0 fail
 21671 expect() calls
Ran 356 tests across 60 files. [14.42s]
bun test v1.4.2 (744846f84)

src/connection-correlation-review.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [9.06ms]

src/connection-idle.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 1 [3.67ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 1 [2.18ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 150 [0.92ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 150 [0.84ms]
(pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [4.43ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 1 [1.17ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 1 [1.06ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 1 [0.91ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 1 [1.08ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 30 [0.63ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 30 [0.99ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 30 [0.65ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 30 [0.57ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 150 [0.35ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 150 [0.36ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 150 [0.32ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 150 [0.42ms]
(pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [2.21ms]
(pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [3.64ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [1.43ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [1.12ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [0.96ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [1.04ms]
(pass) a healthy browser route survives 150ms scheduler delay across 1 streams [0.98ms]
(pass) a healthy browser route survives 150ms scheduler delay across 28 streams [1.74ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [1.02ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) browser jitter allowance decays after a stable link returns [9.58ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [1.07ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [0.76ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [0.83ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [1.12ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [0.95ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [0.94ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer without a reply counts subsequent responsive silence [1.10ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) an outstanding probe gets responsive observation after a renderer stall [2.59ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) retirement gives a queued mismatched pong one task turn [0.96ms]
(pass) retirement gives a queued correlated pong one task turn [0.63ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead typing route eventually retires when browser tasks run every 75ms [0.75ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 1000ms [0.70ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 60000ms [0.92ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [1.09ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [1.07ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [0.67ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) correlated queued replies replenish stall grace across successive healthy stalls [0.83ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) duplicate replies cannot replenish consumed stall grace [0.76ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) wrong timestamp replies cannot replenish consumed stall grace [0.75ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) unknown nonce replies cannot replenish consumed stall grace [0.59ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [1.14ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1
(pass) a replacement route receives its own one-shot local stall grace [2.29ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) continuous typing cannot cancel every silent-route confirmation turn [1.57ms]
(pass) a pending confirmation is reset by reconnect [1.29ms]
Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0
(pass) a pending confirmation is reset by close [1.08ms]
(pass) a pending confirmation is reset by dispose [1.03ms]
(pass) a stale confirmation from before reconnect cannot close the replacement route [1.32ms]
(pass) a hidden page resumes its lease after 5000ms without retiring queued replies [1.52ms]
(pass) a hidden page resumes its lease after 30000ms without retiring queued replies [1.05ms]
(pass) a socket lost while hidden waits for visibility before reconnecting [0.74ms]
(pass) mobile jitter and one retransmission keep a foreground browser lease [48.03ms]
(pass) visibility notices require both peers to support them: false [0.37ms]
(pass) visibility notices require both peers to support them: true [0.19ms]
(pass) hiding a page cancels a retry scheduled while it was visible [0.52ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [0.87ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [0.81ms]
(pass) a layout subscription starts the connection before any terminal exists [0.20ms]
(pass) resync replaces one subscription ID and disposal prevents later resyncs [0.66ms]
(pass) resync reopens a feature subscription with the same server ID [0.25ms]

src/connection-layout-removal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [6.67ms]

src/connection-liveness.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [1.04ms]

src/connection-pool.test.ts:
(pass) terminals fill the first socket, then open another, and a released slot is reused first [0.57ms]
(pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [0.62ms]

src/connection-probe-scheduling-review.test.ts:
(pass) a fully answered browser route survives a delayed next probe before a terminal attaches [0.62ms]
(pass) a fully answered browser route survives a delayed next probe with an attachment [0.17ms]

src/connection-query-capabilities.test.ts:
(pass) query replies negotiate independently with Hello caps 0 [0.06ms]
(pass) query replies negotiate independently with Hello caps 4
(pass) query replies negotiate independently with Hello caps 8
(pass) query replies negotiate independently with Hello caps 12

src/connection-query-refusal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [8.26ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [2.15ms]

src/connection-restart.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1
(pass) an overnight connection retains its writer and pending input when the server restarts [0.66ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a second quick server close leaves the fast path and backs off [0.39ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a failed first recovery handshake exits the one quick retry [0.46ms]
Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0
(pass) a server close reason survives socket retirement and the next retry [0.39ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0
(pass) a clean server socket close keeps its fallback reason through the next retry [0.34ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [10.22ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) online and foreground events cancel delays and preserve handshakes in progress [1.33ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [0.60ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.21ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.27ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.17ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.21ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [0.39ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.22ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.16ms]

src/connection-review-refusal-input.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [1.60ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [0.80ms]

src/connection-review-retained-lifetime.test.ts:
(pass) review: saved typing can be declined without closing the live shell [0.76ms]
(pass) review: new typing reaches the fresh shell while saved typing stays pending [0.17ms]
(pass) review: retained input and consent are local to their terminal window [0.17ms]
(pass) review: selecting a different session removes saved typing and its action [0.19ms]
(pass) review: another refused writer retains pending and unacknowledged fresh typing [0.17ms]
(pass) review: window disposal clears held input and rejects a stale resend action [0.43ms]

src/connection-startup-review.test.ts:
(pass) a healthy startup route can learn an RTT above the initial estimate [2.29ms]

src/connection-unattached-close.test.ts:
(pass) disposing a window before its welcome microtask sends no unbound Close [0.91ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [0.74ms]

 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [218.00ms]
bun test v1.4.2 (744846f84)

src/terminal-queries.test.ts:
(pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.36ms]
(pass) all requested query families have identities [0.09ms]
(pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [1.04ms]
(pass) oversized OSC retains BEL termination before a later query [0.06ms]

src/terminal-query-property.test.ts:
[ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2
(pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [151.56ms]

src/terminal-query-renderer-review.test.ts:
(pass) review: DECID gives every real renderer response an identity [0.63ms]
(pass) review: zero-padded CPR gives every real renderer response an identity [0.90ms]
(pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.16ms]
(pass) review: three adjacent requests keep distinct identities across different viewer chunking [4.24ms]

src/terminal-write-slices.test.ts:
(pass) every slice split preserves cells, cursor and all renderer answers [30.98ms]
(pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [1.82ms]
(pass) escaped writers cannot access released input and callback failure releases the scope [0.45ms]
(pass) nested writes and memory growth cannot replace borrowed input [0.22ms]
(pass) allocation refusal never writes or frees unowned memory [1.07ms]
(pass) empty scopes accept no input and reject later writer use [0.13ms]
(pass) input views of native memory survive allocation-driven memory growth [0.17ms]
(pass) throwing callbacks release exactly their owned input allocation [0.18ms]

 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [213.00ms]
$ bun run build.ts
built chunk-meeffx7k.js, chunk-qbb2e8b9.js, chunk-eztb3nrq.js, chunk-qsb4a87e.js, chunk-307rx54y.js, chunk-wnf6b0xd.js, chunk-sqb90kd7.js, chunk-rkhswyqm.js, chunk-kbxqmbmm.js, chunk-55ychmxj.js, chunk-yvq3ah6x.js, chunk-vb52mqs5.js, chunk-gxvqf3b8.js, chunk-x90k904w.js, chunk-mewxw2vh.js, chunk-qyywvd32.js, chunk-d7xx1qk1.js, chunk-8gqdshxw.js, chunk-6mykqt9d.js, main.js, chunk-3zrccmtw.js, chunk-fxmz3y8j.js, chunk-wk9n9jj8.js, chunk-s395mea5.js, chunk-41h6pgbx.js, chunk-x9ey0dnt.js, chunk-3q58ab97.js, chunk-2vbkgt28.js, chunk-nj0m3nhw.js, chunk-a5mc1m36.js, chunk-801j5xgw.js, chunk-3avxwfmr.js, chunk-c76h7v56.js, chunk-8jzfvehq.js, chunk-ay05zhxw.js, chunk-wnjzk02r.js, chunk-26c93d28.js, chunk-axbkkqp1.js, chunk-s6a0ct86.js, chunk-c0wa834e.js, chunk-7z3ta95w.js, chunk-jfhazw54.js, chunk-z8x03zhm.js, chunk-7tzc35h4.js, chunk-f77ccd2n.js, chunk-9vf0rqn5.js, chunk-yscwybww.js, chunk-jtenmsrr.js, chunk-y2rhp8e5.js, chunk-z48tcwe1.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-dq8c28hf.js, chunk-mpmm5x92.js, chunk-pmgxewne.js, chunk-vp1h11qq.js, chunk-3m9zj9sz.js, chunk-r04kg5zm.js, chunk-wz3f0vtz.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-1jvnqbp8.js, chunk-p20wg8e8.js, chunk-zz8drmaq.js, chunk-ff3nvh2r.js
onDemand chunk-26c93d28.js: identity=1026 gzip=623 brotli=498 bytes
onDemand chunk-z8x03zhm.js: identity=2522 gzip=1133 brotli=958 bytes
onDemand chunk-sqb90kd7.js: identity=3891 gzip=1735 brotli=1518 bytes
critical chunk-r04kg5zm.js: identity=199 gzip=158 brotli=136 bytes
onDemand chunk-nj0m3nhw.js: identity=4561 gzip=2005 brotli=1779 bytes
deferred chunk-801j5xgw.js: identity=1560 gzip=802 brotli=730 bytes
critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes
critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes
critical chunk-rkhswyqm.js: identity=5890 gzip=2461 brotli=2137 bytes
deferred chunk-3avxwfmr.js: identity=110049 gzip=37197 brotli=32792 bytes
onDemand chunk-y2rhp8e5.js: identity=4696 gzip=1954 brotli=1727 bytes
onDemand chunk-7tzc35h4.js: identity=1170 gzip=707 brotli=621 bytes
critical chunk-c0wa834e.js: identity=729050 gzip=210330 brotli=170902 bytes
critical chunk-8gqdshxw.js: identity=386 gzip=236 brotli=195 bytes
onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes
critical chunk-mewxw2vh.js: identity=6075 gzip=2537 brotli=2232 bytes
onDemand chunk-ay05zhxw.js: identity=14598 gzip=5448 brotli=4892 bytes
deferred chunk-s395mea5.js: identity=14644 gzip=4802 brotli=4431 bytes
critical chunk-41h6pgbx.js: identity=1776 gzip=857 brotli=695 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=480 bytes
critical backdrop.worker.js: identity=243 gzip=210 brotli=158 bytes
onDemand chunk-vp1h11qq.js: identity=6744 gzip=3165 brotli=2879 bytes
critical chunk-3zrccmtw.js: identity=5448 gzip=2606 brotli=2377 bytes
onDemand chunk-jfhazw54.js: identity=33394 gzip=12822 brotli=11539 bytes
onDemand chunk-s6a0ct86.js: identity=10904 gzip=4422 brotli=4030 bytes
critical chunk-meeffx7k.js: identity=34427 gzip=9986 brotli=8972 bytes
deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes
onDemand chunk-p20wg8e8.js: identity=9158 gzip=3341 brotli=2889 bytes
onDemand chunk-3m9zj9sz.js: identity=1063 gzip=653 brotli=523 bytes
onDemand chunk-x90k904w.js: identity=2557 gzip=1180 brotli=1009 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
critical chunk-d7xx1qk1.js: identity=11739 gzip=4629 brotli=4110 bytes
critical chunk-wk9n9jj8.js: identity=8377 gzip=3575 brotli=3184 bytes
onDemand chunk-yvq3ah6x.js: identity=2108 gzip=1038 brotli=870 bytes
critical chunk-3q58ab97.js: identity=1188 gzip=691 brotli=582 bytes
onDemand chunk-yscwybww.js: identity=11562 gzip=4694 brotli=4278 bytes
onDemand chunk-9vf0rqn5.js: identity=540 gzip=353 brotli=319 bytes
onDemand chunk-dq8c28hf.js: identity=49320 gzip=15457 brotli=13771 bytes
critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes
onDemand chunk-qsb4a87e.js: identity=6493 gzip=2402 brotli=2140 bytes
onDemand chunk-7z3ta95w.js: identity=6148 gzip=2782 brotli=2509 bytes
onDemand chunk-jtenmsrr.js: identity=5359 gzip=2581 brotli=2301 bytes
critical chunk-6mykqt9d.js: identity=2529 gzip=1016 brotli=887 bytes
onDemand chunk-f77ccd2n.js: identity=1649 gzip=774 brotli=675 bytes
onDemand chunk-8jzfvehq.js: identity=7662 gzip=3397 brotli=2967 bytes
onDemand chunk-mpmm5x92.js: identity=6983 gzip=3104 brotli=2816 bytes
onDemand chunk-kbxqmbmm.js: identity=2420 gzip=1194 brotli=1069 bytes
deferred chunk-1jvnqbp8.js: identity=545 gzip=315 brotli=271 bytes
onDemand chunk-qbb2e8b9.js: identity=228 gzip=178 brotli=158 bytes
onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes
critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes
onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes
critical chunk-vb52mqs5.js: identity=707 gzip=362 brotli=309 bytes
onDemand chunk-2vbkgt28.js: identity=2791 gzip=1373 brotli=1181 bytes
onDemand chunk-a5mc1m36.js: identity=1974 gzip=987 brotli=843 bytes
deferred chunk-wnf6b0xd.js: identity=38155 gzip=13870 brotli=12398 bytes
critical chunk-pmgxewne.js: identity=162 gzip=150 brotli=119 bytes
onDemand chunk-eztb3nrq.js: identity=191 gzip=167 brotli=130 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
critical chunk-zz8drmaq.js: identity=9907 gzip=4063 brotli=3500 bytes
critical main.js: identity=104155 gzip=38354 brotli=33162 bytes
onDemand chunk-wnjzk02r.js: identity=11126 gzip=4259 brotli=3884 bytes
critical chunk-qyywvd32.js: identity=17631 gzip=6253 brotli=5575 bytes
onDemand chunk-55ychmxj.js: identity=6265 gzip=2102 brotli=1865 bytes
critical chunk-x9ey0dnt.js: identity=2161 gzip=1062 brotli=906 bytes
onDemand chunk-307rx54y.js: identity=5812 gzip=2382 brotli=2147 bytes
onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes
critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes
critical chunk-wz3f0vtz.js: identity=42945 gzip=14690 brotli=13161 bytes
critical chunk-fxmz3y8j.js: identity=1106 gzip=663 brotli=600 bytes
onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes
JavaScript transfer, critical: identity=987711 gzip=305940/307200 brotli=254824/256000 bytes
JavaScript transfer, deferred: identity=166293 gzip=57668/61440 brotli=51213/55296 bytes
JavaScript transfer, onDemand: identity=231812 gzip=91875/20480 brotli=81911/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-dq8c28hf.js: gzip=15457/20480 brotli=13771/18432 bytes (class total gzip=91875 brotli=81911, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.26ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.35ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.14ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.11ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.10ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.11ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [6.42ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.12ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.74ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.20ms]
(pass) split mux header preserves trailing Close [0.21ms]
(pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.35ms]
(pass) empty marked input reports the stable invalid-body decoder failure [0.07ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.47ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [2.61ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.52ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.50ms]
(pass) superseded failure preserves a newer pending refresh [2.85ms]

src/stream.test.ts:
stream differential: 141 streams, 11988 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [1926.52ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [5.73ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [1.90ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [3.85ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.12ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.21ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.45ms]
(pass) review continuation stops after forbidden [1.18ms]
(pass) review continuation stops after superseded [1.17ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.25ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.15ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.19ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.02ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms]
(pass) watch never publishes a partial page; withdrawn=false [1.35ms]
(pass) watch never publishes a partial page; withdrawn=true [1.14ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.38ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.17ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.40ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [0.92ms]
(pass) shared Mesh event vectors drive the typed watch adapter [5.15ms]

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [1.99s]
Finished #252 dev integration on `setup-token-data`, pushed head `75baaecad85b9c371d30791ac2e62f41b691892b` (merge `0099ca23e24b42ef515bb06acf347d9b72b86e80`, exact-cap commit `75baaecad85b9c371d30791ac2e62f41b691892b`). Worktree is clean and origin matches HEAD. Dev `4a6202a52`'s #255 Tokio/AsyncFd sources and lockfile remain byte-identical; all #252 product changes are retained. Merge message lists all nine conflicted files, their resolutions and why the reviewed #255 implementation supersedes the branch patch. The additional exit-credit fixture integration repair uses dev's pre-attach shell preparation; its existing regression passed on the final head. Measured final-head stripped static sizes: x86_64 **21,399,568 bytes**, aarch64 **19,574,552 bytes**. Both exact caps match in rust.sh and PROCESS.md. Deltas against dev `4a6202a52` are **+13,056 / +10,944 bytes**, both below 16 KiB. Sequential pinned builds, static linkage/strip status, production trust and D244 native key-memory gate passed; the aarch64 runtime key-memory check is reported as not executed on the x86_64 host by the gate. Final `scripts/verify fast`: **PASS, exit 0**, on `75baaecad85b9c371d30791ac2e62f41b691892b`. All Rust rows, TypeScript checks/tests, production build, transfer budget and protocol tests passed. #252 resolver, setup-output, help, auth status and onboarding loader regressions passed. `vt_credit::unaffordable_repaints_park_until_sufficient_credit` passed in the full head gate, so no flake reruns were needed. Final-head production-browser setup-command display and exact clipboard check passed 1/1 on unique port 55252. Screenshot attached for review; no visual-quality claim. Self-review checked conflict completeness, exact dev lockfile/descriptor source equality, product preservation, exact matching caps, regression results and clean pushed history. Cleanup confirmed: Cargo removed 119707 files (42.3 GiB); `/home/agent/.cache/codex-scratch/setup-token-data/target` no longer exists. Evidence remains outside the checkout. [verify-fast-head.log](https://git.kayg.org/attachments/412f69fe-a6fd-4e01-9a8d-6d12ed098d3e) [browser-head.log](https://git.kayg.org/attachments/6e52b24b-4e92-47e0-80c9-836ef6f77429) ![system-service-setup-token-command.png](https://git.kayg.org/attachments/03bbbbae-c896-49c1-9e59-0de25e288ba9) Full final `scripts/verify fast` output, verbatim: ```text ==> Repository artifact size gate repository artifact gate: PASS (36 changed path(s), merge base 4a6202a52993) ==> Release deployment functional checks .....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained .Build deferred: host capacity limit reached ......... ---------------------------------------------------------------------- Ran 15 tests in 0.627s OK . ---------------------------------------------------------------------- Ran 1 test in 0.057s OK bun test v1.4.2 (744846f84) scripts/release/deploy-review.test.ts: REMOTE_ADMISSION unsigned_x86_payload=true refused=true (pass) remote admission refuses an x86 payload outside the signed manifest [105.83ms] {"state": "deployed", "ca_unlocked": true} WEB_ONLY_RECORD candidate_binary_recorded=false (pass) web-only deployment does not record the candidate as the running binary [109.41ms] ALIAS_RECOVERY restart_requests=2 (pass) alias restoration failure still requests the retained warm rollback [104.66ms] 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [324.00ms] PASS proxy_forwarding samples=3 timed=false ==> fmt (fmt: 2s) ==> VT native fmt (VT native fmt: 0s) ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph warning: function `print_progress` is never used --> crates/infraternal/src/cli/output.rs:592:8 | 592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) { | ^^^^^^^^^^^^^^ | = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default warning: function `write_output` is never used --> crates/infraternal/src/cli/output.rs:616:8 | 616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) { | ^^^^^^^^^^^^ warning: `infraternal` (bin "infraternal" test) generated 2 warnings Finished `test` profile [unoptimized + debuginfo] target(s) in 0.13s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal-fe1c5abfd68beec3) running 37 tests test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s Finished `test` profile [unoptimized + debuginfo] target(s) in 0.20s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal-0a149f42b54b04db) running 104 tests test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::output::tests::exit_codes_follow_d303 ... ok {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 5.24s Finished `test` profile [unoptimized + debuginfo] target(s) in 0.44s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_agent-f4f0113fecf22aee) running 1 test test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 75 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_mesh-c7263890e5528429) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_ssh-b96e878b9907f3df) running 1 test test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s (CLI plugin compile-out: 7s) ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 14.71s (clippy: 15s) ==> SSH runtime test helper Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.19s (SSH runtime test helper: 0s) ==> real-binary fixture paths ... ---------------------------------------------------------------------- Ran 3 tests in 0.004s OK (real-binary fixture paths: 0s) ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.48s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal-6fb500f025e14506) running 104 tests test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} ok {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 5.38s Running tests/agent_daemon.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/agent_daemon-07be34f79332b165) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.24s Running tests/agent_queues.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/agent_queues-230c59a5cd906663) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.09s Running tests/agent_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/agent_review-84c86525ad0fea2c) running 8 tests test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 13.67s Running tests/agent_sessions.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/agent_sessions-03d7a30371f14a27) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s Running tests/cli_envelope.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/cli_envelope-80a08214b8a5d410) running 8 tests test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok test status_exits_0_on_a_machine_with_nothing_installed ... ok test a_missing_server_is_not_found_exit_4 ... ok test bare_infraternal_is_the_overview_and_points_to_help ... ok test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok test read_only_commands_answer_in_the_envelope ... ok test status_exits_5_when_something_that_should_run_is_down ... ok test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/cli_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/cli_review-3291d67404d26089) running 17 tests test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok test a_malformed_host_id_is_a_usage_error_exit_2 ... ok test a_group_with_one_command_says_so_in_the_singular ... ok test a_dry_run_plan_keeps_its_line_breaks ... ok test no_compiled_python_is_tracked ... ok test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok test a_subcommand_does_not_advertise_options_it_ignores ... ok test an_unknown_skill_is_not_found_exit_4 ... ok test root_help_fits_80_columns ... ok test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok test root_help_lists_server_init ... ok test user_facing_text_never_says_agent_alone ... ok test json_help_and_version_are_envelopes_too ... ok test a_dumb_terminal_gets_neither_colour_nor_marks ... ok test an_empty_no_color_is_ignored ... ok test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.83s Running tests/cli_review_r2.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/cli_review_r2-23cf4131d1988fa6) running 11 tests test a_failed_later_page_emits_only_the_failure_envelope ... ok test a_paged_listing_is_still_one_envelope ... ok test an_unknown_skill_does_not_echo_what_was_typed ... ok test three_pages_preserve_order_and_only_the_final_cursor ... ok test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok test status_text_does_not_call_an_unanswered_unit_not_running ... ok test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok test ctrl_c_in_a_script_loop_stops_the_loop ... ok test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.00s Running tests/cli_review_r3.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/cli_review_r3-be7640ccd9aa03ea) running 4 tests test signal_fixture ... ok test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/cli_review_r3_arguments.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/cli_review_r3_arguments-212cdc3ed0a05eb1) running 1 test test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/idle_canary.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/idle_canary-5d1908992b4ff473) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.05s Running tests/key_memory.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/key_memory-4d4f4cc5516ea6b4) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/remote_output.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/remote_output-9105ebfda268049c) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/session_bounds_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/session_bounds_review-ea0b23d91d052373) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.86s Running tests/session_exit_events.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/session_exit_events-d98ed6fbf136b0d7) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.63s Running tests/session_retention.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/session_retention-8b939159efa2d0ab) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.55s Running tests/setup_output.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/setup_output-702013ba02916bdd) running 3 tests test unreadable_system_service_data_prints_one_sudo_command_line ... ok test setup_output_keeps_legacy_and_versioned_readers ... ok test setup_token_finds_the_data_dir_from_a_system_service_without_flags ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/shim.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/shim-30417b82dff06cc8) running 24 tests test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok test attached_backpressure_and_detached_progress ... ok test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok test independent_shared_writers_wait_for_the_same_global_queue ... ok test parked_shared_writer_does_not_stop_detached_pty_progress ... ok test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok test delivered_exit_cannot_release_another_owning_window ... ok test replacement_connection_and_malformed_limit ... ok test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok test shared_writer_coexists_and_replayed_input_is_written_once ... ok test owned_exit_releases_promptly_on_window_close ... ok test shared_writer_restores_durable_geometry_after_another_writer_types ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok active test user_scope_survives_parent_unit_stop ... ok test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test legacy_output_subscription_unblocks_deferred_shared_input ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.50s Running tests/ssh_askpass.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/ssh_askpass-16fbd1b96c4af4ca) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.93s Running tests/ssh_connector_policy.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/ssh_connector_policy-dd9b13bec3dd9638) running 1 test test connector_preserves_configured_bind_address_refusal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s Running tests/user_host.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/user_host-4bee401db2fda08c) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/vt_credit.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/vt_credit-dd383ed03c38b306) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.88s Running tests/vt_reconnect.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/vt_reconnect-a0009109e49304ab) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.18s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_agent-b93583fbcebe1fd6) running 168 tests test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::reply_capacity_tests::full_reply_reservations_cannot_spend_keyboard_capacity ... ok test daemon::session_commands::reply_capacity_tests::sixteen_replies_and_eight_typing_commands_retain_their_order ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged. test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged. test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock. test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace. test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test result: ok. 148 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 11.12s Running tests/transport.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/transport-8f7e25a883145d8d) running 3 tests test oversized_header_and_truncated_frame_are_rejected ... ok test replacing_the_callers_descriptor_cannot_redirect_registered_io ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_mesh-7fce9c81f3753067) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/default_arrow-718a820b17567011) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/properties-9b39f53037898c73) running 14 tests test directional_grants_union_and_minimal_updates ... ok test overlaps_are_reported_without_silent_range_changes ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test names_versions_and_backend_status ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.62s Running tests/rotation_time.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/rotation_time-d8fd70ac7360bfd5) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_api-49f4d2771da6f777) running 32 tests test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test host_name::tests::numeric_invalid_and_unnamed_inputs_give_no_name ... ok test host_name::tests::addresses_and_hostnames_give_a_machine_name ... ok test host_name::tests::odd_and_overlong_hostnames_give_no_name ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok test present::tests::pairs_align_values_and_wrap_under_them ... ok test present::tests::a_table_has_a_header_only_from_two_rows ... ok test present::tests::tint_wraps_text_after_padding_is_measured ... ok test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok test server_path::tests::legacy_link_omits_the_optional_source_port ... ok test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes. test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/routing_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/routing_review-6f6c1a928eb26a7f) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_backup-9fdc1ecb14af9cc8) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_canvas-1446da2b8a090ad7) running 12 tests test model::tests::graph_pin_coordinates_include_both_limits_but_refuse_the_next_integer ... ok test model::tests::host_id_requires_canonical_lowercase_hyphenated_text ... ok test model::tests::reference_document_has_strict_shape_and_bounds ... ok test reducer::tests::concurrent_builtin_view_creation_preserves_existing_contents ... ok test reducer::tests::nullable_resize_preserves_existing_values_and_absent_fields ... ok test reducer::tests::sample_corpus_preserves_strict_variant_fields_and_round_trips ... ok test socket::tests::descriptor_declares_server_only_actions_and_strict_subscription ... ok test socket::tests::result_json_preserves_both_wire_shapes ... ok test reducer::tests::split_divides_only_its_own_band ... ok test reducer::tests::view_metadata_targets_and_column_neighbours_are_semantic ... ok test reducer::tests::repeated_open_close_does_not_exhaust_column_capacity ... ok test reducer::tests::independent_edits_commute_and_close_wins_in_both_orders ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_host_facts-8ccf6df635e66a77) running 14 tests test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::static_facts_report_the_machines_hostname ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_mesh-27583060726d1618) running 76 tests test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test node_actions::peer_page_tests::poll_cost ... ignored, measurement test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::legacy_host_daemon_and_ip_record_do_not_leave_a_uuid_mesh_name ... ok test node_presentation::tests::a_wide_table_stays_within_the_width ... ok test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok test node_presentation::tests::status_explains_the_observed_server_transport ... ok test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers. test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok test node_coordination::tests::a_name_a_person_chose_is_kept ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes. test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test presence::tests::a_page_cursor_is_followed ... ok test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok test presence::tests::an_unreadable_node_is_no_reading ... ok test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok test presence::tests::replace_reports_only_visible_changes ... ok test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok test presence::tests::the_edge_of_the_session_window_is_still_online ... ok test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok test presence::tests::traffic_proves_a_session_until_it_ends ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok test node_coordination::tests::placeholder_names_become_the_machines_names ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok test node_coordination::tests::two_hosts_reporting_the_same_hostname_receive_distinct_names ... ok test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 0.34s Running tests/access_updates.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/access_updates-401a785178272a85) running 8 tests test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace test compact_identity_support_requires_an_explicit_strict_probe ... ok test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok test default_tightening_at_1000_peers_fits_one_round_trip ... ok test range_objects_reject_unknown_duplicate_and_positional_fields ... ok test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/authorized_local_binding.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/authorized_local_binding-9eb78243673aa0ef) running 2 tests test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/canonical_host_binding.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canonical_host_binding-77332b5113aa5170) running 1 test test enrollment_requires_canonical_host_uuid_spelling ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/configuration.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/configuration-edd5af664e4aa790) running 5 tests test edition_default_is_explicit_and_build_selected ... ok test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s Running tests/kernel.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/kernel-ae923fd8446e7953) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/naming.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/naming-7ef77dd298644e0e) running 4 tests test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok test the_servers_names_are_kept_for_the_server ... ok test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/policy_enrollment_binding.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/policy_enrollment_binding-109d95c10f4ea94b) running 4 tests test noncanonical_host_binding_is_refused ... ok test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok test refused_enrollment_preserves_removal_and_revision ... ok test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/policy_enrollment_identity.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/policy_enrollment_identity-f0cf7a0229e540f5) running 1 test test unbound_enrollment_public_key_is_not_host_authority ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/policy_snapshot_ordering.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/policy_snapshot_ordering-7cc2ac94da47cd98) running 6 tests test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/presence.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/presence-3e1bc5e55745d7e3) running 2 tests test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/restart_route_ownership.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/restart_route_ownership-0dc4cc52f478fbf8) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_authorized_reenrollment.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_authorized_reenrollment-7a5ac950aac5a6a3) running 2 tests test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_endpoint_transaction-0ef0c911cceaab22) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_firewall_marker.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_firewall_marker-c4dbb35430ae2de6) running 2 tests test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173. test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_ingress_translation-c0a4032b0502fe02) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_local_delivery-1712a7f25b19bf51) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_presence_r4.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_mesh_presence_r4-b35fd343e12c696d) running 3 tests test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_view_truth.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_mesh_view_truth-62e9d7f28a99b9eb) running 6 tests test an_address_that_is_an_ip_never_becomes_a_name ... ok test a_remote_machine_cannot_be_called_server ... ok test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok test a_host_record_name_beats_another_machines_reported_hostname ... ok test a_remote_machine_cannot_take_the_servers_hostname ... ok test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.12s Running tests/review_mesh_view_truth_r2.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_mesh_view_truth_r2-f6106bc26caa5acf) running 9 tests test a_hex_ipv4_spelling_never_becomes_a_name ... ok test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236) test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok test a_viewer_without_host_facts_still_sees_distinct_names ... ok test a_person_can_take_a_name_a_machine_reported ... ok test no_viewer_sees_a_remote_machine_called_server ... ok test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok test evidence_migrations_0026_and_0029_upgrade_a_realistic_database_without_churn ... ok test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/review_mesh_view_truth_r3.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_mesh_view_truth_r3-acc7217987659c70) running 5 tests test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/review_mesh_view_truth_r4.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_mesh_view_truth_r4-c8f1176c83a6a2a1) running 7 tests test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok test evidence_server_hostname_moves_only_with_server_rename_authority ... ok test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.30s Running tests/review_restart_routes.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_restart_routes-012bc6e19af8712e) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_retire_ownership.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_retire_ownership-7e7abe5e49e18a66) running 7 tests test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft. test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace. test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace. test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_reverse_recreation.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_reverse_recreation-ba8322a4b4589131) running 4 tests test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_revoked_host_policy.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_revoked_host_policy-8f0b434cc4a6f49e) running 1 test test revoked_host_is_not_retained_in_compiled_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/review_route_inventory.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_route_inventory-db2612871fb84dbf) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_route_scope-7a63cc3e13aa42db) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_shutdown_budget-e6060242e37c449a) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_shutdown_restart-90e3bdbafd24755a) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/settings-b0c907b6b74ba896) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/store.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/store-0f17df0f12b6f327) running 6 tests test required_server_membership_cannot_be_deleted ... ok test absent_discovery_preserves_the_last_known_endpoint ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test attach_cancelled_at_any_await_leaves_the_store_writable ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.47s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_relay-d3de297fc8337bde) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_release-1d54d564a3117987) running 8 tests test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test latest::tests::cancellation_joins_verification ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.55s Running tests/review_pool.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_pool-51aabd0e805c8271) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.60s Running tests/review_restart.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_restart-c5f9f9cb62051e16) running 4 tests test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification test lookup_creates_private_staging_under_owner_restrictive_umask ... ok test restarted_latest_reclaims_metadata_after_process_stop ... ok test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.05s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_remote-ecf43ccc280cdfc1) running 114 tests test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance. test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance. test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers. test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections. test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence. test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections. test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections. test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock. test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline. test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok test runtime_lock::tests::dump_datagrams_split_exactly ... ok test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test 2 test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... ok test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok running 1 test test runtime_lock::tests::split_device_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... ok test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok running 1 test test runtime_lock::tests::foreign_inode_twin_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok test uninstall::tests::review_planted_plan_is_never_followed ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test runtime_lock::tests::after_close_waits_for_a_slow_socket_snapshot ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok test result: ok. 99 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 5.31s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_plugin_ssh-17b36253c8d69c86) running 49 tests test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_order::tests::pending_forwards_the_caller_deadline_to_its_selected_session ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok test bootstrap::proof_tests::review_commit_clamps_outliers_and_releases_immediately ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test bootstrap::proof_tests::review_stalled_commit_cannot_outlive_attempt_cap ... ok test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test install::tests::transfer_caps_accept_only_the_fixed_record ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok test payload::tests::settings_changes_keep_at_most_four_entries ... ok test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/already_added_breakit.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/already_added_breakit-e90e2f4c29cb707e) running 1 test test a_host_key_challenge_never_serializes_as_a_host_id ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/auth_order.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/auth_order-9968d66820e505cb) running 11 tests test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test manual_method_trust_refusal_never_loads_later_credentials ... ok test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/build_removal-9eec37b95ad57c8e) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s Running tests/concurrency.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/concurrency-f30db03603f4997a) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/config_isolation-9a944d95ba4eed2e) running 2 tests test synthetic_master_socket_is_private_at_creation ... ok test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/credentials.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/credentials-6e4e4044489fb506) running 4 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test kernel_running_helper_is_materialized_in_its_private_scope ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.86s Running tests/diagnostics.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/diagnostics-f0e6f7e48b04f404) running 12 tests test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test control_probe_statuses_preserve_actionable_setup_messages ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/event_metadata-8524db180f9a16df) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/foreground-10281428fe728d1d) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/host_trust.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/host_trust-50a4a769c45122d1) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/install-42c84fd1d4c4d48f) running 95 tests test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test breakit2_rollback_preserves_foreign_unit_new ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test breakit2_rollback_preserves_foreign_launcher_new ... ok test active_transaction_is_live_between_ssh_setup_commands ... ok test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test compound_join_failure_preserves_the_original_status_and_boundary ... ok test compound_restaging_refuses_a_foreign_journal_before_upload ... ok test buffering_setup_reader_receives_no_payload_until_selection ... ok test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok test compound_setup_keeps_owned_rollback_and_linger_warning ... ok test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok test early_staging_preserves_canonical_foreign_root_refusal ... ok test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok test commit_signal_retains_journal_until_proof_and_on_cancel ... ok test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok test framed_join_refusal_keeps_status_separate_from_upload ... ok test crash_mid_install_can_roll_back_and_retry ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test installed_infraternal_agent_always_restarts_without_start_limit ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_acquisition_cleanup_receipt_can_resume ... ok test full_payload_restaging_preserves_the_running_session_build ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test missing_payload_preserves_the_bootstrap_binary_remedy ... ok test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok test known_failed_setup_finishes_without_a_second_confirmation ... ok test payload_reuse_never_adopts_a_foreign_cache_directory ... ok test partial_full_upload_rebridges_from_a_verified_image ... ok test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ignored, scripts/test-ssh-inode-reuse reports unsupported filesystems as ignored test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok test reported_cache_digest_selects_reuse_without_sending_payload ... ok test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534 test retry_resends_payload_when_cache_content_changes ... ok test retry_reuses_verified_payload_after_owned_rollback ... ok test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok test review_live_relative_control_socket_preserves_its_receipt ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test setup_transaction_holds_a_live_lock_between_shell_commands ... ok test review_restart_recovers_cleanup_after_base_retirement ... ok test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok test review_restart_recovers_cleanup_after_owner_retirement ... ok test session_restaging_uses_one_compound_command ... ok test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok test restart_recovers_partial_stage_retirement ... ok test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 6.55s Running tests/mesh_ssh.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/mesh_ssh-2fa83dcf733d059a) running 1 test test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/model.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/model-8dc28d474cf55d69) running 6 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/payload_source-8da7588b1b1e7c2a) running 2 tests test verification_failure_names_step_and_stops_before_upload ... ok test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/previous_attempt_liveness_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/previous_attempt_liveness_review-ce46fa87480131ee) running 1 test test home_alias_keeps_open_setup_descriptor_live ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Running tests/previous_attempt_shell.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/previous_attempt_shell-b9d97aec39edc4d4) running 1 test test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.75s Running tests/probe_check.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/probe_check-376aad85da0f0af1) running 3 tests test breakit2_no_systemd_names_the_required_manager ... ok test shell_startup_refusal_names_an_interactive_only_remedy ... ok test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/process.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/process-c3eab8acd9e98988) running 10 tests test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test unavailable_negotiated_codec_never_sends_invitation ... ok test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test negotiated_sources_require_an_exact_receipt_before_private_input ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test declared_payload_flows_before_receipts_and_private_input_waits ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.04s Running tests/proxy_policy.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/proxy_policy-ae5cb2b308a06ccf) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/publication.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/publication-0d82e771a08c3f68) running 4 tests test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok test refused_publication_reports_failure_to_the_waiting_wizard ... ok test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/real_ssh.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/real_ssh-bf1648c924584992) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/recovery_support.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/recovery_support-683687d40ea38ce9) running 12 tests test cleanup_script_requires_the_shipped_helper_level ... ok test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok test legacy_control_socket_in_spaced_home_preserves_receipt ... ok test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image test private_legacy_control_socket_preserves_receipt ... ok test legacy_control_socket_in_newline_home_preserves_receipt ... ok test review_bound_control_socket_before_listen_preserves_receipt ... ok test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok test review_live_session_socket_in_newline_home_blocks_cleanup ... ok test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok test review_live_session_socket_in_plain_home_blocks_cleanup ... ok test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.31s Running tests/shadow_banner.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/shadow_banner-ec8803577a2b0cd0) running 1 test test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/shell_quoting.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/shell_quoting-e07d7690574ed5f8) running 1 test test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/single_connection-628041854be37518) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/source_completeness-4d7c035c7195b1ce) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/trust_round2-e8646687aedada12) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 8 tests test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_server-f1c601004c6d4da6) running 685 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::migration_data_tests::original_migration_metadata_and_checksums_are_unchanged ... ok test auth::migration_data_tests::quoted_text_and_comment_looking_literals_keep_their_values ... ok test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::migration_data_tests::dev_v29_and_production_v30_upgrade_without_retagging_or_losing_ownership ... ok test auth::migration_data_tests::fresh_schemas_defaults_indexes_and_foreign_keys_match_original_sql ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_accepts_legacy_and_job_scoped_roots ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_rejects_unscoped_and_escaping_paths ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::canvas::canvas_real_socket_commits_and_runtime_disable_preserve_control ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok test auth::tests::socket_tests::close_logging::revocation_wake_on_busy_store_logs_authority_unavailable_not_resume_refused ... ok test auth::tests::socket_tests::close_logging::revoked_busy_wake_records_stream_end_within_the_existing_wait ... ok test auth::tests::socket_tests::close_logging::revoked_session_during_transient_stall_logs_resume_refused ... ok test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::close_logging::unrelated_logout_during_transient_stall_keeps_the_terminal_socket ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok test auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply ... ok test auth::tests::socket_tests::review_authority_cap::retries_whose_select_waits_stay_within_the_authority_cap ... ok test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok test auth::tests::socket_tests::review_busy_wake::idle_busy_revocation_wake_sends_server_busy_close_code ... ok test auth::tests::socket_tests::review_busy_wake::sixteen_woken_sockets_recover_application_authority_after_a_short_stall ... ok test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_absolute_session_expiry ... ok test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_logout_revocation ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input ... ok test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok test bootstrap_runtime::remote_backend::admission_tests::missing_route_uses_link_scaled_bound_without_inventory_extensions ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_after_both_route_phases ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_at_600_ms ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_is_monotonic_for_zero_and_outlier_samples ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_lock_timing_runs_inside_the_nested_setup_shell ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_setup_timing_preserves_transfer_upload_status ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test canvas_store::tests::cancelled_commit_still_invalidates_a_durable_change ... ok test canvas_store::tests::cas_retry_and_foreign_account_isolation ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test canvas_store::tests::permanent_receipts_keep_the_original_json_digest_recipe ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::expired_route_retires_full_consumer ... ok test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock. test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok test embedded::regressions::path_tests::review_reply_bypasses_queued_typing_without_losing_its_cursor_or_bytes ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::reply_order_tests::browser_reply_follows_typing_across_both_forwarding_tasks ... ok test embedded::reply_order_tests::full_reply_reservations_preserve_keyboard_bytes_and_all_eight_slots ... ok test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test enrollment::migration_tests::canvas_layout_migration_upgrades_production_v27_and_fresh_schema_in_order ... ok test enrollment::migration_tests::hostname_migration_allocates_around_retained_names ... ok test enrollment::migration_tests::hostname_migration_upgrades_release6_copy_without_changing_canvas_or_checksums ... ok test enrollment::migration_tests::old_uuid_mesh_placeholders_upgrade_to_audited_unnamed_labels ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_inventory::name_tests::an_ip_added_host_uses_its_cached_hostname_and_old_facts_do_not_clear_it ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_inventory::name_tests::inventory_hostname_changes_publish_once_and_preserve_hand_names ... ok test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_inventory::name_tests::late_hostname_inventory_renames_the_attached_mesh_node_and_notifies_viewers ... ok test remote_inventory::name_tests::reported_names_yield_to_records_and_collision_suffixes_and_server_identity_hold ... ok test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok test stream_close::tests::close_path_cost ... ignored, manual microbenchmark test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok test terminal_queries::review_tests::a_lagging_viewer_cannot_renew_a_deadline_after_the_first_viewer_answered ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test terminal_queries::review_tests::trimmed_output_refuses_its_answer_without_reopening_an_accepted_position ... ok test terminal_queries::review_tests::two_positions_in_one_chunk_are_claimed_in_order_without_reopening_either ... ok test terminal_queries::tests::deadline_includes_incomplete_query ... ok test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok test terminal_queries::tests::marked_flood_never_allocates_queries ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::probe_authority::review_closed_watch::closed_revocation_watch_is_unavailable_and_never_polls_the_write ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::cancelled_storm_returns_every_place_without_duplication ... ok test websocket::writer_tests::authority_watchdog::authority_deadline_preserves_subsecond_session_expiry ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::deadline_storm_retains_exactly_four_places_then_recovers ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::pool_acquire_timeout_recovers_places_without_releasing_the_connection ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::ready_result_observed_after_deadline_retries_current_authority ... ok test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok test websocket::writer_tests::busy_edges::wall_expiry_and_monotonic_deadlines_keep_their_separate_roles ... ok test websocket::writer_tests::resume_refusals_distinguish_connection_state_and_lost_token_rotation ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok test websocket_transport::tests::visibility_notices_are_small_typed_transport_messages ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test terminal_queries::review_tests::all_session_tables_remain_bounded_at_the_registry_limit ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test websocket::writer_tests::busy_edges::revoked_probe_across_attempt_backoff_and_total_wait_edges ... ok test websocket::writer_tests::busy_edges::expiry_crossing_a_stalled_read_refuses_both_deadline_callers ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::sqlite_busy_timeout_recovers_detached_storm_without_unlocking ... ok test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok test result: ok. 633 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 215.44s Running tests/canvas_convergence.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_convergence-1a7528827de3cb23) running 20 tests test a_tiled_import_cannot_duplicate_an_existing_graph_kind ... ok test competing_bootstraps_merge_targets_and_retry_after_restart ... ok test identical_and_empty_second_devices_do_not_advance_revision ... ok test imports_use_account_wide_target_identity_and_keep_spanning_column_geometry ... ok test importing_an_orphaned_recovery_view_does_not_create_another_recovery_name ... ok test initialize_and_apply_repair_before_writing_and_notify_subscribers ... ok test loading_repairs_only_matching_recovery_views_and_converges_clients ... ok test merge_bounds_refuse_without_losing_the_existing_layout ... ok test import_prefers_matching_names_before_the_first_view_of_its_kind ... ok test simultaneous_first_devices_merge_disjoint_targets_into_one_view ... ok test session_import_identity_ignores_labels_but_checks_account_ownership ... ok test no_op_imports_keep_retry_receipts_and_do_not_clear_operation_history ... ok test stale_noop_still_checks_numeric_bounds_before_committing ... ok test split_retry_is_durable_and_changed_idempotency_input_is_refused ... ok test owned_session_reference_and_all_bounds_are_transactional ... ok test permanent_receipts_do_not_copy_large_bootstrap_documents ... ok test two_devices_serialize_stale_edits_and_replay_every_committed_revision ... ok test encoded_document_budget_is_enforced_by_the_host_transaction ... ok test no_op_import_receipts_still_have_a_bounded_quota ... ok test close_beats_move_resize_in_both_orders_and_survives_compaction ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.61s Running tests/canvas_receipt_count.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_receipt_count-dcb7b77ff3a854ab) running 1 test test historical_receipts_backfill_and_follow_transactions_and_account_removal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_receipt_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_receipt_review-f4b0654f8bb85a4f) running 1 test test historical_no_revision_receipts_preserve_replay_and_the_last_real_edit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.78s Running tests/canvas_recovery_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_recovery_review-f2d4bef103e06289) running 5 tests test repair_rebases_a_cursor_that_already_names_its_next_revision ... ok test queued_close_of_unique_recovered_window_survives_repair ... ok test queued_resize_keeps_its_membership_after_a_separate_read_repair ... ok test independent_loads_and_base_edit_repair_exactly_once ... ok test recovery_at_column_capacity_keeps_the_account_readable ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/canvas_replay_noop.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_replay_noop-f45368f3ae253f70) running 1 test test committed_noop_is_explicit_without_sending_all_closed_ids_to_clients ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_retired_reference.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_retired_reference-4ae1b19d3a90f2d6) running 2 tests test retired_reference_does_not_block_an_unrelated_edit ... ok test retarget_checks_account_ownership_even_after_close ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_socket.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_socket-51aa35d48dc96a00) running 1 test test snapshot_then_ordered_commit_events_and_revocation_cancel_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_text_bounds.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/canvas_text_bounds-eb698aef9b5b9538) running 2 tests test text_uses_the_browser_utf16_bound ... ok test imported_name_respects_the_browser_utf16_bound ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/catalog_startup.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/catalog_startup-c4f0c5c2b9e63826) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/enrollment-3533ffe0cf2749cb) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.22s Running tests/mesh_parser.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/mesh_parser-f3d43b86d3386706) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/mesh_review_plugin-1de5b08687140771) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/mesh_review_policy.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/mesh_review_policy-5801ffe603d49dec) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/mesh_review_role_scope-1867947f5f970cf5) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/native_probe_correlation_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/native_probe_correlation_review-0508c3491f4ab791) running 25 tests test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test unissued_native_probe_reply_cannot_extend_readiness ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test healthy_real_socket_survives_a_150ms_server_stall ... ok test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/plugin_host_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/plugin_host_review-1f79717833c5fdb0) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_disable_answers_inflight_call ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s Running tests/plugin_settings_review.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/plugin_settings_review-8e826064dc44171b) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.61s Running tests/remote_plugin_contract.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/remote_plugin_contract-c936186fbcfd8885) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.39s Running tests/review_mesh_host_removal.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/review_mesh_host_removal-56ed2d75e836d36e) running 1 test test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_session-f2f326f18dc6b30e) running 2 tests test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok running 1 test test tests::fresh_exec_closes_dumpability_before_private_startup ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s test tests::fresh_exec_closes_dumpability_before_private_startup ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_shim-7c35453813e3afe4) running 105 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap running 1 test test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 104 filtered out; finished in 0.00s test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 92 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 29.80s Running tests/detach.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/detach-6a47ad01fd5a59d3) running 2 tests test detached_child_restores_default_signals_without_changing_parent ... ok test closed_standard_descriptors_become_dev_null ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.10s Running tests/mouse.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/mouse-d13052bb88989529) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/ppu_reliability.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/ppu_reliability-2964f940e0c6068a) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/ppu_reliability_memory.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/ppu_reliability_memory-a754448942207ef2) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/process_exit_descriptor.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/process_exit_descriptor-c4b349d2a498ffa6) running 2 tests test invalid_pid_never_creates_a_descriptor ... ok test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_status-7910dde34bdac077) running 13 tests test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok test tests::installed_system_server_data_comes_from_its_effective_execstart ... ok test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok test tests::nothing_installed_says_so ... ok test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok test tests::rootless_agent_is_read_from_the_user_manager ... ok test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok test tests::server_and_host_on_one_machine_is_both ... ok test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok test tests::the_headline_names_what_is_down_and_how_to_look ... ok test tests::stopped_server_unit_is_stopped_not_unknown ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_canvas running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 2 tests test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 56) - compile fail ... ok test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 63) - compile fail ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Doc-tests infraternal_status running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s (test: 458s) ==> SSH inode reuse fixture Finished `test` profile [unoptimized + debuginfo] target(s) in 0.13s Running tests/install.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/install-f0d19bd45bc9bae9) running 1 test test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 0.19s (SSH inode reuse fixture: 0s) ==> shim process-per-user Finished `test` profile [unoptimized + debuginfo] target(s) in 0.07s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-data/target/debug/deps/infraternal_shim-58e9712d9c0dc37c) running 218 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::borrowed_output_keeps_frozen_bytes_and_refuses_before_batch_mutation ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::tests::batch_append_preserves_prefix_and_refuses_invalid_frames ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::tests::golden_and_fragmented ... ok test heap_accounting::accounting_keeps_exact_layouts_and_balances_reallocation ... ok test heap_accounting::transient_allocations_are_visible_after_their_storage_is_freed ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok running 1 test test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... running 1 test test pty::output_readiness_tests::readable_byte_hint_preserves_the_complete_output_stream ... ok running 1 test test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... test ring::checks::tests::empty_append_keeps_lazy_storage_unallocated ... ok test ring::checks::tests::borrowed_ranges_obey_absolute_offsets_across_physical_wrap ... ok test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok test ring::checks::tests::merge_review_pool_refusal_retains_exact_suffix_and_releases_charge ... ok test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s test ring::checks::tests::shared_history_reservation_never_rounds_past_its_share ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::inputs::host_budget_tests::alternating_writers_cannot_expand_shared_host_bookkeeping_without_bound ... ok test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::inputs::tests::host_legacy_writer_needs_no_heap_table ... ok test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok test session::inputs::reply_tests::host_replies_preserve_segment_budget_and_account_for_promoted_storage ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::bounded_flush_keeps_partial_frame_and_wire_order ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.03s test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::user_host::lazy_bench::geometry_replay_materialization_cost ... ignored, perf VM only: measure cold materialization after bounded geometry replay test session::user_host::reactor::tests::accounting_write_failure_disables_only_the_receipt ... ok test session::user_host::reactor::tests::actual_output_selector_keeps_a_bulk_turn_after_granted_and_denied_promotions ... ok test session::user_host::reactor::tests::cancelled_bulk_membership_reuses_the_existing_deque_entry ... ok test session::user_host::reactor::tests::cheap_replies_share_a_turn_but_expired_output_yields_to_input ... ok test session::user_host::child_checks::ordinary_housekeeping_does_not_probe_child_status ... ok test session::user_host::child_checks::threaded_startup_is_refused_before_creating_session_state ... ok test session::user_host::reactor::tests::inline_and_extra_descriptor_flags_merge_without_losing_generations ... ok test session::user_host::reactor::tests::fresh_ack_fallback_avoids_writable_poll_and_finishes_with_new_input ... ok test session::user_host::reactor::tests::exit_observed_before_settle_still_queues_one_retention_deadline ... ok test session::user_host::reactor::tests::input_phase_retires_closed_identity_without_publishing_transient_interest ... ok test session::user_host::reactor::tests::one_session_readiness_fits_240_requested_bytes ... ok test session::user_host::reactor::tests::readiness_membership_stays_within_five_bytes_per_session ... ok test session::user_host::reactor::tests::readiness_storage_registration_is_at_most_sixteen_bytes ... ok test session::user_host::reactor::tests::readiness_storage_two_descriptors_are_allocation_free ... ok test session::user_host::reactor::tests::ready_rows_clear_only_touched_slots_and_fence_round_wrap ... ok test session::user_host::reactor::tests::ready_rows_keep_two_descriptor_turns_allocation_free_within_64_bytes_per_slot ... ok test session::user_host::reactor::tests::replay_continues_after_its_frame_was_written_inline ... ok test session::user_host::reactor::tests::ownership_receipt_separates_session_components_and_shared_capacities ... ok test session::user_host::reactor::tests::queued_data_ack_needs_no_writable_poll_before_pty_service ... ok running 1 test test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... test session::user_host::reactor::tests::round_reset_and_wrap_preserve_bulk_membership_without_reviving_reads ... ok test session::user_host::reactor::tests::short_output_cohort_yields_before_the_next_input_poll ... ok test session::user_host::reactor::tests::single_ready_descriptor_needs_no_heap_allocation ... ok test session::user_host::reactor::tests::timer_membership_survives_bulk_promotion_cancellation_and_round_wrap ... ok test session::user_host::tests::admission_refuses_foreign_uid_duplicate_ids_and_geometry_before_spawn ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s test session::user_host::reactor::tests::unchanged_registration_sync_needs_no_heap_allocation ... ok test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok test session::user_host::tests::blocked_state_and_output_share_one_ordered_write_batch ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.07s test session::user_host::tests::data_ack_can_wait_for_a_writable_visit_without_requiring_output ... ok test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... ok test session::user_host::tests::deferred_data_ack_and_available_output_share_one_ordered_batch ... ok test session::user_host::tests::full_pool_reuses_ring_storage_for_newest_output ... ok test session::user_host::tests::full_pool_typing_echo_latency ... ignored, timing measurement runs on the perf VM test session::user_host::tests::bulk_turn_advances_sixteen_kib_and_yields_before_the_rest ... ok test session::user_host::tests::full_pool_refuses_new_session_and_keeps_existing_session_working ... ok test session::user_host::tests::host_pool_scales_with_machine_memory_within_bounds ... ok test session::user_host::tests::idle_session_ownership_ledger ... ignored, perf VM only: per-session requested-byte ownership ledger at scale test session::user_host::tests::geometry_transcript_materializes_at_its_event_bound ... ok running 1 test test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok test session::user_host::tests::malformed_closed_peer_is_retired_once_and_keeps_its_sibling ... ok test session::user_host::tests::lazy_prefix_materializes_exactly_before_overflow_and_resize ... ok test session::user_host::tests::output_bound_replays_retained_geometry_before_new_bytes ... ok test session::user_host::tests::medium_geometry_materializes_before_deferred_cell_work_exceeds_the_bound ... ok test session::user_host::tests::prefix_threshold_preserves_unfinished_sequences ... ok test session::user_host::tests::quiet_geometry_changes_remain_lazy_and_replay_in_order ... ok test session::user_host::tests::same_geometry_input_selection_keeps_vt_unallocated ... ok test session::user_host::tests::session_constructor_retains_only_the_bound_socket_path ... ok test session::user_host::tests::state_fences_and_input_only_acks_bypass_coalescing ... ok test session::user_host::tests::steady_replay_needs_no_payload_allocation ... ok test session::user_host::tests::unchanged_geometry_retains_native_resize_side_effects ... ok test session::user_host::tests::vt_panic_retires_one_real_pty_and_sibling_keeps_its_output ... ok test session::user_host::tests::writable_peer_receives_state_and_output_before_another_readiness_turn ... ok test session::user_host::tests::zero_ring_capacity_does_not_stall_a_live_pty ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok test session::user_host::tests::exhausted_pool_drains_live_ptys_during_random_session_churn ... ok test terminal::checks::snapshot_during_discard_preserves_the_unfinished_string_boundary ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test pty::handoff::tests::all_masters_survive_original_owner_drop_with_cloexec ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test session::user_host::tests::large_geometry_cannot_defer_a_long_first_snapshot_reflow_queue ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test session::user_host::tests::geometry_transcript_property_cases_match_eager_native_state ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::host_budget::erased_history_reset_and_geometry_return_native_memory ... ok test terminal::host_budget::page_nodes_never_fill_the_ordinary_data_cap ... ok test session::user_host::tests::pool_usage_never_exceeds_cap_under_open_write_close_sequences ... ok test terminal::host_budget::shared_host_budget_bounds_the_sum_and_keeps_every_terminal_exact ... ok test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::ppu_memory_bench::fresh_shell_filler_snapshot_gap_is_independent_of_allocator_refusal ... ok test terminal::ppu_memory_bench::native_session_allocations_settle_after_geometry_warmup ... ignored, perf VM only: native heap/resident accounting; set PPU_VT_ACCOUNT_SESSIONS test terminal::ppu_memory_bench::quiet_resize_churn_does_not_keep_new_resident_pools ... ignored, perf VM only: sparse resize ownership at 900 quiet sessions test terminal::ppu_memory_bench::small_history_does_not_retain_megabyte_page_quanta ... ignored, perf VM only: sparse history residency and native ownership test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::review_r2::review_r2_escape_command_inside_discard_matches_short_string ... ok test terminal::review_r2::review_r2_escape_high_byte_does_not_start_a_hidden_string ... ok test terminal::host_budget::report_native_memory_numbers ... ok test terminal::host_budget::every_history_share_fills_and_recycles_inside_its_reservation ... ok test terminal::host_budget::widening_a_full_history_stays_inside_its_share ... ok test terminal::checks::control_strings_cannot_grow_session_carry_without_bound ... ok test terminal::review_r2::review_r2_resize_with_full_history_share_stays_exact ... ok test terminal::review_r2::review_r2_resize_storm_does_not_ratchet_native_memory ... ok test terminal::review_r2::review_r2_limiter_is_transparent_for_short_control_mixtures ... ok test terminal::review_r3::review_r3_four_hundred_laptop_screens_fit_the_host ... ok test terminal::review_r3::review_r3_bounded_terminal_reflows_long_mixed_history ... ok test terminal::review_r2::review_r2_host_history_share_fits_the_native_reservation ... ok test terminal::host_budget::laptop_screens_come_from_their_floors_not_the_pool ... ok test terminal::review_r3::review_r3_host_accounting_balances_through_recovery ... ok test terminal::review_r2::review_r2_ground_c1_introducer_stays_within_the_session_share ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::review_r3::review_r3_recycled_unwrapped_history_keeps_exact_snapshot ... ok test terminal::user_screen_pool_resize::taller_widening_keeps_history_rows_that_move_onto_the_screen ... ok test terminal_limits::c1_tests::c1_string_inside_csi_has_a_seven_bit_replay_boundary ... ok test terminal_limits::defensive_tests::executed_c0_between_escape_and_introducer_keeps_the_bound ... ok test terminal_limits::tests::escape_after_discard_restarts_without_losing_the_next_command ... ok test terminal_limits::tests::finite_sequences_are_identical_for_every_fragment_boundary ... ok test terminal_limits::tests::fragmented_overflow_stays_discarded_until_a_real_terminator ... ok test terminal_memory::payload_tests::oversized_payload_is_refused_before_allocation_while_tagged_pool_is_allowed ... ok test terminal_memory::payload_tests::residency_query_observes_only_owned_page_mappings_without_faulting_payload ... ok test terminal_memory::tests::allocation_budget_includes_overhead_and_refusal_is_recoverable ... ok test terminal_memory::tests::screen_pages_are_zero_filled_and_page_aligned ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok test terminal_native::owned_memory_tests::refused_resize_reclaims_every_owned_native_allocation ... ok test terminal_native::owned_memory_tests::refusal_inside_reflow_never_touches_freed_pages ... ok test terminal::review_r3::review_r3_history_share_without_ris_never_refuses ... ok test terminal::review_r3::review_r3_recycled_history_matches_unbounded_reference ... ok test terminal::review_r3::review_r3_noisy_neighbour_does_not_make_quiet_sessions_approximate ... ok test terminal::review_r3::review_r3_thousand_sessions_and_one_flood ... ok test terminal::review_r3::review_r3_hundred_laptop_sessions_keep_exact_state ... ok test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact has been running for over 60 seconds test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact ... ok test result: ok. 199 passed; 0 failed; 19 ignored; 0 measured; 0 filtered out; finished in 80.02s (shim process-per-user: 81s) ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 ├── (build) infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.16 └── rustls v0.23.46 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.16 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-canvas v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:200:1 │ 200 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 201 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.16 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-canvas v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:202:1 │ 202 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 204 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:205:1 │ 205 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:207:1 │ 207 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 208 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 209 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.16 │ │ └── rustls v0.23.46 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── (dev) infraternal-status v0.1.0 │ │ └── infraternal v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:251:1 │ 251 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 252 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ └── infraternal-session v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.46 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.16 │ │ │ └── rustls v0.23.46 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── (dev) infraternal-status v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-webpki v0.103.16 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.3 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:254:1 │ 254 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 255 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:257:1 │ 257 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 258 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:259:1 │ 259 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 260 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/agent/wt-infraternal/setup-token-data/Cargo.lock:317:1 │ 317 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 318 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.16 └── rustls v0.23.46 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.3 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.3 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.3 (*) ├── tokio v1.53.3 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok (cargo-deny: 1s) ==> static builds x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently native compiler metadata: path independent; platform/date retained; unexpected syntax refused Rust remapping: differently named checkout roots produce identical stripped artifacts . ---------------------------------------------------------------------- Ran 1 test in 0.001s OK Finished `release` profile [optimized] target(s) in 0.29s AES-128-GCM NIST vector encrypt/decrypt passed production trust: PASS (staging-trust authority absent) /home/agent/.cache/codex-scratch/setup-token-data/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21399568 bytes; cap: 21399568 bytes; delta: +0 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Key memory initialization=1; locked pages and dump exclusion enabled Finished `release` profile [optimized] target(s) in 0.19s production trust: PASS (staging-trust authority absent) /home/agent/.cache/codex-scratch/setup-token-data/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 19574552 bytes; cap: 19574552 bytes; delta: +0 bytes key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) x86_64-unknown-linux-musl: exact 21399568-byte cap PASS; 21399569 bytes rejected PASS; smaller artifact requires ratchet PASS aarch64-unknown-linux-musl: exact 19574552-byte cap PASS; 19574553 bytes rejected PASS; smaller artifact requires ratchet PASS unsupported target: rejected PASS bun test v1.4.2 (744846f84) scripts/release/static-metadata-review.test.ts: (pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [34.01ms] (pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [34.41ms] 2 pass 0 fail 16 expect() calls Ran 2 tests across 1 file. [85.00ms] server subcommand: exit 2, versioned JSON unavailable result agent group: exit 0, one parsed versioned JSON listing of its commands (static builds: 20s) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ==> Compiler metadata generator checks bun test v1.4.2 (744846f84) scripts/release/build-metadata.test.ts: (pass) native metadata canonicalization retains version fields and refuses changed syntax [26.90ms] (pass) Rust and cached target compiles receive every environment remap [283.35ms] 2 pass 0 fail 121 expect() calls Ran 2 tests across 1 file. [319.00ms] ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) Checked 38 installs across 69 packages (no changes) [2.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [15.15ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [14.65ms] (pass) layout review fixtures ship only in explicitly enabled preview builds [5141.25ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [1.36ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.04ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.08ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.14ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.07ms] (pass) FrameDetector > fps, p95 and window read the ring [0.14ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.19ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.04ms] src/stale-screen.test.ts: (pass) a program that redraws after reattach never shows the note, not for a frame [0.25ms] (pass) a redraw that arrived before the replay painted needs no wait at all [0.04ms] (pass) a shell that stays silent shows the note once the wait has run out [0.11ms] (pass) output that arrives later clears the note [0.05ms] (pass) a dropped link takes the note down and cancels a wait that has not ended [0.03ms] (pass) the wait grows with the round trip and stays bounded [0.07ms] src/synchronized-output.test.ts: (pass) synchronized terminal output > recognizes a private mode split across byte and string writes [2.08ms] (pass) synchronized terminal output > preserves mode transitions for every pair of input chunk boundaries [2.44ms] (pass) synchronized terminal output > ignores CSI-looking bytes inside control strings and other mode numbers [0.10ms] (pass) synchronized terminal output > RIS clears an active mode [0.06ms] (pass) synchronized terminal output > bounds an unfinished control sequence [0.32ms] (pass) synchronized terminal output > paints queued output on the first frame after reset and timeout release [0.29ms] src/terminal-fit-lifecycle.test.ts: (pass) a queued fit stops when the terminal becomes closed [0.43ms] (pass) a queued fit stops when the terminal becomes suspended [0.02ms] (pass) a queued fit stops when the terminal becomes frozen [0.01ms] src/account-storage.test.ts: (pass) clearing one account leaves a second account and device preferences alone [0.50ms] (pass) the last-account pointer of another account stays [0.05ms] (pass) an unknown account clears every account's data and keeps preferences [0.06ms] (pass) coalesced account writes stop permanently before sign-out clears storage [0.29ms] src/offline-drawing.test.ts: (pass) cached identity needs a matching layout and sign-out removes it [2.02ms] (pass) sign-in caches only public drawing labels [0.14ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.74ms] (pass) repeating the front item changes nothing [0.03ms] (pass) the list is capped, so the oldest items fall off [0.03ms] (pass) top skips items that are no longer live, without losing them [0.04ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.12ms] (pass) recentRows: a view with three windows and no use shows them in order [0.02ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.04ms] src/canvas/status.test.ts: (pass) a lost server connection is an error toast, never a success tick [0.45ms] (pass) routine connection states stay out of the toast [0.04ms] (pass) repeated connection closes do not reopen the persistent reason toast [0.06ms] (pass) a repeated close does not retake the shared toast after a newer message replaces it [0.16ms] (pass) a close reason stays visible through a quick reconnect and clears after a stable attach [672.59ms] src/canvas/toolbar/palette-actions.test.ts: (pass) a deferred split:right selection retains its original window [0.31ms] (pass) a deferred new:below selection retains its original window [0.02ms] (pass) a deferred close selection retains its original window [0.02ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [0.51ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.13ms] (pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.26ms] (pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.17ms] (pass) facts the host did not report are omitted by default, not shown as unknown [0.16ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.13ms] (pass) before facts arrive the host's platform names the header [0.12ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.07ms] src/canvas/windows/session-hooks.test.ts: (pass) a failed idle warm-up shows no toast and retries when the browser is back online [10.63ms] (pass) a failed open shows the toast, and opening again after the network returns succeeds [10.55ms] (pass) an open that joins a failing idle warm-up still shows the toast [5.23ms] src/canvas/mesh/api-retry-budget.test.ts: (pass) a retained watch outage bounds retry requests over two logical minutes [1.85ms] src/canvas/mesh/layout-model.test.ts: (pass) a pin moved by another device invalidates a same-count pin cache [1.95ms] (pass) a recovered graph owns its node positions independently [0.11ms] (pass) a negative pin is drawn by shifting the whole graph by whole grid cells; no pin is rewritten [0.19ms] (pass) with no negative pin the origin is zero and nothing shifts [0.07ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [0.53ms] (pass) without `access` (today's server) the person may view and may not edit [0.22ms] (pass) fields the server does not send are absent, never invented [0.33ms] (pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.06ms] (pass) anything that is not a list is refused, whole [2.47ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.10ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.26ms] (pass) answers carry the new revision, and a create the new arrow's id [0.10ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.14ms] src/canvas/mesh/api-recovery.test.ts: (pass) failed watch refreshes retain one subscription through retry and release it on disposal [1.42ms] (pass) a synchronous subscription refusal leaves retry able to install a new watch [0.36ms] (pass) a changed Mesh revision refreshes a renamed host in the existing view model [0.47ms] (pass) a pushed recovery cancels the scheduled retry [0.29ms] (pass) a pushed recovery supersedes an outstanding retry failure [0.61ms] (pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.36ms] (pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.14ms] (pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.53ms] (pass) a forbidden withdrawal cancels retry work from the retained watch [0.31ms] (pass) a withdrawn view ignores an earlier outstanding retry result [0.33ms] (pass) initial Mesh list handles closed transport [0.25ms] (pass) initial Mesh list handles liveness deadline [0.04ms] (pass) initial Mesh list handles unreadable JSON [0.08ms] (pass) initial Mesh list handles unavailable storage [0.11ms] (pass) initial Mesh list handles forbidden action [0.06ms] (pass) initial Mesh list handles invalid stored host [0.11ms] (pass) Mesh watch withdrawal handles forbidden [0.12ms] (pass) Mesh watch withdrawal handles mesh unavailable [0.07ms] (pass) Mesh watch withdrawal handles plugin unavailable [0.01ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.29ms] (pass) the layout is deterministic and does not depend on input order [3.66ms] (pass) no two cards overlap, and every card lies inside the graph [12.13ms] (pass) the sheet is wider than tall, roughly 16:10 [1.52ms] (pass) a pinned node stays where it was put and the others do not move [1.93ms] (pass) a pin beyond the sheet grows the graph [0.26ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.19ms] (pass) 1,000 nodes lay out in a few milliseconds [8.00ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.36ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.20ms] (pass) a view taller than the viewport is scaled down so it fits [0.03ms] (pass) nearestStop picks the stop whose centre is closest [0.17ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.18ms] (pass) a small graph keeps one stop per node column [0.15ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.06ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.08ms] (pass) D309: with a floor, a narrow column gets a stop of its drawn width and each column is reachable [0.11ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.44ms] (pass) closing the new half gives the layout back exactly, in the model [1.15ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.58ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.74ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.79ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.48ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.18ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.29ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.10ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.11ms] (pass) random sequences of split right, split down, new window right and close never break the grid [50.03ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.47ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.23ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.15ms] (pass) a narrow right split grows both drawn tracks to the canonical minimum [0.12ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.61ms] (pass) a chain of neighbours is pushed in turn [0.10ms] (pass) display settlement clears disconnected overlaps while keeping its one anchor fixed [0.36ms] (pass) review: a viewport width increase after settlement keeps the Settings anchor clear [0.47ms] (pass) snapping rounds to whole cells [0.06ms] (pass) reach follows grants through tags and keeps the relay [0.18ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.07ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms] (pass) a desktop column is the same alone and in a strip [0.01ms] (pass) D309: a touch screen draws every column at least MIN_TOUCH_COLUMN wide, never wider than a lone column; a fine pointer has no floor [0.06ms] (pass) D309: the content is as wide as the drawn columns, so the camera reaches every column [0.06ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [1.55ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.31ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.24ms] (pass) superseded status snapshots release records for sessions this device never opened [1.12ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.13ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.12ms] (pass) a final Close before the first positive census never revives a new ID [0.11ms] (pass) a later absence retires a new ID after its first positive census [0.07ms] (pass) another host's census cannot clear a new shell's census fence [0.09ms] (pass) another host's close cannot clear a new shell's census fence [0.05ms] (pass) shared membership marks windows open without any local attachment [0.28ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [1.03ms] (pass) a detected operating system supplies the live popover mark [0.66ms] src/canvas/sessions/live.test.ts: (pass) the toolbar sessions seam exposes admitted host state and routes by identity [0.97ms] (pass) an enrolled host opens by UUID and splits keep that authority [0.13ms] (pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.12ms] (pass) unknown and ambiguous labels never open an embedded shell [0.08ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.13ms] (pass) an authoritative host snapshot replaces admission with one notification [0.15ms] (pass) the embedded inventory identity still opens locally beside an equally named remote [0.07ms] (pass) the embedded host's mark does not wait for an account name, and no account is invented [0.09ms] src/canvas/sessions/hosts.test.ts: (pass) fresh storage lists an offline host added by another browser [0.96ms] (pass) every welcome reconciles without duplicate subscriptions or hosts [0.14ms] (pass) a removal in another browser withdraws the host [0.21ms] (pass) a malformed page cannot partially replace the authoritative inventory [0.15ms] (pass) a socket-authority refusal withdraws previously admitted hosts [0.38ms] (pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.28ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.42ms] (pass) a known retired status survives repeated selection and generic ended answers [0.16ms] src/canvas/sessions/hosts-scale-review.test.ts: (pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [12.06ms] (pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [8.65ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [0.90ms] (pass) legacy refusals still work and malformed counters never reach the message [0.27ms] (pass) product copy names the host and counters and never renders untrusted server text [0.20ms] (pass) oversized refusal JSON is ignored before parsing [0.10ms] src/canvas/sessions/focus-intent.test.ts: (pass) focusin supersedes every older focus intent [0.67ms] (pass) pointerdown supersedes every older focus intent [0.02ms] (pass) keydown supersedes every older focus intent [0.02ms] (pass) input supersedes every older focus intent [0.01ms] src/canvas/model/server-store.test.ts: (pass) a negative drop on a 1,025-node mesh writes one pin, and the peer ends with every pin (#24) [28.54ms] (pass) repeated pin moves reach both coordinate limits; the next move is refused and rolled back [1.62ms] (pass) a layout gap or withdrawn worker requests one fresh snapshot with bounded backoff [1.43ms] (pass) layout recovery restores Math.random after its virtual timer test [0.02ms] (pass) event before Result and duplicate events do not apply an optimistic edit twice [0.52ms] (pass) reconnect retries the exact request and an old receipt removes its optimistic overlay [0.52ms] (pass) legacy import remains intact until canonical confirmation even if another device initialized [0.54ms] (pass) dispose cancels late cache writes after sign-out [0.35ms] (pass) a pending reference preserves unrelated edits across remote paints and is never sent [1.62ms] (pass) closing an unsent shell removes its unresolved birth without blocking surviving children [0.55ms] LAYOUT_RETRY_SCHEDULE subscribers=60 first_minute=753 following_5s=47 first_delay_slots=60 (pass) sixty withdrawn layout subscriptions spread their coalesced retry timers [13.78ms] (pass) multi-subscriber retry scheduling restores Math.random [0.05ms] (pass) an acknowledgement after its ordered event does not repaint the same layout [0.94ms] (pass) review: a missing layout revision is recovered before the cached document is used again [0.37ms] (pass) a bootstrap receipt before its canonical snapshot keeps the legacy layout drawable [0.36ms] (pass) ready edits share one network round trip with a bounded in-flight window [0.60ms] (pass) the optimistic semantic projection paints before any server receipt [0.45ms] (pass) a no-op drawing capture does not trigger another paint [0.17ms] (pass) an interrupted first load does not turn a revision-zero cache into an intentional empty layout [0.31ms] (pass) review: a refused structural edit cannot strand later valid edits [0.39ms] (pass) a definitive refusal paints rollback, persists it and never retries after reconnect [0.37ms] (pass) a stale refusal cannot discard a new-connection retry [0.32ms] (pass) review r2: refusal drains independent edits waiting behind four in-flight requests [1.21ms] (pass) recovery coalesces gaps and errors, ignores operations until a snapshot, and survives reconnect [0.40ms] (pass) a normal reconnect snapshot arrives before any replacement is requested [0.32ms] src/canvas/model/review-null.test.ts: (pass) a mixed nullable resize cannot invalidate the canonical drawing document [0.20ms] src/canvas/model/operations.test.ts: (pass) independent resize and move commute; close survives a stale move [0.34ms] (pass) right split of a stack preserves the upper band [0.11ms] (pass) reorder uses stable neighbours and emits no document [0.33ms] (pass) a completed split emits its semantic intent rather than intermediate sizing edits [0.18ms] (pass) a three-window reorder sends one semantic move [0.18ms] (pass) a split before the first reference is journalled opens its anchor before splitting [0.23ms] (pass) a drop sends the moved membership once, without derived neighbour geometry [0.17ms] (pass) a narrow right split widens first so both halves remain valid [0.24ms] (pass) a short down split grows the anchor first so both halves meet the height floor [0.26ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.37ms] (pass) a document survives JSON and rebuilds the same columns [0.28ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.13ms] (pass) parseDocument rejects anything that is not a document of this format [0.16ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.09ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.20ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.19ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.04ms] (pass) D309: the saved weights do not depend on how a touch screen draws the columns [0.17ms] (pass) D309: a view this device pushed clear for display is saved where the layout has it [0.07ms] (pass) an offscreen graph keeps its shared pins before any nodes are rendered [0.09ms] (pass) a captured graph document is independent of the next pin drag [0.05ms] src/canvas/model/sync.test.ts: (pass) a pending session never delays other edits or waits for a network receipt [0.55ms] (pass) inventory includes shared memberships that this device cannot render [0.63ms] (pass) temporary flow windows are never treated as unsubmitted shared windows [0.12ms] src/canvas/model/review-span.test.ts: (pass) a down split shifts every column in a transitively connected group [0.13ms] src/canvas/model/reducer-property.test.ts: layout property: 32 seeds, 4096 operations, 4015 accepted, zero divergences (pass) property: accepted random operation sequences match the real server reducer [6457.79ms] src/canvas/model/cache.test.ts: (pass) damaged pending opens cannot stall offline drawing [1.41ms] (pass) a valid unresolved reference remains local and replayable [0.12ms] (pass) a valid offline journal is retained beyond a short burst [0.94ms] src/canvas/model/review-boundary-r2.test.ts: review r2 boundary comparison: 8 seeds, 4096 operations, 3198 accepted (pass) review r2: longer boundary-weighted sequences preserve every accepted projection [1415.15ms] src/canvas/model/reconcile.test.ts: (pass) review: removing the current shared view selects a surviving camera anchor [1.48ms] (pass) a remote negative pin and node update preserve the world position of an unchanged card [0.86ms] src/canvas/model/journal.test.ts: (pass) an offline birth keeps its identity through hydration and reference completion [0.59ms] src/canvas/addhost/setup-feed.test.ts: (pass) createSetupFeed > subscribes with the host and window, then hands over events in order [0.80ms] (pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.22ms] (pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.65ms] (pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.60ms] (pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.32ms] (pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [45.70ms] (pass) review reconnect budget survives sockets that open then close without events [45.80ms] (pass) review explicit retry resumes after the setup feed stops [46.37ms] src/canvas/addhost/wizard.breakit2.test.ts: (pass) breakit2 an explicit port on a listed host survives chip resolution [0.47ms] (pass) breakit2 malformed bracketed IPv6 waits for correction [0.09ms] (pass) listed host plus port retains its saved user in the serialized destination [0.15ms] (pass) review listed inventory name plus port retains its resolved address [0.17ms] src/canvas/addhost/setup-stages.test.ts: (pass) parseSetupEvent > reads a well-formed event [0.07ms] (pass) parseSetupEvent > drops anything malformed [0.05ms] (pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.05ms] (pass) foldSetup > stages before the event's are done, later ones pending [0.21ms] (pass) foldSetup > a stage that reports done alone still finishes [0.04ms] (pass) foldSetup > ready done completes the run [0.03ms] (pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.10ms] (pass) foldSetup > uploading belongs to install and the readiness check to ready [0.06ms] (pass) setupGuide > says the other sessions keep working and what to do next, in plain words [0.10ms] (pass) review malformed setup fields are dropped without coercion errors [0.09ms] (pass) exhausted setup preserves eligibility and explains a new setup [0.09ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.18ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.04ms] (pass) parsing the server's data > an install command needs a lifetime [0.04ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.80ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.15ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.67ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.19ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.13ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.06ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.21ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.26ms] (pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.24ms] (pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.11ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [3.29ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.24ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.12ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.07ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.08ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.22ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.08ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.06ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.08ms] (pass) authLabel > names the method and a trusted network provider only [0.03ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.15ms] (pass) guideFor > each failure kind names its fix [0.11ms] (pass) guideFor > mesh-policy words say possible, not certain [0.02ms] (pass) parseTarget > reads user, host and port [0.07ms] (pass) parseTarget > reads a pasted ssh command into the same fields [0.85ms] (pass) parseTarget > reads an ssh:// address [0.07ms] (pass) parseTarget > refuses garbage around an ssh command [0.07ms] (pass) parseTarget > refuses what cannot name a host [0.03ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.32ms] (pass) parseSshConfig > recognises config text [0.05ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.03ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.04ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.11ms] (pass) only a completed canonical host identity becomes terminal authority [0.07ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.06ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.08ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.09ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.01ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.01ms] (pass) install diagnostics name the failed step and public host error [0.05ms] (pass) missing payload tells the operator the architecture and expected server path [0.03ms] (pass) an already added host says so and offers opening its existing terminal [0.16ms] (pass) release payload verification names the architecture step and plain reason [0.03ms] (pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.08ms] (pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.06ms] (pass) early terminal publication selects only its canonical host-bound shim session [0.12ms] src/canvas/addhost/already-added-breakit.test.ts: (pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.09ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.46ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.37ms] (pass) ready CA begins the requested installation mode without another prompt [0.12ms] (pass) closing during CA confirmation never starts an SSH attempt [0.30ms] (pass) a typed root login requires explicit consent before any installation [0.14ms] src/canvas/views/body.test.ts: (pass) a clean terminal exit keeps the window while host setup can still fail [0.02ms] (pass) clean exits still close ordinary windows, and failed exits stay visible [0.01ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.40ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.32ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.74ms] (pass) a chunk that both sides use stays critical [0.12ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.10ms] (pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.07ms] (pass) automatic canonical painting loads after the first canvas draw [0.09ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [3.45ms] (pass) compiled recovery UI mode preview obeys its URL boundary [2.13ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [1.69ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [8.33ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [14.98ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [6.88ms] (pass) abandoned word acknowledgement uploads nothing [2.39ms] (pass) settled acknowledgement cannot upload later (dismissed) [2.23ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [1.67ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [1.20ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [0.91ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [1.09ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [0.83ms] (pass) malformed or excessive remaining wait -1 is denied [1.09ms] (pass) malformed or excessive remaining wait 0.5 is denied [0.96ms] (pass) malformed or excessive remaining wait 172801 is denied [0.82ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [0.88ms] (pass) malformed or excessive remaining wait 90000 is denied [1.30ms] test/link-doubt.test.ts: (pass) a link doubt shows the indicator and keeps live replies and typing flowing [1.15ms] (pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.34ms] (pass) a notice type from a newer server is ignored, not a protocol failure [0.07ms] (pass) the viewer announces the link-doubt capability in its Hello [1.95ms] test/close-reasons.test.ts: (pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.17ms] src/close-reasons.test.ts: (pass) a missed connection response keeps a plain and stable reason [0.02ms] (pass) server and host close reasons identify why a terminal reconnects, in plain words [0.13ms] (pass) routine detach and connection rotation reasons stay neutral [0.01ms] (pass) a stream close that reattaches never says the terminal ended [0.07ms] (pass) a recovering server link names its cause as routine status, never as a failure [0.03ms] (pass) unknown close text is discarded instead of reaching the person or console [0.04ms] (pass) a storm of closes prints one line per minute and counts the rest [0.31ms] (pass) counted closes are reported when their window ends, without another close [0.04ms] src/review-close-log.test.ts: (pass) a reconnect the server refuses with a named Close frame still prints its console line [1.04ms] (pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.04ms] src/onboarding-load.test.ts: (pass) a failed load says so in the error line, offers Try again, and mounts nothing [5.34ms] (pass) the Try again button reloads the page: a failed import stays failed in the module map [5.31ms] (pass) the online event retries by itself [5.31ms] 356 pass 0 fail 21671 expect() calls Ran 356 tests across 60 files. [14.42s] bun test v1.4.2 (744846f84) src/connection-correlation-review.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [9.06ms] src/connection-idle.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 1 [3.67ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 1 [2.18ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 150 [0.92ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 150 [0.84ms] (pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [4.43ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 1 [1.17ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 1 [1.06ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 1 [0.91ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 1 [1.08ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 30 [0.63ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 30 [0.99ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 30 [0.65ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 30 [0.57ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 150 [0.35ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 150 [0.36ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 150 [0.32ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 150 [0.42ms] (pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [2.21ms] (pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [3.64ms] (pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [1.43ms] (pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [1.12ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [0.96ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [1.04ms] (pass) a healthy browser route survives 150ms scheduler delay across 1 streams [0.98ms] (pass) a healthy browser route survives 150ms scheduler delay across 28 streams [1.74ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [1.02ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) browser jitter allowance decays after a stable link returns [9.58ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [1.07ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [0.76ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [0.83ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [1.12ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [0.95ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [0.94ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer without a reply counts subsequent responsive silence [1.10ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) an outstanding probe gets responsive observation after a renderer stall [2.59ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) retirement gives a queued mismatched pong one task turn [0.96ms] (pass) retirement gives a queued correlated pong one task turn [0.63ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead typing route eventually retires when browser tasks run every 75ms [0.75ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 1000ms [0.70ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 60000ms [0.92ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [1.09ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [1.07ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [0.67ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) correlated queued replies replenish stall grace across successive healthy stalls [0.83ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) duplicate replies cannot replenish consumed stall grace [0.76ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) wrong timestamp replies cannot replenish consumed stall grace [0.75ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) unknown nonce replies cannot replenish consumed stall grace [0.59ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [1.14ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1 (pass) a replacement route receives its own one-shot local stall grace [2.29ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) continuous typing cannot cancel every silent-route confirmation turn [1.57ms] (pass) a pending confirmation is reset by reconnect [1.29ms] Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0 (pass) a pending confirmation is reset by close [1.08ms] (pass) a pending confirmation is reset by dispose [1.03ms] (pass) a stale confirmation from before reconnect cannot close the replacement route [1.32ms] (pass) a hidden page resumes its lease after 5000ms without retiring queued replies [1.52ms] (pass) a hidden page resumes its lease after 30000ms without retiring queued replies [1.05ms] (pass) a socket lost while hidden waits for visibility before reconnecting [0.74ms] (pass) mobile jitter and one retransmission keep a foreground browser lease [48.03ms] (pass) visibility notices require both peers to support them: false [0.37ms] (pass) visibility notices require both peers to support them: true [0.19ms] (pass) hiding a page cancels a retry scheduled while it was visible [0.52ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [0.87ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [0.81ms] (pass) a layout subscription starts the connection before any terminal exists [0.20ms] (pass) resync replaces one subscription ID and disposal prevents later resyncs [0.66ms] (pass) resync reopens a feature subscription with the same server ID [0.25ms] src/connection-layout-removal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [6.67ms] src/connection-liveness.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [1.04ms] src/connection-pool.test.ts: (pass) terminals fill the first socket, then open another, and a released slot is reused first [0.57ms] (pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [0.62ms] src/connection-probe-scheduling-review.test.ts: (pass) a fully answered browser route survives a delayed next probe before a terminal attaches [0.62ms] (pass) a fully answered browser route survives a delayed next probe with an attachment [0.17ms] src/connection-query-capabilities.test.ts: (pass) query replies negotiate independently with Hello caps 0 [0.06ms] (pass) query replies negotiate independently with Hello caps 4 (pass) query replies negotiate independently with Hello caps 8 (pass) query replies negotiate independently with Hello caps 12 src/connection-query-refusal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [8.26ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [2.15ms] src/connection-restart.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1 (pass) an overnight connection retains its writer and pending input when the server restarts [0.66ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a second quick server close leaves the fast path and backs off [0.39ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a failed first recovery handshake exits the one quick retry [0.46ms] Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0 (pass) a server close reason survives socket retirement and the next retry [0.39ms] Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0 (pass) a clean server socket close keeps its fallback reason through the next retry [0.34ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [10.22ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) online and foreground events cancel delays and preserve handshakes in progress [1.33ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [0.60ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.21ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.27ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.17ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.21ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [0.39ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.22ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.16ms] src/connection-review-refusal-input.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [1.60ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [0.80ms] src/connection-review-retained-lifetime.test.ts: (pass) review: saved typing can be declined without closing the live shell [0.76ms] (pass) review: new typing reaches the fresh shell while saved typing stays pending [0.17ms] (pass) review: retained input and consent are local to their terminal window [0.17ms] (pass) review: selecting a different session removes saved typing and its action [0.19ms] (pass) review: another refused writer retains pending and unacknowledged fresh typing [0.17ms] (pass) review: window disposal clears held input and rejects a stale resend action [0.43ms] src/connection-startup-review.test.ts: (pass) a healthy startup route can learn an RTT above the initial estimate [2.29ms] src/connection-unattached-close.test.ts: (pass) disposing a window before its welcome microtask sends no unbound Close [0.91ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [0.74ms] 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [218.00ms] bun test v1.4.2 (744846f84) src/terminal-queries.test.ts: (pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.36ms] (pass) all requested query families have identities [0.09ms] (pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [1.04ms] (pass) oversized OSC retains BEL termination before a later query [0.06ms] src/terminal-query-property.test.ts: [ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2 (pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [151.56ms] src/terminal-query-renderer-review.test.ts: (pass) review: DECID gives every real renderer response an identity [0.63ms] (pass) review: zero-padded CPR gives every real renderer response an identity [0.90ms] (pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.16ms] (pass) review: three adjacent requests keep distinct identities across different viewer chunking [4.24ms] src/terminal-write-slices.test.ts: (pass) every slice split preserves cells, cursor and all renderer answers [30.98ms] (pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [1.82ms] (pass) escaped writers cannot access released input and callback failure releases the scope [0.45ms] (pass) nested writes and memory growth cannot replace borrowed input [0.22ms] (pass) allocation refusal never writes or frees unowned memory [1.07ms] (pass) empty scopes accept no input and reject later writer use [0.13ms] (pass) input views of native memory survive allocation-driven memory growth [0.17ms] (pass) throwing callbacks release exactly their owned input allocation [0.18ms] 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [213.00ms] $ bun run build.ts built chunk-meeffx7k.js, chunk-qbb2e8b9.js, chunk-eztb3nrq.js, chunk-qsb4a87e.js, chunk-307rx54y.js, chunk-wnf6b0xd.js, chunk-sqb90kd7.js, chunk-rkhswyqm.js, chunk-kbxqmbmm.js, chunk-55ychmxj.js, chunk-yvq3ah6x.js, chunk-vb52mqs5.js, chunk-gxvqf3b8.js, chunk-x90k904w.js, chunk-mewxw2vh.js, chunk-qyywvd32.js, chunk-d7xx1qk1.js, chunk-8gqdshxw.js, chunk-6mykqt9d.js, main.js, chunk-3zrccmtw.js, chunk-fxmz3y8j.js, chunk-wk9n9jj8.js, chunk-s395mea5.js, chunk-41h6pgbx.js, chunk-x9ey0dnt.js, chunk-3q58ab97.js, chunk-2vbkgt28.js, chunk-nj0m3nhw.js, chunk-a5mc1m36.js, chunk-801j5xgw.js, chunk-3avxwfmr.js, chunk-c76h7v56.js, chunk-8jzfvehq.js, chunk-ay05zhxw.js, chunk-wnjzk02r.js, chunk-26c93d28.js, chunk-axbkkqp1.js, chunk-s6a0ct86.js, chunk-c0wa834e.js, chunk-7z3ta95w.js, chunk-jfhazw54.js, chunk-z8x03zhm.js, chunk-7tzc35h4.js, chunk-f77ccd2n.js, chunk-9vf0rqn5.js, chunk-yscwybww.js, chunk-jtenmsrr.js, chunk-y2rhp8e5.js, chunk-z48tcwe1.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-dq8c28hf.js, chunk-mpmm5x92.js, chunk-pmgxewne.js, chunk-vp1h11qq.js, chunk-3m9zj9sz.js, chunk-r04kg5zm.js, chunk-wz3f0vtz.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-1jvnqbp8.js, chunk-p20wg8e8.js, chunk-zz8drmaq.js, chunk-ff3nvh2r.js onDemand chunk-26c93d28.js: identity=1026 gzip=623 brotli=498 bytes onDemand chunk-z8x03zhm.js: identity=2522 gzip=1133 brotli=958 bytes onDemand chunk-sqb90kd7.js: identity=3891 gzip=1735 brotli=1518 bytes critical chunk-r04kg5zm.js: identity=199 gzip=158 brotli=136 bytes onDemand chunk-nj0m3nhw.js: identity=4561 gzip=2005 brotli=1779 bytes deferred chunk-801j5xgw.js: identity=1560 gzip=802 brotli=730 bytes critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes critical chunk-rkhswyqm.js: identity=5890 gzip=2461 brotli=2137 bytes deferred chunk-3avxwfmr.js: identity=110049 gzip=37197 brotli=32792 bytes onDemand chunk-y2rhp8e5.js: identity=4696 gzip=1954 brotli=1727 bytes onDemand chunk-7tzc35h4.js: identity=1170 gzip=707 brotli=621 bytes critical chunk-c0wa834e.js: identity=729050 gzip=210330 brotli=170902 bytes critical chunk-8gqdshxw.js: identity=386 gzip=236 brotli=195 bytes onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes critical chunk-mewxw2vh.js: identity=6075 gzip=2537 brotli=2232 bytes onDemand chunk-ay05zhxw.js: identity=14598 gzip=5448 brotli=4892 bytes deferred chunk-s395mea5.js: identity=14644 gzip=4802 brotli=4431 bytes critical chunk-41h6pgbx.js: identity=1776 gzip=857 brotli=695 bytes critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=480 bytes critical backdrop.worker.js: identity=243 gzip=210 brotli=158 bytes onDemand chunk-vp1h11qq.js: identity=6744 gzip=3165 brotli=2879 bytes critical chunk-3zrccmtw.js: identity=5448 gzip=2606 brotli=2377 bytes onDemand chunk-jfhazw54.js: identity=33394 gzip=12822 brotli=11539 bytes onDemand chunk-s6a0ct86.js: identity=10904 gzip=4422 brotli=4030 bytes critical chunk-meeffx7k.js: identity=34427 gzip=9986 brotli=8972 bytes deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes onDemand chunk-p20wg8e8.js: identity=9158 gzip=3341 brotli=2889 bytes onDemand chunk-3m9zj9sz.js: identity=1063 gzip=653 brotli=523 bytes onDemand chunk-x90k904w.js: identity=2557 gzip=1180 brotli=1009 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes critical chunk-d7xx1qk1.js: identity=11739 gzip=4629 brotli=4110 bytes critical chunk-wk9n9jj8.js: identity=8377 gzip=3575 brotli=3184 bytes onDemand chunk-yvq3ah6x.js: identity=2108 gzip=1038 brotli=870 bytes critical chunk-3q58ab97.js: identity=1188 gzip=691 brotli=582 bytes onDemand chunk-yscwybww.js: identity=11562 gzip=4694 brotli=4278 bytes onDemand chunk-9vf0rqn5.js: identity=540 gzip=353 brotli=319 bytes onDemand chunk-dq8c28hf.js: identity=49320 gzip=15457 brotli=13771 bytes critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes onDemand chunk-qsb4a87e.js: identity=6493 gzip=2402 brotli=2140 bytes onDemand chunk-7z3ta95w.js: identity=6148 gzip=2782 brotli=2509 bytes onDemand chunk-jtenmsrr.js: identity=5359 gzip=2581 brotli=2301 bytes critical chunk-6mykqt9d.js: identity=2529 gzip=1016 brotli=887 bytes onDemand chunk-f77ccd2n.js: identity=1649 gzip=774 brotli=675 bytes onDemand chunk-8jzfvehq.js: identity=7662 gzip=3397 brotli=2967 bytes onDemand chunk-mpmm5x92.js: identity=6983 gzip=3104 brotli=2816 bytes onDemand chunk-kbxqmbmm.js: identity=2420 gzip=1194 brotli=1069 bytes deferred chunk-1jvnqbp8.js: identity=545 gzip=315 brotli=271 bytes onDemand chunk-qbb2e8b9.js: identity=228 gzip=178 brotli=158 bytes onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes critical chunk-vb52mqs5.js: identity=707 gzip=362 brotli=309 bytes onDemand chunk-2vbkgt28.js: identity=2791 gzip=1373 brotli=1181 bytes onDemand chunk-a5mc1m36.js: identity=1974 gzip=987 brotli=843 bytes deferred chunk-wnf6b0xd.js: identity=38155 gzip=13870 brotli=12398 bytes critical chunk-pmgxewne.js: identity=162 gzip=150 brotli=119 bytes onDemand chunk-eztb3nrq.js: identity=191 gzip=167 brotli=130 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes critical chunk-zz8drmaq.js: identity=9907 gzip=4063 brotli=3500 bytes critical main.js: identity=104155 gzip=38354 brotli=33162 bytes onDemand chunk-wnjzk02r.js: identity=11126 gzip=4259 brotli=3884 bytes critical chunk-qyywvd32.js: identity=17631 gzip=6253 brotli=5575 bytes onDemand chunk-55ychmxj.js: identity=6265 gzip=2102 brotli=1865 bytes critical chunk-x9ey0dnt.js: identity=2161 gzip=1062 brotli=906 bytes onDemand chunk-307rx54y.js: identity=5812 gzip=2382 brotli=2147 bytes onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes critical chunk-wz3f0vtz.js: identity=42945 gzip=14690 brotli=13161 bytes critical chunk-fxmz3y8j.js: identity=1106 gzip=663 brotli=600 bytes onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes JavaScript transfer, critical: identity=987711 gzip=305940/307200 brotli=254824/256000 bytes JavaScript transfer, deferred: identity=166293 gzip=57668/61440 brotli=51213/55296 bytes JavaScript transfer, onDemand: identity=231812 gzip=91875/20480 brotli=81911/18432 bytes JavaScript transfer, onDemand largest chunk chunk-dq8c28hf.js: gzip=15457/20480 brotli=13771/18432 bytes (class total gzip=91875 brotli=81911, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.26ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.35ms] (pass) subscription not found ends delivery before a late refresh rejection [1.14ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.11ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.10ms] (pass) synchronous subscription refusal releases the transport exactly once [0.11ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [6.42ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.12ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.74ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.20ms] (pass) split mux header preserves trailing Close [0.21ms] (pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.35ms] (pass) empty marked input reports the stable invalid-body decoder failure [0.07ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.47ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [2.61ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.52ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.50ms] (pass) superseded failure preserves a newer pending refresh [2.85ms] src/stream.test.ts: stream differential: 141 streams, 11988 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [1926.52ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [5.73ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [1.90ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [3.85ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.12ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.21ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.45ms] (pass) review continuation stops after forbidden [1.18ms] (pass) review continuation stops after superseded [1.17ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.25ms] (pass) a changed revision discards earlier pages before assembling its restart [0.15ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.19ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.02ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms] (pass) watch never publishes a partial page; withdrawn=false [1.35ms] (pass) watch never publishes a partial page; withdrawn=true [1.14ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.38ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.17ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.40ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [0.92ms] (pass) shared Mesh event vectors drive the typed watch adapter [5.15ms] 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [1.99s] ```
kayg commented 2026-10-29 16:46:26 +00:00
Author
Owner
Copy link

Independent verification review started on review-setup-token-data, detached target/base 75baaecad. Diff base is 4a6202a529. Reviewing #252 contract, path resolution, permission diagnostics, public status and install command copying; implementation will remain unchanged. Cargo.lock and crates/infraternal-shim/src/readiness.rs match origin/dev byte for byte. No deploy.

Independent verification review started on review-setup-token-data, detached target/base 75baaecad. Diff base is 4a6202a5299329411fcf94deef6b0181b054957c. Reviewing #252 contract, path resolution, permission diagnostics, public status and install command copying; implementation will remain unchanged. Cargo.lock and crates/infraternal-shim/src/readiness.rs match origin/dev byte for byte. No deploy.
kayg commented 2026-10-29 17:21:03 +00:00
Author
Owner
Copy link

Independent review probe results on the real CLI built from 75baaecad (no implementation edits):

  • Traversable directory with listing refused (mode 0300): socket access is permitted by the kernel, but setup-token exits 1 before connecting and prints sudo.
  • World-readable directory with a private socket refusing access: setup-token exits 1 with a generic three-line error and no sudo command. A readable directory without traversal permission also misses the hint.
  • Installer dry-run launched through a symlink to a versioned executable succeeds and records that executable in ExecStart. The no-flags setup-token command then exits 1 because discovery accepts only basename infraternal.

Explicit and installed paths, data-directory symlinks, quoted paths, missing-directory behavior and safe quoting of spaces/quotes/shell metacharacters were also checked. All socket responses are synthetic and unregistered; no installed service or setup capability was accessed. Each confirmed gap will receive its own failing regression commit after the pristine-head fast gate completes. The workspace test row has passed; the gate is currently building static images.

path-matrix.log
renamed-probe.log

Independent review probe results on the real CLI built from 75baaecad (no implementation edits): - Traversable directory with listing refused (mode 0300): socket access is permitted by the kernel, but setup-token exits 1 before connecting and prints sudo. - World-readable directory with a private socket refusing access: setup-token exits 1 with a generic three-line error and no sudo command. A readable directory without traversal permission also misses the hint. - Installer dry-run launched through a symlink to a versioned executable succeeds and records that executable in ExecStart. The no-flags setup-token command then exits 1 because discovery accepts only basename infraternal. Explicit and installed paths, data-directory symlinks, quoted paths, missing-directory behavior and safe quoting of spaces/quotes/shell metacharacters were also checked. All socket responses are synthetic and unregistered; no installed service or setup capability was accessed. Each confirmed gap will receive its own failing regression commit after the pristine-head fast gate completes. The workspace test row has passed; the gate is currently building static images. [path-matrix.log](https://git.kayg.org/attachments/6fdc6c0f-237e-4163-a671-145e95f2f3f4) [renamed-probe.log](https://git.kayg.org/attachments/36a23d17-2cbd-436e-8a65-4db4ede8c3b8)
kayg commented 2026-10-29 17:43:01 +00:00
Author
Owner
Copy link

Confirmed independent review findings, each committed and pushed on review-setup-token-data (implementation unchanged):

R252-01 — P2 — main.rs:1009–1025: directory listing is not required to connect to a known private socket. Mode 0300 permits the connection, but the new preflight stops and requires sudo. Failing test: setup_token_reads_a_traversable_directory_without_listing_access; cargo exit 101, 0 passed / 1 failed. Commit b930fa247.

R252-02 — P2 — main.rs:1009–1025,1429–1431: a readable directory with an inaccessible private socket bypasses the permission diagnostic, then the connection error becomes a generic unavailable result without the elevated command. Failing test: setup_token_permission_hint_covers_a_private_socket_in_a_readable_directory; cargo exit 101, 0 passed / 1 failed. Commit 4e1643431. The fixture uses socket mode 000 to simulate effective access refusal; no other account or installed service is accessed.

The original 75baaecad fast gate passed completely, exit 0, before adding these review tests. These new tests deliberately remain failing for the fix round.

R252-01.log
R252-02.log

Confirmed independent review findings, each committed and pushed on review-setup-token-data (implementation unchanged): R252-01 — P2 — main.rs:1009–1025: directory listing is not required to connect to a known private socket. Mode 0300 permits the connection, but the new preflight stops and requires sudo. Failing test: setup_token_reads_a_traversable_directory_without_listing_access; cargo exit 101, 0 passed / 1 failed. Commit b930fa247. R252-02 — P2 — main.rs:1009–1025,1429–1431: a readable directory with an inaccessible private socket bypasses the permission diagnostic, then the connection error becomes a generic unavailable result without the elevated command. Failing test: setup_token_permission_hint_covers_a_private_socket_in_a_readable_directory; cargo exit 101, 0 passed / 1 failed. Commit 4e1643431. The fixture uses socket mode 000 to simulate effective access refusal; no other account or installed service is accessed. The original 75baaecad fast gate passed completely, exit 0, before adding these review tests. These new tests deliberately remain failing for the fix round. [R252-01.log](https://git.kayg.org/attachments/c13af6cb-5051-4c2e-abb2-63c666d0cdfa) [R252-02.log](https://git.kayg.org/attachments/a8535c15-00dc-4308-992d-c4c5670b305e)
kayg commented 2026-10-29 17:47:11 +00:00
Author
Owner
Copy link

Confirmed independent review findings, committed and pushed on review-setup-token-data:

R252-03 — P2 — infraternal-status/src/lib.rs:343–347: installer-generated services are skipped when server init runs through a symlink to a versioned executable. The real dry-run succeeds and writes the resolved executable in ExecStart; the no-flags setup-token command then fails. Test setup_token_discovers_a_service_installed_through_a_versioned_binary_symlink fails with exit 101, 0 passed / 1 failed. Commit 61fb7579d.

R252-04 — P3 — contracts/keywrap.md:91,145: HTTP status adds setup_token_command, but the canonical result table and identity text still promise only setup_required. The approved additive field is documented in secondary verification notes, but not this contract. Test public_status_result_fields_are_listed_in_the_auth_contract compares real response keys to the canonical table and fails naming setup_token_command, exit 101. Commit fa77e242a.

No implementation edits.

R252-03.log
R252-04.log

Confirmed independent review findings, committed and pushed on review-setup-token-data: R252-03 — P2 — infraternal-status/src/lib.rs:343–347: installer-generated services are skipped when server init runs through a symlink to a versioned executable. The real dry-run succeeds and writes the resolved executable in ExecStart; the no-flags setup-token command then fails. Test setup_token_discovers_a_service_installed_through_a_versioned_binary_symlink fails with exit 101, 0 passed / 1 failed. Commit 61fb7579d. R252-04 — P3 — contracts/keywrap.md:91,145: HTTP status adds setup_token_command, but the canonical result table and identity text still promise only setup_required. The approved additive field is documented in secondary verification notes, but not this contract. Test public_status_result_fields_are_listed_in_the_auth_contract compares real response keys to the canonical table and fails naming setup_token_command, exit 101. Commit fa77e242a. No implementation edits. [R252-03.log](https://git.kayg.org/attachments/13fb93d5-a245-4735-ad12-6fba283b8c21) [R252-04.log](https://git.kayg.org/attachments/96cae389-429b-4867-a3ab-fc8721a57e66)
kayg commented 2026-10-29 17:48:17 +00:00
Author
Owner
Copy link

R252-05 — P3 — confirmed and pushed in 074141ee3 on review-setup-token-data. The longer sudo setup command widens the setup card beyond a 375-pixel viewport. Its right edge is clipped because page overflow is hidden. Shared-browser measurements at rest: card right 393.5 px; viewport 375 px. The plain-command control fits the same viewport.

Failing production-browser test: system-service setup stays within the phone viewport, apps/tracer/test/onboarding.spec.ts:331. bun run check passed; the test failed with expected right <=375, received 392.61224365234375. Unique TRACER_TEST_PORT=53254, zero synthetic RTT for this functional check. No timing claim. Implementation is unchanged.

The shared browser also verified the plain and sudo forms at 393×852: the exact displayed string was passed to the clipboard API, token inputs remained empty, meaningful setup content rendered with title infraternal, and console errors were absent. Screenshots are attached for the orchestrator to assess; no overall visual-quality claim. Both the local review server (PID 1507184) and shared review tab were stopped/closed.

R252-05.log
ui-plain-393.png
ui-sudo-393.png
ui-sudo-375.png
ui-checks.json

R252-05 — P3 — confirmed and pushed in 074141ee3 on review-setup-token-data. The longer sudo setup command widens the setup card beyond a 375-pixel viewport. Its right edge is clipped because page overflow is hidden. Shared-browser measurements at rest: card right 393.5 px; viewport 375 px. The plain-command control fits the same viewport. Failing production-browser test: system-service setup stays within the phone viewport, apps/tracer/test/onboarding.spec.ts:331. bun run check passed; the test failed with expected right <=375, received 392.61224365234375. Unique TRACER_TEST_PORT=53254, zero synthetic RTT for this functional check. No timing claim. Implementation is unchanged. The shared browser also verified the plain and sudo forms at 393×852: the exact displayed string was passed to the clipboard API, token inputs remained empty, meaningful setup content rendered with title infraternal, and console errors were absent. Screenshots are attached for the orchestrator to assess; no overall visual-quality claim. Both the local review server (PID 1507184) and shared review tab were stopped/closed. [R252-05.log](https://git.kayg.org/attachments/b2d8dd88-ca0d-4c8c-8ad3-9dab04e8c3ba) ![ui-plain-393.png](https://git.kayg.org/attachments/9444d374-0393-4821-9818-5ab7b0938e20) ![ui-sudo-393.png](https://git.kayg.org/attachments/88265ec7-90f1-4e94-a8d2-e04aa0339200) ![ui-sudo-375.png](https://git.kayg.org/attachments/49ddc905-0765-438f-a6ea-ed477faadddf) [ui-checks.json](https://git.kayg.org/attachments/c072ffd4-4b81-4a84-89e3-be85e979624a)
kayg commented 2026-10-29 18:01:41 +00:00
Author
Owner
Copy link

Independent review verdict: merge after fixes.

Counts: P0 0, P1 0, P2 3, P3 2. Reviewed job head 75baaecad85b9c371d30791ac2e62f41b691892b, diff base 4a6202a5299329411fcf94deef6b0181b054957c. Review branch review-setup-token-data is clean and pushed at 074141ee37c6868594f303a890fe58fde6eec850. It changes only three normal test files; no implementation fixes or deployment.

Each finding has an individually committed, pushed failing test and an entry in $HOME/.cache/codex-scratch/review-setup-token-data/findings.md:

  • R252-01 — P2 — b930fa247: directory-listing preflight stops retrieval from an already accessible private socket.
  • R252-02 — P2 — 4e1643431: an inaccessible socket in a readable directory misses the sudo command.
  • R252-03 — P2 — 61fb7579d: discovery skips an installer-generated unit reached through a versioned executable symlink.
  • R252-04 — P3 — fa77e242a: canonical public-status contract omits the added command field.
  • R252-05 — P3 — 074141ee3: the sudo command widens the setup card beyond a 375-pixel viewport, clipping its right edge.

All five fail on their intended assertions. The four Rust regressions return 101; the production-browser bounds regression returns 1 (expected right <=375, received 392.61224365234375). Formatting, Clippy on both touched crates, the touched TypeScript check and diff checks pass. These review tests intentionally remain failing for the fix round.

The unmodified job head passed the complete scripts/verify fast, exit 0, before review tests were added. Its full output follows verbatim. Every Rust table row passed; TypeScript/build/transfer/protocol checks passed (39 protocol tests, 0 failed). No host-load exception was needed. Cargo.lock and crates/infraternal-shim/src/readiness.rs, plus the named descriptor ownership files, are byte-identical to dev's reviewed #255 version.

Static receipts on 8by64-compute02 reproduce head sizes 21,399,568 / 19,574,552 bytes. A fresh detached merge-base x86_64 build with the same pinned recipe measures 21,386,512 bytes, independently confirming +13,056 bytes. Both head images are stripped/static and meet their exact caps. The native x86_64 key-memory gate passed; the aarch64 runtime key-memory check was not executed on this x86_64 host, as the gate reports. No runtime performance claim is made.

Functional path probes passed for explicit and installed data paths, data-directory symlinks, safely quoted spaces/quotes/shell metacharacters, and missing-directory behavior. Public status and UI expose only the command. Shared-browser checks against production assets confirmed the plain/sudo display strings equal the argument passed to the clipboard API; token inputs stayed empty and console errors were absent. Permission refusal was simulated with private local fixtures, without accessing another account or installed service. Screenshots and detailed finding evidence are in the preceding comments.

Cleanup is verified: target directory deleted, temporary baseline worktree removed, review UI server PID 1507184 absent, shared review tab closed, and review/test ports 53252/53254/53255 closed on IPv4 and IPv6 loopback. The supplied review worktree and its pushed test branch remain.

verify-fast-head.log
review-checks.log
findings.md

baseline-static.log
size-comparison.log
head-static-sizes.json
cleanup.json

scripts/verify fast on job head 75baaecad, verbatim:


==> Repository artifact size gate
repository artifact gate: PASS (36 changed path(s), merge base 4a6202a52993)

==> Release deployment functional checks
.....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained
.Build deferred: host capacity limit reached
.........
----------------------------------------------------------------------
Ran 15 tests in 0.632s

OK
.
----------------------------------------------------------------------
Ran 1 test in 0.045s

OK
bun test v1.4.2 (744846f84)

scripts/release/deploy-review.test.ts:
REMOTE_ADMISSION unsigned_x86_payload=true refused=true
(pass) remote admission refuses an x86 payload outside the signed manifest [96.08ms]
{"state": "deployed", "ca_unlocked": true}
WEB_ONLY_RECORD candidate_binary_recorded=false
(pass) web-only deployment does not record the candidate as the running binary [100.90ms]
ALIAS_RECOVERY restart_requests=2
(pass) alias restoration failure still requests the retained warm rollback [104.87ms]

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [305.00ms]
PASS proxy_forwarding samples=3 timed=false

==> fmt
(fmt: 2s)

==> VT native fmt
(VT native fmt: 0s)

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
   Compiling proc-macro2 v1.0.107
   Compiling unicode-ident v1.0.26
   Compiling quote v1.0.47
   Compiling libc v0.2.190
   Compiling serde_core v1.0.229
   Compiling autocfg v1.5.1
   Compiling memchr v2.8.3
   Compiling cfg_aliases v0.2.2
   Compiling utf8parse v0.2.2
   Compiling cfg-if v1.0.5
   Compiling memoffset v0.9.1
   Compiling anstyle-parse v1.0.0
   Compiling nix v0.30.1
   Compiling zmij v1.0.23
   Compiling is_terminal_polyfill v1.70.2
   Compiling colorchoice v1.0.5
   Compiling anstyle-query v1.1.5
   Compiling anstyle v1.0.14
   Compiling bitflags v2.13.2
   Compiling strsim v0.11.1
   Compiling anstream v1.0.0
   Compiling clap_lex v1.1.1
   Compiling getrandom v0.4.3
   Compiling serde v1.0.229
   Compiling syn v3.0.6
   Compiling arrayvec v0.7.8
   Compiling serde_json v1.0.151
   Compiling itoa v1.0.18
   Compiling heck v0.5.0
   Compiling vte v0.15.0
   Compiling clap_builder v4.6.7
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api)
   Compiling errno v0.3.14
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim)
   Compiling thiserror v2.0.21
   Compiling signal-hook-registry v1.4.8
   Compiling mio v1.2.4
   Compiling socket2 v0.6.5
   Compiling bytes v1.12.1
   Compiling serde_derive v1.0.229
   Compiling clap_derive v4.6.7
   Compiling tokio-macros v2.7.2
   Compiling thiserror-impl v2.0.21
   Compiling pin-project-lite v0.2.17
   Compiling unicode-width v0.2.2
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal)
   Compiling tokio v1.53.3
   Compiling clap v4.6.7
   Compiling vt100 v0.16.2
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-status)
   Compiling uuid v1.27.0
warning: function `print_progress` is never used
   --> crates/infraternal/src/cli/output.rs:592:8
    |
592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) {
    |        ^^^^^^^^^^^^^^
    |
    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default

warning: function `write_output` is never used
   --> crates/infraternal/src/cli/output.rs:616:8
    |
616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) {
    |        ^^^^^^^^^^^^

warning: `infraternal` (bin "infraternal" test) generated 2 warnings
    Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 12s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal-fe1c5abfd68beec3)

running 37 tests
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok

test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s

   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.14
   Compiling serde v1.0.229
   Compiling syn v3.0.6
   Compiling syn v2.0.119
   Compiling futures-core v0.3.34
   Compiling memchr v2.8.3
   Compiling serde_core v1.0.229
   Compiling once_cell v1.21.4
   Compiling cc v1.6.0
   Compiling stable_deref_trait v1.2.1
   Compiling version_check v0.9.5
   Compiling pkg-config v0.3.34
   Compiling generic-array v0.14.7
   Compiling typenum v1.20.1
   Compiling vcpkg v0.2.15
   Compiling log v0.4.34
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling tracing-core v0.1.36
   Compiling icu_normalizer_data v2.3.0
   Compiling tracing-attributes v0.1.31
   Compiling serde_derive v1.0.229
   Compiling synstructure v0.14.0
   Compiling displaydoc v0.2.7
   Compiling zerovec-derive v0.11.6
   Compiling utf8_iter v1.0.4
   Compiling block-buffer v0.10.4
   Compiling crypto-common v0.1.7
   Compiling icu_properties_data v2.3.0
   Compiling zerofrom-derive v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling tokio-macros v2.7.2
   Compiling smallvec v1.16.2
   Compiling tracing v0.1.44
   Compiling tokio v1.53.3
   Compiling percent-encoding v2.3.2
   Compiling zerofrom v0.1.8
   Compiling futures-sink v0.3.34
   Compiling cpufeatures v0.2.17
   Compiling yoke v0.8.3
   Compiling futures-task v0.3.34
   Compiling futures-io v0.3.34
   Compiling subtle v2.6.1
   Compiling zerovec v0.11.8
   Compiling zerotrie v0.2.5
   Compiling scopeguard v1.2.0
   Compiling slab v0.4.12
   Compiling equivalent v1.0.2
   Compiling lock_api v0.4.14
   Compiling form_urlencoded v1.2.2
   Compiling libc v0.2.190
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling parking_lot_core v0.9.12
   Compiling thiserror-impl v2.0.21
   Compiling num-traits v0.2.19
   Compiling hashbrown v0.17.1
   Compiling icu_collections v2.3.0
   Compiling icu_locale_core v2.3.0
   Compiling thiserror v2.0.21
   Compiling indexmap v2.14.2
   Compiling icu_provider v2.3.1
   Compiling digest v0.10.7
   Compiling crossbeam-utils v0.8.23
   Compiling futures-macro v0.3.34
   Compiling foldhash v0.1.5
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling allocator-api2 v0.2.21
   Compiling futures-util v0.3.34
   Compiling hashbrown v0.15.5
   Compiling idna_adapter v1.2.2
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling hashlink v0.10.0
   Compiling sha2 v0.10.9
   Compiling crossbeam-queue v0.3.14
   Compiling event-listener v5.4.2
   Compiling crc v3.4.0
   Compiling idna v1.1.0
   Compiling mio v1.2.4
   Compiling socket2 v0.6.5
   Compiling spin v0.9.9
   Compiling libsqlite3-sys v0.30.1
   Compiling openssl-src v300.6.1+3.6.3
   Compiling ryu v1.0.23
   Compiling serde_json v1.0.151
   Compiling openssl-sys v0.9.117
   Compiling url v2.5.8
   Compiling parking_lot v0.12.5
   Compiling futures-channel v0.3.34
   Compiling futures-intrusive v0.5.0
   Compiling either v1.18.0
   Compiling hex v0.4.3
   Compiling base64 v0.22.1
   Compiling rand_core v0.10.1
   Compiling futures-executor v0.3.34
   Compiling atoi v2.0.0
   Compiling serde_urlencoded v0.7.1
   Compiling flume v0.11.1
   Compiling getrandom v0.4.3
   Compiling zerocopy v0.8.60
   Compiling tokio-stream v0.1.19
   Compiling zerocopy-derive v0.8.60
   Compiling getrandom v0.2.17
   Compiling sqlx-core v0.8.6
   Compiling dotenvy v0.15.7
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api)
   Compiling foreign-types-shared v0.1.1
   Compiling openssl v0.10.81
   Compiling foreign-types v0.3.2
   Compiling openssl-macros v0.1.1
   Compiling http v1.5.0
   Compiling nix v0.30.1
   Compiling ring v0.17.14
   Compiling getrandom v0.3.4
   Compiling sqlx-sqlite v0.8.6
   Compiling uuid v1.27.0
   Compiling zeroize v1.9.0
   Compiling untrusted v0.9.0
   Compiling num-conv v0.2.2
   Compiling minimal-lexical v0.2.1
   Compiling ppv-lite86 v0.2.21
   Compiling thiserror v1.0.69
   Compiling sqlx-macros-core v0.8.6
   Compiling httparse v1.10.1
   Compiling time-core v0.1.9
   Compiling time-macros v0.2.32
   Compiling nom v7.1.3
   Compiling sqlx-macros v0.8.6
   Compiling rand_core v0.9.5
   Compiling rustls-pki-types v1.15.1
   Compiling http-body v1.1.0
   Compiling sqlx v0.8.6
   Compiling thiserror-impl v1.0.69
   Compiling synstructure v0.13.2
   Compiling tinyvec v1.13.3
   Compiling deranged v0.5.8
   Compiling powerfmt v0.2.1
   Compiling cpufeatures v0.3.1
   Compiling rustls v0.23.46
   Compiling chacha20 v0.10.2
   Compiling rustls-webpki v0.103.16
   Compiling asn1-rs-derive v0.5.1
   Compiling rusticata-macros v4.1.0
   Compiling rand_chacha v0.9.0
   Compiling quinn-udp v0.5.16
   Compiling tokio-util v0.7.19
   Compiling time v0.3.55
   Compiling asn1-rs-impl v0.2.0
   Compiling data-encoding v2.11.1
   Compiling tower-service v0.3.3
   Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-protocol)
   Compiling tokio-openssl v0.6.5
   Compiling rand v0.9.5
   Compiling rand v0.10.3
   Compiling vte v0.15.0
   Compiling rand_core v0.6.4
   Compiling rand_pcg v0.10.2
   Compiling clap_derive v4.6.7
   Compiling quinn v0.11.12
   Compiling num-integer v0.1.47
   Compiling base64 v0.21.7
   Compiling pastey v0.1.1
   Compiling rustc-hash v2.1.3
   Compiling fnv v1.0.7
   Compiling asn1-rs v0.6.2
   Compiling oid-registry v0.7.1
   Compiling httpdate v1.0.3
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim)
   Compiling lru-slab v0.1.3
   Compiling lazy_static v1.5.1
   Compiling try-lock v0.2.5
   Compiling atomic-waker v1.1.2
   Compiling want v0.3.2
   Compiling h2 v0.4.19
   Compiling clap v4.6.7
   Compiling base64urlsafedata v0.5.5
   Compiling num-bigint v0.4.8
   Compiling tower-layer v0.3.3
   Compiling unicase v2.10.0
   Compiling mime v0.3.17
   Compiling rustversion v1.0.23
   Compiling webauthn-attestation-ca v0.5.5
   Compiling mime_guess v2.0.5
   Compiling der-parser v9.0.0
   Compiling quinn-proto v0.11.19
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-mesh)
   Compiling http-body-util v0.1.5
   Compiling half v2.7.1
   Compiling sha1 v0.10.7
   Compiling fs-err v3.3.2
   Compiling regex-syntax v0.8.11
   Compiling webauthn-rs-core v0.5.5
   Compiling sync_wrapper v1.0.2
   Compiling tungstenite v0.29.0
   Compiling serde_cbor_2 v0.13.0
   Compiling regex-automata v0.4.18
   Compiling hyper v1.11.1
   Compiling x509-parser v0.16.0
   Compiling webauthn-rs-proto v0.5.5
   Compiling rand_chacha v0.3.1
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/host-facts)
   Compiling hex-conservative v0.2.3
   Compiling hyper-util v0.1.21
   Compiling base64ct v1.8.3
   Compiling bitcoin_hashes v0.14.101
   Compiling password-hash v0.5.0
   Compiling rand v0.8.8
   Compiling matchers v0.2.0
   Compiling arc-swap v1.9.2
   Compiling tokio-tungstenite v0.29.0
   Compiling axum-core v0.5.6
   Compiling tower v0.5.3
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-server)
   Compiling blake2 v0.10.6
   Compiling tracing-serde v0.2.0
   Compiling tracing-log v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling thread_local v1.1.10
   Compiling matchit v0.8.4
   Compiling http-range-header v0.4.2
   Compiling nu-ansi-term v0.50.3
   Compiling argon2 v0.5.3
   Compiling tower-http v0.6.11
   Compiling tracing-subscriber v0.3.23
   Compiling bip39 v2.2.2
   Compiling axum v0.8.9
   Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/canvas)
   Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/release)
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal)
   Compiling vt100 v0.16.2
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/relay)
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/backup)
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-status)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/mesh)
   Compiling axum-server v0.8.0
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote)
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-agent)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 3m 48s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal-0a149f42b54b04db)

running 104 tests
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
{"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok
test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok
test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok

test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 8.29s

   Compiling displaydoc v0.2.7
   Compiling serde v1.0.229
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api)
   Compiling getrandom v0.2.17
   Compiling nix v0.30.1
   Compiling tracing-core v0.1.36
   Compiling tokio v1.53.3
   Compiling ring v0.17.14
   Compiling tinystr v0.8.4
   Compiling zerotrie v0.2.5
   Compiling zeroize v1.9.0
   Compiling icu_locale_core v2.3.0
   Compiling rustls-pki-types v1.15.1
   Compiling tracing v0.1.44
   Compiling icu_provider v2.3.1
   Compiling icu_collections v2.3.0
   Compiling rustls-webpki v0.103.16
   Compiling syn v2.0.119
   Compiling smallvec v1.16.2
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim)
   Compiling icu_normalizer v2.3.0
   Compiling rustls v0.23.46
   Compiling icu_properties v2.3.0
   Compiling quinn-udp v0.5.16
   Compiling idna_adapter v1.2.2
   Compiling openssl-macros v0.1.1
   Compiling uuid v1.27.0
   Compiling percent-encoding v2.3.2
   Compiling openssl v0.10.81
   Compiling form_urlencoded v1.2.2
   Compiling digest v0.10.7
   Compiling idna v1.1.0
   Compiling futures-core v0.3.34
   Compiling futures-util v0.3.34
   Compiling sha2 v0.10.9
   Compiling url v2.5.8
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/host-facts)
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-mesh)
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/relay)
   Compiling quinn-proto v0.11.19
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/backup)
   Compiling tokio-openssl v0.6.5
   Compiling quinn v0.11.12
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote)
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-agent)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 44s
     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_agent-f4f0113fecf22aee)

running 1 test
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 75 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_mesh-c7263890e5528429)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_ssh-b96e878b9907f3df)

running 1 test
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s

(CLI plugin compile-out: 475s)

==> clippy
    Checking cfg-if v1.0.5
    Checking libc v0.2.190
   Compiling jobserver v0.1.35
    Checking pin-project-lite v0.2.17
    Checking serde_core v1.0.229
    Checking memchr v2.8.3
    Checking bytes v1.12.1
    Checking itoa v1.0.18
   Compiling cc v1.6.0
    Checking typenum v1.20.1
    Checking once_cell v1.21.4
    Checking log v0.4.34
    Checking subtle v2.6.1
    Checking tracing-core v0.1.36
    Checking futures-core v0.3.34
    Checking zerofrom v0.1.8
    Checking generic-array v0.14.7
    Checking stable_deref_trait v1.2.1
    Checking yoke v0.8.3
    Checking getrandom v0.2.17
    Checking socket2 v0.6.5
    Checking errno v0.3.14
    Checking mio v1.2.4
    Checking smallvec v1.16.2
    Checking rand_core v0.6.4
    Checking signal-hook-registry v1.4.8
    Checking serde v1.0.229
    Checking tracing v0.1.44
    Checking crypto-common v0.1.7
    Checking num-traits v0.2.19
    Checking tokio v1.53.3
    Checking zerovec v0.11.8
    Checking futures-sink v0.3.34
    Checking slab v0.4.12
   Compiling crossbeam-utils v0.8.23
    Checking block-buffer v0.10.4
    Checking cpufeatures v0.2.17
    Checking writeable v0.6.4
    Checking tinystr v0.8.4
    Checking litemap v0.8.3
    Checking potential_utf v0.1.6
    Checking digest v0.10.7
    Checking icu_locale_core v2.3.0
    Checking zerotrie v0.2.5
    Checking utf8_iter v1.0.4
    Checking icu_collections v2.3.0
    Checking icu_provider v2.3.1
    Checking either v1.18.0
    Checking zmij v1.0.23
    Checking percent-encoding v2.3.2
    Checking equivalent v1.0.2
    Checking serde_json v1.0.151
    Checking icu_properties_data v2.3.0
    Checking icu_normalizer_data v2.3.0
   Compiling scopeguard v1.2.0
    Checking icu_normalizer v2.3.0
    Checking icu_properties v2.3.0
   Compiling lock_api v0.4.14
    Checking futures-task v0.3.34
    Checking hashbrown v0.17.1
    Checking futures-io v0.3.34
    Checking futures-util v0.3.34
    Checking form_urlencoded v1.2.2
    Checking indexmap v2.14.2
    Checking thiserror v2.0.21
    Checking idna_adapter v1.2.2
   Compiling libsqlite3-sys v0.30.1
   Compiling sha2 v0.10.9
    Checking idna v1.1.0
   Compiling parking_lot_core v0.9.12
   Compiling foldhash v0.1.5
   Compiling allocator-api2 v0.2.21
    Checking bitflags v2.13.2
   Compiling parking_lot v0.12.5
   Compiling hashbrown v0.15.5
    Checking url v2.5.8
    Checking futures-channel v0.3.34
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling crc v3.4.0
   Compiling crossbeam-queue v0.3.14
   Compiling event-listener v5.4.2
   Compiling hashlink v0.10.0
   Compiling futures-intrusive v0.5.0
   Compiling spin v0.9.9
   Compiling ryu v1.0.23
   Compiling flume v0.11.1
   Compiling serde_urlencoded v0.7.1
   Compiling futures-executor v0.3.34
   Compiling atoi v2.0.0
    Checking base64 v0.22.1
    Checking tokio-stream v0.1.19
   Compiling hex v0.4.3
    Checking sqlx-core v0.8.6
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api)
    Checking memoffset v0.9.1
   Compiling openssl-src v300.6.1+3.6.3
    Checking nix v0.30.1
    Checking rand_core v0.10.1
    Checking foreign-types-shared v0.1.1
    Checking getrandom v0.4.3
    Checking foreign-types v0.3.2
   Compiling openssl-sys v0.9.117
    Checking infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-protocol)
    Checking uuid v1.27.0
    Checking zeroize v1.9.0
    Checking utf8parse v0.2.2
    Checking anstyle v1.0.14
    Checking anstyle-parse v1.0.0
    Checking colorchoice v1.0.5
    Checking anstyle-query v1.1.5
    Checking is_terminal_polyfill v1.70.2
    Checking strsim v0.11.1
    Checking anstream v1.0.0
    Checking clap_lex v1.1.1
    Checking arrayvec v0.7.8
    Checking sqlx-sqlite v0.8.6
    Checking clap_builder v4.6.7
    Checking vte v0.15.0
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim)
   Compiling ring v0.17.14
    Checking untrusted v0.9.0
    Checking clap v4.6.7
    Checking rustls-pki-types v1.15.1
    Checking cpufeatures v0.3.1
    Checking tinyvec v1.13.3
    Checking chacha20 v0.10.2
    Checking rand_pcg v0.10.2
    Checking lru-slab v0.1.3
    Checking rustc-hash v2.1.3
    Checking rand v0.10.3
    Checking quinn-udp v0.5.16
    Checking zerocopy v0.8.60
    Checking http v1.5.0
    Checking getrandom v0.3.4
   Compiling rustls v0.23.46
   Compiling time-core v0.1.9
    Checking minimal-lexical v0.2.1
    Checking regex-syntax v0.8.11
   Compiling num-conv v0.2.2
    Checking rustls-webpki v0.103.16
   Compiling sqlx-macros-core v0.8.6
   Compiling time-macros v0.2.32
    Checking regex-automata v0.4.18
    Checking nom v7.1.3
   Compiling sqlx-macros v0.8.6
    Checking ppv-lite86 v0.2.21
    Checking half v2.7.1
    Checking sqlx v0.8.6
    Checking http-body v1.1.0
    Checking rand_core v0.9.5
    Checking deranged v0.5.8
    Checking powerfmt v0.2.1
    Checking rand_chacha v0.9.0
    Checking quinn-proto v0.11.19
    Checking infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-mesh)
    Checking infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/host-facts)
    Checking thiserror v1.0.69
    Checking rusticata-macros v4.1.0
    Checking httparse v1.10.1
    Checking tokio-util v0.7.19
    Checking data-encoding v2.11.1
    Checking tower-service v0.3.3
    Checking rand v0.9.5
    Checking time v0.3.55
    Checking num-integer v0.1.47
    Checking try-lock v0.2.5
    Checking fnv v1.0.7
    Checking httpdate v1.0.3
    Checking base64 v0.21.7
    Checking atomic-waker v1.1.2
    Checking lazy_static v1.5.1
    Checking h2 v0.4.19
    Checking num-bigint v0.4.8
    Checking base64urlsafedata v0.5.5
    Checking want v0.3.2
    Checking tower-layer v0.3.3
    Checking mime v0.3.17
    Checking quinn v0.11.12
   Compiling unicase v2.10.0
    Checking http-body-util v0.1.5
   Compiling mime_guess v2.0.5
    Checking asn1-rs v0.6.2
    Checking sha1 v0.10.7
    Checking sync_wrapper v1.0.2
    Checking webauthn-rs-proto v0.5.5
    Checking infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/release)
    Checking tungstenite v0.29.0
    Checking serde_cbor_2 v0.13.0
    Checking rand_chacha v0.3.1
    Checking oid-registry v0.7.1
    Checking der-parser v9.0.0
    Checking hex-conservative v0.2.3
    Checking base64ct v1.8.3
    Checking bitcoin_hashes v0.14.101
    Checking x509-parser v0.16.0
    Checking password-hash v0.5.0
    Checking rand v0.8.8
    Checking tokio-tungstenite v0.29.0
    Checking hyper v1.11.1
    Checking tower v0.5.3
    Checking axum-core v0.5.6
    Checking arc-swap v1.9.2
    Checking fs-err v3.3.2
    Checking sharded-slab v0.1.7
    Checking infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/canvas)
    Checking matchers v0.2.0
    Checking unicode-normalization v0.1.25
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-server)
    Checking hyper-util v0.1.21
    Checking blake2 v0.10.6
    Checking tracing-serde v0.2.0
    Checking serde_path_to_error v0.1.20
    Checking tracing-log v0.2.0
    Checking thread_local v1.1.10
    Checking http-range-header v0.4.2
    Checking nu-ansi-term v0.50.3
    Checking matchit v0.8.4
    Checking tower-http v0.6.11
    Checking argon2 v0.5.3
    Checking tracing-subscriber v0.3.23
    Checking bip39 v2.2.2
    Checking axum v0.8.9
   Compiling libfuzzer-sys v0.4.13
    Checking arbitrary v1.4.2
    Checking inout v0.1.4
    Checking cipher v0.4.4
    Checking universal-hash v0.5.1
    Checking opaque-debug v0.3.1
    Checking ctr v0.9.2
    Checking polyval v0.6.2
    Checking aes v0.8.4
    Checking hmac v0.12.1
    Checking ghash v0.5.1
    Checking aead v0.5.2
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal)
    Checking hkdf v0.12.4
    Checking infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/relay)
    Checking aes-gcm v0.10.3
    Checking infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/backup)
    Checking infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-status)
    Checking unicode-width v0.2.2
   Compiling crossbeam-epoch v0.9.21
   Compiling crossbeam-deque v0.8.8
   Compiling rayon-core v1.13.0
    Checking vt100 v0.16.2
    Checking plotters-backend v0.3.7
    Checking ciborium-io v0.2.2
    Checking plotters-svg v0.3.7
    Checking ciborium-ll v0.2.2
    Checking itertools v0.13.0
    Checking same-file v1.0.6
    Checking cast v0.3.0
    Checking walkdir v2.5.0
    Checking rayon v1.12.0
    Checking ciborium v0.2.2
    Checking plotters v0.3.7
    Checking regex v1.13.1
    Checking tinytemplate v1.2.1
    Checking anes v0.1.6
    Checking criterion-plot v0.6.0
    Checking oorandom v11.1.5
   Compiling infraternal-session v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-session)
    Checking criterion v0.7.0
   Compiling openssl v0.10.81
   Compiling tokio-openssl v0.6.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-core v0.5.5
    Checking infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/mesh)
    Checking axum-server v0.8.0
    Checking infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote)
    Checking webauthn-rs v0.5.5
    Checking infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-agent)
    Checking infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh)
    Checking infraternal-fuzz v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/fuzz)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 2m 26s
(clippy: 147s)

==> SSH runtime test helper
   Compiling tokio v1.53.3
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api)
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim)
   Compiling tokio-openssl v0.6.5
   Compiling quinn v0.11.12
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh)
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 14.45s
(SSH runtime test helper: 15s)

==> real-binary fixture paths
...
----------------------------------------------------------------------
Ran 3 tests in 0.007s

OK
(real-binary fixture paths: 0s)

==> test
   Compiling crypto-common v0.1.7
   Compiling crossbeam-utils v0.8.23
   Compiling either v1.18.0
   Compiling crossbeam-queue v0.3.14
   Compiling libsqlite3-sys v0.30.1
   Compiling digest v0.10.7
   Compiling tokio-stream v0.1.19
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api)
   Compiling sha2 v0.10.9
   Compiling openssl-sys v0.9.117
   Compiling ring v0.17.14
   Compiling regex-automata v0.4.18
   Compiling tokio-util v0.7.19
   Compiling sqlx-core v0.8.6
   Compiling h2 v0.4.19
   Compiling openssl v0.10.81
   Compiling rustls-webpki v0.103.16
   Compiling sqlx-sqlite v0.8.6
   Compiling sha1 v0.10.7
   Compiling rustls v0.23.46
   Compiling tungstenite v0.29.0
   Compiling tokio-tungstenite v0.29.0
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim)
   Compiling tokio-openssl v0.6.5
   Compiling sqlx-macros-core v0.8.6
   Compiling hyper v1.11.1
   Compiling webauthn-attestation-ca v0.5.5
   Compiling fs-err v3.3.2
   Compiling tower v0.5.3
   Compiling webauthn-rs-core v0.5.5
   Compiling matchers v0.2.0
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-server)
   Compiling quinn-proto v0.11.19
   Compiling sqlx-macros v0.8.6
   Compiling blake2 v0.10.6
   Compiling tower-http v0.6.11
   Compiling hyper-util v0.1.21
   Compiling sqlx v0.8.6
   Compiling argon2 v0.5.3
   Compiling axum v0.8.9
   Compiling axum-server v0.8.0
   Compiling tracing-subscriber v0.3.23
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-mesh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/host-facts)
   Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/release)
   Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/canvas)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/mesh)
   Compiling webauthn-rs v0.5.5
   Compiling inout v0.1.4
   Compiling universal-hash v0.5.1
   Compiling opaque-debug v0.3.1
   Compiling cipher v0.4.4
   Compiling hmac v0.12.1
   Compiling polyval v0.6.2
   Compiling quinn v0.11.12
   Compiling ctr v0.9.2
   Compiling aes v0.8.4
   Compiling ghash v0.5.1
   Compiling aead v0.5.2
   Compiling hkdf v0.12.4
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/backup)
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/relay)
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-status)
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal)
   Compiling crossbeam-epoch v0.9.21
   Compiling aes-gcm v0.10.3
   Compiling plotters-backend v0.3.7
   Compiling ciborium-io v0.2.2
   Compiling itertools v0.13.0
   Compiling crossbeam-deque v0.8.8
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote)
   Compiling ciborium-ll v0.2.2
   Compiling plotters-svg v0.3.7
   Compiling rayon-core v1.13.0
   Compiling same-file v1.0.6
   Compiling cast v0.3.0
   Compiling walkdir v2.5.0
   Compiling plotters v0.3.7
   Compiling ciborium v0.2.2
   Compiling rayon v1.12.0
   Compiling criterion-plot v0.6.0
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-agent)
   Compiling regex v1.13.1
   Compiling tinytemplate v1.2.1
   Compiling oorandom v11.1.5
   Compiling anes v0.1.6
   Compiling infraternal-session v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-session)
   Compiling criterion v0.7.0
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh)
   Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-protocol)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 3m 36s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal-6fb500f025e14506)

running 104 tests
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
{"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok
test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok
test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok

test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 8.58s

     Running tests/agent_daemon.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/agent_daemon-07be34f79332b165)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.60s

     Running tests/agent_queues.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/agent_queues-230c59a5cd906663)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.94s

     Running tests/agent_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/agent_review-84c86525ad0fea2c)

running 8 tests
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 14.78s

     Running tests/agent_sessions.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/agent_sessions-03d7a30371f14a27)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.45s

     Running tests/cli_envelope.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/cli_envelope-80a08214b8a5d410)

running 8 tests
test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok
test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok
test bare_infraternal_is_the_overview_and_points_to_help ... ok
test a_missing_server_is_not_found_exit_4 ... ok
test status_exits_0_on_a_machine_with_nothing_installed ... ok
test read_only_commands_answer_in_the_envelope ... ok
test status_exits_5_when_something_that_should_run_is_down ... ok
test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/cli_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/cli_review-3291d67404d26089)

running 17 tests
test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok
test a_group_with_one_command_says_so_in_the_singular ... ok
test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok
test a_dry_run_plan_keeps_its_line_breaks ... ok
test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok
test an_unknown_skill_is_not_found_exit_4 ... ok
test no_compiled_python_is_tracked ... ok
test a_malformed_host_id_is_a_usage_error_exit_2 ... ok
test a_dumb_terminal_gets_neither_colour_nor_marks ... ok
test a_subcommand_does_not_advertise_options_it_ignores ... ok
test root_help_fits_80_columns ... ok
test root_help_lists_server_init ... ok
test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok
test json_help_and_version_are_envelopes_too ... ok
test user_facing_text_never_says_agent_alone ... ok
test an_empty_no_color_is_ignored ... ok
test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok

test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s

     Running tests/cli_review_r2.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/cli_review_r2-23cf4131d1988fa6)

running 11 tests
test a_paged_listing_is_still_one_envelope ... ok
test a_failed_later_page_emits_only_the_failure_envelope ... ok
test status_text_does_not_call_an_unanswered_unit_not_running ... ok
test an_unknown_skill_does_not_echo_what_was_typed ... ok
test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok
test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok
test three_pages_preserve_order_and_only_the_final_cursor ... ok
test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok
test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok
test ctrl_c_in_a_script_loop_stops_the_loop ... ok
test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.02s

     Running tests/cli_review_r3.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/cli_review_r3-be7640ccd9aa03ea)

running 4 tests
test signal_fixture ... ok
test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok
test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok
test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/cli_review_r3_arguments.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/cli_review_r3_arguments-212cdc3ed0a05eb1)

running 1 test
test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/idle_canary.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/idle_canary-5d1908992b4ff473)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.10s

     Running tests/key_memory.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/key_memory-4d4f4cc5516ea6b4)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/remote_output.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/remote_output-9105ebfda268049c)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/session_bounds_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/session_bounds_review-ea0b23d91d052373)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.93s

     Running tests/session_exit_events.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/session_exit_events-d98ed6fbf136b0d7)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.79s

     Running tests/session_retention.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/session_retention-8b939159efa2d0ab)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.54s

     Running tests/setup_output.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/setup_output-702013ba02916bdd)

running 3 tests
test unreadable_system_service_data_prints_one_sudo_command_line ... ok
test setup_output_keeps_legacy_and_versioned_readers ... ok
test setup_token_finds_the_data_dir_from_a_system_service_without_flags ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/shim.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/shim-30417b82dff06cc8)

running 24 tests
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok
test double_fork_survives_parent_death ... ok
test attached_backpressure_and_detached_progress ... ok
test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok
test independent_shared_writers_wait_for_the_same_global_queue ... ok
test parked_shared_writer_does_not_stop_detached_pty_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok
test replacement_connection_and_malformed_limit ... ok
test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok
test shared_writer_coexists_and_replayed_input_is_written_once ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test shared_writer_restores_durable_geometry_after_another_writer_types ... ok
test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test legacy_output_subscription_unblocks_deferred_shared_input ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.49s

     Running tests/ssh_askpass.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/ssh_askpass-16fbd1b96c4af4ca)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.97s

     Running tests/ssh_connector_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/ssh_connector_policy-dd9b13bec3dd9638)

running 1 test
test connector_preserves_configured_bind_address_refusal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.02s

     Running tests/user_host.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/user_host-4bee401db2fda08c)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/vt_credit.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/vt_credit-dd383ed03c38b306)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.67s

     Running tests/vt_reconnect.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/vt_reconnect-a0009109e49304ab)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.60s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_agent-b93583fbcebe1fd6)

running 168 tests
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok
test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok
test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok
test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::reply_capacity_tests::full_reply_reservations_cannot_spend_keyboard_capacity ... ok
test daemon::session_commands::reply_capacity_tests::sixteen_replies_and_eight_typing_commands_retain_their_order ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok
test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok
test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok
test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok
test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok
test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok
test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok
test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok
test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok
test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok
test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok
test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok
test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok
test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok
test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok
test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok
test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok
test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok
test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok
test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok
test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok
test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok
test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok
test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok
test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok
test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok
test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok
test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok
test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok
test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok
test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok
test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok
test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok
test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok
test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged.
test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged.
test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok
test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock.
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok
test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok
test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok
test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok
test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok
test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace.
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok
test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok

test result: ok. 148 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 11.25s

     Running tests/transport.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/transport-8f7e25a883145d8d)

running 3 tests
test replacing_the_callers_descriptor_cannot_redirect_registered_io ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_mesh-7fce9c81f3753067)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/default_arrow-718a820b17567011)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/properties.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/properties-9b39f53037898c73)

running 14 tests
test exhausted_versions_reject_mutations_without_changing_state ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test names_versions_and_backend_status ... ok
test directional_grants_union_and_minimal_updates ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.16s

     Running tests/rotation_time.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/rotation_time-d8fd70ac7360bfd5)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_api-49f4d2771da6f777)

running 32 tests
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test host_name::tests::addresses_and_hostnames_give_a_machine_name ... ok
test present::tests::tint_wraps_text_after_padding_is_measured ... ok
test host_name::tests::odd_and_overlong_hostnames_give_no_name ... ok
test host_name::tests::numeric_invalid_and_unnamed_inputs_give_no_name ... ok
test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes.
test server_path::tests::legacy_link_omits_the_optional_source_port ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok
test present::tests::a_table_has_a_header_only_from_two_rows ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok
test present::tests::pairs_align_values_and_wrap_under_them ... ok
test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok

test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/routing_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/routing_review-6f6c1a928eb26a7f)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_backup-9fdc1ecb14af9cc8)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_canvas-1446da2b8a090ad7)

running 12 tests
test model::tests::reference_document_has_strict_shape_and_bounds ... ok
test reducer::tests::nullable_resize_preserves_existing_values_and_absent_fields ... ok
test reducer::tests::sample_corpus_preserves_strict_variant_fields_and_round_trips ... ok
test reducer::tests::concurrent_builtin_view_creation_preserves_existing_contents ... ok
test socket::tests::descriptor_declares_server_only_actions_and_strict_subscription ... ok
test model::tests::graph_pin_coordinates_include_both_limits_but_refuse_the_next_integer ... ok
test socket::tests::result_json_preserves_both_wire_shapes ... ok
test model::tests::host_id_requires_canonical_lowercase_hyphenated_text ... ok
test reducer::tests::split_divides_only_its_own_band ... ok
test reducer::tests::view_metadata_targets_and_column_neighbours_are_semantic ... ok
test reducer::tests::repeated_open_close_does_not_exhaust_column_capacity ... ok
test reducer::tests::independent_edits_commute_and_close_wins_in_both_orders ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_host_facts-8ccf6df635e66a77)

running 14 tests
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::static_facts_report_the_machines_hostname ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_mesh-27583060726d1618)

running 76 tests
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok
test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok
test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok
test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok
test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok
test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test node_actions::peer_page_tests::poll_cost ... ignored, measurement
test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok
test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN.
test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok
test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok
test node_coordination::tests::legacy_host_daemon_and_ip_record_do_not_leave_a_uuid_mesh_name ... ok
test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_presentation::tests::a_wide_table_stays_within_the_width ... ok
test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok
test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok
test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok
test node_presentation::tests::status_explains_the_observed_server_transport ... ok
test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers.
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok
test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok
test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok
test node_coordination::tests::a_name_a_person_chose_is_kept ... ok
test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok
test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes.
test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_coordination::tests::placeholder_names_become_the_machines_names ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok
test presence::tests::a_page_cursor_is_followed ... ok
test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok
test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok
test presence::tests::an_unreadable_node_is_no_reading ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok
test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok
test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok
test presence::tests::replace_reports_only_visible_changes ... ok
test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok
test presence::tests::the_edge_of_the_session_window_is_still_online ... ok
test presence::tests::traffic_proves_a_session_until_it_ends ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok
test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok
test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok
test node_coordination::tests::two_hosts_reporting_the_same_hostname_receive_distinct_names ... ok
test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok
test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok
test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok

test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 0.69s

     Running tests/access_updates.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/access_updates-401a785178272a85)

running 8 tests
test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace
test compact_identity_support_requires_an_explicit_strict_probe ... ok
test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok
test range_objects_reject_unknown_duplicate_and_positional_fields ... ok
test default_tightening_at_1000_peers_fits_one_round_trip ... ok
test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok

test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/authorized_local_binding.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/authorized_local_binding-9eb78243673aa0ef)

running 2 tests
test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.
test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/canonical_host_binding.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canonical_host_binding-77332b5113aa5170)

running 1 test
test enrollment_requires_canonical_host_uuid_spelling ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

     Running tests/configuration.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/configuration-edd5af664e4aa790)

running 5 tests
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok
test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok
test edition_default_is_explicit_and_build_selected ... ok
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s

     Running tests/kernel.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/kernel-ae923fd8446e7953)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/naming.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/naming-7ef77dd298644e0e)

running 4 tests
test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok
test the_servers_names_are_kept_for_the_server ... ok
test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok
test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.45s

     Running tests/policy_enrollment_binding.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/policy_enrollment_binding-109d95c10f4ea94b)

running 4 tests
test refused_enrollment_preserves_removal_and_revision ... ok
test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok
test noncanonical_host_binding_is_refused ... ok
test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running tests/policy_enrollment_identity.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/policy_enrollment_identity-f0cf7a0229e540f5)

running 1 test
test unbound_enrollment_public_key_is_not_host_authority ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/policy_snapshot_ordering.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/policy_snapshot_ordering-7cc2ac94da47cd98)

running 6 tests
test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.
test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/presence.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/presence-3e1bc5e55745d7e3)

running 2 tests
test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok
test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s

     Running tests/restart_route_ownership.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/restart_route_ownership-0dc4cc52f478fbf8)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_authorized_reenrollment.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_authorized_reenrollment-7a5ac950aac5a6a3)

running 2 tests
test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.
test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_endpoint_transaction-0ef0c911cceaab22)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_firewall_marker.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_firewall_marker-c4dbb35430ae2de6)

running 2 tests
test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173.
test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_ingress_translation-c0a4032b0502fe02)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_local_delivery-1712a7f25b19bf51)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_presence_r4.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_mesh_presence_r4-b35fd343e12c696d)

running 3 tests
test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok
test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok
test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/review_mesh_view_truth.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_mesh_view_truth-62e9d7f28a99b9eb)

running 6 tests
test an_address_that_is_an_ip_never_becomes_a_name ... ok
test a_host_record_name_beats_another_machines_reported_hostname ... ok
test a_remote_machine_cannot_take_the_servers_hostname ... ok
test a_remote_machine_cannot_be_called_server ... ok
test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok
test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.29s

     Running tests/review_mesh_view_truth_r2.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_mesh_view_truth_r2-f6106bc26caa5acf)

running 9 tests
test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok
test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236)
test a_hex_ipv4_spelling_never_becomes_a_name ... ok
test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok
test a_viewer_without_host_facts_still_sees_distinct_names ... ok
test no_viewer_sees_a_remote_machine_called_server ... ok
test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok
test a_person_can_take_a_name_a_machine_reported ... ok
test evidence_migrations_0026_and_0029_upgrade_a_realistic_database_without_churn ... ok

test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.37s

     Running tests/review_mesh_view_truth_r3.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_mesh_view_truth_r3-acc7217987659c70)

running 5 tests
test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok
test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok
test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok
test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok
test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s

     Running tests/review_mesh_view_truth_r4.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_mesh_view_truth_r4-c8f1176c83a6a2a1)

running 7 tests
test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok
test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok
test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok
test evidence_server_hostname_moves_only_with_server_rename_authority ... ok
test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok
test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok
test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.67s

     Running tests/review_restart_routes.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_restart_routes-012bc6e19af8712e)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_retire_ownership.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_retire_ownership-7e7abe5e49e18a66)

running 7 tests
test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft.
test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace.
test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace.
test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft.

test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_reverse_recreation.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_reverse_recreation-ba8322a4b4589131)

running 4 tests
test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.

test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_revoked_host_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_revoked_host_policy-8f0b434cc4a6f49e)

running 1 test
test revoked_host_is_not_retained_in_compiled_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/review_route_inventory.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_route_inventory-db2612871fb84dbf)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_route_scope-7a63cc3e13aa42db)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_shutdown_budget-e6060242e37c449a)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_shutdown_restart-90e3bdbafd24755a)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/settings-b0c907b6b74ba896)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/store.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/store-0f17df0f12b6f327)

running 6 tests
test required_server_membership_cannot_be_deleted ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test absent_discovery_preserves_the_last_known_endpoint ... ok
test attach_cancelled_at_any_await_leaves_the_store_writable ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_relay-d3de297fc8337bde)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_release-1d54d564a3117987)

running 8 tests
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test latest::tests::cancellation_joins_verification ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.56s

     Running tests/review_pool.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_pool-51aabd0e805c8271)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.64s

     Running tests/review_restart.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_restart-c5f9f9cb62051e16)

running 4 tests
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification
test lookup_creates_private_staging_under_owner_restrictive_umask ... ok
test restarted_latest_reclaims_metadata_after_process_stop ... ok

test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 3.42s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_remote-ecf43ccc280cdfc1)

running 114 tests
test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance.
test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok
test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok
test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok
test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok
test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok
test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok
test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok
test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok
test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok
test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok
test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok
test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok
test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok
test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok
test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok
test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok
test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok
test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok
test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok
test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok
test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok
test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok
test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok
test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok
test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock
test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok
test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok
test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok
test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok
test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok
test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok
test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok
test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok
test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok
test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance.
test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok
test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok
test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok
test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok
test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers.
test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok
test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok
test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok
test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok
test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok
test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok
test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok
test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections.
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence.
test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections.
test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections.
test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok
test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok
test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock.
test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok
test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok
test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline.
test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok
test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok
test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok
test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok
test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok
test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok
test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok
test runtime_lock::tests::dump_datagrams_split_exactly ... ok
test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok
test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test
2
test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... ok
test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok
test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok
test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok
test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok
test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok
test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok

running 1 test
test runtime_lock::tests::split_device_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.01s

test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok
test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok
test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test
test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok
test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok
test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok
test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok
test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok

running 1 test
test runtime_lock::tests::foreign_inode_twin_inner ... test runtime_lock::tests::after_close_waits_for_a_slow_socket_snapshot ... ok
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s

test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... ok
test uninstall::tests::review_planted_plan_is_never_followed ... ok
test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok
test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok
test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok

test result: ok. 99 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 5.56s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_ssh-17b36253c8d69c86)

running 49 tests
test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok
test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok
test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok
test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test auth_order::tests::pending_forwards_the_caller_deadline_to_its_selected_session ... ok
test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test bootstrap::proof_tests::review_commit_clamps_outliers_and_releases_immediately ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok
test bootstrap::proof_tests::review_stalled_commit_cannot_outlive_attempt_cap ... ok
test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok
test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok
test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok
test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only
test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok
test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok
test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok
test install::tests::transfer_caps_accept_only_the_fixed_record ... ok
test payload::tests::settings_changes_keep_at_most_four_entries ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok
test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok
test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok
test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok
test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok
test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok
test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok
test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok
test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok
test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok
test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok
test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok
test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.99s

     Running tests/already_added_breakit.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/already_added_breakit-e90e2f4c29cb707e)

running 1 test
test a_host_key_challenge_never_serializes_as_a_host_id ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/auth_order.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/auth_order-9968d66820e505cb)

running 11 tests
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test manual_method_trust_refusal_never_loads_later_credentials ... ok
test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok
test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/build_removal.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/build_removal-9eec37b95ad57c8e)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.36s

     Running tests/concurrency.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/concurrency-f30db03603f4997a)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok
test component_off_retires_a_real_native_helper ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/config_isolation.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/config_isolation-9a944d95ba4eed2e)

running 2 tests
test synthetic_master_socket_is_private_at_creation ... ok
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/credentials.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/credentials-6e4e4044489fb506)

running 4 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test kernel_running_helper_is_materialized_in_its_private_scope ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.57s

     Running tests/diagnostics.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/diagnostics-f0e6f7e48b04f404)

running 12 tests
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok
test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok
test control_probe_statuses_preserve_actionable_setup_messages ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/event_metadata.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/event_metadata-8524db180f9a16df)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/foreground-10281428fe728d1d)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.59s

     Running tests/host_trust.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/host_trust-50a4a769c45122d1)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/install-42c84fd1d4c4d48f)

running 95 tests
test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok
test buffering_setup_reader_receives_no_payload_until_selection ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test breakit2_rollback_preserves_foreign_unit_new ... ok
test breakit2_rollback_preserves_foreign_launcher_new ... ok
test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok
test active_transaction_is_live_between_ssh_setup_commands ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test compound_join_failure_preserves_the_original_status_and_boundary ... ok
test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok
test compound_restaging_refuses_a_foreign_journal_before_upload ... ok
test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok
test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok
test compound_setup_keeps_owned_rollback_and_linger_warning ... ok
test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok
test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok
test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok
test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok
test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok
test early_staging_preserves_canonical_foreign_root_refusal ... ok
test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok
test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok
test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok
test commit_signal_retains_journal_until_proof_and_on_cancel ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok
test framed_join_refusal_keeps_status_separate_from_upload ... ok
test crash_mid_install_can_roll_back_and_retry ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok
test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok
test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test installed_infraternal_agent_always_restarts_without_start_limit ... ok
test full_payload_restaging_preserves_the_running_session_build ... ok
test interrupted_acquisition_cleanup_receipt_can_resume ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok
test missing_payload_preserves_the_bootstrap_binary_remedy ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok
test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok
test payload_reuse_never_adopts_a_foreign_cache_directory ... ok
test partial_full_upload_rebridges_from_a_verified_image ... ok
test known_failed_setup_finishes_without_a_second_confirmation ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test reported_cache_digest_selects_reuse_without_sending_payload ... ok
test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ignored, scripts/test-ssh-inode-reuse reports unsupported filesystems as ignored
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok
test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534
test retry_resends_payload_when_cache_content_changes ... ok
test review_live_relative_control_socket_preserves_its_receipt ... ok
test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok
test retry_reuses_verified_payload_after_owned_rollback ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test setup_transaction_holds_a_live_lock_between_shell_commands ... ok
test review_restart_recovers_cleanup_after_base_retirement ... ok
test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok
test review_restart_recovers_cleanup_after_owner_retirement ... ok
test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok
test session_restaging_uses_one_compound_command ... ok
test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok
test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok
test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok
test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok
test restart_recovers_partial_stage_retirement ... ok
test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok
test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok

test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 12.87s

     Running tests/mesh_ssh.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/mesh_ssh-2fa83dcf733d059a)

running 1 test
test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/model.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/model-8dc28d474cf55d69)

running 6 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/payload_source-8da7588b1b1e7c2a)

running 2 tests
test verification_failure_names_step_and_stops_before_upload ... ok
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/previous_attempt_liveness_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/previous_attempt_liveness_review-ce46fa87480131ee)

running 1 test
test home_alias_keeps_open_setup_descriptor_live ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s

     Running tests/previous_attempt_shell.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/previous_attempt_shell-b9d97aec39edc4d4)

running 1 test
test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.92s

     Running tests/probe_check.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/probe_check-376aad85da0f0af1)

running 3 tests
test breakit2_no_systemd_names_the_required_manager ... ok
test shell_startup_refusal_names_an_interactive_only_remedy ... ok
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/process.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/process-c3eab8acd9e98988)

running 10 tests
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test unavailable_negotiated_codec_never_sends_invitation ... ok
test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test negotiated_sources_require_an_exact_receipt_before_private_input ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test declared_payload_flows_before_receipts_and_private_input_waits ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.04s

     Running tests/proxy_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/proxy_policy-ae5cb2b308a06ccf)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/publication.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/publication-0d82e771a08c3f68)

running 4 tests
test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok
test refused_publication_reports_failure_to_the_waiting_wizard ... ok
test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok
test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/real_ssh.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/real_ssh-bf1648c924584992)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/recovery_support.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/recovery_support-683687d40ea38ce9)

running 12 tests
test cleanup_script_requires_the_shipped_helper_level ... ok
test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok
test private_legacy_control_socket_preserves_receipt ... ok
test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image
test legacy_control_socket_in_spaced_home_preserves_receipt ... ok
test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok
test review_bound_control_socket_before_listen_preserves_receipt ... ok
test legacy_control_socket_in_newline_home_preserves_receipt ... ok
test review_live_session_socket_in_newline_home_blocks_cleanup ... ok
test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok
test review_live_session_socket_in_plain_home_blocks_cleanup ... ok
test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.90s

     Running tests/shadow_banner.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/shadow_banner-ec8803577a2b0cd0)

running 1 test
test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/shell_quoting.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/shell_quoting-e07d7690574ed5f8)

running 1 test
test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/single_connection-628041854be37518)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/source_completeness-4d7c035c7195b1ce)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/trust_round2-e8646687aedada12)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 8 tests
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_server-f1c601004c6d4da6)

running 685 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::migration_data_tests::original_migration_metadata_and_checksums_are_unchanged ... ok
test auth::migration_data_tests::quoted_text_and_comment_looking_literals_keep_their_values ... ok
test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::migration_data_tests::dev_v29_and_production_v30_upgrade_without_retagging_or_losing_ownership ... ok
test auth::migration_data_tests::fresh_schemas_defaults_indexes_and_foreign_keys_match_original_sql ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_accepts_legacy_and_job_scoped_roots ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_rejects_unscoped_and_escaping_paths ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::canvas::canvas_real_socket_commits_and_runtime_disable_preserve_control ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok
test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok
test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok
test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok
test auth::tests::socket_tests::close_logging::revocation_wake_on_busy_store_logs_authority_unavailable_not_resume_refused ... ok
test auth::tests::socket_tests::close_logging::revoked_busy_wake_records_stream_end_within_the_existing_wait ... ok
test auth::tests::socket_tests::close_logging::revoked_session_during_transient_stall_logs_resume_refused ... ok
test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok
test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::close_logging::unrelated_logout_during_transient_stall_keeps_the_terminal_socket ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok
test auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply ... ok
test auth::tests::socket_tests::review_authority_cap::retries_whose_select_waits_stay_within_the_authority_cap ... ok
test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok
test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok
test auth::tests::socket_tests::review_busy_wake::idle_busy_revocation_wake_sends_server_busy_close_code ... ok
test auth::tests::socket_tests::review_busy_wake::sixteen_woken_sockets_recover_application_authority_after_a_short_stall ... ok
test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok
test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok
test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok
test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_absolute_session_expiry ... ok
test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_logout_revocation ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input ... ok
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok
test bootstrap_runtime::remote_backend::admission_tests::missing_route_uses_link_scaled_bound_without_inventory_extensions ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_after_both_route_phases ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_at_600_ms ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_is_monotonic_for_zero_and_outlier_samples ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py
test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_lock_timing_runs_inside_the_nested_setup_shell ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_setup_timing_preserves_transfer_upload_status ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok
test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok
test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test canvas_store::tests::cancelled_commit_still_invalidates_a_durable_change ... ok
test canvas_store::tests::cas_retry_and_foreign_account_isolation ... ok
test canvas_store::tests::permanent_receipts_keep_the_original_json_digest_recipe ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok
test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok
test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok
test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok
test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok
test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok
test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok
test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok
test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok
test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok
test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::expired_route_retires_full_consumer ... ok
test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok
test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok
test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok
test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok
test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok
test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok
test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok
test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok
test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok
test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock.
test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok
test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok
test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok
test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok
test embedded::regressions::path_tests::review_reply_bypasses_queued_typing_without_losing_its_cursor_or_bytes ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok
test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok
test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::reply_order_tests::browser_reply_follows_typing_across_both_forwarding_tasks ... ok
test embedded::reply_order_tests::full_reply_reservations_preserve_keyboard_bytes_and_all_eight_slots ... ok
test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok
test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok
test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok
test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok
test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok
test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok
test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok
test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok
test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok
test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok
test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok
test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok
test enrollment::migration_tests::hostname_migration_allocates_around_retained_names ... ok
test enrollment::migration_tests::canvas_layout_migration_upgrades_production_v27_and_fresh_schema_in_order ... ok
test enrollment::migration_tests::hostname_migration_upgrades_release6_copy_without_changing_canvas_or_checksums ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test enrollment::migration_tests::old_uuid_mesh_placeholders_upgrade_to_audited_unnamed_labels ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok
test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok
test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok
test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok
test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok
test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok
test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok
test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok
test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok
test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok
test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok
test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok
test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok
test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok
test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_inventory::name_tests::an_ip_added_host_uses_its_cached_hostname_and_old_facts_do_not_clear_it ... ok
test remote_inventory::name_tests::inventory_hostname_changes_publish_once_and_preserve_hand_names ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_inventory::name_tests::late_hostname_inventory_renames_the_attached_mesh_node_and_notifies_viewers ... ok
test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok
test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok
test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok
test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok
test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_inventory::name_tests::reported_names_yield_to_records_and_collision_suffixes_and_server_identity_hold ... ok
test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok
test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok
test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok
test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok
test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok
test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok
test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok
test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok
test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok
test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok
test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok
test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok
test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok
test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok
test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required
test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok
test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok
test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok
test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok
test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok
test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok
test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok
test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok
test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok
test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok
test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok
test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok
test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok
test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok
test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok
test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok
test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok
test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok
test stream_close::tests::close_path_cost ... ignored, manual microbenchmark
test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok
test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok
test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok
test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok
test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok
test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok
test terminal_queries::review_tests::a_lagging_viewer_cannot_renew_a_deadline_after_the_first_viewer_answered ... ok
test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok
test terminal_queries::review_tests::trimmed_output_refuses_its_answer_without_reopening_an_accepted_position ... ok
test terminal_queries::review_tests::two_positions_in_one_chunk_are_claimed_in_order_without_reopening_either ... ok
test terminal_queries::tests::deadline_includes_incomplete_query ... ok
test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok
test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok
test terminal_queries::tests::marked_flood_never_allocates_queries ... ok
test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok
test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok
test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok
test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok
test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok
test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::probe_authority::review_closed_watch::closed_revocation_watch_is_unavailable_and_never_polls_the_write ... ok
test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok
test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::writer_tests::authority_watchdog::authority_deadline_preserves_subsecond_session_expiry ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::cancelled_storm_returns_every_place_without_duplication ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::deadline_storm_retains_exactly_four_places_then_recovers ... ok
test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::pool_acquire_timeout_recovers_places_without_releasing_the_connection ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::ready_result_observed_after_deadline_retries_current_authority ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test websocket::writer_tests::busy_edges::wall_expiry_and_monotonic_deadlines_keep_their_separate_roles ... ok
test websocket::writer_tests::resume_refusals_distinguish_connection_state_and_lost_token_rotation ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok
test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok
test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok
test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok
test websocket_transport::tests::visibility_notices_are_small_typed_transport_messages ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test terminal_queries::review_tests::all_session_tables_remain_bounded_at_the_registry_limit ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test websocket::writer_tests::busy_edges::revoked_probe_across_attempt_backoff_and_total_wait_edges ... ok
test websocket::writer_tests::busy_edges::expiry_crossing_a_stalled_read_refuses_both_deadline_callers ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::sqlite_busy_timeout_recovers_detached_storm_without_unlocking ... ok
test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok

test result: ok. 633 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 296.60s

     Running tests/canvas_convergence.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_convergence-1a7528827de3cb23)

running 20 tests
test a_tiled_import_cannot_duplicate_an_existing_graph_kind ... ok
test imports_use_account_wide_target_identity_and_keep_spanning_column_geometry ... ok
test competing_bootstraps_merge_targets_and_retry_after_restart ... ok
test identical_and_empty_second_devices_do_not_advance_revision ... ok
test importing_an_orphaned_recovery_view_does_not_create_another_recovery_name ... ok
test initialize_and_apply_repair_before_writing_and_notify_subscribers ... ok
test import_prefers_matching_names_before_the_first_view_of_its_kind ... ok
test loading_repairs_only_matching_recovery_views_and_converges_clients ... ok
test merge_bounds_refuse_without_losing_the_existing_layout ... ok
test no_op_imports_keep_retry_receipts_and_do_not_clear_operation_history ... ok
test session_import_identity_ignores_labels_but_checks_account_ownership ... ok
test simultaneous_first_devices_merge_disjoint_targets_into_one_view ... ok
test stale_noop_still_checks_numeric_bounds_before_committing ... ok
test split_retry_is_durable_and_changed_idempotency_input_is_refused ... ok
test owned_session_reference_and_all_bounds_are_transactional ... ok
test permanent_receipts_do_not_copy_large_bootstrap_documents ... ok
test two_devices_serialize_stale_edits_and_replay_every_committed_revision ... ok
test encoded_document_budget_is_enforced_by_the_host_transaction ... ok
test no_op_import_receipts_still_have_a_bounded_quota ... ok
test close_beats_move_resize_in_both_orders_and_survives_compaction ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.60s

     Running tests/canvas_receipt_count.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_receipt_count-dcb7b77ff3a854ab)

running 1 test
test historical_receipts_backfill_and_follow_transactions_and_account_removal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_receipt_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_receipt_review-f4b0654f8bb85a4f)

running 1 test
test historical_no_revision_receipts_preserve_replay_and_the_last_real_edit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.74s

     Running tests/canvas_recovery_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_recovery_review-f2d4bef103e06289)

running 5 tests
test repair_rebases_a_cursor_that_already_names_its_next_revision ... ok
test queued_close_of_unique_recovered_window_survives_repair ... ok
test independent_loads_and_base_edit_repair_exactly_once ... ok
test queued_resize_keeps_its_membership_after_a_separate_read_repair ... ok
test recovery_at_column_capacity_keeps_the_account_readable ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/canvas_replay_noop.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_replay_noop-f45368f3ae253f70)

running 1 test
test committed_noop_is_explicit_without_sending_all_closed_ids_to_clients ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_retired_reference.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_retired_reference-4ae1b19d3a90f2d6)

running 2 tests
test retired_reference_does_not_block_an_unrelated_edit ... ok
test retarget_checks_account_ownership_even_after_close ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_socket.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_socket-51aa35d48dc96a00)

running 1 test
test snapshot_then_ordered_commit_events_and_revocation_cancel_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/canvas_text_bounds.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_text_bounds-eb698aef9b5b9538)

running 2 tests
test text_uses_the_browser_utf16_bound ... ok
test imported_name_respects_the_browser_utf16_bound ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/catalog_startup.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/catalog_startup-c4f0c5c2b9e63826)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/enrollment-3533ffe0cf2749cb)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.24s

     Running tests/mesh_parser.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/mesh_parser-f3d43b86d3386706)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/mesh_review_plugin-1de5b08687140771)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/mesh_review_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/mesh_review_policy-5801ffe603d49dec)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/mesh_review_role_scope-1867947f5f970cf5)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/native_probe_correlation_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/native_probe_correlation_review-0508c3491f4ab791)

running 25 tests
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test unissued_native_probe_reply_cannot_extend_readiness ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test healthy_real_socket_survives_a_150ms_server_stall ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/plugin_host_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/plugin_host_review-1f79717833c5fdb0)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_disable_answers_inflight_call ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s

     Running tests/plugin_settings_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/plugin_settings_review-8e826064dc44171b)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.57s

     Running tests/remote_plugin_contract.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/remote_plugin_contract-c936186fbcfd8885)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

     Running tests/review_mesh_host_removal.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_mesh_host_removal-56ed2d75e836d36e)

running 1 test
test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_session-f2f326f18dc6b30e)

running 2 tests
test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok

running 1 test
test tests::fresh_exec_closes_dumpability_before_private_startup ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

test tests::fresh_exec_closes_dumpability_before_private_startup ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_shim-7c35453813e3afe4)

running 105 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok

running 1 test
test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 104 filtered out; finished in 0.00s

test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok
test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok
test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok
test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok
test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 92 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 29.07s

     Running tests/detach.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/detach-6a47ad01fd5a59d3)

running 2 tests
test detached_child_restores_default_signals_without_changing_parent ... ok
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.74s

     Running tests/mouse.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/mouse-d13052bb88989529)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.55s

     Running tests/ppu_reliability.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/ppu_reliability-2964f940e0c6068a)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/ppu_reliability_memory.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/ppu_reliability_memory-a754448942207ef2)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/process_exit_descriptor.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/process_exit_descriptor-c4b349d2a498ffa6)

running 2 tests
test invalid_pid_never_creates_a_descriptor ... ok
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_status-7910dde34bdac077)

running 13 tests
test tests::nothing_installed_says_so ... ok
test tests::installed_system_server_data_comes_from_its_effective_execstart ... ok
test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok
test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok
test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok
test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok
test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok
test tests::rootless_agent_is_read_from_the_user_manager ... ok
test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok
test tests::server_and_host_on_one_machine_is_both ... ok
test tests::stopped_server_unit_is_stopped_not_unknown ... ok
test tests::the_headline_names_what_is_down_and_how_to_look ... ok
test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_canvas

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 2 tests
test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 56) - compile fail ... ok
test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 63) - compile fail ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

   Doc-tests infraternal_status

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

(test: 795s)

==> SSH inode reuse fixture
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 3.07s
     Running tests/install.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/install-f0d19bd45bc9bae9)

running 1 test
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 0.22s
(SSH inode reuse fixture: 3s)

==> shim process-per-user
   Compiling nix v0.30.1
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 22s
     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_shim-58e9712d9c0dc37c)

running 218 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::borrowed_output_keeps_frozen_bytes_and_refuses_before_batch_mutation ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::batch_append_preserves_prefix_and_refuses_invalid_frames ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test heap_accounting::accounting_keeps_exact_layouts_and_balances_reallocation ... ok
test heap_accounting::transient_allocations_are_visible_after_their_storage_is_freed ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok

running 1 test

running 1 test
test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok
test ring::checks::tests::empty_append_keeps_lazy_storage_unallocated ... ok
test ring::checks::tests::borrowed_ranges_obey_absolute_offsets_across_physical_wrap ... ok
test pty::output_readiness_tests::readable_byte_hint_preserves_the_complete_output_stream ... ok
test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok
test ring::checks::tests::merge_review_pool_refusal_retains_exact_suffix_and_releases_charge ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok

running 1 test
test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test ring::checks::tests::shared_history_reservation_never_rounds_past_its_share ... ok
test session::inputs::host_budget_tests::alternating_writers_cannot_expand_shared_host_bookkeeping_without_bound ... ok
test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok
test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::inputs::reply_tests::host_replies_preserve_segment_budget_and_account_for_promoted_storage ... ok
test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok
test session::inputs::tests::host_legacy_writer_needs_no_heap_table ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok
test session::measurements::budgets::bounded_flush_keeps_partial_frame_and_wire_order ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::user_host::child_checks::ordinary_housekeeping_does_not_probe_child_status ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test session::user_host::child_checks::threaded_startup_is_refused_before_creating_session_state ... ok
test session::user_host::lazy_bench::geometry_replay_materialization_cost ... ignored, perf VM only: measure cold materialization after bounded geometry replay
test session::user_host::reactor::tests::actual_output_selector_keeps_a_bulk_turn_after_granted_and_denied_promotions ... ok
test session::user_host::reactor::tests::cancelled_bulk_membership_reuses_the_existing_deque_entry ... ok
test session::user_host::reactor::tests::cheap_replies_share_a_turn_but_expired_output_yields_to_input ... ok
test session::user_host::reactor::tests::accounting_write_failure_disables_only_the_receipt ... ok
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.03s

test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... ok
test session::user_host::reactor::tests::fresh_ack_fallback_avoids_writable_poll_and_finishes_with_new_input ... ok
test session::user_host::reactor::tests::inline_and_extra_descriptor_flags_merge_without_losing_generations ... ok
test session::user_host::reactor::tests::exit_observed_before_settle_still_queues_one_retention_deadline ... ok
test session::user_host::reactor::tests::one_session_readiness_fits_240_requested_bytes ... ok
test session::user_host::reactor::tests::input_phase_retires_closed_identity_without_publishing_transient_interest ... ok
test session::user_host::reactor::tests::readiness_membership_stays_within_five_bytes_per_session ... ok
test session::user_host::reactor::tests::ownership_receipt_separates_session_components_and_shared_capacities ... ok
test session::user_host::reactor::tests::readiness_storage_two_descriptors_are_allocation_free ... ok
test session::user_host::reactor::tests::readiness_storage_registration_is_at_most_sixteen_bytes ... ok
test session::user_host::reactor::tests::queued_data_ack_needs_no_writable_poll_before_pty_service ... ok
test session::user_host::reactor::tests::ready_rows_clear_only_touched_slots_and_fence_round_wrap ... ok
test session::user_host::reactor::tests::ready_rows_keep_two_descriptor_turns_allocation_free_within_64_bytes_per_slot ... ok
test session::user_host::reactor::tests::round_reset_and_wrap_preserve_bulk_membership_without_reviving_reads ... ok
test session::user_host::reactor::tests::short_output_cohort_yields_before_the_next_input_poll ... ok
test session::user_host::reactor::tests::single_ready_descriptor_needs_no_heap_allocation ... ok
test session::user_host::reactor::tests::timer_membership_survives_bulk_promotion_cancellation_and_round_wrap ... ok

running 1 test
test session::user_host::reactor::tests::unchanged_registration_sync_needs_no_heap_allocation ... test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok
test session::user_host::reactor::tests::replay_continues_after_its_frame_was_written_inline ... ok
test session::user_host::tests::admission_refuses_foreign_uid_duplicate_ids_and_geometry_before_spawn ... ok
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok
test session::user_host::tests::blocked_state_and_output_share_one_ordered_write_batch ... ok
test session::user_host::tests::data_ack_can_wait_for_a_writable_visit_without_requiring_output ... ok
ok
test result: 
ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.05s

test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... ok
test session::user_host::tests::deferred_data_ack_and_available_output_share_one_ordered_batch ... ok
test session::user_host::tests::bulk_turn_advances_sixteen_kib_and_yields_before_the_rest ... ok
test session::user_host::tests::full_pool_reuses_ring_storage_for_newest_output ... ok
test session::user_host::tests::full_pool_typing_echo_latency ... ignored, timing measurement runs on the perf VM
test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok
test session::user_host::tests::full_pool_refuses_new_session_and_keeps_existing_session_working ... ok
test session::user_host::tests::idle_session_ownership_ledger ... ignored, perf VM only: per-session requested-byte ownership ledger at scale
test session::user_host::tests::host_pool_scales_with_machine_memory_within_bounds ... ok
test session::user_host::tests::geometry_transcript_materializes_at_its_event_bound ... ok

running 1 test
test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok
test session::user_host::tests::malformed_closed_peer_is_retired_once_and_keeps_its_sibling ... ok
test session::user_host::tests::lazy_prefix_materializes_exactly_before_overflow_and_resize ... ok
test session::user_host::tests::output_bound_replays_retained_geometry_before_new_bytes ... ok
test session::user_host::tests::medium_geometry_materializes_before_deferred_cell_work_exceeds_the_bound ... ok
test session::user_host::tests::prefix_threshold_preserves_unfinished_sequences ... ok
test session::user_host::tests::quiet_geometry_changes_remain_lazy_and_replay_in_order ... ok
test session::user_host::tests::same_geometry_input_selection_keeps_vt_unallocated ... ok
test session::user_host::tests::session_constructor_retains_only_the_bound_socket_path ... ok
test session::user_host::tests::state_fences_and_input_only_acks_bypass_coalescing ... ok
test session::user_host::tests::steady_replay_needs_no_payload_allocation ... ok
test session::user_host::tests::unchanged_geometry_retains_native_resize_side_effects ... ok
test session::user_host::tests::vt_panic_retires_one_real_pty_and_sibling_keeps_its_output ... ok
test session::user_host::tests::writable_peer_receives_state_and_output_before_another_readiness_turn ... ok
test session::user_host::tests::zero_ring_capacity_does_not_stall_a_live_pty ... ok
test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::user_host::tests::exhausted_pool_drains_live_ptys_during_random_session_churn ... ok
test terminal::checks::snapshot_during_discard_preserves_the_unfinished_string_boundary ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test session::user_host::tests::large_geometry_cannot_defer_a_long_first_snapshot_reflow_queue ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test pty::handoff::tests::all_masters_survive_original_owner_drop_with_cloexec ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test session::user_host::tests::geometry_transcript_property_cases_match_eager_native_state ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::host_budget::erased_history_reset_and_geometry_return_native_memory ... ok
test terminal::host_budget::page_nodes_never_fill_the_ordinary_data_cap ... ok
test terminal::host_budget::shared_host_budget_bounds_the_sum_and_keeps_every_terminal_exact ... ok
test session::user_host::tests::pool_usage_never_exceeds_cap_under_open_write_close_sequences ... ok
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::ppu_memory_bench::fresh_shell_filler_snapshot_gap_is_independent_of_allocator_refusal ... ok
test terminal::ppu_memory_bench::native_session_allocations_settle_after_geometry_warmup ... ignored, perf VM only: native heap/resident accounting; set PPU_VT_ACCOUNT_SESSIONS
test terminal::ppu_memory_bench::quiet_resize_churn_does_not_keep_new_resident_pools ... ignored, perf VM only: sparse resize ownership at 900 quiet sessions
test terminal::ppu_memory_bench::small_history_does_not_retain_megabyte_page_quanta ... ignored, perf VM only: sparse history residency and native ownership
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::host_budget::every_history_share_fills_and_recycles_inside_its_reservation ... ok
test terminal::host_budget::report_native_memory_numbers ... ok
test terminal::review_r2::review_r2_escape_high_byte_does_not_start_a_hidden_string ... ok
test terminal::review_r2::review_r2_escape_command_inside_discard_matches_short_string ... ok
test terminal::checks::control_strings_cannot_grow_session_carry_without_bound ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::review_r2::review_r2_resize_storm_does_not_ratchet_native_memory ... ok
test terminal::host_budget::widening_a_full_history_stays_inside_its_share ... ok
test terminal::review_r2::review_r2_resize_with_full_history_share_stays_exact ... ok
test terminal::review_r2::review_r2_limiter_is_transparent_for_short_control_mixtures ... ok
test terminal::review_r3::review_r3_four_hundred_laptop_screens_fit_the_host ... ok
test terminal::review_r3::review_r3_bounded_terminal_reflows_long_mixed_history ... ok
test terminal::review_r2::review_r2_host_history_share_fits_the_native_reservation ... ok
test terminal::host_budget::laptop_screens_come_from_their_floors_not_the_pool ... ok
test terminal::review_r2::review_r2_ground_c1_introducer_stays_within_the_session_share ... ok
test terminal::review_r3::review_r3_host_accounting_balances_through_recovery ... ok
test terminal::review_r3::review_r3_recycled_unwrapped_history_keeps_exact_snapshot ... ok
test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok
test terminal::user_screen_pool_resize::taller_widening_keeps_history_rows_that_move_onto_the_screen ... ok
test terminal_limits::c1_tests::c1_string_inside_csi_has_a_seven_bit_replay_boundary ... ok
test terminal_limits::defensive_tests::executed_c0_between_escape_and_introducer_keeps_the_bound ... ok
test terminal_limits::tests::escape_after_discard_restarts_without_losing_the_next_command ... ok
test terminal_limits::tests::finite_sequences_are_identical_for_every_fragment_boundary ... ok
test terminal_limits::tests::fragmented_overflow_stays_discarded_until_a_real_terminator ... ok
test terminal_memory::payload_tests::oversized_payload_is_refused_before_allocation_while_tagged_pool_is_allowed ... ok
test terminal_memory::payload_tests::residency_query_observes_only_owned_page_mappings_without_faulting_payload ... ok
test terminal_memory::tests::allocation_budget_includes_overhead_and_refusal_is_recoverable ... ok
test terminal_memory::tests::screen_pages_are_zero_filled_and_page_aligned ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal_native::owned_memory_tests::refusal_inside_reflow_never_touches_freed_pages ... ok
test terminal_native::owned_memory_tests::refused_resize_reclaims_every_owned_native_allocation ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::review_r3::review_r3_recycled_history_matches_unbounded_reference ... ok
test terminal::review_r3::review_r3_history_share_without_ris_never_refuses ... ok
test terminal::review_r3::review_r3_noisy_neighbour_does_not_make_quiet_sessions_approximate ... ok
test terminal::review_r3::review_r3_thousand_sessions_and_one_flood ... ok
test terminal::review_r3::review_r3_hundred_laptop_sessions_keep_exact_state ... ok
test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact has been running for over 60 seconds
test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact ... ok

test result: ok. 199 passed; 0 failed; 19 ignored; 0 measured; 0 filtered out; finished in 84.62s

(shim process-per-user: 167s)

==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-server v0.1.0 (*)
         │   │   │   │   └── infraternal-session v0.1.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-canvas v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   ├── infraternal-server v0.1.0 (*)
         │   └── infraternal-session v0.1.0
         ├── (build) infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-canvas v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   ├── infraternal-plugin-ssh v0.1.0
                     │   │   ├── infraternal v0.1.0 (*)
                     │   │   ├── infraternal-fuzz v0.1.0 (*)
                     │   │   ├── infraternal-server v0.1.0
                     │   │   │   ├── infraternal v0.1.0 (*)
                     │   │   │   └── infraternal-fuzz v0.1.0 (*)
                     │   │   └── infraternal-session v0.1.0
                     │   └── infraternal-server v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   ├── infraternal-fuzz v0.1.0 (*)
                     │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   ├── infraternal-server v0.1.0 (*)
     │   │   │       │   └── infraternal-session v0.1.0
     │   │   │       ├── (build) infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-canvas v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.46
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.16
             └── rustls v0.23.46 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   └── infraternal-session v0.1.0
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   ├── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-session v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── infraternal-plugin-remote v0.1.0 (*)
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.46
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.16
     │               └── rustls v0.23.46 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-canvas v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── (dev) infraternal-status v0.1.0
         │   └── infraternal v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   └── infraternal-session v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-canvas v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   │   ├── infraternal-server v0.1.0 (*)
             │   │   │   │   └── infraternal-session v0.1.0
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-canvas v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:200:1
    │  
200 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
201 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-server v0.1.0
          │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   └── infraternal-session v0.1.0
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   ├── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-session v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── infraternal-plugin-remote v0.1.0 (*)
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.46
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.16
          │               └── rustls v0.23.46 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-canvas v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── (dev) infraternal-status v0.1.0
              │   └── infraternal v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:202:1
    │  
202 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
204 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   ├── infraternal-plugin-ssh v0.1.0
              │   │   ├── infraternal v0.1.0 (*)
              │   │   ├── infraternal-fuzz v0.1.0 (*)
              │   │   ├── infraternal-server v0.1.0
              │   │   │   ├── infraternal v0.1.0 (*)
              │   │   │   └── infraternal-fuzz v0.1.0 (*)
              │   │   └── infraternal-session v0.1.0
              │   └── infraternal-server v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:205:1
    │  
205 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:207:1
    │  
207 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
208 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
209 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │   └── infraternal-session v0.1.0
      │   │       ├── (build) infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   ├── infraternal-plugin-ssh v0.1.0
      │               │   │   ├── infraternal v0.1.0 (*)
      │               │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   │   ├── infraternal-server v0.1.0
      │               │   │   │   ├── infraternal v0.1.0 (*)
      │               │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │   │   └── infraternal-session v0.1.0
      │               │   └── infraternal-server v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-session v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.46
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.16
      │   │               └── rustls v0.23.46 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── (dev) infraternal-status v0.1.0
      │       │   └── infraternal v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:251:1
    │  
251 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
252 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   ├── infraternal-server v0.1.0 (*)
      │           │   │   └── infraternal-session v0.1.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   ├── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-session v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-canvas v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── infraternal-plugin-canvas v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   ├── infraternal-server v0.1.0
      │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   └── infraternal-session v0.1.0
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-canvas v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       └── infraternal-shim v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-fuzz v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── infraternal-server v0.1.0 (*)
      │           └── infraternal-session v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── (build) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.46
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.16
      │       │   │           └── rustls v0.23.46 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── (dev) infraternal-status v0.1.0
      │       │   │       │   └── infraternal v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.46 (*)
      │       │           └── rustls-webpki v0.103.16 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.46 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.3
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:254:1
    │  
254 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
255 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   ├── infraternal-server v0.1.0
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   └── infraternal-session v0.1.0
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:257:1
    │  
257 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
258 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   ├── infraternal-server v0.1.0
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-session v0.1.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:259:1
    │  
259 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
260 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   ├── infraternal-plugin-ssh v0.1.0
          │       │   │   ├── infraternal v0.1.0 (*)
          │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │   │   ├── infraternal-server v0.1.0
          │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │   │   └── infraternal-session v0.1.0
          │       │   └── infraternal-server v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-canvas v0.1.0
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:317:1
    │  
317 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
318 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── infraternal-plugin-remote v0.1.0
          │   ├── infraternal v0.1.0
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0
          │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-server v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   └── infraternal-session v0.1.0
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-fuzz v0.1.0 (*)
          │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.46
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.16
              └── rustls v0.23.46 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   ├── infraternal-plugin-ssh v0.1.0
      │               │       │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   ├── infraternal-server v0.1.0
      │               │       │   │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   └── infraternal-session v0.1.0
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-canvas v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               ├── infraternal v0.1.0 (*)
      │               └── infraternal-shim v0.1.0
      │                   ├── infraternal v0.1.0 (*)
      │                   ├── infraternal-agent v0.1.0 (*)
      │                   ├── infraternal-fuzz v0.1.0 (*)
      │                   ├── infraternal-plugin-remote v0.1.0 (*)
      │                   ├── infraternal-plugin-ssh v0.1.0 (*)
      │                   ├── infraternal-server v0.1.0 (*)
      │                   └── infraternal-session v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.3
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-canvas v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── infraternal-shim v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.3 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.3 (*)
      ├── tokio v1.53.3 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok
(cargo-deny: 2s)

==> static builds
x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently
native compiler metadata: path independent; platform/date retained; unexpected syntax refused
Rust remapping: differently named checkout roots produce identical stripped artifacts
.
----------------------------------------------------------------------
Ran 1 test in 0.001s

OK
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.26
   Compiling libc v0.2.190
   Compiling cfg-if v1.0.5
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.14
   Compiling serde v1.0.229
   Compiling autocfg v1.5.1
   Compiling pin-project-lite v0.2.17
   Compiling serde_core v1.0.229
   Compiling version_check v0.9.5
   Compiling cc v1.6.0
   Compiling bytes v1.12.1
   Compiling generic-array v0.14.7
   Compiling vcpkg v0.2.15
   Compiling pkg-config v0.3.34
   Compiling icu_properties_data v2.3.0
   Compiling syn v3.0.6
   Compiling syn v2.0.119
   Compiling memchr v2.8.3
   Compiling once_cell v1.21.4
   Compiling icu_normalizer_data v2.3.0
   Compiling log v0.4.34
   Compiling itoa v1.0.18
   Compiling tracing-core v0.1.36
   Compiling futures-core v0.3.34
   Compiling errno v0.3.14
   Compiling socket2 v0.6.5
   Compiling stable_deref_trait v1.2.1
   Compiling signal-hook-registry v1.4.8
   Compiling mio v1.2.4
   Compiling smallvec v1.16.2
   Compiling futures-sink v0.3.34
   Compiling thiserror v2.0.21
   Compiling slab v0.4.12
   Compiling subtle v2.6.1
   Compiling parking_lot_core v0.9.12
   Compiling zmij v1.0.23
   Compiling typenum v1.20.1
   Compiling num-traits v0.2.19
   Compiling writeable v0.6.4
   Compiling crossbeam-utils v0.8.23
   Compiling litemap v0.8.3
   Compiling utf8_iter v1.0.4
   Compiling tracing-attributes v0.1.31
   Compiling synstructure v0.14.0
   Compiling displaydoc v0.2.7
   Compiling zerovec-derive v0.11.6
   Compiling serde_derive v1.0.229
   Compiling zerofrom-derive v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling tokio-macros v2.7.2
   Compiling tracing v0.1.44
   Compiling thiserror-impl v2.0.21
   Compiling tokio v1.53.3
   Compiling zerofrom v0.1.8
   Compiling yoke v0.8.3
   Compiling zerovec v0.11.8
   Compiling zerotrie v0.2.5
   Compiling block-buffer v0.10.4
   Compiling crypto-common v0.1.7
   Compiling equivalent v1.0.2
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling icu_collections v2.3.0
   Compiling icu_locale_core v2.3.0
   Compiling percent-encoding v2.3.2
   Compiling digest v0.10.7
   Compiling scopeguard v1.2.0
   Compiling lock_api v0.4.14
   Compiling icu_provider v2.3.1
   Compiling futures-macro v0.3.34
   Compiling libsqlite3-sys v0.30.1
   Compiling cpufeatures v0.2.17
   Compiling hashbrown v0.17.1
   Compiling futures-io v0.3.34
   Compiling futures-task v0.3.34
   Compiling futures-util v0.3.34
   Compiling icu_properties v2.3.0
   Compiling indexmap v2.14.2
   Compiling icu_normalizer v2.3.0
   Compiling form_urlencoded v1.2.2
   Compiling idna_adapter v1.2.2
   Compiling sha2 v0.10.9
   Compiling openssl-src v300.6.1+3.6.3
   Compiling idna v1.1.0
   Compiling allocator-api2 v0.2.21
   Compiling foldhash v0.1.5
   Compiling serde_json v1.0.151
   Compiling hashbrown v0.15.5
   Compiling openssl-sys v0.9.117
   Compiling url v2.5.8
   Compiling parking_lot v0.12.5
   Compiling futures-channel v0.3.34
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling heck v0.5.0
   Compiling cfg_aliases v0.2.2
   Compiling crc v3.4.0
   Compiling event-listener v5.4.2
   Compiling crossbeam-queue v0.3.14
   Compiling futures-intrusive v0.5.0
   Compiling hashlink v0.10.0
   Compiling either v1.18.0
   Compiling spin v0.9.9
   Compiling rand_core v0.10.1
   Compiling base64 v0.22.1
   Compiling tokio-stream v0.1.19
   Compiling ryu v1.0.23
   Compiling bitflags v2.13.2
   Compiling serde_urlencoded v0.7.1
   Compiling sqlx-core v0.8.6
   Compiling flume v0.11.1
   Compiling atoi v2.0.0
   Compiling futures-executor v0.3.34
   Compiling zerocopy v0.8.60
   Compiling getrandom v0.4.3
   Compiling zerocopy-derive v0.8.60
   Compiling sqlx-sqlite v0.8.6
   Compiling getrandom v0.2.17
   Compiling dotenvy v0.15.7
   Compiling hex v0.4.3
   Compiling foreign-types-shared v0.1.1
   Compiling sqlx-macros-core v0.8.6
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api)
   Compiling openssl v0.10.81
   Compiling foreign-types v0.3.2
   Compiling openssl-macros v0.1.1
   Compiling http v1.5.0
   Compiling sqlx-macros v0.8.6
   Compiling memoffset v0.9.1
   Compiling nix v0.30.1
   Compiling ring v0.17.14
   Compiling getrandom v0.3.4
   Compiling uuid v1.27.0
   Compiling zeroize v1.9.0
   Compiling ppv-lite86 v0.2.21
   Compiling minimal-lexical v0.2.1
   Compiling arrayvec v0.7.8
   Compiling utf8parse v0.2.2
   Compiling time-core v0.1.9
   Compiling untrusted v0.9.0
   Compiling num-conv v0.2.2
   Compiling httparse v1.10.1
   Compiling thiserror v1.0.69
   Compiling time-macros v0.2.32
   Compiling anstyle-parse v1.0.0
   Compiling nom v7.1.3
   Compiling rand_core v0.9.5
   Compiling rustls-pki-types v1.15.1
   Compiling http-body v1.1.0
   Compiling thiserror-impl v1.0.69
   Compiling synstructure v0.13.2
   Compiling anstyle v1.0.14
   Compiling rustls v0.23.46
   Compiling tinyvec v1.13.3
   Compiling colorchoice v1.0.5
   Compiling cpufeatures v0.3.1
   Compiling is_terminal_polyfill v1.70.2
   Compiling deranged v0.5.8
   Compiling powerfmt v0.2.1
   Compiling anstyle-query v1.1.5
   Compiling anstream v1.0.0
   Compiling chacha20 v0.10.2
   Compiling asn1-rs-derive v0.5.1
   Compiling rusticata-macros v4.1.0
   Compiling rand_chacha v0.9.0
   Compiling time v0.3.55
   Compiling quinn-udp v0.5.16
   Compiling tokio-util v0.7.19
   Compiling asn1-rs-impl v0.2.0
   Compiling strsim v0.11.1
   Compiling data-encoding v2.11.1
   Compiling tower-service v0.3.3
   Compiling clap_lex v1.1.1
   Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-protocol)
   Compiling tokio-openssl v0.6.5
   Compiling clap_builder v4.6.7
   Compiling rand v0.9.5
   Compiling asn1-rs v0.6.2
   Compiling rand v0.10.3
   Compiling rand_core v0.6.4
   Compiling rustls-webpki v0.103.16
   Compiling rand_pcg v0.10.2
   Compiling quinn v0.11.12
   Compiling clap_derive v4.6.7
   Compiling num-integer v0.1.47
   Compiling fnv v1.0.7
   Compiling lru-slab v0.1.3
   Compiling httpdate v1.0.3
   Compiling try-lock v0.2.5
   Compiling lazy_static v1.5.1
   Compiling oid-registry v0.7.1
   Compiling pastey v0.1.1
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim)
   Compiling base64 v0.21.7
   Compiling rustc-hash v2.1.3
   Compiling atomic-waker v1.1.2
   Compiling h2 v0.4.19
   Compiling base64urlsafedata v0.5.5
   Compiling clap v4.6.7
   Compiling want v0.3.2
   Compiling num-bigint v0.4.8
   Compiling vte v0.15.0
   Compiling unicase v2.10.0
   Compiling tower-layer v0.3.3
   Compiling webauthn-attestation-ca v0.5.5
   Compiling mime v0.3.17
   Compiling rustversion v1.0.23
   Compiling hyper v1.11.1
   Compiling mime_guess v2.0.5
   Compiling der-parser v9.0.0
   Compiling quinn-proto v0.11.19
   Compiling http-body-util v0.1.5
   Compiling half v2.7.1
   Compiling sha1 v0.10.7
   Compiling fs-err v3.3.2
   Compiling sync_wrapper v1.0.2
   Compiling webauthn-rs-core v0.5.5
   Compiling regex-syntax v0.8.11
   Compiling hyper-util v0.1.21
   Compiling tungstenite v0.29.0
   Compiling serde_cbor_2 v0.13.0
   Compiling x509-parser v0.16.0
   Compiling regex-automata v0.4.18
   Compiling webauthn-rs-proto v0.5.5
   Compiling rand_chacha v0.3.1
   Compiling hex-conservative v0.2.3
   Compiling base64ct v1.8.3
   Compiling rand v0.8.8
   Compiling password-hash v0.5.0
   Compiling bitcoin_hashes v0.14.101
   Compiling matchers v0.2.0
   Compiling arc-swap v1.9.2
   Compiling tokio-tungstenite v0.29.0
   Compiling axum-core v0.5.6
   Compiling tower v0.5.3
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-server)
   Compiling blake2 v0.10.6
   Compiling tracing-serde v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling tracing-log v0.2.0
   Compiling thread_local v1.1.10
   Compiling http-range-header v0.4.2
   Compiling nu-ansi-term v0.50.3
   Compiling matchit v0.8.4
   Compiling tower-http v0.6.11
   Compiling tracing-subscriber v0.3.23
   Compiling axum v0.8.9
   Compiling argon2 v0.5.3
   Compiling bip39 v2.2.2
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal)
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-status)
   Compiling sqlx v0.8.6
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-mesh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/host-facts)
   Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/release)
   Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/canvas)
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/backup)
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/relay)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/mesh)
   Compiling axum-server v0.8.0
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote)
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-agent)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh)
    Finished `release` profile [optimized] target(s) in 10m 33s
AES-128-GCM NIST vector encrypt/decrypt passed
production trust: PASS (staging-trust authority absent)
/home/agent/.cache/codex-scratch/review-setup-token-data/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21399568 bytes; cap: 21399568 bytes; delta: +0 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Key memory initialization=1; locked pages and dump exclusion enabled
   Compiling libc v0.2.190
   Compiling cfg-if v1.0.5
   Compiling pin-project-lite v0.2.17
   Compiling serde_core v1.0.229
   Compiling bytes v1.12.1
   Compiling serde v1.0.229
   Compiling memchr v2.8.3
   Compiling once_cell v1.21.4
   Compiling itoa v1.0.18
   Compiling log v0.4.34
   Compiling futures-core v0.3.34
   Compiling tracing-core v0.1.36
   Compiling zerofrom v0.1.8
   Compiling socket2 v0.6.5
   Compiling errno v0.3.14
   Compiling stable_deref_trait v1.2.1
   Compiling mio v1.2.4
   Compiling yoke v0.8.3
   Compiling signal-hook-registry v1.4.8
   Compiling smallvec v1.16.2
   Compiling tracing v0.1.44
   Compiling futures-sink v0.3.34
   Compiling zerovec v0.11.8
   Compiling tokio v1.53.3
   Compiling subtle v2.6.1
   Compiling slab v0.4.12
   Compiling generic-array v0.14.7
   Compiling typenum v1.20.1
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling num-traits v0.2.19
   Compiling zerotrie v0.2.5
   Compiling utf8_iter v1.0.4
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling icu_locale_core v2.3.0
   Compiling icu_properties_data v2.3.0
   Compiling icu_normalizer_data v2.3.0
   Compiling equivalent v1.0.2
   Compiling icu_collections v2.3.0
   Compiling percent-encoding v2.3.2
   Compiling block-buffer v0.10.4
   Compiling crypto-common v0.1.7
   Compiling thiserror v2.0.21
   Compiling futures-io v0.3.34
   Compiling digest v0.10.7
   Compiling futures-task v0.3.34
   Compiling hashbrown v0.17.1
   Compiling icu_provider v2.3.1
   Compiling form_urlencoded v1.2.2
   Compiling futures-util v0.3.34
   Compiling cpufeatures v0.2.17
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling indexmap v2.14.2
   Compiling scopeguard v1.2.0
   Compiling zmij v1.0.23
   Compiling serde_json v1.0.151
   Compiling parking_lot_core v0.9.12
   Compiling futures-channel v0.3.34
   Compiling idna_adapter v1.2.2
   Compiling lock_api v0.4.14
   Compiling idna v1.1.0
   Compiling openssl-sys v0.9.117
   Compiling crossbeam-utils v0.8.23
   Compiling rand_core v0.10.1
   Compiling foldhash v0.1.5
   Compiling bitflags v2.13.2
   Compiling allocator-api2 v0.2.21
   Compiling parking_lot v0.12.5
   Compiling hashbrown v0.15.5
   Compiling url v2.5.8
   Compiling either v1.18.0
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling base64 v0.22.1
   Compiling event-listener v5.4.2
   Compiling crc v3.4.0
   Compiling hashlink v0.10.0
   Compiling zerocopy v0.8.60
   Compiling getrandom v0.4.3
   Compiling crossbeam-queue v0.3.14
   Compiling futures-intrusive v0.5.0
   Compiling tokio-stream v0.1.19
   Compiling spin v0.9.9
   Compiling sha2 v0.10.9
   Compiling libsqlite3-sys v0.30.1
   Compiling getrandom v0.2.17
   Compiling ryu v1.0.23
   Compiling flume v0.11.1
   Compiling serde_urlencoded v0.7.1
   Compiling sqlx-core v0.8.6
   Compiling futures-executor v0.3.34
   Compiling atoi v2.0.0
   Compiling foreign-types-shared v0.1.1
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api)
   Compiling http v1.5.0
   Compiling foreign-types v0.3.2
   Compiling memoffset v0.9.1
   Compiling getrandom v0.3.4
   Compiling ring v0.17.14
   Compiling nix v0.30.1
   Compiling uuid v1.27.0
   Compiling zeroize v1.9.0
   Compiling ppv-lite86 v0.2.21
   Compiling arrayvec v0.7.8
   Compiling untrusted v0.9.0
   Compiling minimal-lexical v0.2.1
   Compiling utf8parse v0.2.2
   Compiling anstyle-parse v1.0.0
   Compiling nom v7.1.3
   Compiling thiserror v1.0.69
   Compiling httparse v1.10.1
   Compiling rand_core v0.9.5
   Compiling rustls-pki-types v1.15.1
   Compiling http-body v1.1.0
   Compiling tinyvec v1.13.3
   Compiling is_terminal_polyfill v1.70.2
   Compiling time-core v0.1.9
   Compiling deranged v0.5.8
   Compiling anstyle-query v1.1.5
   Compiling anstyle v1.0.14
   Compiling powerfmt v0.2.1
   Compiling num-conv v0.2.2
   Compiling colorchoice v1.0.5
   Compiling anstream v1.0.0
   Compiling rusticata-macros v4.1.0
   Compiling time v0.3.55
   Compiling rand_chacha v0.9.0
   Compiling rustls v0.23.46
   Compiling tokio-util v0.7.19
   Compiling chacha20 v0.10.2
   Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-protocol)
   Compiling strsim v0.11.1
   Compiling tower-service v0.3.3
   Compiling data-encoding v2.11.1
   Compiling clap_lex v1.1.1
   Compiling asn1-rs v0.6.2
   Compiling clap_builder v4.6.7
   Compiling rustls-webpki v0.103.16
   Compiling quinn-udp v0.5.16
   Compiling rand v0.10.3
   Compiling rand v0.9.5
   Compiling rand_core v0.6.4
   Compiling rand_pcg v0.10.2
   Compiling num-integer v0.1.47
   Compiling fnv v1.0.7
   Compiling httpdate v1.0.3
   Compiling try-lock v0.2.5
   Compiling lru-slab v0.1.3
   Compiling base64 v0.21.7
   Compiling atomic-waker v1.1.2
   Compiling rustc-hash v2.1.3
   Compiling lazy_static v1.5.1
   Compiling clap v4.6.7
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim)
   Compiling h2 v0.4.19
   Compiling base64urlsafedata v0.5.5
   Compiling want v0.3.2
   Compiling num-bigint v0.4.8
   Compiling quinn-proto v0.11.19
   Compiling oid-registry v0.7.1
   Compiling quinn v0.11.12
   Compiling vte v0.15.0
   Compiling tower-layer v0.3.3
   Compiling mime v0.3.17
   Compiling hyper v1.11.1
   Compiling der-parser v9.0.0
   Compiling http-body-util v0.1.5
   Compiling half v2.7.1
   Compiling sha1 v0.10.7
   Compiling sync_wrapper v1.0.2
   Compiling regex-syntax v0.8.11
   Compiling tungstenite v0.29.0
   Compiling fs-err v3.3.2
   Compiling serde_cbor_2 v0.13.0
   Compiling x509-parser v0.16.0
   Compiling regex-automata v0.4.18
   Compiling hyper-util v0.1.21
   Compiling mime_guess v2.0.5
   Compiling webauthn-rs-proto v0.5.5
   Compiling rand_chacha v0.3.1
   Compiling hex-conservative v0.2.3
   Compiling unicase v2.10.0
   Compiling base64ct v1.8.3
   Compiling hex v0.4.3
   Compiling password-hash v0.5.0
   Compiling matchers v0.2.0
   Compiling bitcoin_hashes v0.14.101
   Compiling rand v0.8.8
   Compiling arc-swap v1.9.2
   Compiling tokio-tungstenite v0.29.0
   Compiling tower v0.5.3
   Compiling axum-core v0.5.6
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling blake2 v0.10.6
   Compiling tracing-serde v0.2.0
   Compiling tracing-log v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling thread_local v1.1.10
   Compiling nu-ansi-term v0.50.3
   Compiling matchit v0.8.4
   Compiling http-range-header v0.4.2
   Compiling tracing-subscriber v0.3.23
   Compiling axum v0.8.9
   Compiling tower-http v0.6.11
   Compiling argon2 v0.5.3
   Compiling bip39 v2.2.2
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal)
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-status)
   Compiling sqlx-sqlite v0.8.6
   Compiling sqlx v0.8.6
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-mesh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/host-facts)
   Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/release)
   Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/canvas)
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/backup)
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/relay)
   Compiling openssl v0.10.81
   Compiling tokio-openssl v0.6.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-core v0.5.5
   Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/mesh)
   Compiling axum-server v0.8.0
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote)
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-agent)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh)
    Finished `release` profile [optimized] target(s) in 14m 24s
production trust: PASS (staging-trust authority absent)
/home/agent/.cache/codex-scratch/review-setup-token-data/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 19574552 bytes; cap: 19574552 bytes; delta: +0 bytes
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
x86_64-unknown-linux-musl: exact 21399568-byte cap PASS; 21399569 bytes rejected PASS; smaller artifact requires ratchet PASS
aarch64-unknown-linux-musl: exact 19574552-byte cap PASS; 19574553 bytes rejected PASS; smaller artifact requires ratchet PASS
unsupported target: rejected PASS
bun test v1.4.2 (744846f84)

scripts/release/static-metadata-review.test.ts:
(pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [68.40ms]
(pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [43.22ms]

 2 pass
 0 fail
 16 expect() calls
Ran 2 tests across 1 file. [316.00ms]
server subcommand: exit 2, versioned JSON unavailable result
agent group: exit 0, one parsed versioned JSON listing of its commands
(static builds: 1545s)

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

==> Compiler metadata generator checks
bun test v1.4.2 (744846f84)

scripts/release/build-metadata.test.ts:
(pass) native metadata canonicalization retains version fields and refuses changed syntax [93.95ms]
(pass) Rust and cached target compiles receive every environment remap [527.38ms]

 2 pass
 0 fail
 121 expect() calls
Ran 2 tests across 1 file. [650.00ms]

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

+ @types/bun@1.3.8
+ @types/node@22.19.0
+ @types/ws@8.5.10
+ playwright@1.61.1
+ typescript@5.9.3
+ ws@8.18.3
+ @scure/bip39@2.2.0
+ geist@1.7.2

38 packages installed [511.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [30.67ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [72.02ms]
(pass) layout review fixtures ship only in explicitly enabled preview builds [7721.16ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [2.28ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.08ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.27ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.12ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.07ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.27ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.31ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.07ms]

src/stale-screen.test.ts:
(pass) a program that redraws after reattach never shows the note, not for a frame [1.30ms]
(pass) a redraw that arrived before the replay painted needs no wait at all [0.08ms]
(pass) a shell that stays silent shows the note once the wait has run out [0.11ms]
(pass) output that arrives later clears the note [0.07ms]
(pass) a dropped link takes the note down and cancels a wait that has not ended [0.06ms]
(pass) the wait grows with the round trip and stays bounded [0.12ms]

src/synchronized-output.test.ts:
(pass) synchronized terminal output > recognizes a private mode split across byte and string writes [2.47ms]
(pass) synchronized terminal output > preserves mode transitions for every pair of input chunk boundaries [4.35ms]
(pass) synchronized terminal output > ignores CSI-looking bytes inside control strings and other mode numbers [0.13ms]
(pass) synchronized terminal output > RIS clears an active mode [0.08ms]
(pass) synchronized terminal output > bounds an unfinished control sequence [1.84ms]
(pass) synchronized terminal output > paints queued output on the first frame after reset and timeout release [0.47ms]

src/terminal-fit-lifecycle.test.ts:
(pass) a queued fit stops when the terminal becomes closed [0.33ms]
(pass) a queued fit stops when the terminal becomes suspended [0.02ms]
(pass) a queued fit stops when the terminal becomes frozen [0.02ms]

src/account-storage.test.ts:
(pass) clearing one account leaves a second account and device preferences alone [0.42ms]
(pass) the last-account pointer of another account stays [0.06ms]
(pass) an unknown account clears every account's data and keeps preferences [0.13ms]
(pass) coalesced account writes stop permanently before sign-out clears storage [0.68ms]

src/offline-drawing.test.ts:
(pass) cached identity needs a matching layout and sign-out removes it [2.66ms]
(pass) sign-in caches only public drawing labels [0.21ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [1.01ms]
(pass) repeating the front item changes nothing [0.06ms]
(pass) the list is capped, so the oldest items fall off [0.04ms]
(pass) top skips items that are no longer live, without losing them [0.06ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.16ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.03ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.06ms]

src/canvas/status.test.ts:
(pass) a lost server connection is an error toast, never a success tick [0.56ms]
(pass) routine connection states stay out of the toast [0.10ms]
(pass) repeated connection closes do not reopen the persistent reason toast [0.11ms]
(pass) a repeated close does not retake the shared toast after a newer message replaces it [0.25ms]
(pass) a close reason stays visible through a quick reconnect and clears after a stable attach [676.85ms]

src/canvas/toolbar/palette-actions.test.ts:
(pass) a deferred split:right selection retains its original window [0.76ms]
(pass) a deferred new:below selection retains its original window [0.10ms]
(pass) a deferred close selection retains its original window [0.04ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [1.02ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.25ms]
(pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.37ms]
(pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.28ms]
(pass) facts the host did not report are omitted by default, not shown as unknown [0.14ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.21ms]
(pass) before facts arrive the host's platform names the header [0.07ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.08ms]

src/canvas/windows/session-hooks.test.ts:
(pass) a failed idle warm-up shows no toast and retries when the browser is back online [11.81ms]
(pass) a failed open shows the toast, and opening again after the network returns succeeds [10.91ms]
(pass) an open that joins a failing idle warm-up still shows the toast [5.60ms]

src/canvas/mesh/api-retry-budget.test.ts:
(pass) a retained watch outage bounds retry requests over two logical minutes [3.02ms]

src/canvas/mesh/layout-model.test.ts:
(pass) a pin moved by another device invalidates a same-count pin cache [2.04ms]
(pass) a recovered graph owns its node positions independently [0.20ms]
(pass) a negative pin is drawn by shifting the whole graph by whole grid cells; no pin is rewritten [0.20ms]
(pass) with no negative pin the origin is zero and nothing shifts [0.09ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [1.11ms]
(pass) without `access` (today's server) the person may view and may not edit [0.38ms]
(pass) fields the server does not send are absent, never invented [0.28ms]
(pass) a node the server sees passing traffic is online, on its path, under its machine's name [1.26ms]
(pass) anything that is not a list is refused, whole [11.44ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.31ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.46ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.12ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.11ms]

src/canvas/mesh/api-recovery.test.ts:
(pass) failed watch refreshes retain one subscription through retry and release it on disposal [8.33ms]
(pass) a synchronous subscription refusal leaves retry able to install a new watch [0.65ms]
(pass) a changed Mesh revision refreshes a renamed host in the existing view model [0.64ms]
(pass) a pushed recovery cancels the scheduled retry [0.43ms]
(pass) a pushed recovery supersedes an outstanding retry failure [0.63ms]
(pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.71ms]
(pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.24ms]
(pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.70ms]
(pass) a forbidden withdrawal cancels retry work from the retained watch [0.45ms]
(pass) a withdrawn view ignores an earlier outstanding retry result [0.48ms]
(pass) initial Mesh list handles closed transport [0.34ms]
(pass) initial Mesh list handles liveness deadline [0.07ms]
(pass) initial Mesh list handles unreadable JSON [0.08ms]
(pass) initial Mesh list handles unavailable storage [0.18ms]
(pass) initial Mesh list handles forbidden action [0.13ms]
(pass) initial Mesh list handles invalid stored host [0.12ms]
(pass) Mesh watch withdrawal handles forbidden [0.27ms]
(pass) Mesh watch withdrawal handles mesh unavailable [0.04ms]
(pass) Mesh watch withdrawal handles plugin unavailable [0.05ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.46ms]
(pass) the layout is deterministic and does not depend on input order [6.89ms]
(pass) no two cards overlap, and every card lies inside the graph [8.94ms]
(pass) the sheet is wider than tall, roughly 16:10 [1.29ms]
(pass) a pinned node stays where it was put and the others do not move [3.44ms]
(pass) a pin beyond the sheet grows the graph [0.38ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.16ms]
(pass) 1,000 nodes lay out in a few milliseconds [18.49ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [3.67ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.21ms]
(pass) a view taller than the viewport is scaled down so it fits [0.04ms]
(pass) nearestStop picks the stop whose centre is closest [0.21ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.19ms]
(pass) a small graph keeps one stop per node column [0.09ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.07ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.13ms]
(pass) D309: with a floor, a narrow column gets a stop of its drawn width and each column is reachable [0.10ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.29ms]
(pass) closing the new half gives the layout back exactly, in the model [1.19ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.25ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.22ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.40ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.46ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.15ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.68ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.12ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.21ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [59.02ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.46ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.23ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.19ms]
(pass) a narrow right split grows both drawn tracks to the canonical minimum [0.10ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.92ms]
(pass) a chain of neighbours is pushed in turn [0.14ms]
(pass) display settlement clears disconnected overlaps while keeping its one anchor fixed [0.44ms]
(pass) review: a viewport width increase after settlement keeps the Settings anchor clear [0.59ms]
(pass) snapping rounds to whole cells [0.08ms]
(pass) reach follows grants through tags and keeps the relay [0.30ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.12ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.05ms]
(pass) a desktop column is the same alone and in a strip [0.04ms]
(pass) D309: a touch screen draws every column at least MIN_TOUCH_COLUMN wide, never wider than a lone column; a fine pointer has no floor [0.12ms]
(pass) D309: the content is as wide as the drawn columns, so the camera reaches every column [0.12ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [2.41ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.45ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.46ms]
(pass) superseded status snapshots release records for sessions this device never opened [2.23ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.31ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.21ms]
(pass) a final Close before the first positive census never revives a new ID [0.12ms]
(pass) a later absence retires a new ID after its first positive census [0.13ms]
(pass) another host's census cannot clear a new shell's census fence [0.12ms]
(pass) another host's close cannot clear a new shell's census fence [0.05ms]
(pass) shared membership marks windows open without any local attachment [0.56ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [1.18ms]
(pass) a detected operating system supplies the live popover mark [1.23ms]

src/canvas/sessions/live.test.ts:
(pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.77ms]
(pass) an enrolled host opens by UUID and splits keep that authority [0.32ms]
(pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.29ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.17ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.19ms]
(pass) an authoritative host snapshot replaces admission with one notification [0.29ms]
(pass) the embedded inventory identity still opens locally beside an equally named remote [0.12ms]
(pass) the embedded host's mark does not wait for an account name, and no account is invented [0.12ms]

src/canvas/sessions/hosts.test.ts:
(pass) fresh storage lists an offline host added by another browser [1.52ms]
(pass) every welcome reconciles without duplicate subscriptions or hosts [0.26ms]
(pass) a removal in another browser withdraws the host [0.30ms]
(pass) a malformed page cannot partially replace the authoritative inventory [0.32ms]
(pass) a socket-authority refusal withdraws previously admitted hosts [0.56ms]
(pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.62ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.39ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.24ms]

src/canvas/sessions/hosts-scale-review.test.ts:
(pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [27.43ms]
(pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [15.14ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [2.83ms]
(pass) legacy refusals still work and malformed counters never reach the message [1.59ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.64ms]
(pass) oversized refusal JSON is ignored before parsing [0.18ms]

src/canvas/sessions/focus-intent.test.ts:
(pass) focusin supersedes every older focus intent [0.49ms]
(pass) pointerdown supersedes every older focus intent [0.04ms]
(pass) keydown supersedes every older focus intent [0.04ms]
(pass) input supersedes every older focus intent [0.03ms]

src/canvas/model/server-store.test.ts:
(pass) a negative drop on a 1,025-node mesh writes one pin, and the peer ends with every pin (#24) [36.58ms]
(pass) repeated pin moves reach both coordinate limits; the next move is refused and rolled back [2.53ms]
(pass) a layout gap or withdrawn worker requests one fresh snapshot with bounded backoff [2.47ms]
(pass) layout recovery restores Math.random after its virtual timer test [0.04ms]
(pass) event before Result and duplicate events do not apply an optimistic edit twice [0.99ms]
(pass) reconnect retries the exact request and an old receipt removes its optimistic overlay [1.21ms]
(pass) legacy import remains intact until canonical confirmation even if another device initialized [0.86ms]
(pass) dispose cancels late cache writes after sign-out [0.73ms]
(pass) a pending reference preserves unrelated edits across remote paints and is never sent [3.17ms]
(pass) closing an unsent shell removes its unresolved birth without blocking surviving children [0.85ms]
LAYOUT_RETRY_SCHEDULE subscribers=60 first_minute=753 following_5s=47 first_delay_slots=60
(pass) sixty withdrawn layout subscriptions spread their coalesced retry timers [30.80ms]
(pass) multi-subscriber retry scheduling restores Math.random [0.11ms]
(pass) an acknowledgement after its ordered event does not repaint the same layout [1.09ms]
(pass) review: a missing layout revision is recovered before the cached document is used again [0.72ms]
(pass) a bootstrap receipt before its canonical snapshot keeps the legacy layout drawable [2.70ms]
(pass) ready edits share one network round trip with a bounded in-flight window [1.40ms]
(pass) the optimistic semantic projection paints before any server receipt [0.97ms]
(pass) a no-op drawing capture does not trigger another paint [0.37ms]
(pass) an interrupted first load does not turn a revision-zero cache into an intentional empty layout [0.67ms]
(pass) review: a refused structural edit cannot strand later valid edits [1.20ms]
(pass) a definitive refusal paints rollback, persists it and never retries after reconnect [1.10ms]
(pass) a stale refusal cannot discard a new-connection retry [0.81ms]
(pass) review r2: refusal drains independent edits waiting behind four in-flight requests [2.11ms]
(pass) recovery coalesces gaps and errors, ignores operations until a snapshot, and survives reconnect [1.12ms]
(pass) a normal reconnect snapshot arrives before any replacement is requested [0.71ms]

src/canvas/model/review-null.test.ts:
(pass) a mixed nullable resize cannot invalidate the canonical drawing document [0.34ms]

src/canvas/model/operations.test.ts:
(pass) independent resize and move commute; close survives a stale move [0.60ms]
(pass) right split of a stack preserves the upper band [0.31ms]
(pass) reorder uses stable neighbours and emits no document [1.02ms]
(pass) a completed split emits its semantic intent rather than intermediate sizing edits [0.42ms]
(pass) a three-window reorder sends one semantic move [0.35ms]
(pass) a split before the first reference is journalled opens its anchor before splitting [0.42ms]
(pass) a drop sends the moved membership once, without derived neighbour geometry [0.35ms]
(pass) a narrow right split widens first so both halves remain valid [0.60ms]
(pass) a short down split grows the anchor first so both halves meet the height floor [0.57ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.69ms]
(pass) a document survives JSON and rebuilds the same columns [0.60ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.17ms]
(pass) parseDocument rejects anything that is not a document of this format [0.30ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.22ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.36ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.43ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.29ms]
(pass) D309: the saved weights do not depend on how a touch screen draws the columns [0.37ms]
(pass) D309: a view this device pushed clear for display is saved where the layout has it [0.43ms]
(pass) an offscreen graph keeps its shared pins before any nodes are rendered [0.12ms]
(pass) a captured graph document is independent of the next pin drag [0.07ms]

src/canvas/model/sync.test.ts:
(pass) a pending session never delays other edits or waits for a network receipt [3.17ms]
(pass) inventory includes shared memberships that this device cannot render [1.19ms]
(pass) temporary flow windows are never treated as unsubmitted shared windows [0.28ms]

src/canvas/model/review-span.test.ts:
(pass) a down split shifts every column in a transitively connected group [0.39ms]

src/canvas/model/reducer-property.test.ts:
layout property: 32 seeds, 4096 operations, 4015 accepted, zero divergences
(pass) property: accepted random operation sequences match the real server reducer [28414.55ms]

src/canvas/model/cache.test.ts:
(pass) damaged pending opens cannot stall offline drawing [2.39ms]
(pass) a valid unresolved reference remains local and replayable [0.25ms]
(pass) a valid offline journal is retained beyond a short burst [1.22ms]

src/canvas/model/review-boundary-r2.test.ts:
review r2 boundary comparison: 8 seeds, 4096 operations, 3198 accepted
(pass) review r2: longer boundary-weighted sequences preserve every accepted projection [2111.32ms]

src/canvas/model/reconcile.test.ts:
(pass) review: removing the current shared view selects a surviving camera anchor [2.12ms]
(pass) a remote negative pin and node update preserve the world position of an unchanged card [0.97ms]

src/canvas/model/journal.test.ts:
(pass) an offline birth keeps its identity through hydration and reference completion [0.87ms]

src/canvas/addhost/setup-feed.test.ts:
(pass) createSetupFeed > subscribes with the host and window, then hands over events in order [1.10ms]
(pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.53ms]
(pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.73ms]
(pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.61ms]
(pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.39ms]
(pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [46.05ms]
(pass) review reconnect budget survives sockets that open then close without events [46.14ms]
(pass) review explicit retry resumes after the setup feed stops [46.50ms]

src/canvas/addhost/wizard.breakit2.test.ts:
(pass) breakit2 an explicit port on a listed host survives chip resolution [0.56ms]
(pass) breakit2 malformed bracketed IPv6 waits for correction [0.12ms]
(pass) listed host plus port retains its saved user in the serialized destination [0.12ms]
(pass) review listed inventory name plus port retains its resolved address [0.19ms]

src/canvas/addhost/setup-stages.test.ts:
(pass) parseSetupEvent > reads a well-formed event [0.10ms]
(pass) parseSetupEvent > drops anything malformed [0.08ms]
(pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.04ms]
(pass) foldSetup > stages before the event's are done, later ones pending [0.16ms]
(pass) foldSetup > a stage that reports done alone still finishes [0.03ms]
(pass) foldSetup > ready done completes the run [0.03ms]
(pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.09ms]
(pass) foldSetup > uploading belongs to install and the readiness check to ready [0.04ms]
(pass) setupGuide > says the other sessions keep working and what to do next, in plain words [0.13ms]
(pass) review malformed setup fields are dropped without coercion errors [0.11ms]
(pass) exhausted setup preserves eligibility and explains a new setup [0.14ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.39ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.09ms]
(pass) parsing the server's data > an install command needs a lifetime [0.07ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.23ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.27ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.18ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.25ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.17ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.11ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.51ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.51ms]
(pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.31ms]
(pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.21ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [2.57ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.23ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.14ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.10ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.10ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.20ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.07ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.06ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.06ms]
(pass) authLabel > names the method and a trusted network provider only [0.03ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.17ms]
(pass) guideFor > each failure kind names its fix [0.09ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.03ms]
(pass) parseTarget > reads user, host and port [0.08ms]
(pass) parseTarget > reads a pasted ssh command into the same fields [0.42ms]
(pass) parseTarget > reads an ssh:// address [0.10ms]
(pass) parseTarget > refuses garbage around an ssh command [0.07ms]
(pass) parseTarget > refuses what cannot name a host [0.05ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.39ms]
(pass) parseSshConfig > recognises config text [0.05ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.04ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.08ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.23ms]
(pass) only a completed canonical host identity becomes terminal authority [0.16ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.12ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.04ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.05ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.02ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms]
(pass) install diagnostics name the failed step and public host error [0.07ms]
(pass) missing payload tells the operator the architecture and expected server path [0.04ms]
(pass) an already added host says so and offers opening its existing terminal [0.30ms]
(pass) release payload verification names the architecture step and plain reason [0.03ms]
(pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.10ms]
(pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.06ms]
(pass) early terminal publication selects only its canonical host-bound shim session [0.09ms]

src/canvas/addhost/already-added-breakit.test.ts:
(pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.08ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.47ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.31ms]
(pass) ready CA begins the requested installation mode without another prompt [0.12ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.27ms]
(pass) a typed root login requires explicit consent before any installation [0.13ms]

src/canvas/views/body.test.ts:
(pass) a clean terminal exit keeps the window while host setup can still fail [0.05ms]
(pass) clean exits still close ordinary windows, and failed exits stay visible [0.01ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.55ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.56ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.86ms]
(pass) a chunk that both sides use stays critical [0.16ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.15ms]
(pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.12ms]
(pass) automatic canonical painting loads after the first canvas draw [0.17ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [3.89ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [2.60ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [2.20ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [13.47ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [16.25ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [10.41ms]
(pass) abandoned word acknowledgement uploads nothing [4.34ms]
(pass) settled acknowledgement cannot upload later (dismissed) [2.96ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [4.99ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [1.88ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [1.99ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [1.84ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [1.66ms]
(pass) malformed or excessive remaining wait -1 is denied [2.34ms]
(pass) malformed or excessive remaining wait 0.5 is denied [2.01ms]
(pass) malformed or excessive remaining wait 172801 is denied [1.76ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [1.78ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.86ms]

test/link-doubt.test.ts:
(pass) a link doubt shows the indicator and keeps live replies and typing flowing [2.10ms]
(pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.65ms]
(pass) a notice type from a newer server is ignored, not a protocol failure [0.13ms]
(pass) the viewer announces the link-doubt capability in its Hello [3.34ms]

test/close-reasons.test.ts:
(pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.30ms]

src/close-reasons.test.ts:
(pass) a missed connection response keeps a plain and stable reason [0.04ms]
(pass) server and host close reasons identify why a terminal reconnects, in plain words [0.41ms]
(pass) routine detach and connection rotation reasons stay neutral [0.03ms]
(pass) a stream close that reattaches never says the terminal ended [0.15ms]
(pass) a recovering server link names its cause as routine status, never as a failure [0.06ms]
(pass) unknown close text is discarded instead of reaching the person or console [0.10ms]
(pass) a storm of closes prints one line per minute and counts the rest [0.52ms]
(pass) counted closes are reported when their window ends, without another close [0.08ms]

src/review-close-log.test.ts:
(pass) a reconnect the server refuses with a named Close frame still prints its console line [1.95ms]
(pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.10ms]

src/onboarding-load.test.ts:
(pass) a failed load says so in the error line, offers Try again, and mounts nothing [5.53ms]
(pass) the Try again button reloads the page: a failed import stays failed in the module map [5.51ms]
(pass) the online event retries by itself [5.40ms]

 356 pass
 0 fail
 21671 expect() calls
Ran 356 tests across 60 files. [39.96s]
bun test v1.4.2 (744846f84)

src/connection-correlation-review.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [13.72ms]

src/connection-idle.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 1 [7.30ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 1 [4.50ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 150 [1.77ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 150 [1.57ms]
(pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [7.31ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 1 [1.77ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 1 [1.72ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 1 [1.88ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 1 [1.96ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 30 [1.48ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 30 [1.15ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 30 [1.24ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 30 [1.25ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 150 [0.74ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 150 [0.82ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 150 [0.84ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 150 [0.85ms]
(pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [3.93ms]
(pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [5.08ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [2.02ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [1.77ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [1.77ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [1.86ms]
(pass) a healthy browser route survives 150ms scheduler delay across 1 streams [1.75ms]
(pass) a healthy browser route survives 150ms scheduler delay across 28 streams [1.83ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [1.74ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) browser jitter allowance decays after a stable link returns [13.57ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [2.27ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [1.72ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [1.53ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [2.20ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [2.05ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [2.06ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer without a reply counts subsequent responsive silence [1.95ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) an outstanding probe gets responsive observation after a renderer stall [3.95ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) retirement gives a queued mismatched pong one task turn [1.30ms]
(pass) retirement gives a queued correlated pong one task turn [0.92ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead typing route eventually retires when browser tasks run every 75ms [1.04ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 1000ms [0.94ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 60000ms [0.80ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [1.14ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [0.90ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [1.22ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) correlated queued replies replenish stall grace across successive healthy stalls [1.77ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) duplicate replies cannot replenish consumed stall grace [1.68ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) wrong timestamp replies cannot replenish consumed stall grace [1.40ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) unknown nonce replies cannot replenish consumed stall grace [1.53ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [2.21ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1
(pass) a replacement route receives its own one-shot local stall grace [2.55ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) continuous typing cannot cancel every silent-route confirmation turn [2.40ms]
(pass) a pending confirmation is reset by reconnect [1.80ms]
Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0
(pass) a pending confirmation is reset by close [1.62ms]
(pass) a pending confirmation is reset by dispose [1.13ms]
(pass) a stale confirmation from before reconnect cannot close the replacement route [1.73ms]
(pass) a hidden page resumes its lease after 5000ms without retiring queued replies [2.46ms]
(pass) a hidden page resumes its lease after 30000ms without retiring queued replies [1.46ms]
(pass) a socket lost while hidden waits for visibility before reconnecting [1.46ms]
(pass) mobile jitter and one retransmission keep a foreground browser lease [45.23ms]
(pass) visibility notices require both peers to support them: false [0.45ms]
(pass) visibility notices require both peers to support them: true [0.18ms]
(pass) hiding a page cancels a retry scheduled while it was visible [0.68ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [1.22ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [0.96ms]
(pass) a layout subscription starts the connection before any terminal exists [0.34ms]
(pass) resync replaces one subscription ID and disposal prevents later resyncs [1.17ms]
(pass) resync reopens a feature subscription with the same server ID [0.38ms]

src/connection-layout-removal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [12.80ms]

src/connection-liveness.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [1.51ms]

src/connection-pool.test.ts:
(pass) terminals fill the first socket, then open another, and a released slot is reused first [0.44ms]
(pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [0.49ms]

src/connection-probe-scheduling-review.test.ts:
(pass) a fully answered browser route survives a delayed next probe before a terminal attaches [0.94ms]
(pass) a fully answered browser route survives a delayed next probe with an attachment [0.31ms]

src/connection-query-capabilities.test.ts:
(pass) query replies negotiate independently with Hello caps 0 [0.07ms]
(pass) query replies negotiate independently with Hello caps 4
(pass) query replies negotiate independently with Hello caps 8
(pass) query replies negotiate independently with Hello caps 12

src/connection-query-refusal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [11.39ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [15.85ms]

src/connection-restart.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1
(pass) an overnight connection retains its writer and pending input when the server restarts [2.19ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a second quick server close leaves the fast path and backs off [1.08ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a failed first recovery handshake exits the one quick retry [0.84ms]
Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0
(pass) a server close reason survives socket retirement and the next retry [0.83ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0
(pass) a clean server socket close keeps its fallback reason through the next retry [0.60ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [15.55ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) online and foreground events cancel delays and preserve handshakes in progress [2.21ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [1.18ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.43ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.35ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.22ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.28ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [0.21ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.32ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.21ms]

src/connection-review-refusal-input.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [3.05ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [1.23ms]

src/connection-review-retained-lifetime.test.ts:
(pass) review: saved typing can be declined without closing the live shell [1.20ms]
(pass) review: new typing reaches the fresh shell while saved typing stays pending [0.26ms]
(pass) review: retained input and consent are local to their terminal window [0.26ms]
(pass) review: selecting a different session removes saved typing and its action [0.22ms]
(pass) review: another refused writer retains pending and unacknowledged fresh typing [0.23ms]
(pass) review: window disposal clears held input and rejects a stale resend action [0.62ms]

src/connection-startup-review.test.ts:
(pass) a healthy startup route can learn an RTT above the initial estimate [3.17ms]

src/connection-unattached-close.test.ts:
(pass) disposing a window before its welcome microtask sends no unbound Close [1.57ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [2.12ms]

 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [339.00ms]
bun test v1.4.2 (744846f84)

src/terminal-queries.test.ts:
(pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.67ms]
(pass) all requested query families have identities [0.16ms]
(pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [2.00ms]
(pass) oversized OSC retains BEL termination before a later query [0.15ms]

src/terminal-query-property.test.ts:
[ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2
(pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [251.61ms]

src/terminal-query-renderer-review.test.ts:
(pass) review: DECID gives every real renderer response an identity [0.81ms]
(pass) review: zero-padded CPR gives every real renderer response an identity [0.25ms]
(pass) review: CPR with an ignored NUL gives every real renderer response an identity [1.02ms]
(pass) review: three adjacent requests keep distinct identities across different viewer chunking [5.51ms]

src/terminal-write-slices.test.ts:
(pass) every slice split preserves cells, cursor and all renderer answers [36.11ms]
(pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [1.20ms]
(pass) escaped writers cannot access released input and callback failure releases the scope [0.68ms]
(pass) nested writes and memory growth cannot replace borrowed input [1.34ms]
(pass) allocation refusal never writes or frees unowned memory [1.78ms]
(pass) empty scopes accept no input and reject later writer use [0.30ms]
(pass) input views of native memory survive allocation-driven memory growth [0.27ms]
(pass) throwing callbacks release exactly their owned input allocation [0.22ms]

 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [334.00ms]
$ bun run build.ts
built chunk-grdbtwpg.js, chunk-qbb2e8b9.js, chunk-hf4csx9f.js, chunk-njtzg687.js, chunk-fnxpwxtz.js, chunk-301pnpgg.js, chunk-fassn2y5.js, chunk-rkhswyqm.js, chunk-0yv0etqm.js, chunk-hpxpyhkp.js, chunk-yvq3ah6x.js, chunk-vb52mqs5.js, chunk-gxvqf3b8.js, chunk-x90k904w.js, chunk-s0knh8h4.js, chunk-qp0njft5.js, chunk-twqk3173.js, chunk-8gqdshxw.js, chunk-s5s5y5zx.js, main.js, chunk-3zrccmtw.js, chunk-fxmz3y8j.js, chunk-wk9n9jj8.js, chunk-f8q0nw80.js, chunk-cej0rrxz.js, chunk-cvvfg8c8.js, chunk-kx9f5hgv.js, chunk-67j08cd0.js, chunk-tt9hr952.js, chunk-0hvyvmdp.js, chunk-hrvk7hrj.js, chunk-qsf65bk1.js, chunk-c76h7v56.js, chunk-7t673akt.js, chunk-peekjt9w.js, chunk-806v0gmr.js, chunk-1gtcrark.js, chunk-axbkkqp1.js, chunk-y37qs274.js, chunk-z2114mvp.js, chunk-w4tjwx5d.js, chunk-brnzpqsj.js, chunk-62k6fzh1.js, chunk-960tgsn8.js, chunk-2bk6ctz6.js, chunk-qmpj3m3r.js, chunk-p5dq3tjs.js, chunk-x145hcx1.js, chunk-azs6pd2b.js, chunk-z48tcwe1.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-3106g4qz.js, chunk-zx57bg5h.js, chunk-pmgxewne.js, chunk-jtg45ttx.js, chunk-3m9zj9sz.js, chunk-r04kg5zm.js, chunk-7d7e1wv2.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-a016a72m.js, chunk-4vvkqt0b.js, chunk-3cd7r4ty.js, chunk-ff3nvh2r.js
critical chunk-r04kg5zm.js: identity=199 gzip=158 brotli=136 bytes
critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes
critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-fnxpwxtz.js: identity=5812 gzip=2382 brotli=2147 bytes
onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes
critical chunk-rkhswyqm.js: identity=5890 gzip=2461 brotli=2137 bytes
critical chunk-7d7e1wv2.js: identity=42945 gzip=14689 brotli=13154 bytes
critical chunk-twqk3173.js: identity=11739 gzip=4631 brotli=4124 bytes
critical chunk-cej0rrxz.js: identity=1776 gzip=856 brotli=694 bytes
critical chunk-8gqdshxw.js: identity=386 gzip=236 brotli=195 bytes
onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes
critical chunk-s0knh8h4.js: identity=6075 gzip=2537 brotli=2230 bytes
onDemand chunk-x145hcx1.js: identity=5359 gzip=2580 brotli=2302 bytes
deferred chunk-qsf65bk1.js: identity=110049 gzip=37197 brotli=32819 bytes
onDemand chunk-4vvkqt0b.js: identity=9158 gzip=3340 brotli=2889 bytes
onDemand chunk-67j08cd0.js: identity=2791 gzip=1373 brotli=1181 bytes
onDemand chunk-p5dq3tjs.js: identity=11562 gzip=4694 brotli=4279 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=480 bytes
critical backdrop.worker.js: identity=243 gzip=210 brotli=158 bytes
onDemand chunk-brnzpqsj.js: identity=33394 gzip=12821 brotli=11528 bytes
critical chunk-3zrccmtw.js: identity=5448 gzip=2606 brotli=2377 bytes
critical chunk-s5s5y5zx.js: identity=2529 gzip=1018 brotli=889 bytes
onDemand chunk-960tgsn8.js: identity=1170 gzip=707 brotli=589 bytes
onDemand chunk-zx57bg5h.js: identity=6983 gzip=3100 brotli=2806 bytes
critical chunk-grdbtwpg.js: identity=34427 gzip=9986 brotli=8979 bytes
onDemand chunk-azs6pd2b.js: identity=4696 gzip=1955 brotli=1727 bytes
onDemand chunk-jtg45ttx.js: identity=6744 gzip=3165 brotli=2879 bytes
deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes
onDemand chunk-3m9zj9sz.js: identity=1063 gzip=653 brotli=523 bytes
onDemand chunk-x90k904w.js: identity=2557 gzip=1180 brotli=1009 bytes
onDemand chunk-y37qs274.js: identity=10904 gzip=4423 brotli=4029 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
critical chunk-wk9n9jj8.js: identity=8377 gzip=3575 brotli=3184 bytes
onDemand chunk-3106g4qz.js: identity=49320 gzip=15454 brotli=13778 bytes
onDemand chunk-yvq3ah6x.js: identity=2108 gzip=1038 brotli=870 bytes
onDemand chunk-2bk6ctz6.js: identity=1649 gzip=774 brotli=676 bytes
onDemand chunk-0hvyvmdp.js: identity=1974 gzip=987 brotli=843 bytes
critical chunk-qp0njft5.js: identity=17631 gzip=6254 brotli=5571 bytes
onDemand chunk-1gtcrark.js: identity=1026 gzip=622 brotli=496 bytes
onDemand chunk-hpxpyhkp.js: identity=6265 gzip=2103 brotli=1862 bytes
deferred chunk-a016a72m.js: identity=545 gzip=314 brotli=265 bytes
onDemand chunk-peekjt9w.js: identity=14598 gzip=5447 brotli=4888 bytes
onDemand chunk-w4tjwx5d.js: identity=6148 gzip=2778 brotli=2507 bytes
critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes
critical chunk-3cd7r4ty.js: identity=9907 gzip=4060 brotli=3500 bytes
critical chunk-z2114mvp.js: identity=729050 gzip=210330 brotli=170810 bytes
onDemand chunk-0yv0etqm.js: identity=2420 gzip=1193 brotli=1068 bytes
onDemand chunk-7t673akt.js: identity=7662 gzip=3396 brotli=2964 bytes
onDemand chunk-qbb2e8b9.js: identity=228 gzip=178 brotli=158 bytes
onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes
onDemand chunk-qmpj3m3r.js: identity=540 gzip=354 brotli=317 bytes
deferred chunk-hrvk7hrj.js: identity=1560 gzip=801 brotli=731 bytes
critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes
onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes
onDemand chunk-hf4csx9f.js: identity=191 gzip=167 brotli=130 bytes
critical chunk-vb52mqs5.js: identity=707 gzip=362 brotli=309 bytes
onDemand chunk-806v0gmr.js: identity=11126 gzip=4258 brotli=3885 bytes
deferred chunk-f8q0nw80.js: identity=14644 gzip=4802 brotli=4431 bytes
critical chunk-cvvfg8c8.js: identity=2161 gzip=1061 brotli=907 bytes
onDemand chunk-njtzg687.js: identity=6493 gzip=2402 brotli=2140 bytes
critical chunk-pmgxewne.js: identity=162 gzip=150 brotli=119 bytes
critical chunk-kx9f5hgv.js: identity=1188 gzip=691 brotli=582 bytes
onDemand chunk-tt9hr952.js: identity=4561 gzip=2003 brotli=1784 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
critical main.js: identity=104155 gzip=38353 brotli=33092 bytes
onDemand chunk-fassn2y5.js: identity=3891 gzip=1735 brotli=1518 bytes
deferred chunk-301pnpgg.js: identity=38155 gzip=13871 brotli=12364 bytes
onDemand chunk-62k6fzh1.js: identity=2522 gzip=1130 brotli=964 bytes
onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes
critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes
critical chunk-fxmz3y8j.js: identity=1106 gzip=663 brotli=600 bytes
onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes
JavaScript transfer, critical: identity=987711 gzip=305938/307200 brotli=254672/256000 bytes
JavaScript transfer, deferred: identity=166293 gzip=57667/61440 brotli=51201/55296 bytes
JavaScript transfer, onDemand: identity=231812 gzip=91855/20480 brotli=81862/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-3106g4qz.js: gzip=15454/20480 brotli=13778/18432 bytes (class total gzip=91855 brotli=81862, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.74ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.50ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.15ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.17ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.15ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.24ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [11.67ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.19ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.69ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.16ms]
(pass) split mux header preserves trailing Close [0.20ms]
(pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.64ms]
(pass) empty marked input reports the stable invalid-body decoder failure [0.15ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.85ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.01ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.76ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.94ms]
(pass) superseded failure preserves a newer pending refresh [3.91ms]

src/stream.test.ts:
stream differential: 141 streams, 11988 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [3004.55ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [9.80ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [2.91ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [4.23ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.17ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.30ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.61ms]
(pass) review continuation stops after forbidden [1.29ms]
(pass) review continuation stops after superseded [1.23ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.40ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.16ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.22ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.02ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms]
(pass) watch never publishes a partial page; withdrawn=false [1.58ms]
(pass) watch never publishes a partial page; withdrawn=true [1.25ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.58ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.22ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.57ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [1.41ms]
(pass) shared Mesh event vectors drive the typed watch adapter [5.53ms]

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [3.10s]
Independent review verdict: **merge after fixes**. Counts: **P0 0, P1 0, P2 3, P3 2**. Reviewed job head `75baaecad85b9c371d30791ac2e62f41b691892b`, diff base `4a6202a5299329411fcf94deef6b0181b054957c`. Review branch `review-setup-token-data` is clean and pushed at `074141ee37c6868594f303a890fe58fde6eec850`. It changes only three normal test files; no implementation fixes or deployment. Each finding has an individually committed, pushed failing test and an entry in `$HOME/.cache/codex-scratch/review-setup-token-data/findings.md`: - R252-01 — P2 — `b930fa247`: directory-listing preflight stops retrieval from an already accessible private socket. - R252-02 — P2 — `4e1643431`: an inaccessible socket in a readable directory misses the sudo command. - R252-03 — P2 — `61fb7579d`: discovery skips an installer-generated unit reached through a versioned executable symlink. - R252-04 — P3 — `fa77e242a`: canonical public-status contract omits the added command field. - R252-05 — P3 — `074141ee3`: the sudo command widens the setup card beyond a 375-pixel viewport, clipping its right edge. All five fail on their intended assertions. The four Rust regressions return 101; the production-browser bounds regression returns 1 (expected right <=375, received 392.61224365234375). Formatting, Clippy on both touched crates, the touched TypeScript check and diff checks pass. These review tests intentionally remain failing for the fix round. The unmodified job head passed the complete `scripts/verify fast`, **exit 0**, before review tests were added. Its full output follows verbatim. Every Rust table row passed; TypeScript/build/transfer/protocol checks passed (39 protocol tests, 0 failed). No host-load exception was needed. `Cargo.lock` and `crates/infraternal-shim/src/readiness.rs`, plus the named descriptor ownership files, are byte-identical to dev's reviewed #255 version. Static receipts on 8by64-compute02 reproduce head sizes **21,399,568 / 19,574,552 bytes**. A fresh detached merge-base x86_64 build with the same pinned recipe measures **21,386,512 bytes**, independently confirming **+13,056 bytes**. Both head images are stripped/static and meet their exact caps. The native x86_64 key-memory gate passed; the aarch64 runtime key-memory check was not executed on this x86_64 host, as the gate reports. No runtime performance claim is made. Functional path probes passed for explicit and installed data paths, data-directory symlinks, safely quoted spaces/quotes/shell metacharacters, and missing-directory behavior. Public status and UI expose only the command. Shared-browser checks against production assets confirmed the plain/sudo display strings equal the argument passed to the clipboard API; token inputs stayed empty and console errors were absent. Permission refusal was simulated with private local fixtures, without accessing another account or installed service. Screenshots and detailed finding evidence are in the preceding comments. Cleanup is verified: target directory deleted, temporary baseline worktree removed, review UI server PID 1507184 absent, shared review tab closed, and review/test ports 53252/53254/53255 closed on IPv4 and IPv6 loopback. The supplied review worktree and its pushed test branch remain. [verify-fast-head.log](https://git.kayg.org/attachments/d7986c14-b020-4ca3-81f2-b0bd96dd070e) [review-checks.log](https://git.kayg.org/attachments/e8993696-1f43-423a-9e79-4ef4f373b864) [findings.md](https://git.kayg.org/attachments/afcc8968-c599-4dde-b2b9-b164f80eafa5) [baseline-static.log](https://git.kayg.org/attachments/3834d115-18d8-466e-bf26-16a5ebab2087) [size-comparison.log](https://git.kayg.org/attachments/5fcd3415-4237-4bf1-9c3f-425730a358e8) [head-static-sizes.json](https://git.kayg.org/attachments/1094ac14-dcc5-4213-b9cd-007af6555690) [cleanup.json](https://git.kayg.org/attachments/c37e8d41-edf6-4e40-91d0-7e510edb20d3) `scripts/verify fast` on job head 75baaecad, verbatim: ```text ==> Repository artifact size gate repository artifact gate: PASS (36 changed path(s), merge base 4a6202a52993) ==> Release deployment functional checks .....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained .Build deferred: host capacity limit reached ......... ---------------------------------------------------------------------- Ran 15 tests in 0.632s OK . ---------------------------------------------------------------------- Ran 1 test in 0.045s OK bun test v1.4.2 (744846f84) scripts/release/deploy-review.test.ts: REMOTE_ADMISSION unsigned_x86_payload=true refused=true (pass) remote admission refuses an x86 payload outside the signed manifest [96.08ms] {"state": "deployed", "ca_unlocked": true} WEB_ONLY_RECORD candidate_binary_recorded=false (pass) web-only deployment does not record the candidate as the running binary [100.90ms] ALIAS_RECOVERY restart_requests=2 (pass) alias restoration failure still requests the retained warm rollback [104.87ms] 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [305.00ms] PASS proxy_forwarding samples=3 timed=false ==> fmt (fmt: 2s) ==> VT native fmt (VT native fmt: 0s) ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Compiling proc-macro2 v1.0.107 Compiling unicode-ident v1.0.26 Compiling quote v1.0.47 Compiling libc v0.2.190 Compiling serde_core v1.0.229 Compiling autocfg v1.5.1 Compiling memchr v2.8.3 Compiling cfg_aliases v0.2.2 Compiling utf8parse v0.2.2 Compiling cfg-if v1.0.5 Compiling memoffset v0.9.1 Compiling anstyle-parse v1.0.0 Compiling nix v0.30.1 Compiling zmij v1.0.23 Compiling is_terminal_polyfill v1.70.2 Compiling colorchoice v1.0.5 Compiling anstyle-query v1.1.5 Compiling anstyle v1.0.14 Compiling bitflags v2.13.2 Compiling strsim v0.11.1 Compiling anstream v1.0.0 Compiling clap_lex v1.1.1 Compiling getrandom v0.4.3 Compiling serde v1.0.229 Compiling syn v3.0.6 Compiling arrayvec v0.7.8 Compiling serde_json v1.0.151 Compiling itoa v1.0.18 Compiling heck v0.5.0 Compiling vte v0.15.0 Compiling clap_builder v4.6.7 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api) Compiling errno v0.3.14 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim) Compiling thiserror v2.0.21 Compiling signal-hook-registry v1.4.8 Compiling mio v1.2.4 Compiling socket2 v0.6.5 Compiling bytes v1.12.1 Compiling serde_derive v1.0.229 Compiling clap_derive v4.6.7 Compiling tokio-macros v2.7.2 Compiling thiserror-impl v2.0.21 Compiling pin-project-lite v0.2.17 Compiling unicode-width v0.2.2 Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal) Compiling tokio v1.53.3 Compiling clap v4.6.7 Compiling vt100 v0.16.2 Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-status) Compiling uuid v1.27.0 warning: function `print_progress` is never used --> crates/infraternal/src/cli/output.rs:592:8 | 592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) { | ^^^^^^^^^^^^^^ | = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default warning: function `write_output` is never used --> crates/infraternal/src/cli/output.rs:616:8 | 616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) { | ^^^^^^^^^^^^ warning: `infraternal` (bin "infraternal" test) generated 2 warnings Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 12s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal-fe1c5abfd68beec3) running 37 tests test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s Compiling shlex v2.0.1 Compiling find-msvc-tools v0.1.14 Compiling serde v1.0.229 Compiling syn v3.0.6 Compiling syn v2.0.119 Compiling futures-core v0.3.34 Compiling memchr v2.8.3 Compiling serde_core v1.0.229 Compiling once_cell v1.21.4 Compiling cc v1.6.0 Compiling stable_deref_trait v1.2.1 Compiling version_check v0.9.5 Compiling pkg-config v0.3.34 Compiling generic-array v0.14.7 Compiling typenum v1.20.1 Compiling vcpkg v0.2.15 Compiling log v0.4.34 Compiling writeable v0.6.4 Compiling litemap v0.8.3 Compiling tracing-core v0.1.36 Compiling icu_normalizer_data v2.3.0 Compiling tracing-attributes v0.1.31 Compiling serde_derive v1.0.229 Compiling synstructure v0.14.0 Compiling displaydoc v0.2.7 Compiling zerovec-derive v0.11.6 Compiling utf8_iter v1.0.4 Compiling block-buffer v0.10.4 Compiling crypto-common v0.1.7 Compiling icu_properties_data v2.3.0 Compiling zerofrom-derive v0.1.8 Compiling yoke-derive v0.8.4 Compiling tokio-macros v2.7.2 Compiling smallvec v1.16.2 Compiling tracing v0.1.44 Compiling tokio v1.53.3 Compiling percent-encoding v2.3.2 Compiling zerofrom v0.1.8 Compiling futures-sink v0.3.34 Compiling cpufeatures v0.2.17 Compiling yoke v0.8.3 Compiling futures-task v0.3.34 Compiling futures-io v0.3.34 Compiling subtle v2.6.1 Compiling zerovec v0.11.8 Compiling zerotrie v0.2.5 Compiling scopeguard v1.2.0 Compiling slab v0.4.12 Compiling equivalent v1.0.2 Compiling lock_api v0.4.14 Compiling form_urlencoded v1.2.2 Compiling libc v0.2.190 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling parking_lot_core v0.9.12 Compiling thiserror-impl v2.0.21 Compiling num-traits v0.2.19 Compiling hashbrown v0.17.1 Compiling icu_collections v2.3.0 Compiling icu_locale_core v2.3.0 Compiling thiserror v2.0.21 Compiling indexmap v2.14.2 Compiling icu_provider v2.3.1 Compiling digest v0.10.7 Compiling crossbeam-utils v0.8.23 Compiling futures-macro v0.3.34 Compiling foldhash v0.1.5 Compiling icu_properties v2.3.0 Compiling icu_normalizer v2.3.0 Compiling allocator-api2 v0.2.21 Compiling futures-util v0.3.34 Compiling hashbrown v0.15.5 Compiling idna_adapter v1.2.2 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling hashlink v0.10.0 Compiling sha2 v0.10.9 Compiling crossbeam-queue v0.3.14 Compiling event-listener v5.4.2 Compiling crc v3.4.0 Compiling idna v1.1.0 Compiling mio v1.2.4 Compiling socket2 v0.6.5 Compiling spin v0.9.9 Compiling libsqlite3-sys v0.30.1 Compiling openssl-src v300.6.1+3.6.3 Compiling ryu v1.0.23 Compiling serde_json v1.0.151 Compiling openssl-sys v0.9.117 Compiling url v2.5.8 Compiling parking_lot v0.12.5 Compiling futures-channel v0.3.34 Compiling futures-intrusive v0.5.0 Compiling either v1.18.0 Compiling hex v0.4.3 Compiling base64 v0.22.1 Compiling rand_core v0.10.1 Compiling futures-executor v0.3.34 Compiling atoi v2.0.0 Compiling serde_urlencoded v0.7.1 Compiling flume v0.11.1 Compiling getrandom v0.4.3 Compiling zerocopy v0.8.60 Compiling tokio-stream v0.1.19 Compiling zerocopy-derive v0.8.60 Compiling getrandom v0.2.17 Compiling sqlx-core v0.8.6 Compiling dotenvy v0.15.7 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api) Compiling foreign-types-shared v0.1.1 Compiling openssl v0.10.81 Compiling foreign-types v0.3.2 Compiling openssl-macros v0.1.1 Compiling http v1.5.0 Compiling nix v0.30.1 Compiling ring v0.17.14 Compiling getrandom v0.3.4 Compiling sqlx-sqlite v0.8.6 Compiling uuid v1.27.0 Compiling zeroize v1.9.0 Compiling untrusted v0.9.0 Compiling num-conv v0.2.2 Compiling minimal-lexical v0.2.1 Compiling ppv-lite86 v0.2.21 Compiling thiserror v1.0.69 Compiling sqlx-macros-core v0.8.6 Compiling httparse v1.10.1 Compiling time-core v0.1.9 Compiling time-macros v0.2.32 Compiling nom v7.1.3 Compiling sqlx-macros v0.8.6 Compiling rand_core v0.9.5 Compiling rustls-pki-types v1.15.1 Compiling http-body v1.1.0 Compiling sqlx v0.8.6 Compiling thiserror-impl v1.0.69 Compiling synstructure v0.13.2 Compiling tinyvec v1.13.3 Compiling deranged v0.5.8 Compiling powerfmt v0.2.1 Compiling cpufeatures v0.3.1 Compiling rustls v0.23.46 Compiling chacha20 v0.10.2 Compiling rustls-webpki v0.103.16 Compiling asn1-rs-derive v0.5.1 Compiling rusticata-macros v4.1.0 Compiling rand_chacha v0.9.0 Compiling quinn-udp v0.5.16 Compiling tokio-util v0.7.19 Compiling time v0.3.55 Compiling asn1-rs-impl v0.2.0 Compiling data-encoding v2.11.1 Compiling tower-service v0.3.3 Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-protocol) Compiling tokio-openssl v0.6.5 Compiling rand v0.9.5 Compiling rand v0.10.3 Compiling vte v0.15.0 Compiling rand_core v0.6.4 Compiling rand_pcg v0.10.2 Compiling clap_derive v4.6.7 Compiling quinn v0.11.12 Compiling num-integer v0.1.47 Compiling base64 v0.21.7 Compiling pastey v0.1.1 Compiling rustc-hash v2.1.3 Compiling fnv v1.0.7 Compiling asn1-rs v0.6.2 Compiling oid-registry v0.7.1 Compiling httpdate v1.0.3 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim) Compiling lru-slab v0.1.3 Compiling lazy_static v1.5.1 Compiling try-lock v0.2.5 Compiling atomic-waker v1.1.2 Compiling want v0.3.2 Compiling h2 v0.4.19 Compiling clap v4.6.7 Compiling base64urlsafedata v0.5.5 Compiling num-bigint v0.4.8 Compiling tower-layer v0.3.3 Compiling unicase v2.10.0 Compiling mime v0.3.17 Compiling rustversion v1.0.23 Compiling webauthn-attestation-ca v0.5.5 Compiling mime_guess v2.0.5 Compiling der-parser v9.0.0 Compiling quinn-proto v0.11.19 Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-mesh) Compiling http-body-util v0.1.5 Compiling half v2.7.1 Compiling sha1 v0.10.7 Compiling fs-err v3.3.2 Compiling regex-syntax v0.8.11 Compiling webauthn-rs-core v0.5.5 Compiling sync_wrapper v1.0.2 Compiling tungstenite v0.29.0 Compiling serde_cbor_2 v0.13.0 Compiling regex-automata v0.4.18 Compiling hyper v1.11.1 Compiling x509-parser v0.16.0 Compiling webauthn-rs-proto v0.5.5 Compiling rand_chacha v0.3.1 Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/host-facts) Compiling hex-conservative v0.2.3 Compiling hyper-util v0.1.21 Compiling base64ct v1.8.3 Compiling bitcoin_hashes v0.14.101 Compiling password-hash v0.5.0 Compiling rand v0.8.8 Compiling matchers v0.2.0 Compiling arc-swap v1.9.2 Compiling tokio-tungstenite v0.29.0 Compiling axum-core v0.5.6 Compiling tower v0.5.3 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-server) Compiling blake2 v0.10.6 Compiling tracing-serde v0.2.0 Compiling tracing-log v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling thread_local v1.1.10 Compiling matchit v0.8.4 Compiling http-range-header v0.4.2 Compiling nu-ansi-term v0.50.3 Compiling argon2 v0.5.3 Compiling tower-http v0.6.11 Compiling tracing-subscriber v0.3.23 Compiling bip39 v2.2.2 Compiling axum v0.8.9 Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/canvas) Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/release) Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal) Compiling vt100 v0.16.2 Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/relay) Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/backup) Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-status) Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/mesh) Compiling axum-server v0.8.0 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote) Compiling webauthn-rs v0.5.5 Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-agent) Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh) Finished `test` profile [unoptimized + debuginfo] target(s) in 3m 48s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal-0a149f42b54b04db) running 104 tests test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 8.29s Compiling displaydoc v0.2.7 Compiling serde v1.0.229 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api) Compiling getrandom v0.2.17 Compiling nix v0.30.1 Compiling tracing-core v0.1.36 Compiling tokio v1.53.3 Compiling ring v0.17.14 Compiling tinystr v0.8.4 Compiling zerotrie v0.2.5 Compiling zeroize v1.9.0 Compiling icu_locale_core v2.3.0 Compiling rustls-pki-types v1.15.1 Compiling tracing v0.1.44 Compiling icu_provider v2.3.1 Compiling icu_collections v2.3.0 Compiling rustls-webpki v0.103.16 Compiling syn v2.0.119 Compiling smallvec v1.16.2 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim) Compiling icu_normalizer v2.3.0 Compiling rustls v0.23.46 Compiling icu_properties v2.3.0 Compiling quinn-udp v0.5.16 Compiling idna_adapter v1.2.2 Compiling openssl-macros v0.1.1 Compiling uuid v1.27.0 Compiling percent-encoding v2.3.2 Compiling openssl v0.10.81 Compiling form_urlencoded v1.2.2 Compiling digest v0.10.7 Compiling idna v1.1.0 Compiling futures-core v0.3.34 Compiling futures-util v0.3.34 Compiling sha2 v0.10.9 Compiling url v2.5.8 Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/host-facts) Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-mesh) Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/relay) Compiling quinn-proto v0.11.19 Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/backup) Compiling tokio-openssl v0.6.5 Compiling quinn v0.11.12 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote) Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-agent) Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh) Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 44s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_agent-f4f0113fecf22aee) running 1 test test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 75 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_mesh-c7263890e5528429) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_ssh-b96e878b9907f3df) running 1 test test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s (CLI plugin compile-out: 475s) ==> clippy Checking cfg-if v1.0.5 Checking libc v0.2.190 Compiling jobserver v0.1.35 Checking pin-project-lite v0.2.17 Checking serde_core v1.0.229 Checking memchr v2.8.3 Checking bytes v1.12.1 Checking itoa v1.0.18 Compiling cc v1.6.0 Checking typenum v1.20.1 Checking once_cell v1.21.4 Checking log v0.4.34 Checking subtle v2.6.1 Checking tracing-core v0.1.36 Checking futures-core v0.3.34 Checking zerofrom v0.1.8 Checking generic-array v0.14.7 Checking stable_deref_trait v1.2.1 Checking yoke v0.8.3 Checking getrandom v0.2.17 Checking socket2 v0.6.5 Checking errno v0.3.14 Checking mio v1.2.4 Checking smallvec v1.16.2 Checking rand_core v0.6.4 Checking signal-hook-registry v1.4.8 Checking serde v1.0.229 Checking tracing v0.1.44 Checking crypto-common v0.1.7 Checking num-traits v0.2.19 Checking tokio v1.53.3 Checking zerovec v0.11.8 Checking futures-sink v0.3.34 Checking slab v0.4.12 Compiling crossbeam-utils v0.8.23 Checking block-buffer v0.10.4 Checking cpufeatures v0.2.17 Checking writeable v0.6.4 Checking tinystr v0.8.4 Checking litemap v0.8.3 Checking potential_utf v0.1.6 Checking digest v0.10.7 Checking icu_locale_core v2.3.0 Checking zerotrie v0.2.5 Checking utf8_iter v1.0.4 Checking icu_collections v2.3.0 Checking icu_provider v2.3.1 Checking either v1.18.0 Checking zmij v1.0.23 Checking percent-encoding v2.3.2 Checking equivalent v1.0.2 Checking serde_json v1.0.151 Checking icu_properties_data v2.3.0 Checking icu_normalizer_data v2.3.0 Compiling scopeguard v1.2.0 Checking icu_normalizer v2.3.0 Checking icu_properties v2.3.0 Compiling lock_api v0.4.14 Checking futures-task v0.3.34 Checking hashbrown v0.17.1 Checking futures-io v0.3.34 Checking futures-util v0.3.34 Checking form_urlencoded v1.2.2 Checking indexmap v2.14.2 Checking thiserror v2.0.21 Checking idna_adapter v1.2.2 Compiling libsqlite3-sys v0.30.1 Compiling sha2 v0.10.9 Checking idna v1.1.0 Compiling parking_lot_core v0.9.12 Compiling foldhash v0.1.5 Compiling allocator-api2 v0.2.21 Checking bitflags v2.13.2 Compiling parking_lot v0.12.5 Compiling hashbrown v0.15.5 Checking url v2.5.8 Checking futures-channel v0.3.34 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling crc v3.4.0 Compiling crossbeam-queue v0.3.14 Compiling event-listener v5.4.2 Compiling hashlink v0.10.0 Compiling futures-intrusive v0.5.0 Compiling spin v0.9.9 Compiling ryu v1.0.23 Compiling flume v0.11.1 Compiling serde_urlencoded v0.7.1 Compiling futures-executor v0.3.34 Compiling atoi v2.0.0 Checking base64 v0.22.1 Checking tokio-stream v0.1.19 Compiling hex v0.4.3 Checking sqlx-core v0.8.6 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api) Checking memoffset v0.9.1 Compiling openssl-src v300.6.1+3.6.3 Checking nix v0.30.1 Checking rand_core v0.10.1 Checking foreign-types-shared v0.1.1 Checking getrandom v0.4.3 Checking foreign-types v0.3.2 Compiling openssl-sys v0.9.117 Checking infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-protocol) Checking uuid v1.27.0 Checking zeroize v1.9.0 Checking utf8parse v0.2.2 Checking anstyle v1.0.14 Checking anstyle-parse v1.0.0 Checking colorchoice v1.0.5 Checking anstyle-query v1.1.5 Checking is_terminal_polyfill v1.70.2 Checking strsim v0.11.1 Checking anstream v1.0.0 Checking clap_lex v1.1.1 Checking arrayvec v0.7.8 Checking sqlx-sqlite v0.8.6 Checking clap_builder v4.6.7 Checking vte v0.15.0 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim) Compiling ring v0.17.14 Checking untrusted v0.9.0 Checking clap v4.6.7 Checking rustls-pki-types v1.15.1 Checking cpufeatures v0.3.1 Checking tinyvec v1.13.3 Checking chacha20 v0.10.2 Checking rand_pcg v0.10.2 Checking lru-slab v0.1.3 Checking rustc-hash v2.1.3 Checking rand v0.10.3 Checking quinn-udp v0.5.16 Checking zerocopy v0.8.60 Checking http v1.5.0 Checking getrandom v0.3.4 Compiling rustls v0.23.46 Compiling time-core v0.1.9 Checking minimal-lexical v0.2.1 Checking regex-syntax v0.8.11 Compiling num-conv v0.2.2 Checking rustls-webpki v0.103.16 Compiling sqlx-macros-core v0.8.6 Compiling time-macros v0.2.32 Checking regex-automata v0.4.18 Checking nom v7.1.3 Compiling sqlx-macros v0.8.6 Checking ppv-lite86 v0.2.21 Checking half v2.7.1 Checking sqlx v0.8.6 Checking http-body v1.1.0 Checking rand_core v0.9.5 Checking deranged v0.5.8 Checking powerfmt v0.2.1 Checking rand_chacha v0.9.0 Checking quinn-proto v0.11.19 Checking infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-mesh) Checking infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/host-facts) Checking thiserror v1.0.69 Checking rusticata-macros v4.1.0 Checking httparse v1.10.1 Checking tokio-util v0.7.19 Checking data-encoding v2.11.1 Checking tower-service v0.3.3 Checking rand v0.9.5 Checking time v0.3.55 Checking num-integer v0.1.47 Checking try-lock v0.2.5 Checking fnv v1.0.7 Checking httpdate v1.0.3 Checking base64 v0.21.7 Checking atomic-waker v1.1.2 Checking lazy_static v1.5.1 Checking h2 v0.4.19 Checking num-bigint v0.4.8 Checking base64urlsafedata v0.5.5 Checking want v0.3.2 Checking tower-layer v0.3.3 Checking mime v0.3.17 Checking quinn v0.11.12 Compiling unicase v2.10.0 Checking http-body-util v0.1.5 Compiling mime_guess v2.0.5 Checking asn1-rs v0.6.2 Checking sha1 v0.10.7 Checking sync_wrapper v1.0.2 Checking webauthn-rs-proto v0.5.5 Checking infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/release) Checking tungstenite v0.29.0 Checking serde_cbor_2 v0.13.0 Checking rand_chacha v0.3.1 Checking oid-registry v0.7.1 Checking der-parser v9.0.0 Checking hex-conservative v0.2.3 Checking base64ct v1.8.3 Checking bitcoin_hashes v0.14.101 Checking x509-parser v0.16.0 Checking password-hash v0.5.0 Checking rand v0.8.8 Checking tokio-tungstenite v0.29.0 Checking hyper v1.11.1 Checking tower v0.5.3 Checking axum-core v0.5.6 Checking arc-swap v1.9.2 Checking fs-err v3.3.2 Checking sharded-slab v0.1.7 Checking infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/canvas) Checking matchers v0.2.0 Checking unicode-normalization v0.1.25 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-server) Checking hyper-util v0.1.21 Checking blake2 v0.10.6 Checking tracing-serde v0.2.0 Checking serde_path_to_error v0.1.20 Checking tracing-log v0.2.0 Checking thread_local v1.1.10 Checking http-range-header v0.4.2 Checking nu-ansi-term v0.50.3 Checking matchit v0.8.4 Checking tower-http v0.6.11 Checking argon2 v0.5.3 Checking tracing-subscriber v0.3.23 Checking bip39 v2.2.2 Checking axum v0.8.9 Compiling libfuzzer-sys v0.4.13 Checking arbitrary v1.4.2 Checking inout v0.1.4 Checking cipher v0.4.4 Checking universal-hash v0.5.1 Checking opaque-debug v0.3.1 Checking ctr v0.9.2 Checking polyval v0.6.2 Checking aes v0.8.4 Checking hmac v0.12.1 Checking ghash v0.5.1 Checking aead v0.5.2 Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal) Checking hkdf v0.12.4 Checking infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/relay) Checking aes-gcm v0.10.3 Checking infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/backup) Checking infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-status) Checking unicode-width v0.2.2 Compiling crossbeam-epoch v0.9.21 Compiling crossbeam-deque v0.8.8 Compiling rayon-core v1.13.0 Checking vt100 v0.16.2 Checking plotters-backend v0.3.7 Checking ciborium-io v0.2.2 Checking plotters-svg v0.3.7 Checking ciborium-ll v0.2.2 Checking itertools v0.13.0 Checking same-file v1.0.6 Checking cast v0.3.0 Checking walkdir v2.5.0 Checking rayon v1.12.0 Checking ciborium v0.2.2 Checking plotters v0.3.7 Checking regex v1.13.1 Checking tinytemplate v1.2.1 Checking anes v0.1.6 Checking criterion-plot v0.6.0 Checking oorandom v11.1.5 Compiling infraternal-session v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-session) Checking criterion v0.7.0 Compiling openssl v0.10.81 Compiling tokio-openssl v0.6.5 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-core v0.5.5 Checking infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/mesh) Checking axum-server v0.8.0 Checking infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote) Checking webauthn-rs v0.5.5 Checking infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-agent) Checking infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh) Checking infraternal-fuzz v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/fuzz) Finished `dev` profile [unoptimized + debuginfo] target(s) in 2m 26s (clippy: 147s) ==> SSH runtime test helper Compiling tokio v1.53.3 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api) Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim) Compiling tokio-openssl v0.6.5 Compiling quinn v0.11.12 Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh) Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote) Finished `dev` profile [unoptimized + debuginfo] target(s) in 14.45s (SSH runtime test helper: 15s) ==> real-binary fixture paths ... ---------------------------------------------------------------------- Ran 3 tests in 0.007s OK (real-binary fixture paths: 0s) ==> test Compiling crypto-common v0.1.7 Compiling crossbeam-utils v0.8.23 Compiling either v1.18.0 Compiling crossbeam-queue v0.3.14 Compiling libsqlite3-sys v0.30.1 Compiling digest v0.10.7 Compiling tokio-stream v0.1.19 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api) Compiling sha2 v0.10.9 Compiling openssl-sys v0.9.117 Compiling ring v0.17.14 Compiling regex-automata v0.4.18 Compiling tokio-util v0.7.19 Compiling sqlx-core v0.8.6 Compiling h2 v0.4.19 Compiling openssl v0.10.81 Compiling rustls-webpki v0.103.16 Compiling sqlx-sqlite v0.8.6 Compiling sha1 v0.10.7 Compiling rustls v0.23.46 Compiling tungstenite v0.29.0 Compiling tokio-tungstenite v0.29.0 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim) Compiling tokio-openssl v0.6.5 Compiling sqlx-macros-core v0.8.6 Compiling hyper v1.11.1 Compiling webauthn-attestation-ca v0.5.5 Compiling fs-err v3.3.2 Compiling tower v0.5.3 Compiling webauthn-rs-core v0.5.5 Compiling matchers v0.2.0 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-server) Compiling quinn-proto v0.11.19 Compiling sqlx-macros v0.8.6 Compiling blake2 v0.10.6 Compiling tower-http v0.6.11 Compiling hyper-util v0.1.21 Compiling sqlx v0.8.6 Compiling argon2 v0.5.3 Compiling axum v0.8.9 Compiling axum-server v0.8.0 Compiling tracing-subscriber v0.3.23 Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-mesh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/host-facts) Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/release) Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/canvas) Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/mesh) Compiling webauthn-rs v0.5.5 Compiling inout v0.1.4 Compiling universal-hash v0.5.1 Compiling opaque-debug v0.3.1 Compiling cipher v0.4.4 Compiling hmac v0.12.1 Compiling polyval v0.6.2 Compiling quinn v0.11.12 Compiling ctr v0.9.2 Compiling aes v0.8.4 Compiling ghash v0.5.1 Compiling aead v0.5.2 Compiling hkdf v0.12.4 Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/backup) Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/relay) Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-status) Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal) Compiling crossbeam-epoch v0.9.21 Compiling aes-gcm v0.10.3 Compiling plotters-backend v0.3.7 Compiling ciborium-io v0.2.2 Compiling itertools v0.13.0 Compiling crossbeam-deque v0.8.8 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote) Compiling ciborium-ll v0.2.2 Compiling plotters-svg v0.3.7 Compiling rayon-core v1.13.0 Compiling same-file v1.0.6 Compiling cast v0.3.0 Compiling walkdir v2.5.0 Compiling plotters v0.3.7 Compiling ciborium v0.2.2 Compiling rayon v1.12.0 Compiling criterion-plot v0.6.0 Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-agent) Compiling regex v1.13.1 Compiling tinytemplate v1.2.1 Compiling oorandom v11.1.5 Compiling anes v0.1.6 Compiling infraternal-session v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-session) Compiling criterion v0.7.0 Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh) Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-protocol) Finished `test` profile [unoptimized + debuginfo] target(s) in 3m 36s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal-6fb500f025e14506) running 104 tests test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 8.58s Running tests/agent_daemon.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/agent_daemon-07be34f79332b165) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.60s Running tests/agent_queues.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/agent_queues-230c59a5cd906663) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.94s Running tests/agent_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/agent_review-84c86525ad0fea2c) running 8 tests test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 14.78s Running tests/agent_sessions.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/agent_sessions-03d7a30371f14a27) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.45s Running tests/cli_envelope.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/cli_envelope-80a08214b8a5d410) running 8 tests test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok test bare_infraternal_is_the_overview_and_points_to_help ... ok test a_missing_server_is_not_found_exit_4 ... ok test status_exits_0_on_a_machine_with_nothing_installed ... ok test read_only_commands_answer_in_the_envelope ... ok test status_exits_5_when_something_that_should_run_is_down ... ok test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/cli_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/cli_review-3291d67404d26089) running 17 tests test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok test a_group_with_one_command_says_so_in_the_singular ... ok test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok test a_dry_run_plan_keeps_its_line_breaks ... ok test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok test an_unknown_skill_is_not_found_exit_4 ... ok test no_compiled_python_is_tracked ... ok test a_malformed_host_id_is_a_usage_error_exit_2 ... ok test a_dumb_terminal_gets_neither_colour_nor_marks ... ok test a_subcommand_does_not_advertise_options_it_ignores ... ok test root_help_fits_80_columns ... ok test root_help_lists_server_init ... ok test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok test json_help_and_version_are_envelopes_too ... ok test user_facing_text_never_says_agent_alone ... ok test an_empty_no_color_is_ignored ... ok test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s Running tests/cli_review_r2.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/cli_review_r2-23cf4131d1988fa6) running 11 tests test a_paged_listing_is_still_one_envelope ... ok test a_failed_later_page_emits_only_the_failure_envelope ... ok test status_text_does_not_call_an_unanswered_unit_not_running ... ok test an_unknown_skill_does_not_echo_what_was_typed ... ok test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok test three_pages_preserve_order_and_only_the_final_cursor ... ok test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok test ctrl_c_in_a_script_loop_stops_the_loop ... ok test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.02s Running tests/cli_review_r3.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/cli_review_r3-be7640ccd9aa03ea) running 4 tests test signal_fixture ... ok test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/cli_review_r3_arguments.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/cli_review_r3_arguments-212cdc3ed0a05eb1) running 1 test test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/idle_canary.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/idle_canary-5d1908992b4ff473) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.10s Running tests/key_memory.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/key_memory-4d4f4cc5516ea6b4) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/remote_output.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/remote_output-9105ebfda268049c) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/session_bounds_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/session_bounds_review-ea0b23d91d052373) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.93s Running tests/session_exit_events.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/session_exit_events-d98ed6fbf136b0d7) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.79s Running tests/session_retention.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/session_retention-8b939159efa2d0ab) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.54s Running tests/setup_output.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/setup_output-702013ba02916bdd) running 3 tests test unreadable_system_service_data_prints_one_sudo_command_line ... ok test setup_output_keeps_legacy_and_versioned_readers ... ok test setup_token_finds_the_data_dir_from_a_system_service_without_flags ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/shim.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/shim-30417b82dff06cc8) running 24 tests test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok test double_fork_survives_parent_death ... ok test attached_backpressure_and_detached_progress ... ok test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok test independent_shared_writers_wait_for_the_same_global_queue ... ok test parked_shared_writer_does_not_stop_detached_pty_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok test replacement_connection_and_malformed_limit ... ok test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok test shared_writer_coexists_and_replayed_input_is_written_once ... ok test owned_exit_releases_promptly_on_window_close ... ok test shared_writer_restores_durable_geometry_after_another_writer_types ... ok test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok active test user_scope_survives_parent_unit_stop ... ok test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test legacy_output_subscription_unblocks_deferred_shared_input ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.49s Running tests/ssh_askpass.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/ssh_askpass-16fbd1b96c4af4ca) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.97s Running tests/ssh_connector_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/ssh_connector_policy-dd9b13bec3dd9638) running 1 test test connector_preserves_configured_bind_address_refusal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.02s Running tests/user_host.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/user_host-4bee401db2fda08c) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/vt_credit.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/vt_credit-dd383ed03c38b306) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.67s Running tests/vt_reconnect.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/vt_reconnect-a0009109e49304ab) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.60s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_agent-b93583fbcebe1fd6) running 168 tests test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::reply_capacity_tests::full_reply_reservations_cannot_spend_keyboard_capacity ... ok test daemon::session_commands::reply_capacity_tests::sixteen_replies_and_eight_typing_commands_retain_their_order ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged. test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged. test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock. test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace. test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test result: ok. 148 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 11.25s Running tests/transport.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/transport-8f7e25a883145d8d) running 3 tests test replacing_the_callers_descriptor_cannot_redirect_registered_io ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_mesh-7fce9c81f3753067) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/default_arrow-718a820b17567011) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/properties.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/properties-9b39f53037898c73) running 14 tests test exhausted_versions_reject_mutations_without_changing_state ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test names_versions_and_backend_status ... ok test directional_grants_union_and_minimal_updates ... ok test overlaps_are_reported_without_silent_range_changes ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.16s Running tests/rotation_time.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/rotation_time-d8fd70ac7360bfd5) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_api-49f4d2771da6f777) running 32 tests test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test component_tests::component_declarations_cannot_create_servers ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test host_name::tests::addresses_and_hostnames_give_a_machine_name ... ok test present::tests::tint_wraps_text_after_padding_is_measured ... ok test host_name::tests::odd_and_overlong_hostnames_give_no_name ... ok test host_name::tests::numeric_invalid_and_unnamed_inputs_give_no_name ... ok test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes. test server_path::tests::legacy_link_omits_the_optional_source_port ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok test present::tests::a_table_has_a_header_only_from_two_rows ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok test present::tests::pairs_align_values_and_wrap_under_them ... ok test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/routing_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/routing_review-6f6c1a928eb26a7f) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_backup-9fdc1ecb14af9cc8) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_canvas-1446da2b8a090ad7) running 12 tests test model::tests::reference_document_has_strict_shape_and_bounds ... ok test reducer::tests::nullable_resize_preserves_existing_values_and_absent_fields ... ok test reducer::tests::sample_corpus_preserves_strict_variant_fields_and_round_trips ... ok test reducer::tests::concurrent_builtin_view_creation_preserves_existing_contents ... ok test socket::tests::descriptor_declares_server_only_actions_and_strict_subscription ... ok test model::tests::graph_pin_coordinates_include_both_limits_but_refuse_the_next_integer ... ok test socket::tests::result_json_preserves_both_wire_shapes ... ok test model::tests::host_id_requires_canonical_lowercase_hyphenated_text ... ok test reducer::tests::split_divides_only_its_own_band ... ok test reducer::tests::view_metadata_targets_and_column_neighbours_are_semantic ... ok test reducer::tests::repeated_open_close_does_not_exhaust_column_capacity ... ok test reducer::tests::independent_edits_commute_and_close_wins_in_both_orders ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_host_facts-8ccf6df635e66a77) running 14 tests test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::static_facts_report_the_machines_hostname ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_mesh-27583060726d1618) running 76 tests test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test node_actions::peer_page_tests::poll_cost ... ignored, measurement test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN. test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok test node_coordination::tests::legacy_host_daemon_and_ip_record_do_not_leave_a_uuid_mesh_name ... ok test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_presentation::tests::a_wide_table_stays_within_the_width ... ok test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok test node_presentation::tests::status_explains_the_observed_server_transport ... ok test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers. test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok test node_coordination::tests::a_name_a_person_chose_is_kept ... ok test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes. test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_coordination::tests::placeholder_names_become_the_machines_names ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok test presence::tests::a_page_cursor_is_followed ... ok test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok test presence::tests::an_unreadable_node_is_no_reading ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok test presence::tests::replace_reports_only_visible_changes ... ok test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok test presence::tests::the_edge_of_the_session_window_is_still_online ... ok test presence::tests::traffic_proves_a_session_until_it_ends ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test node_coordination::tests::two_hosts_reporting_the_same_hostname_receive_distinct_names ... ok test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 0.69s Running tests/access_updates.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/access_updates-401a785178272a85) running 8 tests test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace test compact_identity_support_requires_an_explicit_strict_probe ... ok test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok test range_objects_reject_unknown_duplicate_and_positional_fields ... ok test default_tightening_at_1000_peers_fits_one_round_trip ... ok test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/authorized_local_binding.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/authorized_local_binding-9eb78243673aa0ef) running 2 tests test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/canonical_host_binding.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canonical_host_binding-77332b5113aa5170) running 1 test test enrollment_requires_canonical_host_uuid_spelling ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Running tests/configuration.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/configuration-edd5af664e4aa790) running 5 tests test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok test edition_default_is_explicit_and_build_selected ... ok test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s Running tests/kernel.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/kernel-ae923fd8446e7953) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/naming.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/naming-7ef77dd298644e0e) running 4 tests test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok test the_servers_names_are_kept_for_the_server ... ok test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.45s Running tests/policy_enrollment_binding.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/policy_enrollment_binding-109d95c10f4ea94b) running 4 tests test refused_enrollment_preserves_removal_and_revision ... ok test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok test noncanonical_host_binding_is_refused ... ok test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s Running tests/policy_enrollment_identity.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/policy_enrollment_identity-f0cf7a0229e540f5) running 1 test test unbound_enrollment_public_key_is_not_host_authority ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/policy_snapshot_ordering.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/policy_snapshot_ordering-7cc2ac94da47cd98) running 6 tests test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/presence.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/presence-3e1bc5e55745d7e3) running 2 tests test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s Running tests/restart_route_ownership.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/restart_route_ownership-0dc4cc52f478fbf8) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_authorized_reenrollment.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_authorized_reenrollment-7a5ac950aac5a6a3) running 2 tests test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_endpoint_transaction-0ef0c911cceaab22) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_firewall_marker.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_firewall_marker-c4dbb35430ae2de6) running 2 tests test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173. test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_ingress_translation-c0a4032b0502fe02) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_local_delivery-1712a7f25b19bf51) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_presence_r4.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_mesh_presence_r4-b35fd343e12c696d) running 3 tests test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/review_mesh_view_truth.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_mesh_view_truth-62e9d7f28a99b9eb) running 6 tests test an_address_that_is_an_ip_never_becomes_a_name ... ok test a_host_record_name_beats_another_machines_reported_hostname ... ok test a_remote_machine_cannot_take_the_servers_hostname ... ok test a_remote_machine_cannot_be_called_server ... ok test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.29s Running tests/review_mesh_view_truth_r2.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_mesh_view_truth_r2-f6106bc26caa5acf) running 9 tests test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236) test a_hex_ipv4_spelling_never_becomes_a_name ... ok test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok test a_viewer_without_host_facts_still_sees_distinct_names ... ok test no_viewer_sees_a_remote_machine_called_server ... ok test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok test a_person_can_take_a_name_a_machine_reported ... ok test evidence_migrations_0026_and_0029_upgrade_a_realistic_database_without_churn ... ok test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.37s Running tests/review_mesh_view_truth_r3.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_mesh_view_truth_r3-acc7217987659c70) running 5 tests test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s Running tests/review_mesh_view_truth_r4.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_mesh_view_truth_r4-c8f1176c83a6a2a1) running 7 tests test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok test evidence_server_hostname_moves_only_with_server_rename_authority ... ok test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.67s Running tests/review_restart_routes.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_restart_routes-012bc6e19af8712e) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_retire_ownership.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_retire_ownership-7e7abe5e49e18a66) running 7 tests test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft. test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace. test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace. test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_reverse_recreation.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_reverse_recreation-ba8322a4b4589131) running 4 tests test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_revoked_host_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_revoked_host_policy-8f0b434cc4a6f49e) running 1 test test revoked_host_is_not_retained_in_compiled_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/review_route_inventory.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_route_inventory-db2612871fb84dbf) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_route_scope-7a63cc3e13aa42db) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_shutdown_budget-e6060242e37c449a) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_shutdown_restart-90e3bdbafd24755a) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/settings-b0c907b6b74ba896) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/store.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/store-0f17df0f12b6f327) running 6 tests test required_server_membership_cannot_be_deleted ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test absent_discovery_preserves_the_last_known_endpoint ... ok test attach_cancelled_at_any_await_leaves_the_store_writable ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_relay-d3de297fc8337bde) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_release-1d54d564a3117987) running 8 tests test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test latest::tests::cancellation_joins_verification ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.56s Running tests/review_pool.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_pool-51aabd0e805c8271) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.64s Running tests/review_restart.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_restart-c5f9f9cb62051e16) running 4 tests test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification test lookup_creates_private_staging_under_owner_restrictive_umask ... ok test restarted_latest_reclaims_metadata_after_process_stop ... ok test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 3.42s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_remote-ecf43ccc280cdfc1) running 114 tests test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance. test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance. test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers. test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections. test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence. test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections. test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections. test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock. test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline. test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok test runtime_lock::tests::dump_datagrams_split_exactly ... ok test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test 2 test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... ok test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok running 1 test test runtime_lock::tests::split_device_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.01s test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok running 1 test test runtime_lock::tests::foreign_inode_twin_inner ... test runtime_lock::tests::after_close_waits_for_a_slow_socket_snapshot ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... ok test uninstall::tests::review_planted_plan_is_never_followed ... ok test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok test result: ok. 99 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 5.56s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_plugin_ssh-17b36253c8d69c86) running 49 tests test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test auth_order::tests::pending_forwards_the_caller_deadline_to_its_selected_session ... ok test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test bootstrap::proof_tests::review_commit_clamps_outliers_and_releases_immediately ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok test bootstrap::proof_tests::review_stalled_commit_cannot_outlive_attempt_cap ... ok test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok test install::tests::transfer_caps_accept_only_the_fixed_record ... ok test payload::tests::settings_changes_keep_at_most_four_entries ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.99s Running tests/already_added_breakit.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/already_added_breakit-e90e2f4c29cb707e) running 1 test test a_host_key_challenge_never_serializes_as_a_host_id ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/auth_order.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/auth_order-9968d66820e505cb) running 11 tests test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test manual_method_trust_refusal_never_loads_later_credentials ... ok test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/build_removal.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/build_removal-9eec37b95ad57c8e) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.36s Running tests/concurrency.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/concurrency-f30db03603f4997a) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test component_off_retires_a_real_native_helper ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/config_isolation.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/config_isolation-9a944d95ba4eed2e) running 2 tests test synthetic_master_socket_is_private_at_creation ... ok test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/credentials.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/credentials-6e4e4044489fb506) running 4 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test kernel_running_helper_is_materialized_in_its_private_scope ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.57s Running tests/diagnostics.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/diagnostics-f0e6f7e48b04f404) running 12 tests test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok test control_probe_statuses_preserve_actionable_setup_messages ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/event_metadata.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/event_metadata-8524db180f9a16df) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/foreground-10281428fe728d1d) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.59s Running tests/host_trust.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/host_trust-50a4a769c45122d1) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/install-42c84fd1d4c4d48f) running 95 tests test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok test buffering_setup_reader_receives_no_payload_until_selection ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test breakit2_rollback_preserves_foreign_unit_new ... ok test breakit2_rollback_preserves_foreign_launcher_new ... ok test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok test active_transaction_is_live_between_ssh_setup_commands ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test compound_join_failure_preserves_the_original_status_and_boundary ... ok test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok test compound_restaging_refuses_a_foreign_journal_before_upload ... ok test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok test compound_setup_keeps_owned_rollback_and_linger_warning ... ok test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok test early_staging_preserves_canonical_foreign_root_refusal ... ok test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok test commit_signal_retains_journal_until_proof_and_on_cancel ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok test framed_join_refusal_keeps_status_separate_from_upload ... ok test crash_mid_install_can_roll_back_and_retry ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test installed_infraternal_agent_always_restarts_without_start_limit ... ok test full_payload_restaging_preserves_the_running_session_build ... ok test interrupted_acquisition_cleanup_receipt_can_resume ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok test missing_payload_preserves_the_bootstrap_binary_remedy ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok test payload_reuse_never_adopts_a_foreign_cache_directory ... ok test partial_full_upload_rebridges_from_a_verified_image ... ok test known_failed_setup_finishes_without_a_second_confirmation ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test reported_cache_digest_selects_reuse_without_sending_payload ... ok test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test refused_previous_service_stop_only_removes_staging ... ok test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ignored, scripts/test-ssh-inode-reuse reports unsupported filesystems as ignored test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534 test retry_resends_payload_when_cache_content_changes ... ok test review_live_relative_control_socket_preserves_its_receipt ... ok test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok test retry_reuses_verified_payload_after_owned_rollback ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test setup_transaction_holds_a_live_lock_between_shell_commands ... ok test review_restart_recovers_cleanup_after_base_retirement ... ok test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok test review_restart_recovers_cleanup_after_owner_retirement ... ok test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok test session_restaging_uses_one_compound_command ... ok test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok test restart_recovers_partial_stage_retirement ... ok test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 12.87s Running tests/mesh_ssh.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/mesh_ssh-2fa83dcf733d059a) running 1 test test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/model.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/model-8dc28d474cf55d69) running 6 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/payload_source-8da7588b1b1e7c2a) running 2 tests test verification_failure_names_step_and_stops_before_upload ... ok test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/previous_attempt_liveness_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/previous_attempt_liveness_review-ce46fa87480131ee) running 1 test test home_alias_keeps_open_setup_descriptor_live ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s Running tests/previous_attempt_shell.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/previous_attempt_shell-b9d97aec39edc4d4) running 1 test test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.92s Running tests/probe_check.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/probe_check-376aad85da0f0af1) running 3 tests test breakit2_no_systemd_names_the_required_manager ... ok test shell_startup_refusal_names_an_interactive_only_remedy ... ok test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/process.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/process-c3eab8acd9e98988) running 10 tests test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test unavailable_negotiated_codec_never_sends_invitation ... ok test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test negotiated_sources_require_an_exact_receipt_before_private_input ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test declared_payload_flows_before_receipts_and_private_input_waits ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.04s Running tests/proxy_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/proxy_policy-ae5cb2b308a06ccf) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/publication.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/publication-0d82e771a08c3f68) running 4 tests test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok test refused_publication_reports_failure_to_the_waiting_wizard ... ok test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/real_ssh.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/real_ssh-bf1648c924584992) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/recovery_support.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/recovery_support-683687d40ea38ce9) running 12 tests test cleanup_script_requires_the_shipped_helper_level ... ok test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok test private_legacy_control_socket_preserves_receipt ... ok test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image test legacy_control_socket_in_spaced_home_preserves_receipt ... ok test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok test review_bound_control_socket_before_listen_preserves_receipt ... ok test legacy_control_socket_in_newline_home_preserves_receipt ... ok test review_live_session_socket_in_newline_home_blocks_cleanup ... ok test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok test review_live_session_socket_in_plain_home_blocks_cleanup ... ok test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.90s Running tests/shadow_banner.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/shadow_banner-ec8803577a2b0cd0) running 1 test test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/shell_quoting.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/shell_quoting-e07d7690574ed5f8) running 1 test test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/single_connection-628041854be37518) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/source_completeness-4d7c035c7195b1ce) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/trust_round2-e8646687aedada12) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 8 tests test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_server-f1c601004c6d4da6) running 685 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::migration_data_tests::original_migration_metadata_and_checksums_are_unchanged ... ok test auth::migration_data_tests::quoted_text_and_comment_looking_literals_keep_their_values ... ok test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::migration_data_tests::dev_v29_and_production_v30_upgrade_without_retagging_or_losing_ownership ... ok test auth::migration_data_tests::fresh_schemas_defaults_indexes_and_foreign_keys_match_original_sql ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_accepts_legacy_and_job_scoped_roots ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_rejects_unscoped_and_escaping_paths ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::canvas::canvas_real_socket_commits_and_runtime_disable_preserve_control ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok test auth::tests::socket_tests::close_logging::revocation_wake_on_busy_store_logs_authority_unavailable_not_resume_refused ... ok test auth::tests::socket_tests::close_logging::revoked_busy_wake_records_stream_end_within_the_existing_wait ... ok test auth::tests::socket_tests::close_logging::revoked_session_during_transient_stall_logs_resume_refused ... ok test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::close_logging::unrelated_logout_during_transient_stall_keeps_the_terminal_socket ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok test auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply ... ok test auth::tests::socket_tests::review_authority_cap::retries_whose_select_waits_stay_within_the_authority_cap ... ok test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok test auth::tests::socket_tests::review_busy_wake::idle_busy_revocation_wake_sends_server_busy_close_code ... ok test auth::tests::socket_tests::review_busy_wake::sixteen_woken_sockets_recover_application_authority_after_a_short_stall ... ok test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_absolute_session_expiry ... ok test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_logout_revocation ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input ... ok test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok test bootstrap_runtime::remote_backend::admission_tests::missing_route_uses_link_scaled_bound_without_inventory_extensions ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_after_both_route_phases ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_at_600_ms ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_is_monotonic_for_zero_and_outlier_samples ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_lock_timing_runs_inside_the_nested_setup_shell ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_setup_timing_preserves_transfer_upload_status ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test canvas_store::tests::cancelled_commit_still_invalidates_a_durable_change ... ok test canvas_store::tests::cas_retry_and_foreign_account_isolation ... ok test canvas_store::tests::permanent_receipts_keep_the_original_json_digest_recipe ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::expired_route_retires_full_consumer ... ok test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock. test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok test embedded::regressions::path_tests::review_reply_bypasses_queued_typing_without_losing_its_cursor_or_bytes ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::reply_order_tests::browser_reply_follows_typing_across_both_forwarding_tasks ... ok test embedded::reply_order_tests::full_reply_reservations_preserve_keyboard_bytes_and_all_eight_slots ... ok test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok test enrollment::migration_tests::hostname_migration_allocates_around_retained_names ... ok test enrollment::migration_tests::canvas_layout_migration_upgrades_production_v27_and_fresh_schema_in_order ... ok test enrollment::migration_tests::hostname_migration_upgrades_release6_copy_without_changing_canvas_or_checksums ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test enrollment::migration_tests::old_uuid_mesh_placeholders_upgrade_to_audited_unnamed_labels ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_inventory::name_tests::an_ip_added_host_uses_its_cached_hostname_and_old_facts_do_not_clear_it ... ok test remote_inventory::name_tests::inventory_hostname_changes_publish_once_and_preserve_hand_names ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_inventory::name_tests::late_hostname_inventory_renames_the_attached_mesh_node_and_notifies_viewers ... ok test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_inventory::name_tests::reported_names_yield_to_records_and_collision_suffixes_and_server_identity_hold ... ok test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok test stream_close::tests::close_path_cost ... ignored, manual microbenchmark test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok test terminal_queries::review_tests::a_lagging_viewer_cannot_renew_a_deadline_after_the_first_viewer_answered ... ok test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok test terminal_queries::review_tests::trimmed_output_refuses_its_answer_without_reopening_an_accepted_position ... ok test terminal_queries::review_tests::two_positions_in_one_chunk_are_claimed_in_order_without_reopening_either ... ok test terminal_queries::tests::deadline_includes_incomplete_query ... ok test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok test terminal_queries::tests::marked_flood_never_allocates_queries ... ok test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::probe_authority::review_closed_watch::closed_revocation_watch_is_unavailable_and_never_polls_the_write ... ok test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::writer_tests::authority_watchdog::authority_deadline_preserves_subsecond_session_expiry ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::cancelled_storm_returns_every_place_without_duplication ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::deadline_storm_retains_exactly_four_places_then_recovers ... ok test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::pool_acquire_timeout_recovers_places_without_releasing_the_connection ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::ready_result_observed_after_deadline_retries_current_authority ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test websocket::writer_tests::busy_edges::wall_expiry_and_monotonic_deadlines_keep_their_separate_roles ... ok test websocket::writer_tests::resume_refusals_distinguish_connection_state_and_lost_token_rotation ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok test websocket_transport::tests::visibility_notices_are_small_typed_transport_messages ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test terminal_queries::review_tests::all_session_tables_remain_bounded_at_the_registry_limit ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test websocket::writer_tests::busy_edges::revoked_probe_across_attempt_backoff_and_total_wait_edges ... ok test websocket::writer_tests::busy_edges::expiry_crossing_a_stalled_read_refuses_both_deadline_callers ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::sqlite_busy_timeout_recovers_detached_storm_without_unlocking ... ok test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok test result: ok. 633 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 296.60s Running tests/canvas_convergence.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_convergence-1a7528827de3cb23) running 20 tests test a_tiled_import_cannot_duplicate_an_existing_graph_kind ... ok test imports_use_account_wide_target_identity_and_keep_spanning_column_geometry ... ok test competing_bootstraps_merge_targets_and_retry_after_restart ... ok test identical_and_empty_second_devices_do_not_advance_revision ... ok test importing_an_orphaned_recovery_view_does_not_create_another_recovery_name ... ok test initialize_and_apply_repair_before_writing_and_notify_subscribers ... ok test import_prefers_matching_names_before_the_first_view_of_its_kind ... ok test loading_repairs_only_matching_recovery_views_and_converges_clients ... ok test merge_bounds_refuse_without_losing_the_existing_layout ... ok test no_op_imports_keep_retry_receipts_and_do_not_clear_operation_history ... ok test session_import_identity_ignores_labels_but_checks_account_ownership ... ok test simultaneous_first_devices_merge_disjoint_targets_into_one_view ... ok test stale_noop_still_checks_numeric_bounds_before_committing ... ok test split_retry_is_durable_and_changed_idempotency_input_is_refused ... ok test owned_session_reference_and_all_bounds_are_transactional ... ok test permanent_receipts_do_not_copy_large_bootstrap_documents ... ok test two_devices_serialize_stale_edits_and_replay_every_committed_revision ... ok test encoded_document_budget_is_enforced_by_the_host_transaction ... ok test no_op_import_receipts_still_have_a_bounded_quota ... ok test close_beats_move_resize_in_both_orders_and_survives_compaction ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.60s Running tests/canvas_receipt_count.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_receipt_count-dcb7b77ff3a854ab) running 1 test test historical_receipts_backfill_and_follow_transactions_and_account_removal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_receipt_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_receipt_review-f4b0654f8bb85a4f) running 1 test test historical_no_revision_receipts_preserve_replay_and_the_last_real_edit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.74s Running tests/canvas_recovery_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_recovery_review-f2d4bef103e06289) running 5 tests test repair_rebases_a_cursor_that_already_names_its_next_revision ... ok test queued_close_of_unique_recovered_window_survives_repair ... ok test independent_loads_and_base_edit_repair_exactly_once ... ok test queued_resize_keeps_its_membership_after_a_separate_read_repair ... ok test recovery_at_column_capacity_keeps_the_account_readable ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/canvas_replay_noop.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_replay_noop-f45368f3ae253f70) running 1 test test committed_noop_is_explicit_without_sending_all_closed_ids_to_clients ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_retired_reference.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_retired_reference-4ae1b19d3a90f2d6) running 2 tests test retired_reference_does_not_block_an_unrelated_edit ... ok test retarget_checks_account_ownership_even_after_close ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_socket.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_socket-51aa35d48dc96a00) running 1 test test snapshot_then_ordered_commit_events_and_revocation_cancel_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/canvas_text_bounds.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/canvas_text_bounds-eb698aef9b5b9538) running 2 tests test text_uses_the_browser_utf16_bound ... ok test imported_name_respects_the_browser_utf16_bound ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/catalog_startup.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/catalog_startup-c4f0c5c2b9e63826) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/enrollment-3533ffe0cf2749cb) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.24s Running tests/mesh_parser.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/mesh_parser-f3d43b86d3386706) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/mesh_review_plugin-1de5b08687140771) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/mesh_review_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/mesh_review_policy-5801ffe603d49dec) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/mesh_review_role_scope-1867947f5f970cf5) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/native_probe_correlation_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/native_probe_correlation_review-0508c3491f4ab791) running 25 tests test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test unissued_native_probe_reply_cannot_extend_readiness ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test healthy_real_socket_survives_a_150ms_server_stall ... ok test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/plugin_host_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/plugin_host_review-1f79717833c5fdb0) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_disable_answers_inflight_call ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s Running tests/plugin_settings_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/plugin_settings_review-8e826064dc44171b) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.57s Running tests/remote_plugin_contract.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/remote_plugin_contract-c936186fbcfd8885) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Running tests/review_mesh_host_removal.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/review_mesh_host_removal-56ed2d75e836d36e) running 1 test test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_session-f2f326f18dc6b30e) running 2 tests test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok running 1 test test tests::fresh_exec_closes_dumpability_before_private_startup ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s test tests::fresh_exec_closes_dumpability_before_private_startup ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_shim-7c35453813e3afe4) running 105 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok running 1 test test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 104 filtered out; finished in 0.00s test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 92 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 29.07s Running tests/detach.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/detach-6a47ad01fd5a59d3) running 2 tests test detached_child_restores_default_signals_without_changing_parent ... ok test closed_standard_descriptors_become_dev_null ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.74s Running tests/mouse.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/mouse-d13052bb88989529) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.55s Running tests/ppu_reliability.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/ppu_reliability-2964f940e0c6068a) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/ppu_reliability_memory.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/ppu_reliability_memory-a754448942207ef2) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/process_exit_descriptor.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/process_exit_descriptor-c4b349d2a498ffa6) running 2 tests test invalid_pid_never_creates_a_descriptor ... ok test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_status-7910dde34bdac077) running 13 tests test tests::nothing_installed_says_so ... ok test tests::installed_system_server_data_comes_from_its_effective_execstart ... ok test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok test tests::rootless_agent_is_read_from_the_user_manager ... ok test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok test tests::server_and_host_on_one_machine_is_both ... ok test tests::stopped_server_unit_is_stopped_not_unknown ... ok test tests::the_headline_names_what_is_down_and_how_to_look ... ok test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_canvas running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 2 tests test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 56) - compile fail ... ok test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 63) - compile fail ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Doc-tests infraternal_status running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s (test: 795s) ==> SSH inode reuse fixture Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh) Finished `test` profile [unoptimized + debuginfo] target(s) in 3.07s Running tests/install.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/install-f0d19bd45bc9bae9) running 1 test test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 0.22s (SSH inode reuse fixture: 3s) ==> shim process-per-user Compiling nix v0.30.1 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim) Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 22s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-data/target/debug/deps/infraternal_shim-58e9712d9c0dc37c) running 218 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::borrowed_output_keeps_frozen_bytes_and_refuses_before_batch_mutation ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::batch_append_preserves_prefix_and_refuses_invalid_frames ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test heap_accounting::accounting_keeps_exact_layouts_and_balances_reallocation ... ok test heap_accounting::transient_allocations_are_visible_after_their_storage_is_freed ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::tests::golden_and_fragmented ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok running 1 test running 1 test test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok test ring::checks::tests::empty_append_keeps_lazy_storage_unallocated ... ok test ring::checks::tests::borrowed_ranges_obey_absolute_offsets_across_physical_wrap ... ok test pty::output_readiness_tests::readable_byte_hint_preserves_the_complete_output_stream ... ok test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok test ring::checks::tests::merge_review_pool_refusal_retains_exact_suffix_and_releases_charge ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok running 1 test test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test ring::checks::tests::shared_history_reservation_never_rounds_past_its_share ... ok test session::inputs::host_budget_tests::alternating_writers_cannot_expand_shared_host_bookkeeping_without_bound ... ok test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::inputs::reply_tests::host_replies_preserve_segment_budget_and_account_for_promoted_storage ... ok test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok test session::inputs::tests::host_legacy_writer_needs_no_heap_table ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok test session::measurements::budgets::bounded_flush_keeps_partial_frame_and_wire_order ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::user_host::child_checks::ordinary_housekeeping_does_not_probe_child_status ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test session::user_host::child_checks::threaded_startup_is_refused_before_creating_session_state ... ok test session::user_host::lazy_bench::geometry_replay_materialization_cost ... ignored, perf VM only: measure cold materialization after bounded geometry replay test session::user_host::reactor::tests::actual_output_selector_keeps_a_bulk_turn_after_granted_and_denied_promotions ... ok test session::user_host::reactor::tests::cancelled_bulk_membership_reuses_the_existing_deque_entry ... ok test session::user_host::reactor::tests::cheap_replies_share_a_turn_but_expired_output_yields_to_input ... ok test session::user_host::reactor::tests::accounting_write_failure_disables_only_the_receipt ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.03s test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... ok test session::user_host::reactor::tests::fresh_ack_fallback_avoids_writable_poll_and_finishes_with_new_input ... ok test session::user_host::reactor::tests::inline_and_extra_descriptor_flags_merge_without_losing_generations ... ok test session::user_host::reactor::tests::exit_observed_before_settle_still_queues_one_retention_deadline ... ok test session::user_host::reactor::tests::one_session_readiness_fits_240_requested_bytes ... ok test session::user_host::reactor::tests::input_phase_retires_closed_identity_without_publishing_transient_interest ... ok test session::user_host::reactor::tests::readiness_membership_stays_within_five_bytes_per_session ... ok test session::user_host::reactor::tests::ownership_receipt_separates_session_components_and_shared_capacities ... ok test session::user_host::reactor::tests::readiness_storage_two_descriptors_are_allocation_free ... ok test session::user_host::reactor::tests::readiness_storage_registration_is_at_most_sixteen_bytes ... ok test session::user_host::reactor::tests::queued_data_ack_needs_no_writable_poll_before_pty_service ... ok test session::user_host::reactor::tests::ready_rows_clear_only_touched_slots_and_fence_round_wrap ... ok test session::user_host::reactor::tests::ready_rows_keep_two_descriptor_turns_allocation_free_within_64_bytes_per_slot ... ok test session::user_host::reactor::tests::round_reset_and_wrap_preserve_bulk_membership_without_reviving_reads ... ok test session::user_host::reactor::tests::short_output_cohort_yields_before_the_next_input_poll ... ok test session::user_host::reactor::tests::single_ready_descriptor_needs_no_heap_allocation ... ok test session::user_host::reactor::tests::timer_membership_survives_bulk_promotion_cancellation_and_round_wrap ... ok running 1 test test session::user_host::reactor::tests::unchanged_registration_sync_needs_no_heap_allocation ... test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok test session::user_host::reactor::tests::replay_continues_after_its_frame_was_written_inline ... ok test session::user_host::tests::admission_refuses_foreign_uid_duplicate_ids_and_geometry_before_spawn ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok test session::user_host::tests::blocked_state_and_output_share_one_ordered_write_batch ... ok test session::user_host::tests::data_ack_can_wait_for_a_writable_visit_without_requiring_output ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.05s test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... ok test session::user_host::tests::deferred_data_ack_and_available_output_share_one_ordered_batch ... ok test session::user_host::tests::bulk_turn_advances_sixteen_kib_and_yields_before_the_rest ... ok test session::user_host::tests::full_pool_reuses_ring_storage_for_newest_output ... ok test session::user_host::tests::full_pool_typing_echo_latency ... ignored, timing measurement runs on the perf VM test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok test session::user_host::tests::full_pool_refuses_new_session_and_keeps_existing_session_working ... ok test session::user_host::tests::idle_session_ownership_ledger ... ignored, perf VM only: per-session requested-byte ownership ledger at scale test session::user_host::tests::host_pool_scales_with_machine_memory_within_bounds ... ok test session::user_host::tests::geometry_transcript_materializes_at_its_event_bound ... ok running 1 test test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok test session::user_host::tests::malformed_closed_peer_is_retired_once_and_keeps_its_sibling ... ok test session::user_host::tests::lazy_prefix_materializes_exactly_before_overflow_and_resize ... ok test session::user_host::tests::output_bound_replays_retained_geometry_before_new_bytes ... ok test session::user_host::tests::medium_geometry_materializes_before_deferred_cell_work_exceeds_the_bound ... ok test session::user_host::tests::prefix_threshold_preserves_unfinished_sequences ... ok test session::user_host::tests::quiet_geometry_changes_remain_lazy_and_replay_in_order ... ok test session::user_host::tests::same_geometry_input_selection_keeps_vt_unallocated ... ok test session::user_host::tests::session_constructor_retains_only_the_bound_socket_path ... ok test session::user_host::tests::state_fences_and_input_only_acks_bypass_coalescing ... ok test session::user_host::tests::steady_replay_needs_no_payload_allocation ... ok test session::user_host::tests::unchanged_geometry_retains_native_resize_side_effects ... ok test session::user_host::tests::vt_panic_retires_one_real_pty_and_sibling_keeps_its_output ... ok test session::user_host::tests::writable_peer_receives_state_and_output_before_another_readiness_turn ... ok test session::user_host::tests::zero_ring_capacity_does_not_stall_a_live_pty ... ok test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::user_host::tests::exhausted_pool_drains_live_ptys_during_random_session_churn ... ok test terminal::checks::snapshot_during_discard_preserves_the_unfinished_string_boundary ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test session::user_host::tests::large_geometry_cannot_defer_a_long_first_snapshot_reflow_queue ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test pty::handoff::tests::all_masters_survive_original_owner_drop_with_cloexec ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test session::user_host::tests::geometry_transcript_property_cases_match_eager_native_state ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::host_budget::erased_history_reset_and_geometry_return_native_memory ... ok test terminal::host_budget::page_nodes_never_fill_the_ordinary_data_cap ... ok test terminal::host_budget::shared_host_budget_bounds_the_sum_and_keeps_every_terminal_exact ... ok test session::user_host::tests::pool_usage_never_exceeds_cap_under_open_write_close_sequences ... ok test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::ppu_memory_bench::fresh_shell_filler_snapshot_gap_is_independent_of_allocator_refusal ... ok test terminal::ppu_memory_bench::native_session_allocations_settle_after_geometry_warmup ... ignored, perf VM only: native heap/resident accounting; set PPU_VT_ACCOUNT_SESSIONS test terminal::ppu_memory_bench::quiet_resize_churn_does_not_keep_new_resident_pools ... ignored, perf VM only: sparse resize ownership at 900 quiet sessions test terminal::ppu_memory_bench::small_history_does_not_retain_megabyte_page_quanta ... ignored, perf VM only: sparse history residency and native ownership test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::host_budget::every_history_share_fills_and_recycles_inside_its_reservation ... ok test terminal::host_budget::report_native_memory_numbers ... ok test terminal::review_r2::review_r2_escape_high_byte_does_not_start_a_hidden_string ... ok test terminal::review_r2::review_r2_escape_command_inside_discard_matches_short_string ... ok test terminal::checks::control_strings_cannot_grow_session_carry_without_bound ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::review_r2::review_r2_resize_storm_does_not_ratchet_native_memory ... ok test terminal::host_budget::widening_a_full_history_stays_inside_its_share ... ok test terminal::review_r2::review_r2_resize_with_full_history_share_stays_exact ... ok test terminal::review_r2::review_r2_limiter_is_transparent_for_short_control_mixtures ... ok test terminal::review_r3::review_r3_four_hundred_laptop_screens_fit_the_host ... ok test terminal::review_r3::review_r3_bounded_terminal_reflows_long_mixed_history ... ok test terminal::review_r2::review_r2_host_history_share_fits_the_native_reservation ... ok test terminal::host_budget::laptop_screens_come_from_their_floors_not_the_pool ... ok test terminal::review_r2::review_r2_ground_c1_introducer_stays_within_the_session_share ... ok test terminal::review_r3::review_r3_host_accounting_balances_through_recovery ... ok test terminal::review_r3::review_r3_recycled_unwrapped_history_keeps_exact_snapshot ... ok test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok test terminal::user_screen_pool_resize::taller_widening_keeps_history_rows_that_move_onto_the_screen ... ok test terminal_limits::c1_tests::c1_string_inside_csi_has_a_seven_bit_replay_boundary ... ok test terminal_limits::defensive_tests::executed_c0_between_escape_and_introducer_keeps_the_bound ... ok test terminal_limits::tests::escape_after_discard_restarts_without_losing_the_next_command ... ok test terminal_limits::tests::finite_sequences_are_identical_for_every_fragment_boundary ... ok test terminal_limits::tests::fragmented_overflow_stays_discarded_until_a_real_terminator ... ok test terminal_memory::payload_tests::oversized_payload_is_refused_before_allocation_while_tagged_pool_is_allowed ... ok test terminal_memory::payload_tests::residency_query_observes_only_owned_page_mappings_without_faulting_payload ... ok test terminal_memory::tests::allocation_budget_includes_overhead_and_refusal_is_recoverable ... ok test terminal_memory::tests::screen_pages_are_zero_filled_and_page_aligned ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal_native::owned_memory_tests::refusal_inside_reflow_never_touches_freed_pages ... ok test terminal_native::owned_memory_tests::refused_resize_reclaims_every_owned_native_allocation ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::review_r3::review_r3_recycled_history_matches_unbounded_reference ... ok test terminal::review_r3::review_r3_history_share_without_ris_never_refuses ... ok test terminal::review_r3::review_r3_noisy_neighbour_does_not_make_quiet_sessions_approximate ... ok test terminal::review_r3::review_r3_thousand_sessions_and_one_flood ... ok test terminal::review_r3::review_r3_hundred_laptop_sessions_keep_exact_state ... ok test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact has been running for over 60 seconds test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact ... ok test result: ok. 199 passed; 0 failed; 19 ignored; 0 measured; 0 filtered out; finished in 84.62s (shim process-per-user: 167s) ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 ├── (build) infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.16 └── rustls v0.23.46 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.16 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-canvas v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:200:1 │ 200 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 201 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.16 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-canvas v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:202:1 │ 202 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 204 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:205:1 │ 205 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:207:1 │ 207 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 208 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 209 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.16 │ │ └── rustls v0.23.46 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── (dev) infraternal-status v0.1.0 │ │ └── infraternal v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:251:1 │ 251 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 252 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ └── infraternal-session v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.46 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.16 │ │ │ └── rustls v0.23.46 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── (dev) infraternal-status v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-webpki v0.103.16 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.3 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:254:1 │ 254 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 255 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:257:1 │ 257 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 258 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:259:1 │ 259 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 260 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/agent/wt-infraternal/review-setup-token-data/Cargo.lock:317:1 │ 317 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 318 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.16 └── rustls v0.23.46 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.3 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.3 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.3 (*) ├── tokio v1.53.3 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok (cargo-deny: 2s) ==> static builds x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently native compiler metadata: path independent; platform/date retained; unexpected syntax refused Rust remapping: differently named checkout roots produce identical stripped artifacts . ---------------------------------------------------------------------- Ran 1 test in 0.001s OK Compiling proc-macro2 v1.0.107 Compiling quote v1.0.47 Compiling unicode-ident v1.0.26 Compiling libc v0.2.190 Compiling cfg-if v1.0.5 Compiling shlex v2.0.1 Compiling find-msvc-tools v0.1.14 Compiling serde v1.0.229 Compiling autocfg v1.5.1 Compiling pin-project-lite v0.2.17 Compiling serde_core v1.0.229 Compiling version_check v0.9.5 Compiling cc v1.6.0 Compiling bytes v1.12.1 Compiling generic-array v0.14.7 Compiling vcpkg v0.2.15 Compiling pkg-config v0.3.34 Compiling icu_properties_data v2.3.0 Compiling syn v3.0.6 Compiling syn v2.0.119 Compiling memchr v2.8.3 Compiling once_cell v1.21.4 Compiling icu_normalizer_data v2.3.0 Compiling log v0.4.34 Compiling itoa v1.0.18 Compiling tracing-core v0.1.36 Compiling futures-core v0.3.34 Compiling errno v0.3.14 Compiling socket2 v0.6.5 Compiling stable_deref_trait v1.2.1 Compiling signal-hook-registry v1.4.8 Compiling mio v1.2.4 Compiling smallvec v1.16.2 Compiling futures-sink v0.3.34 Compiling thiserror v2.0.21 Compiling slab v0.4.12 Compiling subtle v2.6.1 Compiling parking_lot_core v0.9.12 Compiling zmij v1.0.23 Compiling typenum v1.20.1 Compiling num-traits v0.2.19 Compiling writeable v0.6.4 Compiling crossbeam-utils v0.8.23 Compiling litemap v0.8.3 Compiling utf8_iter v1.0.4 Compiling tracing-attributes v0.1.31 Compiling synstructure v0.14.0 Compiling displaydoc v0.2.7 Compiling zerovec-derive v0.11.6 Compiling serde_derive v1.0.229 Compiling zerofrom-derive v0.1.8 Compiling yoke-derive v0.8.4 Compiling tokio-macros v2.7.2 Compiling tracing v0.1.44 Compiling thiserror-impl v2.0.21 Compiling tokio v1.53.3 Compiling zerofrom v0.1.8 Compiling yoke v0.8.3 Compiling zerovec v0.11.8 Compiling zerotrie v0.2.5 Compiling block-buffer v0.10.4 Compiling crypto-common v0.1.7 Compiling equivalent v1.0.2 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling icu_collections v2.3.0 Compiling icu_locale_core v2.3.0 Compiling percent-encoding v2.3.2 Compiling digest v0.10.7 Compiling scopeguard v1.2.0 Compiling lock_api v0.4.14 Compiling icu_provider v2.3.1 Compiling futures-macro v0.3.34 Compiling libsqlite3-sys v0.30.1 Compiling cpufeatures v0.2.17 Compiling hashbrown v0.17.1 Compiling futures-io v0.3.34 Compiling futures-task v0.3.34 Compiling futures-util v0.3.34 Compiling icu_properties v2.3.0 Compiling indexmap v2.14.2 Compiling icu_normalizer v2.3.0 Compiling form_urlencoded v1.2.2 Compiling idna_adapter v1.2.2 Compiling sha2 v0.10.9 Compiling openssl-src v300.6.1+3.6.3 Compiling idna v1.1.0 Compiling allocator-api2 v0.2.21 Compiling foldhash v0.1.5 Compiling serde_json v1.0.151 Compiling hashbrown v0.15.5 Compiling openssl-sys v0.9.117 Compiling url v2.5.8 Compiling parking_lot v0.12.5 Compiling futures-channel v0.3.34 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling heck v0.5.0 Compiling cfg_aliases v0.2.2 Compiling crc v3.4.0 Compiling event-listener v5.4.2 Compiling crossbeam-queue v0.3.14 Compiling futures-intrusive v0.5.0 Compiling hashlink v0.10.0 Compiling either v1.18.0 Compiling spin v0.9.9 Compiling rand_core v0.10.1 Compiling base64 v0.22.1 Compiling tokio-stream v0.1.19 Compiling ryu v1.0.23 Compiling bitflags v2.13.2 Compiling serde_urlencoded v0.7.1 Compiling sqlx-core v0.8.6 Compiling flume v0.11.1 Compiling atoi v2.0.0 Compiling futures-executor v0.3.34 Compiling zerocopy v0.8.60 Compiling getrandom v0.4.3 Compiling zerocopy-derive v0.8.60 Compiling sqlx-sqlite v0.8.6 Compiling getrandom v0.2.17 Compiling dotenvy v0.15.7 Compiling hex v0.4.3 Compiling foreign-types-shared v0.1.1 Compiling sqlx-macros-core v0.8.6 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api) Compiling openssl v0.10.81 Compiling foreign-types v0.3.2 Compiling openssl-macros v0.1.1 Compiling http v1.5.0 Compiling sqlx-macros v0.8.6 Compiling memoffset v0.9.1 Compiling nix v0.30.1 Compiling ring v0.17.14 Compiling getrandom v0.3.4 Compiling uuid v1.27.0 Compiling zeroize v1.9.0 Compiling ppv-lite86 v0.2.21 Compiling minimal-lexical v0.2.1 Compiling arrayvec v0.7.8 Compiling utf8parse v0.2.2 Compiling time-core v0.1.9 Compiling untrusted v0.9.0 Compiling num-conv v0.2.2 Compiling httparse v1.10.1 Compiling thiserror v1.0.69 Compiling time-macros v0.2.32 Compiling anstyle-parse v1.0.0 Compiling nom v7.1.3 Compiling rand_core v0.9.5 Compiling rustls-pki-types v1.15.1 Compiling http-body v1.1.0 Compiling thiserror-impl v1.0.69 Compiling synstructure v0.13.2 Compiling anstyle v1.0.14 Compiling rustls v0.23.46 Compiling tinyvec v1.13.3 Compiling colorchoice v1.0.5 Compiling cpufeatures v0.3.1 Compiling is_terminal_polyfill v1.70.2 Compiling deranged v0.5.8 Compiling powerfmt v0.2.1 Compiling anstyle-query v1.1.5 Compiling anstream v1.0.0 Compiling chacha20 v0.10.2 Compiling asn1-rs-derive v0.5.1 Compiling rusticata-macros v4.1.0 Compiling rand_chacha v0.9.0 Compiling time v0.3.55 Compiling quinn-udp v0.5.16 Compiling tokio-util v0.7.19 Compiling asn1-rs-impl v0.2.0 Compiling strsim v0.11.1 Compiling data-encoding v2.11.1 Compiling tower-service v0.3.3 Compiling clap_lex v1.1.1 Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-protocol) Compiling tokio-openssl v0.6.5 Compiling clap_builder v4.6.7 Compiling rand v0.9.5 Compiling asn1-rs v0.6.2 Compiling rand v0.10.3 Compiling rand_core v0.6.4 Compiling rustls-webpki v0.103.16 Compiling rand_pcg v0.10.2 Compiling quinn v0.11.12 Compiling clap_derive v4.6.7 Compiling num-integer v0.1.47 Compiling fnv v1.0.7 Compiling lru-slab v0.1.3 Compiling httpdate v1.0.3 Compiling try-lock v0.2.5 Compiling lazy_static v1.5.1 Compiling oid-registry v0.7.1 Compiling pastey v0.1.1 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim) Compiling base64 v0.21.7 Compiling rustc-hash v2.1.3 Compiling atomic-waker v1.1.2 Compiling h2 v0.4.19 Compiling base64urlsafedata v0.5.5 Compiling clap v4.6.7 Compiling want v0.3.2 Compiling num-bigint v0.4.8 Compiling vte v0.15.0 Compiling unicase v2.10.0 Compiling tower-layer v0.3.3 Compiling webauthn-attestation-ca v0.5.5 Compiling mime v0.3.17 Compiling rustversion v1.0.23 Compiling hyper v1.11.1 Compiling mime_guess v2.0.5 Compiling der-parser v9.0.0 Compiling quinn-proto v0.11.19 Compiling http-body-util v0.1.5 Compiling half v2.7.1 Compiling sha1 v0.10.7 Compiling fs-err v3.3.2 Compiling sync_wrapper v1.0.2 Compiling webauthn-rs-core v0.5.5 Compiling regex-syntax v0.8.11 Compiling hyper-util v0.1.21 Compiling tungstenite v0.29.0 Compiling serde_cbor_2 v0.13.0 Compiling x509-parser v0.16.0 Compiling regex-automata v0.4.18 Compiling webauthn-rs-proto v0.5.5 Compiling rand_chacha v0.3.1 Compiling hex-conservative v0.2.3 Compiling base64ct v1.8.3 Compiling rand v0.8.8 Compiling password-hash v0.5.0 Compiling bitcoin_hashes v0.14.101 Compiling matchers v0.2.0 Compiling arc-swap v1.9.2 Compiling tokio-tungstenite v0.29.0 Compiling axum-core v0.5.6 Compiling tower v0.5.3 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-server) Compiling blake2 v0.10.6 Compiling tracing-serde v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling tracing-log v0.2.0 Compiling thread_local v1.1.10 Compiling http-range-header v0.4.2 Compiling nu-ansi-term v0.50.3 Compiling matchit v0.8.4 Compiling tower-http v0.6.11 Compiling tracing-subscriber v0.3.23 Compiling axum v0.8.9 Compiling argon2 v0.5.3 Compiling bip39 v2.2.2 Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal) Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-status) Compiling sqlx v0.8.6 Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-mesh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/host-facts) Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/release) Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/canvas) Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/backup) Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/relay) Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/mesh) Compiling axum-server v0.8.0 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote) Compiling webauthn-rs v0.5.5 Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-agent) Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh) Finished `release` profile [optimized] target(s) in 10m 33s AES-128-GCM NIST vector encrypt/decrypt passed production trust: PASS (staging-trust authority absent) /home/agent/.cache/codex-scratch/review-setup-token-data/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21399568 bytes; cap: 21399568 bytes; delta: +0 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Key memory initialization=1; locked pages and dump exclusion enabled Compiling libc v0.2.190 Compiling cfg-if v1.0.5 Compiling pin-project-lite v0.2.17 Compiling serde_core v1.0.229 Compiling bytes v1.12.1 Compiling serde v1.0.229 Compiling memchr v2.8.3 Compiling once_cell v1.21.4 Compiling itoa v1.0.18 Compiling log v0.4.34 Compiling futures-core v0.3.34 Compiling tracing-core v0.1.36 Compiling zerofrom v0.1.8 Compiling socket2 v0.6.5 Compiling errno v0.3.14 Compiling stable_deref_trait v1.2.1 Compiling mio v1.2.4 Compiling yoke v0.8.3 Compiling signal-hook-registry v1.4.8 Compiling smallvec v1.16.2 Compiling tracing v0.1.44 Compiling futures-sink v0.3.34 Compiling zerovec v0.11.8 Compiling tokio v1.53.3 Compiling subtle v2.6.1 Compiling slab v0.4.12 Compiling generic-array v0.14.7 Compiling typenum v1.20.1 Compiling writeable v0.6.4 Compiling litemap v0.8.3 Compiling num-traits v0.2.19 Compiling zerotrie v0.2.5 Compiling utf8_iter v1.0.4 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling icu_locale_core v2.3.0 Compiling icu_properties_data v2.3.0 Compiling icu_normalizer_data v2.3.0 Compiling equivalent v1.0.2 Compiling icu_collections v2.3.0 Compiling percent-encoding v2.3.2 Compiling block-buffer v0.10.4 Compiling crypto-common v0.1.7 Compiling thiserror v2.0.21 Compiling futures-io v0.3.34 Compiling digest v0.10.7 Compiling futures-task v0.3.34 Compiling hashbrown v0.17.1 Compiling icu_provider v2.3.1 Compiling form_urlencoded v1.2.2 Compiling futures-util v0.3.34 Compiling cpufeatures v0.2.17 Compiling icu_properties v2.3.0 Compiling icu_normalizer v2.3.0 Compiling indexmap v2.14.2 Compiling scopeguard v1.2.0 Compiling zmij v1.0.23 Compiling serde_json v1.0.151 Compiling parking_lot_core v0.9.12 Compiling futures-channel v0.3.34 Compiling idna_adapter v1.2.2 Compiling lock_api v0.4.14 Compiling idna v1.1.0 Compiling openssl-sys v0.9.117 Compiling crossbeam-utils v0.8.23 Compiling rand_core v0.10.1 Compiling foldhash v0.1.5 Compiling bitflags v2.13.2 Compiling allocator-api2 v0.2.21 Compiling parking_lot v0.12.5 Compiling hashbrown v0.15.5 Compiling url v2.5.8 Compiling either v1.18.0 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling base64 v0.22.1 Compiling event-listener v5.4.2 Compiling crc v3.4.0 Compiling hashlink v0.10.0 Compiling zerocopy v0.8.60 Compiling getrandom v0.4.3 Compiling crossbeam-queue v0.3.14 Compiling futures-intrusive v0.5.0 Compiling tokio-stream v0.1.19 Compiling spin v0.9.9 Compiling sha2 v0.10.9 Compiling libsqlite3-sys v0.30.1 Compiling getrandom v0.2.17 Compiling ryu v1.0.23 Compiling flume v0.11.1 Compiling serde_urlencoded v0.7.1 Compiling sqlx-core v0.8.6 Compiling futures-executor v0.3.34 Compiling atoi v2.0.0 Compiling foreign-types-shared v0.1.1 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-plugin-api) Compiling http v1.5.0 Compiling foreign-types v0.3.2 Compiling memoffset v0.9.1 Compiling getrandom v0.3.4 Compiling ring v0.17.14 Compiling nix v0.30.1 Compiling uuid v1.27.0 Compiling zeroize v1.9.0 Compiling ppv-lite86 v0.2.21 Compiling arrayvec v0.7.8 Compiling untrusted v0.9.0 Compiling minimal-lexical v0.2.1 Compiling utf8parse v0.2.2 Compiling anstyle-parse v1.0.0 Compiling nom v7.1.3 Compiling thiserror v1.0.69 Compiling httparse v1.10.1 Compiling rand_core v0.9.5 Compiling rustls-pki-types v1.15.1 Compiling http-body v1.1.0 Compiling tinyvec v1.13.3 Compiling is_terminal_polyfill v1.70.2 Compiling time-core v0.1.9 Compiling deranged v0.5.8 Compiling anstyle-query v1.1.5 Compiling anstyle v1.0.14 Compiling powerfmt v0.2.1 Compiling num-conv v0.2.2 Compiling colorchoice v1.0.5 Compiling anstream v1.0.0 Compiling rusticata-macros v4.1.0 Compiling time v0.3.55 Compiling rand_chacha v0.9.0 Compiling rustls v0.23.46 Compiling tokio-util v0.7.19 Compiling chacha20 v0.10.2 Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-protocol) Compiling strsim v0.11.1 Compiling tower-service v0.3.3 Compiling data-encoding v2.11.1 Compiling clap_lex v1.1.1 Compiling asn1-rs v0.6.2 Compiling clap_builder v4.6.7 Compiling rustls-webpki v0.103.16 Compiling quinn-udp v0.5.16 Compiling rand v0.10.3 Compiling rand v0.9.5 Compiling rand_core v0.6.4 Compiling rand_pcg v0.10.2 Compiling num-integer v0.1.47 Compiling fnv v1.0.7 Compiling httpdate v1.0.3 Compiling try-lock v0.2.5 Compiling lru-slab v0.1.3 Compiling base64 v0.21.7 Compiling atomic-waker v1.1.2 Compiling rustc-hash v2.1.3 Compiling lazy_static v1.5.1 Compiling clap v4.6.7 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-shim) Compiling h2 v0.4.19 Compiling base64urlsafedata v0.5.5 Compiling want v0.3.2 Compiling num-bigint v0.4.8 Compiling quinn-proto v0.11.19 Compiling oid-registry v0.7.1 Compiling quinn v0.11.12 Compiling vte v0.15.0 Compiling tower-layer v0.3.3 Compiling mime v0.3.17 Compiling hyper v1.11.1 Compiling der-parser v9.0.0 Compiling http-body-util v0.1.5 Compiling half v2.7.1 Compiling sha1 v0.10.7 Compiling sync_wrapper v1.0.2 Compiling regex-syntax v0.8.11 Compiling tungstenite v0.29.0 Compiling fs-err v3.3.2 Compiling serde_cbor_2 v0.13.0 Compiling x509-parser v0.16.0 Compiling regex-automata v0.4.18 Compiling hyper-util v0.1.21 Compiling mime_guess v2.0.5 Compiling webauthn-rs-proto v0.5.5 Compiling rand_chacha v0.3.1 Compiling hex-conservative v0.2.3 Compiling unicase v2.10.0 Compiling base64ct v1.8.3 Compiling hex v0.4.3 Compiling password-hash v0.5.0 Compiling matchers v0.2.0 Compiling bitcoin_hashes v0.14.101 Compiling rand v0.8.8 Compiling arc-swap v1.9.2 Compiling tokio-tungstenite v0.29.0 Compiling tower v0.5.3 Compiling axum-core v0.5.6 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling blake2 v0.10.6 Compiling tracing-serde v0.2.0 Compiling tracing-log v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling thread_local v1.1.10 Compiling nu-ansi-term v0.50.3 Compiling matchit v0.8.4 Compiling http-range-header v0.4.2 Compiling tracing-subscriber v0.3.23 Compiling axum v0.8.9 Compiling tower-http v0.6.11 Compiling argon2 v0.5.3 Compiling bip39 v2.2.2 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal) Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-status) Compiling sqlx-sqlite v0.8.6 Compiling sqlx v0.8.6 Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-mesh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/host-facts) Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/release) Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/canvas) Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/backup) Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/relay) Compiling openssl v0.10.81 Compiling tokio-openssl v0.6.5 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-core v0.5.5 Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/mesh) Compiling axum-server v0.8.0 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/remote) Compiling webauthn-rs v0.5.5 Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/infraternal-agent) Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-data/crates/plugins/ssh) Finished `release` profile [optimized] target(s) in 14m 24s production trust: PASS (staging-trust authority absent) /home/agent/.cache/codex-scratch/review-setup-token-data/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 19574552 bytes; cap: 19574552 bytes; delta: +0 bytes key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) x86_64-unknown-linux-musl: exact 21399568-byte cap PASS; 21399569 bytes rejected PASS; smaller artifact requires ratchet PASS aarch64-unknown-linux-musl: exact 19574552-byte cap PASS; 19574553 bytes rejected PASS; smaller artifact requires ratchet PASS unsupported target: rejected PASS bun test v1.4.2 (744846f84) scripts/release/static-metadata-review.test.ts: (pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [68.40ms] (pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [43.22ms] 2 pass 0 fail 16 expect() calls Ran 2 tests across 1 file. [316.00ms] server subcommand: exit 2, versioned JSON unavailable result agent group: exit 0, one parsed versioned JSON listing of its commands (static builds: 1545s) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ==> Compiler metadata generator checks bun test v1.4.2 (744846f84) scripts/release/build-metadata.test.ts: (pass) native metadata canonicalization retains version fields and refuses changed syntax [93.95ms] (pass) Rust and cached target compiles receive every environment remap [527.38ms] 2 pass 0 fail 121 expect() calls Ran 2 tests across 1 file. [650.00ms] ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) + @types/bun@1.3.8 + @types/node@22.19.0 + @types/ws@8.5.10 + playwright@1.61.1 + typescript@5.9.3 + ws@8.18.3 + @scure/bip39@2.2.0 + geist@1.7.2 38 packages installed [511.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [30.67ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [72.02ms] (pass) layout review fixtures ship only in explicitly enabled preview builds [7721.16ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [2.28ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.08ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.27ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.12ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.07ms] (pass) FrameDetector > fps, p95 and window read the ring [0.27ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.31ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.07ms] src/stale-screen.test.ts: (pass) a program that redraws after reattach never shows the note, not for a frame [1.30ms] (pass) a redraw that arrived before the replay painted needs no wait at all [0.08ms] (pass) a shell that stays silent shows the note once the wait has run out [0.11ms] (pass) output that arrives later clears the note [0.07ms] (pass) a dropped link takes the note down and cancels a wait that has not ended [0.06ms] (pass) the wait grows with the round trip and stays bounded [0.12ms] src/synchronized-output.test.ts: (pass) synchronized terminal output > recognizes a private mode split across byte and string writes [2.47ms] (pass) synchronized terminal output > preserves mode transitions for every pair of input chunk boundaries [4.35ms] (pass) synchronized terminal output > ignores CSI-looking bytes inside control strings and other mode numbers [0.13ms] (pass) synchronized terminal output > RIS clears an active mode [0.08ms] (pass) synchronized terminal output > bounds an unfinished control sequence [1.84ms] (pass) synchronized terminal output > paints queued output on the first frame after reset and timeout release [0.47ms] src/terminal-fit-lifecycle.test.ts: (pass) a queued fit stops when the terminal becomes closed [0.33ms] (pass) a queued fit stops when the terminal becomes suspended [0.02ms] (pass) a queued fit stops when the terminal becomes frozen [0.02ms] src/account-storage.test.ts: (pass) clearing one account leaves a second account and device preferences alone [0.42ms] (pass) the last-account pointer of another account stays [0.06ms] (pass) an unknown account clears every account's data and keeps preferences [0.13ms] (pass) coalesced account writes stop permanently before sign-out clears storage [0.68ms] src/offline-drawing.test.ts: (pass) cached identity needs a matching layout and sign-out removes it [2.66ms] (pass) sign-in caches only public drawing labels [0.21ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [1.01ms] (pass) repeating the front item changes nothing [0.06ms] (pass) the list is capped, so the oldest items fall off [0.04ms] (pass) top skips items that are no longer live, without losing them [0.06ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.16ms] (pass) recentRows: a view with three windows and no use shows them in order [0.03ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.06ms] src/canvas/status.test.ts: (pass) a lost server connection is an error toast, never a success tick [0.56ms] (pass) routine connection states stay out of the toast [0.10ms] (pass) repeated connection closes do not reopen the persistent reason toast [0.11ms] (pass) a repeated close does not retake the shared toast after a newer message replaces it [0.25ms] (pass) a close reason stays visible through a quick reconnect and clears after a stable attach [676.85ms] src/canvas/toolbar/palette-actions.test.ts: (pass) a deferred split:right selection retains its original window [0.76ms] (pass) a deferred new:below selection retains its original window [0.10ms] (pass) a deferred close selection retains its original window [0.04ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [1.02ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.25ms] (pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.37ms] (pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.28ms] (pass) facts the host did not report are omitted by default, not shown as unknown [0.14ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.21ms] (pass) before facts arrive the host's platform names the header [0.07ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.08ms] src/canvas/windows/session-hooks.test.ts: (pass) a failed idle warm-up shows no toast and retries when the browser is back online [11.81ms] (pass) a failed open shows the toast, and opening again after the network returns succeeds [10.91ms] (pass) an open that joins a failing idle warm-up still shows the toast [5.60ms] src/canvas/mesh/api-retry-budget.test.ts: (pass) a retained watch outage bounds retry requests over two logical minutes [3.02ms] src/canvas/mesh/layout-model.test.ts: (pass) a pin moved by another device invalidates a same-count pin cache [2.04ms] (pass) a recovered graph owns its node positions independently [0.20ms] (pass) a negative pin is drawn by shifting the whole graph by whole grid cells; no pin is rewritten [0.20ms] (pass) with no negative pin the origin is zero and nothing shifts [0.09ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [1.11ms] (pass) without `access` (today's server) the person may view and may not edit [0.38ms] (pass) fields the server does not send are absent, never invented [0.28ms] (pass) a node the server sees passing traffic is online, on its path, under its machine's name [1.26ms] (pass) anything that is not a list is refused, whole [11.44ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.31ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.46ms] (pass) answers carry the new revision, and a create the new arrow's id [0.12ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.11ms] src/canvas/mesh/api-recovery.test.ts: (pass) failed watch refreshes retain one subscription through retry and release it on disposal [8.33ms] (pass) a synchronous subscription refusal leaves retry able to install a new watch [0.65ms] (pass) a changed Mesh revision refreshes a renamed host in the existing view model [0.64ms] (pass) a pushed recovery cancels the scheduled retry [0.43ms] (pass) a pushed recovery supersedes an outstanding retry failure [0.63ms] (pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.71ms] (pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.24ms] (pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.70ms] (pass) a forbidden withdrawal cancels retry work from the retained watch [0.45ms] (pass) a withdrawn view ignores an earlier outstanding retry result [0.48ms] (pass) initial Mesh list handles closed transport [0.34ms] (pass) initial Mesh list handles liveness deadline [0.07ms] (pass) initial Mesh list handles unreadable JSON [0.08ms] (pass) initial Mesh list handles unavailable storage [0.18ms] (pass) initial Mesh list handles forbidden action [0.13ms] (pass) initial Mesh list handles invalid stored host [0.12ms] (pass) Mesh watch withdrawal handles forbidden [0.27ms] (pass) Mesh watch withdrawal handles mesh unavailable [0.04ms] (pass) Mesh watch withdrawal handles plugin unavailable [0.05ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.46ms] (pass) the layout is deterministic and does not depend on input order [6.89ms] (pass) no two cards overlap, and every card lies inside the graph [8.94ms] (pass) the sheet is wider than tall, roughly 16:10 [1.29ms] (pass) a pinned node stays where it was put and the others do not move [3.44ms] (pass) a pin beyond the sheet grows the graph [0.38ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.16ms] (pass) 1,000 nodes lay out in a few milliseconds [18.49ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [3.67ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.21ms] (pass) a view taller than the viewport is scaled down so it fits [0.04ms] (pass) nearestStop picks the stop whose centre is closest [0.21ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.19ms] (pass) a small graph keeps one stop per node column [0.09ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.07ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.13ms] (pass) D309: with a floor, a narrow column gets a stop of its drawn width and each column is reachable [0.10ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.29ms] (pass) closing the new half gives the layout back exactly, in the model [1.19ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.25ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.22ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.40ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.46ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.15ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.68ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.12ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.21ms] (pass) random sequences of split right, split down, new window right and close never break the grid [59.02ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.46ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.23ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.19ms] (pass) a narrow right split grows both drawn tracks to the canonical minimum [0.10ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.92ms] (pass) a chain of neighbours is pushed in turn [0.14ms] (pass) display settlement clears disconnected overlaps while keeping its one anchor fixed [0.44ms] (pass) review: a viewport width increase after settlement keeps the Settings anchor clear [0.59ms] (pass) snapping rounds to whole cells [0.08ms] (pass) reach follows grants through tags and keeps the relay [0.30ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.12ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.05ms] (pass) a desktop column is the same alone and in a strip [0.04ms] (pass) D309: a touch screen draws every column at least MIN_TOUCH_COLUMN wide, never wider than a lone column; a fine pointer has no floor [0.12ms] (pass) D309: the content is as wide as the drawn columns, so the camera reaches every column [0.12ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [2.41ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.45ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.46ms] (pass) superseded status snapshots release records for sessions this device never opened [2.23ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.31ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.21ms] (pass) a final Close before the first positive census never revives a new ID [0.12ms] (pass) a later absence retires a new ID after its first positive census [0.13ms] (pass) another host's census cannot clear a new shell's census fence [0.12ms] (pass) another host's close cannot clear a new shell's census fence [0.05ms] (pass) shared membership marks windows open without any local attachment [0.56ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [1.18ms] (pass) a detected operating system supplies the live popover mark [1.23ms] src/canvas/sessions/live.test.ts: (pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.77ms] (pass) an enrolled host opens by UUID and splits keep that authority [0.32ms] (pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.29ms] (pass) unknown and ambiguous labels never open an embedded shell [0.17ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.19ms] (pass) an authoritative host snapshot replaces admission with one notification [0.29ms] (pass) the embedded inventory identity still opens locally beside an equally named remote [0.12ms] (pass) the embedded host's mark does not wait for an account name, and no account is invented [0.12ms] src/canvas/sessions/hosts.test.ts: (pass) fresh storage lists an offline host added by another browser [1.52ms] (pass) every welcome reconciles without duplicate subscriptions or hosts [0.26ms] (pass) a removal in another browser withdraws the host [0.30ms] (pass) a malformed page cannot partially replace the authoritative inventory [0.32ms] (pass) a socket-authority refusal withdraws previously admitted hosts [0.56ms] (pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.62ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.39ms] (pass) a known retired status survives repeated selection and generic ended answers [0.24ms] src/canvas/sessions/hosts-scale-review.test.ts: (pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [27.43ms] (pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [15.14ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [2.83ms] (pass) legacy refusals still work and malformed counters never reach the message [1.59ms] (pass) product copy names the host and counters and never renders untrusted server text [0.64ms] (pass) oversized refusal JSON is ignored before parsing [0.18ms] src/canvas/sessions/focus-intent.test.ts: (pass) focusin supersedes every older focus intent [0.49ms] (pass) pointerdown supersedes every older focus intent [0.04ms] (pass) keydown supersedes every older focus intent [0.04ms] (pass) input supersedes every older focus intent [0.03ms] src/canvas/model/server-store.test.ts: (pass) a negative drop on a 1,025-node mesh writes one pin, and the peer ends with every pin (#24) [36.58ms] (pass) repeated pin moves reach both coordinate limits; the next move is refused and rolled back [2.53ms] (pass) a layout gap or withdrawn worker requests one fresh snapshot with bounded backoff [2.47ms] (pass) layout recovery restores Math.random after its virtual timer test [0.04ms] (pass) event before Result and duplicate events do not apply an optimistic edit twice [0.99ms] (pass) reconnect retries the exact request and an old receipt removes its optimistic overlay [1.21ms] (pass) legacy import remains intact until canonical confirmation even if another device initialized [0.86ms] (pass) dispose cancels late cache writes after sign-out [0.73ms] (pass) a pending reference preserves unrelated edits across remote paints and is never sent [3.17ms] (pass) closing an unsent shell removes its unresolved birth without blocking surviving children [0.85ms] LAYOUT_RETRY_SCHEDULE subscribers=60 first_minute=753 following_5s=47 first_delay_slots=60 (pass) sixty withdrawn layout subscriptions spread their coalesced retry timers [30.80ms] (pass) multi-subscriber retry scheduling restores Math.random [0.11ms] (pass) an acknowledgement after its ordered event does not repaint the same layout [1.09ms] (pass) review: a missing layout revision is recovered before the cached document is used again [0.72ms] (pass) a bootstrap receipt before its canonical snapshot keeps the legacy layout drawable [2.70ms] (pass) ready edits share one network round trip with a bounded in-flight window [1.40ms] (pass) the optimistic semantic projection paints before any server receipt [0.97ms] (pass) a no-op drawing capture does not trigger another paint [0.37ms] (pass) an interrupted first load does not turn a revision-zero cache into an intentional empty layout [0.67ms] (pass) review: a refused structural edit cannot strand later valid edits [1.20ms] (pass) a definitive refusal paints rollback, persists it and never retries after reconnect [1.10ms] (pass) a stale refusal cannot discard a new-connection retry [0.81ms] (pass) review r2: refusal drains independent edits waiting behind four in-flight requests [2.11ms] (pass) recovery coalesces gaps and errors, ignores operations until a snapshot, and survives reconnect [1.12ms] (pass) a normal reconnect snapshot arrives before any replacement is requested [0.71ms] src/canvas/model/review-null.test.ts: (pass) a mixed nullable resize cannot invalidate the canonical drawing document [0.34ms] src/canvas/model/operations.test.ts: (pass) independent resize and move commute; close survives a stale move [0.60ms] (pass) right split of a stack preserves the upper band [0.31ms] (pass) reorder uses stable neighbours and emits no document [1.02ms] (pass) a completed split emits its semantic intent rather than intermediate sizing edits [0.42ms] (pass) a three-window reorder sends one semantic move [0.35ms] (pass) a split before the first reference is journalled opens its anchor before splitting [0.42ms] (pass) a drop sends the moved membership once, without derived neighbour geometry [0.35ms] (pass) a narrow right split widens first so both halves remain valid [0.60ms] (pass) a short down split grows the anchor first so both halves meet the height floor [0.57ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.69ms] (pass) a document survives JSON and rebuilds the same columns [0.60ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.17ms] (pass) parseDocument rejects anything that is not a document of this format [0.30ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.22ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.36ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.43ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.29ms] (pass) D309: the saved weights do not depend on how a touch screen draws the columns [0.37ms] (pass) D309: a view this device pushed clear for display is saved where the layout has it [0.43ms] (pass) an offscreen graph keeps its shared pins before any nodes are rendered [0.12ms] (pass) a captured graph document is independent of the next pin drag [0.07ms] src/canvas/model/sync.test.ts: (pass) a pending session never delays other edits or waits for a network receipt [3.17ms] (pass) inventory includes shared memberships that this device cannot render [1.19ms] (pass) temporary flow windows are never treated as unsubmitted shared windows [0.28ms] src/canvas/model/review-span.test.ts: (pass) a down split shifts every column in a transitively connected group [0.39ms] src/canvas/model/reducer-property.test.ts: layout property: 32 seeds, 4096 operations, 4015 accepted, zero divergences (pass) property: accepted random operation sequences match the real server reducer [28414.55ms] src/canvas/model/cache.test.ts: (pass) damaged pending opens cannot stall offline drawing [2.39ms] (pass) a valid unresolved reference remains local and replayable [0.25ms] (pass) a valid offline journal is retained beyond a short burst [1.22ms] src/canvas/model/review-boundary-r2.test.ts: review r2 boundary comparison: 8 seeds, 4096 operations, 3198 accepted (pass) review r2: longer boundary-weighted sequences preserve every accepted projection [2111.32ms] src/canvas/model/reconcile.test.ts: (pass) review: removing the current shared view selects a surviving camera anchor [2.12ms] (pass) a remote negative pin and node update preserve the world position of an unchanged card [0.97ms] src/canvas/model/journal.test.ts: (pass) an offline birth keeps its identity through hydration and reference completion [0.87ms] src/canvas/addhost/setup-feed.test.ts: (pass) createSetupFeed > subscribes with the host and window, then hands over events in order [1.10ms] (pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.53ms] (pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.73ms] (pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.61ms] (pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.39ms] (pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [46.05ms] (pass) review reconnect budget survives sockets that open then close without events [46.14ms] (pass) review explicit retry resumes after the setup feed stops [46.50ms] src/canvas/addhost/wizard.breakit2.test.ts: (pass) breakit2 an explicit port on a listed host survives chip resolution [0.56ms] (pass) breakit2 malformed bracketed IPv6 waits for correction [0.12ms] (pass) listed host plus port retains its saved user in the serialized destination [0.12ms] (pass) review listed inventory name plus port retains its resolved address [0.19ms] src/canvas/addhost/setup-stages.test.ts: (pass) parseSetupEvent > reads a well-formed event [0.10ms] (pass) parseSetupEvent > drops anything malformed [0.08ms] (pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.04ms] (pass) foldSetup > stages before the event's are done, later ones pending [0.16ms] (pass) foldSetup > a stage that reports done alone still finishes [0.03ms] (pass) foldSetup > ready done completes the run [0.03ms] (pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.09ms] (pass) foldSetup > uploading belongs to install and the readiness check to ready [0.04ms] (pass) setupGuide > says the other sessions keep working and what to do next, in plain words [0.13ms] (pass) review malformed setup fields are dropped without coercion errors [0.11ms] (pass) exhausted setup preserves eligibility and explains a new setup [0.14ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.39ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.09ms] (pass) parsing the server's data > an install command needs a lifetime [0.07ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.23ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.27ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.18ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.25ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.17ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.11ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.51ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.51ms] (pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.31ms] (pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.21ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [2.57ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.23ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.14ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.10ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.10ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.20ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.07ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.06ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.06ms] (pass) authLabel > names the method and a trusted network provider only [0.03ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.17ms] (pass) guideFor > each failure kind names its fix [0.09ms] (pass) guideFor > mesh-policy words say possible, not certain [0.03ms] (pass) parseTarget > reads user, host and port [0.08ms] (pass) parseTarget > reads a pasted ssh command into the same fields [0.42ms] (pass) parseTarget > reads an ssh:// address [0.10ms] (pass) parseTarget > refuses garbage around an ssh command [0.07ms] (pass) parseTarget > refuses what cannot name a host [0.05ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.39ms] (pass) parseSshConfig > recognises config text [0.05ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.04ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.08ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.23ms] (pass) only a completed canonical host identity becomes terminal authority [0.16ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.12ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.04ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.05ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.02ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms] (pass) install diagnostics name the failed step and public host error [0.07ms] (pass) missing payload tells the operator the architecture and expected server path [0.04ms] (pass) an already added host says so and offers opening its existing terminal [0.30ms] (pass) release payload verification names the architecture step and plain reason [0.03ms] (pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.10ms] (pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.06ms] (pass) early terminal publication selects only its canonical host-bound shim session [0.09ms] src/canvas/addhost/already-added-breakit.test.ts: (pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.08ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.47ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.31ms] (pass) ready CA begins the requested installation mode without another prompt [0.12ms] (pass) closing during CA confirmation never starts an SSH attempt [0.27ms] (pass) a typed root login requires explicit consent before any installation [0.13ms] src/canvas/views/body.test.ts: (pass) a clean terminal exit keeps the window while host setup can still fail [0.05ms] (pass) clean exits still close ordinary windows, and failed exits stay visible [0.01ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.55ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.56ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.86ms] (pass) a chunk that both sides use stays critical [0.16ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.15ms] (pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.12ms] (pass) automatic canonical painting loads after the first canvas draw [0.17ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [3.89ms] (pass) compiled recovery UI mode preview obeys its URL boundary [2.60ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [2.20ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [13.47ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [16.25ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [10.41ms] (pass) abandoned word acknowledgement uploads nothing [4.34ms] (pass) settled acknowledgement cannot upload later (dismissed) [2.96ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [4.99ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [1.88ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [1.99ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [1.84ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [1.66ms] (pass) malformed or excessive remaining wait -1 is denied [2.34ms] (pass) malformed or excessive remaining wait 0.5 is denied [2.01ms] (pass) malformed or excessive remaining wait 172801 is denied [1.76ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [1.78ms] (pass) malformed or excessive remaining wait 90000 is denied [1.86ms] test/link-doubt.test.ts: (pass) a link doubt shows the indicator and keeps live replies and typing flowing [2.10ms] (pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.65ms] (pass) a notice type from a newer server is ignored, not a protocol failure [0.13ms] (pass) the viewer announces the link-doubt capability in its Hello [3.34ms] test/close-reasons.test.ts: (pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.30ms] src/close-reasons.test.ts: (pass) a missed connection response keeps a plain and stable reason [0.04ms] (pass) server and host close reasons identify why a terminal reconnects, in plain words [0.41ms] (pass) routine detach and connection rotation reasons stay neutral [0.03ms] (pass) a stream close that reattaches never says the terminal ended [0.15ms] (pass) a recovering server link names its cause as routine status, never as a failure [0.06ms] (pass) unknown close text is discarded instead of reaching the person or console [0.10ms] (pass) a storm of closes prints one line per minute and counts the rest [0.52ms] (pass) counted closes are reported when their window ends, without another close [0.08ms] src/review-close-log.test.ts: (pass) a reconnect the server refuses with a named Close frame still prints its console line [1.95ms] (pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.10ms] src/onboarding-load.test.ts: (pass) a failed load says so in the error line, offers Try again, and mounts nothing [5.53ms] (pass) the Try again button reloads the page: a failed import stays failed in the module map [5.51ms] (pass) the online event retries by itself [5.40ms] 356 pass 0 fail 21671 expect() calls Ran 356 tests across 60 files. [39.96s] bun test v1.4.2 (744846f84) src/connection-correlation-review.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [13.72ms] src/connection-idle.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 1 [7.30ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 1 [4.50ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 150 [1.77ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 150 [1.57ms] (pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [7.31ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 1 [1.77ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 1 [1.72ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 1 [1.88ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 1 [1.96ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 30 [1.48ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 30 [1.15ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 30 [1.24ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 30 [1.25ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 150 [0.74ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 150 [0.82ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 150 [0.84ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 150 [0.85ms] (pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [3.93ms] (pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [5.08ms] (pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [2.02ms] (pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [1.77ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [1.77ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [1.86ms] (pass) a healthy browser route survives 150ms scheduler delay across 1 streams [1.75ms] (pass) a healthy browser route survives 150ms scheduler delay across 28 streams [1.83ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [1.74ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) browser jitter allowance decays after a stable link returns [13.57ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [2.27ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [1.72ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [1.53ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [2.20ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [2.05ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [2.06ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer without a reply counts subsequent responsive silence [1.95ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) an outstanding probe gets responsive observation after a renderer stall [3.95ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) retirement gives a queued mismatched pong one task turn [1.30ms] (pass) retirement gives a queued correlated pong one task turn [0.92ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead typing route eventually retires when browser tasks run every 75ms [1.04ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 1000ms [0.94ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 60000ms [0.80ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [1.14ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [0.90ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [1.22ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) correlated queued replies replenish stall grace across successive healthy stalls [1.77ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) duplicate replies cannot replenish consumed stall grace [1.68ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) wrong timestamp replies cannot replenish consumed stall grace [1.40ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) unknown nonce replies cannot replenish consumed stall grace [1.53ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [2.21ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1 (pass) a replacement route receives its own one-shot local stall grace [2.55ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) continuous typing cannot cancel every silent-route confirmation turn [2.40ms] (pass) a pending confirmation is reset by reconnect [1.80ms] Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0 (pass) a pending confirmation is reset by close [1.62ms] (pass) a pending confirmation is reset by dispose [1.13ms] (pass) a stale confirmation from before reconnect cannot close the replacement route [1.73ms] (pass) a hidden page resumes its lease after 5000ms without retiring queued replies [2.46ms] (pass) a hidden page resumes its lease after 30000ms without retiring queued replies [1.46ms] (pass) a socket lost while hidden waits for visibility before reconnecting [1.46ms] (pass) mobile jitter and one retransmission keep a foreground browser lease [45.23ms] (pass) visibility notices require both peers to support them: false [0.45ms] (pass) visibility notices require both peers to support them: true [0.18ms] (pass) hiding a page cancels a retry scheduled while it was visible [0.68ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [1.22ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [0.96ms] (pass) a layout subscription starts the connection before any terminal exists [0.34ms] (pass) resync replaces one subscription ID and disposal prevents later resyncs [1.17ms] (pass) resync reopens a feature subscription with the same server ID [0.38ms] src/connection-layout-removal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [12.80ms] src/connection-liveness.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [1.51ms] src/connection-pool.test.ts: (pass) terminals fill the first socket, then open another, and a released slot is reused first [0.44ms] (pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [0.49ms] src/connection-probe-scheduling-review.test.ts: (pass) a fully answered browser route survives a delayed next probe before a terminal attaches [0.94ms] (pass) a fully answered browser route survives a delayed next probe with an attachment [0.31ms] src/connection-query-capabilities.test.ts: (pass) query replies negotiate independently with Hello caps 0 [0.07ms] (pass) query replies negotiate independently with Hello caps 4 (pass) query replies negotiate independently with Hello caps 8 (pass) query replies negotiate independently with Hello caps 12 src/connection-query-refusal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [11.39ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [15.85ms] src/connection-restart.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1 (pass) an overnight connection retains its writer and pending input when the server restarts [2.19ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a second quick server close leaves the fast path and backs off [1.08ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a failed first recovery handshake exits the one quick retry [0.84ms] Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0 (pass) a server close reason survives socket retirement and the next retry [0.83ms] Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0 (pass) a clean server socket close keeps its fallback reason through the next retry [0.60ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [15.55ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) online and foreground events cancel delays and preserve handshakes in progress [2.21ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [1.18ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.43ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.35ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.22ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.28ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [0.21ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.32ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.21ms] src/connection-review-refusal-input.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [3.05ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [1.23ms] src/connection-review-retained-lifetime.test.ts: (pass) review: saved typing can be declined without closing the live shell [1.20ms] (pass) review: new typing reaches the fresh shell while saved typing stays pending [0.26ms] (pass) review: retained input and consent are local to their terminal window [0.26ms] (pass) review: selecting a different session removes saved typing and its action [0.22ms] (pass) review: another refused writer retains pending and unacknowledged fresh typing [0.23ms] (pass) review: window disposal clears held input and rejects a stale resend action [0.62ms] src/connection-startup-review.test.ts: (pass) a healthy startup route can learn an RTT above the initial estimate [3.17ms] src/connection-unattached-close.test.ts: (pass) disposing a window before its welcome microtask sends no unbound Close [1.57ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [2.12ms] 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [339.00ms] bun test v1.4.2 (744846f84) src/terminal-queries.test.ts: (pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.67ms] (pass) all requested query families have identities [0.16ms] (pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [2.00ms] (pass) oversized OSC retains BEL termination before a later query [0.15ms] src/terminal-query-property.test.ts: [ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2 (pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [251.61ms] src/terminal-query-renderer-review.test.ts: (pass) review: DECID gives every real renderer response an identity [0.81ms] (pass) review: zero-padded CPR gives every real renderer response an identity [0.25ms] (pass) review: CPR with an ignored NUL gives every real renderer response an identity [1.02ms] (pass) review: three adjacent requests keep distinct identities across different viewer chunking [5.51ms] src/terminal-write-slices.test.ts: (pass) every slice split preserves cells, cursor and all renderer answers [36.11ms] (pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [1.20ms] (pass) escaped writers cannot access released input and callback failure releases the scope [0.68ms] (pass) nested writes and memory growth cannot replace borrowed input [1.34ms] (pass) allocation refusal never writes or frees unowned memory [1.78ms] (pass) empty scopes accept no input and reject later writer use [0.30ms] (pass) input views of native memory survive allocation-driven memory growth [0.27ms] (pass) throwing callbacks release exactly their owned input allocation [0.22ms] 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [334.00ms] $ bun run build.ts built chunk-grdbtwpg.js, chunk-qbb2e8b9.js, chunk-hf4csx9f.js, chunk-njtzg687.js, chunk-fnxpwxtz.js, chunk-301pnpgg.js, chunk-fassn2y5.js, chunk-rkhswyqm.js, chunk-0yv0etqm.js, chunk-hpxpyhkp.js, chunk-yvq3ah6x.js, chunk-vb52mqs5.js, chunk-gxvqf3b8.js, chunk-x90k904w.js, chunk-s0knh8h4.js, chunk-qp0njft5.js, chunk-twqk3173.js, chunk-8gqdshxw.js, chunk-s5s5y5zx.js, main.js, chunk-3zrccmtw.js, chunk-fxmz3y8j.js, chunk-wk9n9jj8.js, chunk-f8q0nw80.js, chunk-cej0rrxz.js, chunk-cvvfg8c8.js, chunk-kx9f5hgv.js, chunk-67j08cd0.js, chunk-tt9hr952.js, chunk-0hvyvmdp.js, chunk-hrvk7hrj.js, chunk-qsf65bk1.js, chunk-c76h7v56.js, chunk-7t673akt.js, chunk-peekjt9w.js, chunk-806v0gmr.js, chunk-1gtcrark.js, chunk-axbkkqp1.js, chunk-y37qs274.js, chunk-z2114mvp.js, chunk-w4tjwx5d.js, chunk-brnzpqsj.js, chunk-62k6fzh1.js, chunk-960tgsn8.js, chunk-2bk6ctz6.js, chunk-qmpj3m3r.js, chunk-p5dq3tjs.js, chunk-x145hcx1.js, chunk-azs6pd2b.js, chunk-z48tcwe1.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-3106g4qz.js, chunk-zx57bg5h.js, chunk-pmgxewne.js, chunk-jtg45ttx.js, chunk-3m9zj9sz.js, chunk-r04kg5zm.js, chunk-7d7e1wv2.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-a016a72m.js, chunk-4vvkqt0b.js, chunk-3cd7r4ty.js, chunk-ff3nvh2r.js critical chunk-r04kg5zm.js: identity=199 gzip=158 brotli=136 bytes critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-fnxpwxtz.js: identity=5812 gzip=2382 brotli=2147 bytes onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes critical chunk-rkhswyqm.js: identity=5890 gzip=2461 brotli=2137 bytes critical chunk-7d7e1wv2.js: identity=42945 gzip=14689 brotli=13154 bytes critical chunk-twqk3173.js: identity=11739 gzip=4631 brotli=4124 bytes critical chunk-cej0rrxz.js: identity=1776 gzip=856 brotli=694 bytes critical chunk-8gqdshxw.js: identity=386 gzip=236 brotli=195 bytes onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes critical chunk-s0knh8h4.js: identity=6075 gzip=2537 brotli=2230 bytes onDemand chunk-x145hcx1.js: identity=5359 gzip=2580 brotli=2302 bytes deferred chunk-qsf65bk1.js: identity=110049 gzip=37197 brotli=32819 bytes onDemand chunk-4vvkqt0b.js: identity=9158 gzip=3340 brotli=2889 bytes onDemand chunk-67j08cd0.js: identity=2791 gzip=1373 brotli=1181 bytes onDemand chunk-p5dq3tjs.js: identity=11562 gzip=4694 brotli=4279 bytes critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=480 bytes critical backdrop.worker.js: identity=243 gzip=210 brotli=158 bytes onDemand chunk-brnzpqsj.js: identity=33394 gzip=12821 brotli=11528 bytes critical chunk-3zrccmtw.js: identity=5448 gzip=2606 brotli=2377 bytes critical chunk-s5s5y5zx.js: identity=2529 gzip=1018 brotli=889 bytes onDemand chunk-960tgsn8.js: identity=1170 gzip=707 brotli=589 bytes onDemand chunk-zx57bg5h.js: identity=6983 gzip=3100 brotli=2806 bytes critical chunk-grdbtwpg.js: identity=34427 gzip=9986 brotli=8979 bytes onDemand chunk-azs6pd2b.js: identity=4696 gzip=1955 brotli=1727 bytes onDemand chunk-jtg45ttx.js: identity=6744 gzip=3165 brotli=2879 bytes deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes onDemand chunk-3m9zj9sz.js: identity=1063 gzip=653 brotli=523 bytes onDemand chunk-x90k904w.js: identity=2557 gzip=1180 brotli=1009 bytes onDemand chunk-y37qs274.js: identity=10904 gzip=4423 brotli=4029 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes critical chunk-wk9n9jj8.js: identity=8377 gzip=3575 brotli=3184 bytes onDemand chunk-3106g4qz.js: identity=49320 gzip=15454 brotli=13778 bytes onDemand chunk-yvq3ah6x.js: identity=2108 gzip=1038 brotli=870 bytes onDemand chunk-2bk6ctz6.js: identity=1649 gzip=774 brotli=676 bytes onDemand chunk-0hvyvmdp.js: identity=1974 gzip=987 brotli=843 bytes critical chunk-qp0njft5.js: identity=17631 gzip=6254 brotli=5571 bytes onDemand chunk-1gtcrark.js: identity=1026 gzip=622 brotli=496 bytes onDemand chunk-hpxpyhkp.js: identity=6265 gzip=2103 brotli=1862 bytes deferred chunk-a016a72m.js: identity=545 gzip=314 brotli=265 bytes onDemand chunk-peekjt9w.js: identity=14598 gzip=5447 brotli=4888 bytes onDemand chunk-w4tjwx5d.js: identity=6148 gzip=2778 brotli=2507 bytes critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes critical chunk-3cd7r4ty.js: identity=9907 gzip=4060 brotli=3500 bytes critical chunk-z2114mvp.js: identity=729050 gzip=210330 brotli=170810 bytes onDemand chunk-0yv0etqm.js: identity=2420 gzip=1193 brotli=1068 bytes onDemand chunk-7t673akt.js: identity=7662 gzip=3396 brotli=2964 bytes onDemand chunk-qbb2e8b9.js: identity=228 gzip=178 brotli=158 bytes onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes onDemand chunk-qmpj3m3r.js: identity=540 gzip=354 brotli=317 bytes deferred chunk-hrvk7hrj.js: identity=1560 gzip=801 brotli=731 bytes critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes onDemand chunk-hf4csx9f.js: identity=191 gzip=167 brotli=130 bytes critical chunk-vb52mqs5.js: identity=707 gzip=362 brotli=309 bytes onDemand chunk-806v0gmr.js: identity=11126 gzip=4258 brotli=3885 bytes deferred chunk-f8q0nw80.js: identity=14644 gzip=4802 brotli=4431 bytes critical chunk-cvvfg8c8.js: identity=2161 gzip=1061 brotli=907 bytes onDemand chunk-njtzg687.js: identity=6493 gzip=2402 brotli=2140 bytes critical chunk-pmgxewne.js: identity=162 gzip=150 brotli=119 bytes critical chunk-kx9f5hgv.js: identity=1188 gzip=691 brotli=582 bytes onDemand chunk-tt9hr952.js: identity=4561 gzip=2003 brotli=1784 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes critical main.js: identity=104155 gzip=38353 brotli=33092 bytes onDemand chunk-fassn2y5.js: identity=3891 gzip=1735 brotli=1518 bytes deferred chunk-301pnpgg.js: identity=38155 gzip=13871 brotli=12364 bytes onDemand chunk-62k6fzh1.js: identity=2522 gzip=1130 brotli=964 bytes onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes critical chunk-fxmz3y8j.js: identity=1106 gzip=663 brotli=600 bytes onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes JavaScript transfer, critical: identity=987711 gzip=305938/307200 brotli=254672/256000 bytes JavaScript transfer, deferred: identity=166293 gzip=57667/61440 brotli=51201/55296 bytes JavaScript transfer, onDemand: identity=231812 gzip=91855/20480 brotli=81862/18432 bytes JavaScript transfer, onDemand largest chunk chunk-3106g4qz.js: gzip=15454/20480 brotli=13778/18432 bytes (class total gzip=91855 brotli=81862, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.74ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.50ms] (pass) subscription not found ends delivery before a late refresh rejection [1.15ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.17ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.15ms] (pass) synchronous subscription refusal releases the transport exactly once [0.24ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [11.67ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.19ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.69ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.16ms] (pass) split mux header preserves trailing Close [0.20ms] (pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.64ms] (pass) empty marked input reports the stable invalid-body decoder failure [0.15ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.85ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.01ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.76ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.94ms] (pass) superseded failure preserves a newer pending refresh [3.91ms] src/stream.test.ts: stream differential: 141 streams, 11988 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [3004.55ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [9.80ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [2.91ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [4.23ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.17ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.30ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.61ms] (pass) review continuation stops after forbidden [1.29ms] (pass) review continuation stops after superseded [1.23ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.40ms] (pass) a changed revision discards earlier pages before assembling its restart [0.16ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.22ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.02ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms] (pass) watch never publishes a partial page; withdrawn=false [1.58ms] (pass) watch never publishes a partial page; withdrawn=true [1.25ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.58ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.22ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.57ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [1.41ms] (pass) shared Mesh event vectors drive the typed watch adapter [5.53ms] 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [3.10s] ```
kayg commented 2026-10-29 18:03:38 +00:00
Author
Owner
Copy link

Starting repair of R252-01 through R252-05. Worktree: ~/wt-infraternal/setup-token-fix; local branch setup-token-fix, publishing fast-forward to setup-token-data. Base 75baaecad8; merged test-only review head 074141ee37. The requested local branch is occupied by the older setup-token-data worktree, which remains untouched.

Read the review verdict “merge after fixes” and all five findings. Tests remain unchanged. For R252-04, the additive non-secret setup_token_command behavior agrees with D16/D202 and #252's recorded contract proposal; I will update contracts/keywrap.md's stale status row and obsolete secret-log wording to agree with D217 and the existing private socket behavior. No credentials or live service data are inspected.

Starting repair of R252-01 through R252-05. Worktree: ~/wt-infraternal/setup-token-fix; local branch setup-token-fix, publishing fast-forward to setup-token-data. Base 75baaecad85b9c371d30791ac2e62f41b691892b; merged test-only review head 074141ee37c6868594f303a890fe58fde6eec850. The requested local branch is occupied by the older setup-token-data worktree, which remains untouched. Read the review verdict “merge after fixes” and all five findings. Tests remain unchanged. For R252-04, the additive non-secret setup_token_command behavior agrees with D16/D202 and #252's recorded contract proposal; I will update contracts/keywrap.md's stale status row and obsolete secret-log wording to agree with D217 and the existing private socket behavior. No credentials or live service data are inspected.
kayg commented 2026-10-29 18:11:01 +00:00
Author
Owner
Copy link

R252-03 implementation pushed at e71e2b042a. Discovery accepts the resolved running executable identity (including symlinks), not arbitrary versioned names. Added a focused identity/rejection regression; it and effective-ExecStart unit test pass. infraternal-status all-targets clippy (-D warnings), workspace fmt and diff checks pass. The unchanged real-CLI review test is queued with the setup-output suite behind the host build slot.

Contract note correction: D217 covers private CA handoff, not setup-token logging. This repair follows the task's explicit token-secrecy requirement and limits R252-04's edit to the public-status contract; no decision is changed.

R252-03 implementation pushed at e71e2b042af0dab44d7c2f6add74c16dc908b215. Discovery accepts the resolved running executable identity (including symlinks), not arbitrary versioned names. Added a focused identity/rejection regression; it and effective-ExecStart unit test pass. infraternal-status all-targets clippy (-D warnings), workspace fmt and diff checks pass. The unchanged real-CLI review test is queued with the setup-output suite behind the host build slot. Contract note correction: D217 covers private CA handoff, not setup-token logging. This repair follows the task's explicit token-secrecy requirement and limits R252-04's edit to the public-status contract; no decision is changed.
kayg commented 2026-10-29 18:13:54 +00:00
Author
Owner
Copy link

The first heavy CLI check has waited approximately 10 minutes for the shared build slots without starting compilation. Consolidated the remaining per-finding checks into one serialized slot run (no parallel slot requests). Focused small status tests/clippy pass and R252-03 is pushed; no host settings or other job processes were changed. Continuing autonomously.

The first heavy CLI check has waited approximately 10 minutes for the shared build slots without starting compilation. Consolidated the remaining per-finding checks into one serialized slot run (no parallel slot requests). Focused small status tests/clippy pass and R252-03 is pushed; no host settings or other job processes were changed. Continuing autonomously.
kayg commented 2026-10-29 18:23:45 +00:00
Author
Owner
Copy link

R252-01 pushed: setup-output 5 passed, only R252-02 remains failing. The traversable-directory and unchanged R252-03 executable-symlink regressions pass. infraternal all-targets clippy (-D warnings), fmt and diff checks pass. No directory enumeration is required.

Head: 94b4af1927

R252-01 pushed: setup-output 5 passed, only R252-02 remains failing. The traversable-directory and unchanged R252-03 executable-symlink regressions pass. infraternal all-targets clippy (-D warnings), fmt and diff checks pass. No directory enumeration is required. Head: 94b4af1927d0a6038313939b33cc445998ffcf23
kayg commented 2026-10-29 18:24:27 +00:00
Author
Owner
Copy link

R252-02 check found an existing exact-copy assertion at crates/infraternal/tests/setup_output.rs:140: changing “The server data directory is not readable” to socket wording made that test fail (5 passed, 1 failed), while the new private-socket sudo-hint test passed. Restored the existing diagnostic text; no test changed. Rerunning setup-output and clippy before committing.

R252-02 check found an existing exact-copy assertion at crates/infraternal/tests/setup_output.rs:140: changing “The server data directory is not readable” to socket wording made that test fail (5 passed, 1 failed), while the new private-socket sudo-hint test passed. Restored the existing diagnostic text; no test changed. Rerunning setup-output and clippy before committing.
kayg commented 2026-10-29 18:25:36 +00:00
Author
Owner
Copy link

R252-02 pushed: all six unchanged setup-output tests pass, including R252-01 and R252-03. Sudo advice now follows an actual permission-denied connection and preserves explicit data arguments. Other failures remain sanitized. infraternal all-targets clippy (-D warnings), fmt and diff checks pass.

Head: 0217eaa92c

R252-02 pushed: all six unchanged setup-output tests pass, including R252-01 and R252-03. Sudo advice now follows an actual permission-denied connection and preserves explicit data arguments. Other failures remain sanitized. infraternal all-targets clippy (-D warnings), fmt and diff checks pass. Head: 0217eaa92ce3bd4d5a7579ce95077fc18f2f954e
kayg commented 2026-10-29 18:29:14 +00:00
Author
Owner
Copy link

R252-04 pushed: canonical auth contract now matches approved behavior. The unchanged real-HTTP contract regression and public-status tests pass; server all-targets clippy passes. Status contains only setup_required and its non-secret command.

Head: be588ee02a

R252-04 pushed: canonical auth contract now matches approved behavior. The unchanged real-HTTP contract regression and public-status tests pass; server all-targets clippy passes. Status contains only setup_required and its non-secret command. Head: be588ee02a368608ff6fafcb5c576b26caebab0c
kayg commented 2026-10-29 18:30:18 +00:00
Author
Owner
Copy link

R252-05 pushed: one CSS declaration (min-width: 0) constrains the existing overlay card. The unchanged phone regression fails before the edit and passes after; both system-service browser tests pass after. TypeScript check passes. Production screenshots and DOM/clipboard/console checks captured at 375x667, 393x852 and 1440x900 in both themes, with token input empty and masked. Screenshots follow in the evidence comment; no visual-quality judgment.

Head: f6a91ec4d7

R252-05 pushed: one CSS declaration (min-width: 0) constrains the existing overlay card. The unchanged phone regression fails before the edit and passes after; both system-service browser tests pass after. TypeScript check passes. Production screenshots and DOM/clipboard/console checks captured at 375x667, 393x852 and 1440x900 in both themes, with token input empty and masked. Screenshots follow in the evidence comment; no visual-quality judgment. Head: f6a91ec4d76b5c9cb9745c70b750306dceebfb65
kayg commented 2026-10-29 18:31:15 +00:00
Author
Owner
Copy link

R252-05 evidence, head f6a91ec4d. Production tracer build, existing shared overlay and command/copy components, one CSS declaration added. All three review test files are byte-identical to review head 074141ee3.

The unchanged 375px browser regression fails before the edit on its bounds assertion and passes after; both system-service browser tests pass (2 passed). TypeScript check passes. At rest in both themes: before card x=20, width=373.5, right=393.5 px at both phone sizes; after x=20, width=353/right=373 at 393x852 and width=335/right=355 at 375x667. Desktop remains x=500, width=440. Command display and clipboard match exactly, empty masked token inputs, expected page title/content, zero console/page errors in all six capture conditions. These are functional/layout observations, not a visual-quality judgment; screenshots are for orchestrator review.

Browser checks used repository Playwright against production assets (TRACER_TEST_PORT=54252, zero synthetic RTT); session instructions prohibit preview_* for verifying own edits. No runtime performance claim. Capture proxy PIDs 1964065 and 1964684 stopped, and Playwright teardown completed.

How to test:

  1. Open /install on an ownerless system-service deployment at 375px or 393px width.
  2. Confirm the displayed command is sudo infraternal server setup-token and copy it with the button.
  3. Confirm the card fits the viewport; retrieve the token only through the private CLI command.

before-393-dark.png
after-393-dark.png
before-375-dark.png
after-375-dark.png
before-393-light.png
after-393-light.png
before-375-light.png
after-375-light.png
before-1440-dark.png
after-1440-dark.png
before-1440-light.png
after-1440-light.png
before-checks.json
after-checks.json

R252-05 evidence, head f6a91ec4d. Production tracer build, existing shared overlay and command/copy components, one CSS declaration added. All three review test files are byte-identical to review head 074141ee3. The unchanged 375px browser regression fails before the edit on its bounds assertion and passes after; both system-service browser tests pass (2 passed). TypeScript check passes. At rest in both themes: before card x=20, width=373.5, right=393.5 px at both phone sizes; after x=20, width=353/right=373 at 393x852 and width=335/right=355 at 375x667. Desktop remains x=500, width=440. Command display and clipboard match exactly, empty masked token inputs, expected page title/content, zero console/page errors in all six capture conditions. These are functional/layout observations, not a visual-quality judgment; screenshots are for orchestrator review. Browser checks used repository Playwright against production assets (TRACER_TEST_PORT=54252, zero synthetic RTT); session instructions prohibit preview_* for verifying own edits. No runtime performance claim. Capture proxy PIDs 1964065 and 1964684 stopped, and Playwright teardown completed. How to test: 1. Open /install on an ownerless system-service deployment at 375px or 393px width. 2. Confirm the displayed command is sudo infraternal server setup-token and copy it with the button. 3. Confirm the card fits the viewport; retrieve the token only through the private CLI command. ![before-393-dark.png](https://git.kayg.org/attachments/c04715bf-1d22-4287-a7e4-17382b0c97b8) ![after-393-dark.png](https://git.kayg.org/attachments/e03bcff2-9599-42f0-a720-a16952f87d11) ![before-375-dark.png](https://git.kayg.org/attachments/9d6e561e-c0d2-4550-88f1-80a290229ef8) ![after-375-dark.png](https://git.kayg.org/attachments/f9e656bc-0100-4faa-893c-1d0a8b81a2b8) ![before-393-light.png](https://git.kayg.org/attachments/468d2313-3456-4ff8-9074-f65161f87c94) ![after-393-light.png](https://git.kayg.org/attachments/921fa60c-cc73-4669-a8f5-9f1bd1c2ed57) ![before-375-light.png](https://git.kayg.org/attachments/812d1d26-969c-484b-b7a3-e3642cbccd63) ![after-375-light.png](https://git.kayg.org/attachments/6da6fa78-9acb-4317-82cd-fa9bd9caff7f) ![before-1440-dark.png](https://git.kayg.org/attachments/22bcce57-c768-42b3-8530-aefc6f82239b) ![after-1440-dark.png](https://git.kayg.org/attachments/38b93b92-c993-4aaf-98c2-71539a9dcab2) ![before-1440-light.png](https://git.kayg.org/attachments/74f85997-f9f0-4499-8cd5-a350f3a076a3) ![after-1440-light.png](https://git.kayg.org/attachments/94d5da2b-74b6-4de0-ae54-e04c20d77151) [before-checks.json](https://git.kayg.org/attachments/7e961c5c-fa42-4ee9-a223-c6e0fe52feb0) [after-checks.json](https://git.kayg.org/attachments/26e46d5b-11c5-4895-865c-0a737bee9ac4)
kayg commented 2026-10-29 18:56:49 +00:00
Author
Owner
Copy link

D243 measurements pushed at 9f7a0c9776: x86_64 21,400,400 bytes; aarch64 19,575,064 bytes. Repair deltas versus reviewed setup-token head: +832 / +512 bytes. Fresh merge-base x86_64: 21,386,512 bytes; complete branch delta +13,888 bytes. Same pinned scripts/static-cargo recipe on 8by64-compute02, one target at a time through build-slot. Exact caps and PROCESS table updated; stripped/static, production trust and size boundary checks pass. No dependency, feature or release-profile changes. Running final scripts/verify fast next.

D243 measurements pushed at 9f7a0c977690119907be5004bd729136b3e8c7f7: x86_64 21,400,400 bytes; aarch64 19,575,064 bytes. Repair deltas versus reviewed setup-token head: +832 / +512 bytes. Fresh merge-base x86_64: 21,386,512 bytes; complete branch delta +13,888 bytes. Same pinned scripts/static-cargo recipe on 8by64-compute02, one target at a time through build-slot. Exact caps and PROCESS table updated; stripped/static, production trust and size boundary checks pass. No dependency, feature or release-profile changes. Running final scripts/verify fast next.
kayg commented 2026-10-29 18:57:46 +00:00
Author
Owner
Copy link

D243 repair cost: +832 bytes x86_64 and +512 bytes aarch64 versus reviewed head 75baaecad. These bytes retain actual socket-permission error classification and exact running-executable identity matching, fixing R252-02/R252-03 while removing the directory-listing preflight. Existing standard-library filesystem/error handling is reused; no library, dependency feature, runtime, auth primitive or release-profile change. Total x86_64 branch growth versus the freshly rebuilt merge base is 13,888 bytes, below 16 KiB. Both exact caps follow the measured images without spare allowance. This is a static-size result, not a runtime latency claim.

D243 repair cost: +832 bytes x86_64 and +512 bytes aarch64 versus reviewed head 75baaecad. These bytes retain actual socket-permission error classification and exact running-executable identity matching, fixing R252-02/R252-03 while removing the directory-listing preflight. Existing standard-library filesystem/error handling is reused; no library, dependency feature, runtime, auth primitive or release-profile change. Total x86_64 branch growth versus the freshly rebuilt merge base is 13,888 bytes, below 16 KiB. Both exact caps follow the measured images without spare allowance. This is a static-size result, not a runtime latency claim.
kayg commented 2026-10-29 19:23:53 +00:00
Author
Owner
Copy link

Finished #252 at 9f7a0c977690119907be5004bd729136b3e8c7f7, pushed to setup-token-data (remote verified; clean working tree).

All five findings addressed in separate commits: accessible socket traversal (94b4af192), permission-specific sudo hint (0217eaa92), symlink executable identity (e71e2b042), approved public-status contract alignment (be588ee02), and phone card minimum-width constraint using the existing component (f6a91ec4d). Size caps and docs/PROCESS.md table ratcheted in 9f7a0c977. The three review test files remain byte-identical to review head; no tests weakened. Token secrecy retained.

Focused checks: all six setup-output integration tests, real HTTP contract/public-status checks, both system-service browser tests, status tests and clippy pass. Production before/after screenshots at 393 and 375 px (both themes), plus desktop controls and geometry evidence, are attached in the earlier screenshot comment. Phone card right edge changed from 393.5 px to 373 px at 393 px and 355 px at 375 px; desktop geometry unchanged. These are functional geometry observations, not a visual-quality approval.

D243 pinned static builds ran sequentially through build-slot.sh: x86_64 21,400,400 bytes, aarch64 19,575,064 bytes. Fresh merge-base x86_64 21,386,512 bytes: branch delta +13,888 bytes (under 16 KiB). Repairs versus reviewed head: +832 / +512 bytes. Exact caps and +1-byte rejection/shrink checks pass; no dependencies, features or build recipes changed.

Final scripts/verify fast on this head: exit 0. All Rust rows, TypeScript/build checks, and protocol tests pass (39 pass, 0 fail, 36,135 expectations). Native aarch64 key-memory runtime is not exercised on this x86_64 host, as stated by the gate.

Cleanup verified: CARGO_TARGET_DIR and comparison target deleted, temporary baseline worktree removed, both job server PIDs absent, ports 54252/54253 closed on IPv4/IPv6. The earlier setup-token-data worktree was left untouched. Evidence retained outside the repo and attached below. Issue remains open for review.

setup-r2.log
contract.log
public-status.log
phone-before.log
phone-after.log
sizes.json
static-checks.log
baseline-static.log
baseline-size.txt
final-integrity.json

verify-fast.log
final-sizes.json
cleanup.json

Full final gate output, verbatim:


==> Repository artifact size gate
repository artifact gate: PASS (38 changed path(s), merge base 4a6202a52993)

==> Release deployment functional checks
.....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained
.Build deferred: host capacity limit reached
.........
----------------------------------------------------------------------
Ran 15 tests in 0.662s

OK
.
----------------------------------------------------------------------
Ran 1 test in 0.067s

OK
bun test v1.4.2 (744846f84)

scripts/release/deploy-review.test.ts:
REMOTE_ADMISSION unsigned_x86_payload=true refused=true
(pass) remote admission refuses an x86 payload outside the signed manifest [135.28ms]
{"state": "deployed", "ca_unlocked": true}
WEB_ONLY_RECORD candidate_binary_recorded=false
(pass) web-only deployment does not record the candidate as the running binary [135.65ms]
ALIAS_RECOVERY restart_requests=2
(pass) alias restoration failure still requests the retained warm rollback [128.28ms]

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [404.00ms]
PASS proxy_forwarding samples=3 timed=false

==> fmt
(fmt: 3s)

==> VT native fmt
(VT native fmt: 0s)

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
   Compiling serde_core v1.0.229
   Compiling memchr v2.8.3
   Compiling syn v3.0.6
   Compiling serde v1.0.229
   Compiling serde_json v1.0.151
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-plugin-api)
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-shim)
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal)
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-status)
   Compiling vte v0.15.0
   Compiling vt100 v0.16.2
   Compiling uuid v1.27.0
   Compiling serde_derive v1.0.229
   Compiling clap_derive v4.6.7
   Compiling tokio-macros v2.7.2
   Compiling thiserror-impl v2.0.21
   Compiling tokio v1.53.3
   Compiling thiserror v2.0.21
   Compiling clap v4.6.7
warning: function `print_progress` is never used
   --> crates/infraternal/src/cli/output.rs:592:8
    |
592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) {
    |        ^^^^^^^^^^^^^^
    |
    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default

warning: function `write_output` is never used
   --> crates/infraternal/src/cli/output.rs:616:8
    |
616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) {
    |        ^^^^^^^^^^^^

warning: `infraternal` (bin "infraternal" test) generated 2 warnings
    Finished `test` profile [unoptimized + debuginfo] target(s) in 12.06s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal-fe1c5abfd68beec3)

running 37 tests
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
{"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok

test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s

   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-plugin-api)
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal)
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-mesh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/host-facts)
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/remote)
   Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/release)
   Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/canvas)
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/relay)
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/backup)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/mesh)
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-agent)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/ssh)
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-server)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 52.40s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal-0a149f42b54b04db)

running 104 tests
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
{"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok
test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok
test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok

test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 8.49s

   Compiling displaydoc v0.2.7
   Compiling serde v1.0.229
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-plugin-api)
   Compiling getrandom v0.2.17
   Compiling nix v0.30.1
   Compiling tracing-core v0.1.36
   Compiling syn v2.0.119
   Compiling ring v0.17.14
   Compiling tinystr v0.8.4
   Compiling icu_locale_core v2.3.0
   Compiling zerotrie v0.2.5
   Compiling zeroize v1.9.0
   Compiling rustls-pki-types v1.15.1
   Compiling tracing v0.1.44
   Compiling icu_provider v2.3.1
   Compiling icu_collections v2.3.0
   Compiling rustls-webpki v0.103.16
   Compiling smallvec v1.16.2
   Compiling quinn-udp v0.5.16
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling uuid v1.27.0
   Compiling openssl-macros v0.1.1
   Compiling rustls v0.23.46
   Compiling openssl v0.10.81
   Compiling percent-encoding v2.3.2
   Compiling digest v0.10.7
   Compiling form_urlencoded v1.2.2
   Compiling futures-core v0.3.34
   Compiling sha2 v0.10.9
   Compiling futures-util v0.3.34
   Compiling idna_adapter v1.2.2
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-shim)
   Compiling idna v1.1.0
   Compiling url v2.5.8
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/host-facts)
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-mesh)
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/relay)
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/backup)
   Compiling tokio-openssl v0.6.5
   Compiling quinn-proto v0.11.19
   Compiling quinn v0.11.12
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/remote)
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-agent)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/ssh)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 20.93s
     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_agent-f4f0113fecf22aee)

running 1 test
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 75 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_mesh-c7263890e5528429)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_ssh-b96e878b9907f3df)

running 1 test
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s

(CLI plugin compile-out: 95s)

==> clippy
   Compiling jobserver v0.1.35
   Compiling crossbeam-utils v0.8.23
    Checking either v1.18.0
    Checking nix v0.30.1
    Checking regex-automata v0.4.18
   Compiling cc v1.6.0
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-server)
    Checking crossbeam-queue v0.3.14
    Checking arbitrary v1.4.2
    Checking sqlx-core v0.8.6
   Compiling crossbeam-epoch v0.9.21
   Compiling crossbeam-deque v0.8.8
   Compiling libsqlite3-sys v0.30.1
   Compiling openssl-src v300.6.1+3.6.3
   Compiling ring v0.17.14
   Compiling openssl-sys v0.9.117
    Checking matchers v0.2.0
    Checking sqlx-sqlite v0.8.6
    Checking tracing-subscriber v0.3.23
   Compiling libfuzzer-sys v0.4.13
    Checking infraternal-status v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-status)
   Compiling rayon-core v1.13.0
    Checking plotters-backend v0.3.7
    Checking ciborium-io v0.2.2
    Checking ciborium-ll v0.2.2
    Checking plotters-svg v0.3.7
    Checking itertools v0.13.0
    Checking same-file v1.0.6
    Checking cast v0.3.0
   Compiling rustls v0.23.46
    Checking walkdir v2.5.0
    Checking plotters v0.3.7
   Compiling sqlx-macros-core v0.8.6
    Checking criterion-plot v0.6.0
    Checking rayon v1.12.0
    Checking ciborium v0.2.2
    Checking rustls-webpki v0.103.16
    Checking regex v1.13.1
    Checking tinytemplate v1.2.1
    Checking oorandom v11.1.5
   Compiling sqlx-macros v0.8.6
    Checking anes v0.1.6
   Compiling infraternal-session v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-session)
    Checking sqlx v0.8.6
    Checking infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-plugin-api)
    Checking criterion v0.7.0
    Checking infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-mesh)
    Checking infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/host-facts)
    Checking infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/release)
    Checking infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/canvas)
    Checking infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/relay)
    Checking infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/backup)
    Checking quinn-proto v0.11.19
    Checking infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-protocol)
    Checking quinn v0.11.12
   Compiling openssl v0.10.81
   Compiling tokio-openssl v0.6.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-core v0.5.5
    Checking infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/mesh)
    Checking infraternal-shim v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-shim)
    Checking axum-server v0.8.0
    Checking infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/remote)
    Checking webauthn-rs v0.5.5
    Checking infraternal-agent v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-agent)
    Checking infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/ssh)
    Checking infraternal v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal)
    Checking infraternal-fuzz v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/fuzz)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 2m 20s
(clippy: 141s)

==> SSH runtime test helper
    Blocking waiting for file lock on package cache
   Compiling tokio v1.53.3
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-plugin-api)
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-shim)
   Compiling quinn v0.11.12
   Compiling tokio-openssl v0.6.5
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/ssh)
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/remote)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 17.34s
(SSH runtime test helper: 17s)

==> real-binary fixture paths
...
----------------------------------------------------------------------
Ran 3 tests in 0.010s

OK
(real-binary fixture paths: 1s)

==> test
   Compiling crossbeam-utils v0.8.23
   Compiling either v1.18.0
   Compiling crossbeam-queue v0.3.14
   Compiling libsqlite3-sys v0.30.1
   Compiling openssl-sys v0.9.117
   Compiling ring v0.17.14
   Compiling regex-automata v0.4.18
   Compiling sqlx-core v0.8.6
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-server)
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-status)
   Compiling crossbeam-epoch v0.9.21
   Compiling crossbeam-deque v0.8.8
   Compiling openssl v0.10.81
   Compiling plotters-backend v0.3.7
   Compiling rustls-webpki v0.103.16
   Compiling ciborium-io v0.2.2
   Compiling ciborium-ll v0.2.2
   Compiling plotters-svg v0.3.7
   Compiling sqlx-sqlite v0.8.6
   Compiling rustls v0.23.46
   Compiling rayon-core v1.13.0
   Compiling matchers v0.2.0
   Compiling tracing-subscriber v0.3.23
   Compiling itertools v0.13.0
   Compiling same-file v1.0.6
   Compiling sqlx-macros-core v0.8.6
   Compiling cast v0.3.0
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-shim)
   Compiling tokio-openssl v0.6.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling axum-server v0.8.0
   Compiling webauthn-rs-core v0.5.5
   Compiling sqlx-macros v0.8.6
   Compiling criterion-plot v0.6.0
   Compiling walkdir v2.5.0
   Compiling rayon v1.12.0
   Compiling regex v1.13.1
   Compiling plotters v0.3.7
   Compiling sqlx v0.8.6
   Compiling quinn-proto v0.11.19
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-plugin-api)
   Compiling ciborium v0.2.2
   Compiling tinytemplate v1.2.1
   Compiling oorandom v11.1.5
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-mesh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/host-facts)
   Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/release)
   Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/canvas)
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/backup)
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/relay)
   Compiling anes v0.1.6
   Compiling infraternal-session v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-session)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/mesh)
   Compiling criterion v0.7.0
   Compiling quinn v0.11.12
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/remote)
   Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-protocol)
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-agent)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/ssh)
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 5m 17s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal-6fb500f025e14506)

running 104 tests
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
{"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok
test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok
test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 12.04s

     Running tests/agent_daemon.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/agent_daemon-07be34f79332b165)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.31s

     Running tests/agent_queues.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/agent_queues-230c59a5cd906663)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.32s

     Running tests/agent_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/agent_review-84c86525ad0fea2c)

running 8 tests
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 14.20s

     Running tests/agent_sessions.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/agent_sessions-03d7a30371f14a27)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.46s

     Running tests/cli_envelope.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/cli_envelope-80a08214b8a5d410)

running 8 tests
test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok
test a_missing_server_is_not_found_exit_4 ... ok
test status_exits_0_on_a_machine_with_nothing_installed ... ok
test bare_infraternal_is_the_overview_and_points_to_help ... ok
test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok
test read_only_commands_answer_in_the_envelope ... ok
test status_exits_5_when_something_that_should_run_is_down ... ok
test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/cli_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/cli_review-3291d67404d26089)

running 17 tests
test a_group_with_one_command_says_so_in_the_singular ... ok
test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok
test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok
test a_malformed_host_id_is_a_usage_error_exit_2 ... ok
test a_dry_run_plan_keeps_its_line_breaks ... ok
test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok
test a_subcommand_does_not_advertise_options_it_ignores ... ok
test an_unknown_skill_is_not_found_exit_4 ... ok
test root_help_fits_80_columns ... ok
test no_compiled_python_is_tracked ... ok
test root_help_lists_server_init ... ok
test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok
test json_help_and_version_are_envelopes_too ... ok
test a_dumb_terminal_gets_neither_colour_nor_marks ... ok
test user_facing_text_never_says_agent_alone ... ok
test an_empty_no_color_is_ignored ... ok
test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok

test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.83s

     Running tests/cli_review_r2.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/cli_review_r2-23cf4131d1988fa6)

running 11 tests
test a_paged_listing_is_still_one_envelope ... ok
test a_failed_later_page_emits_only_the_failure_envelope ... ok
test an_unknown_skill_does_not_echo_what_was_typed ... ok
test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok
test three_pages_preserve_order_and_only_the_final_cursor ... ok
test status_text_does_not_call_an_unanswered_unit_not_running ... ok
test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok
test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok
test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok
test ctrl_c_in_a_script_loop_stops_the_loop ... ok
test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.01s

     Running tests/cli_review_r3.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/cli_review_r3-be7640ccd9aa03ea)

running 4 tests
test signal_fixture ... ok
test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok
test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok
test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/cli_review_r3_arguments.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/cli_review_r3_arguments-212cdc3ed0a05eb1)

running 1 test
test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/idle_canary.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/idle_canary-5d1908992b4ff473)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.09s

     Running tests/key_memory.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/key_memory-4d4f4cc5516ea6b4)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/remote_output.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/remote_output-9105ebfda268049c)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/session_bounds_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/session_bounds_review-ea0b23d91d052373)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.97s

     Running tests/session_exit_events.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/session_exit_events-d98ed6fbf136b0d7)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.89s

     Running tests/session_retention.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/session_retention-8b939159efa2d0ab)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.62s

     Running tests/setup_output.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/setup_output-702013ba02916bdd)

running 6 tests
test setup_output_keeps_legacy_and_versioned_readers ... ok
test unreadable_system_service_data_prints_one_sudo_command_line ... ok
test setup_token_reads_a_traversable_directory_without_listing_access ... ok
test setup_token_finds_the_data_dir_from_a_system_service_without_flags ... ok
test setup_token_permission_hint_covers_a_private_socket_in_a_readable_directory ... ok
test setup_token_discovers_a_service_installed_through_a_versioned_binary_symlink ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/shim.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/shim-30417b82dff06cc8)

running 24 tests
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test disallowed_signal_only_disconnects_peer ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test double_fork_survives_parent_death ... ok
test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok
test attached_backpressure_and_detached_progress ... ok
test independent_shared_writers_wait_for_the_same_global_queue ... ok
test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok
test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test parked_shared_writer_does_not_stop_detached_pty_progress ... ok
test replacement_connection_and_malformed_limit ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test shared_writer_coexists_and_replayed_input_is_written_once ... ok
test shared_writer_restores_durable_geometry_after_another_writer_types ... ok
test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test legacy_output_subscription_unblocks_deferred_shared_input ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.64s

     Running tests/ssh_askpass.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/ssh_askpass-16fbd1b96c4af4ca)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.10s

     Running tests/ssh_connector_policy.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/ssh_connector_policy-dd9b13bec3dd9638)

running 1 test
test connector_preserves_configured_bind_address_refusal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s

     Running tests/user_host.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/user_host-4bee401db2fda08c)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/vt_credit.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/vt_credit-dd383ed03c38b306)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.34s

     Running tests/vt_reconnect.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/vt_reconnect-a0009109e49304ab)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.34s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_agent-b93583fbcebe1fd6)

running 168 tests
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok
test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok
test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::reply_capacity_tests::full_reply_reservations_cannot_spend_keyboard_capacity ... ok
test daemon::session_commands::reply_capacity_tests::sixteen_replies_and_eight_typing_commands_retain_their_order ... ok
test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok
test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok
test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok
test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok
test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok
test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok
test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok
test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok
test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok
test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok
test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok
test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok
test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok
test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok
test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok
test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok
test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok
test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok
test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok
test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok
test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok
test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok
test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok
test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok
test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok
test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok
test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok
test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok
test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok
test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok
test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok
test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok
test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok
test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok
test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok
test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged.
test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged.
test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok
test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock.
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok
test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok
test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok
test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok
test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok
test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace.
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok
test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok

test result: ok. 148 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 11.12s

     Running tests/transport.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/transport-8f7e25a883145d8d)

running 3 tests
test replacing_the_callers_descriptor_cannot_redirect_registered_io ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_mesh-7fce9c81f3753067)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/default_arrow-718a820b17567011)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/properties-9b39f53037898c73)

running 14 tests
test overlaps_are_reported_without_silent_range_changes ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test directional_grants_union_and_minimal_updates ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test names_versions_and_backend_status ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.98s

     Running tests/rotation_time.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/rotation_time-d8fd70ac7360bfd5)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_api-49f4d2771da6f777)

running 32 tests
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test host_name::tests::addresses_and_hostnames_give_a_machine_name ... ok
test host_name::tests::odd_and_overlong_hostnames_give_no_name ... ok
test host_name::tests::numeric_invalid_and_unnamed_inputs_give_no_name ... ok
test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test present::tests::pairs_align_values_and_wrap_under_them ... ok
test present::tests::tint_wraps_text_after_padding_is_measured ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok
test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok
test present::tests::a_table_has_a_header_only_from_two_rows ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test server_path::tests::legacy_link_omits_the_optional_source_port ... ok
test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes.
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok

test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/routing_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/routing_review-6f6c1a928eb26a7f)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_backup-9fdc1ecb14af9cc8)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_canvas-1446da2b8a090ad7)

running 12 tests
test model::tests::host_id_requires_canonical_lowercase_hyphenated_text ... ok
test model::tests::reference_document_has_strict_shape_and_bounds ... ok
test model::tests::graph_pin_coordinates_include_both_limits_but_refuse_the_next_integer ... ok
test reducer::tests::concurrent_builtin_view_creation_preserves_existing_contents ... ok
test reducer::tests::nullable_resize_preserves_existing_values_and_absent_fields ... ok
test reducer::tests::sample_corpus_preserves_strict_variant_fields_and_round_trips ... ok
test socket::tests::descriptor_declares_server_only_actions_and_strict_subscription ... ok
test reducer::tests::split_divides_only_its_own_band ... ok
test socket::tests::result_json_preserves_both_wire_shapes ... ok
test reducer::tests::view_metadata_targets_and_column_neighbours_are_semantic ... ok
test reducer::tests::repeated_open_close_does_not_exhaust_column_capacity ... ok
test reducer::tests::independent_edits_commute_and_close_wins_in_both_orders ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_host_facts-8ccf6df635e66a77)

running 14 tests
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::static_facts_report_the_machines_hostname ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_mesh-27583060726d1618)

running 76 tests
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok
test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok
test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok
test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok
test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok
test node_actions::peer_page_tests::poll_cost ... ignored, measurement
test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok
test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok
test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok
test node_presentation::tests::a_wide_table_stays_within_the_width ... ok
test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok
test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok
test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok
test node_presentation::tests::status_explains_the_observed_server_transport ... ok
test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers.
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok
test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok
test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok
test node_coordination::tests::a_name_a_person_chose_is_kept ... ok
test node_coordination::tests::legacy_host_daemon_and_ip_record_do_not_leave_a_uuid_mesh_name ... ok
test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes.
test node_coordination::tests::placeholder_names_become_the_machines_names ... ok
test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok
test presence::tests::a_page_cursor_is_followed ... ok
test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok
test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok
test presence::tests::an_unreadable_node_is_no_reading ... ok
test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok
test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok
test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok
test presence::tests::replace_reports_only_visible_changes ... ok
test presence::tests::the_edge_of_the_session_window_is_still_online ... ok
test presence::tests::traffic_proves_a_session_until_it_ends ... ok
test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok
test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok
test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok
test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok
test node_coordination::tests::two_hosts_reporting_the_same_hostname_receive_distinct_names ... ok
test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok
test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok

test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 0.39s

     Running tests/access_updates.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/access_updates-401a785178272a85)

running 8 tests
test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace
test compact_identity_support_requires_an_explicit_strict_probe ... ok
test range_objects_reject_unknown_duplicate_and_positional_fields ... ok
test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok
test default_tightening_at_1000_peers_fits_one_round_trip ... ok
test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok

test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/authorized_local_binding.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/authorized_local_binding-9eb78243673aa0ef)

running 2 tests
test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.
test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/canonical_host_binding.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canonical_host_binding-77332b5113aa5170)

running 1 test
test enrollment_requires_canonical_host_uuid_spelling ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/configuration.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/configuration-edd5af664e4aa790)

running 5 tests
test edition_default_is_explicit_and_build_selected ... ok
test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.31s

     Running tests/kernel.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/kernel-ae923fd8446e7953)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/naming.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/naming-7ef77dd298644e0e)

running 4 tests
test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok
test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok
test the_servers_names_are_kept_for_the_server ... ok
test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/policy_enrollment_binding.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/policy_enrollment_binding-109d95c10f4ea94b)

running 4 tests
test noncanonical_host_binding_is_refused ... ok
test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok
test refused_enrollment_preserves_removal_and_revision ... ok
test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/policy_enrollment_identity.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/policy_enrollment_identity-f0cf7a0229e540f5)

running 1 test
test unbound_enrollment_public_key_is_not_host_authority ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/policy_snapshot_ordering.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/policy_snapshot_ordering-7cc2ac94da47cd98)

running 6 tests
test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.
test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/presence.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/presence-3e1bc5e55745d7e3)

running 2 tests
test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok
test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/restart_route_ownership.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/restart_route_ownership-0dc4cc52f478fbf8)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_authorized_reenrollment.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_authorized_reenrollment-7a5ac950aac5a6a3)

running 2 tests
test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.
test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_endpoint_transaction-0ef0c911cceaab22)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_firewall_marker.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_firewall_marker-c4dbb35430ae2de6)

running 2 tests
test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173.
test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_ingress_translation-c0a4032b0502fe02)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_local_delivery-1712a7f25b19bf51)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_presence_r4.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_mesh_presence_r4-b35fd343e12c696d)

running 3 tests
test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok
test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok
test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_view_truth.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_mesh_view_truth-62e9d7f28a99b9eb)

running 6 tests
test an_address_that_is_an_ip_never_becomes_a_name ... ok
test a_host_record_name_beats_another_machines_reported_hostname ... ok
test a_remote_machine_cannot_be_called_server ... ok
test a_remote_machine_cannot_take_the_servers_hostname ... ok
test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok
test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.14s

     Running tests/review_mesh_view_truth_r2.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_mesh_view_truth_r2-f6106bc26caa5acf)

running 9 tests
test a_hex_ipv4_spelling_never_becomes_a_name ... ok
test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236)
test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok
test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok
test a_viewer_without_host_facts_still_sees_distinct_names ... ok
test no_viewer_sees_a_remote_machine_called_server ... ok
test a_person_can_take_a_name_a_machine_reported ... ok
test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok
test evidence_migrations_0026_and_0029_upgrade_a_realistic_database_without_churn ... ok

test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/review_mesh_view_truth_r3.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_mesh_view_truth_r3-acc7217987659c70)

running 5 tests
test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok
test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok
test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok
test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok
test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/review_mesh_view_truth_r4.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_mesh_view_truth_r4-c8f1176c83a6a2a1)

running 7 tests
test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok
test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok
test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok
test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok
test evidence_server_hostname_moves_only_with_server_rename_authority ... ok
test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok
test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s

     Running tests/review_restart_routes.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_restart_routes-012bc6e19af8712e)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_retire_ownership.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_retire_ownership-7e7abe5e49e18a66)

running 7 tests
test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft.
test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace.
test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace.
test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft.

test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_reverse_recreation.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_reverse_recreation-ba8322a4b4589131)

running 4 tests
test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.

test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_revoked_host_policy.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_revoked_host_policy-8f0b434cc4a6f49e)

running 1 test
test revoked_host_is_not_retained_in_compiled_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/review_route_inventory.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_route_inventory-db2612871fb84dbf)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_route_scope-7a63cc3e13aa42db)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_shutdown_budget-e6060242e37c449a)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_shutdown_restart-90e3bdbafd24755a)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/settings-b0c907b6b74ba896)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/store.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/store-0f17df0f12b6f327)

running 6 tests
test required_server_membership_cannot_be_deleted ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test absent_discovery_preserves_the_last_known_endpoint ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok
test attach_cancelled_at_any_await_leaves_the_store_writable ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.53s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_relay-d3de297fc8337bde)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_release-1d54d564a3117987)

running 8 tests
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test latest::tests::cancellation_joins_verification ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.55s

     Running tests/review_pool.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_pool-51aabd0e805c8271)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.60s

     Running tests/review_restart.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_restart-c5f9f9cb62051e16)

running 4 tests
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification
test lookup_creates_private_staging_under_owner_restrictive_umask ... ok
test restarted_latest_reclaims_metadata_after_process_stop ... ok

test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_remote-ecf43ccc280cdfc1)

running 114 tests
test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance.
test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok
test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok
test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok
test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok
test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok
test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok
test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok
test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok
test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok
test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok
test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok
test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok
test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok
test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok
test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok
test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok
test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok
test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok
test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok
test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok
test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok
test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok
test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok
test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok
test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock
test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok
test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok
test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok
test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok
test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok
test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok
test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok
test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok
test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok
test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance.
test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok
test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok
test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok
test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok
test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers.
test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok
test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok
test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok
test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok
test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok
test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok
test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok
test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok
test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections.
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence.
test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections.
test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections.
test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok
test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok
test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock.
test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok
test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok
test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline.
test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok
test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok
test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok
test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok
test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok
test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok
test runtime_lock::tests::dump_datagrams_split_exactly ... ok
test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok
test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test
2
test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... ok
test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok

running 1 test
test runtime_lock::tests::split_device_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s

test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... ok
test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok
test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok
test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok
test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok
test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok
test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok
test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok
test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test

running 1 test
test runtime_lock::tests::foreign_inode_twin_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s

test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... ok
test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok
test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok
test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok
test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok
test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok
test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok
test uninstall::tests::review_planted_plan_is_never_followed ... ok
test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test runtime_lock::tests::after_close_waits_for_a_slow_socket_snapshot ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok
test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok
test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok

test result: ok. 99 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 5.43s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_ssh-17b36253c8d69c86)

running 49 tests
test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok
test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok
test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok
test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_order::tests::pending_forwards_the_caller_deadline_to_its_selected_session ... ok
test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok
test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok
test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok
test bootstrap::proof_tests::review_stalled_commit_cannot_outlive_attempt_cap ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test bootstrap::proof_tests::review_commit_clamps_outliers_and_releases_immediately ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test install::tests::transfer_caps_accept_only_the_fixed_record ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only
test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok
test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok
test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok
test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok
test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok
test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok
test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok
test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok
test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok
test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok
test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok
test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok
test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok
test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok
test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok
test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test payload::tests::settings_changes_keep_at_most_four_entries ... ok
test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok
test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok
test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok
test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/already_added_breakit.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/already_added_breakit-e90e2f4c29cb707e)

running 1 test
test a_host_key_challenge_never_serializes_as_a_host_id ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/auth_order.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/auth_order-9968d66820e505cb)

running 11 tests
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test manual_method_trust_refusal_never_loads_later_credentials ... ok
test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok
test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/build_removal-9eec37b95ad57c8e)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.31s

     Running tests/concurrency.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/concurrency-f30db03603f4997a)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/config_isolation.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/config_isolation-9a944d95ba4eed2e)

running 2 tests
test synthetic_master_socket_is_private_at_creation ... ok
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/credentials.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/credentials-6e4e4044489fb506)

running 4 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test kernel_running_helper_is_materialized_in_its_private_scope ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.23s

     Running tests/diagnostics.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/diagnostics-f0e6f7e48b04f404)

running 12 tests
test control_probe_statuses_preserve_actionable_setup_messages ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/event_metadata-8524db180f9a16df)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/foreground-10281428fe728d1d)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/host_trust.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/host_trust-50a4a769c45122d1)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/install-42c84fd1d4c4d48f)

running 95 tests
test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test breakit2_rollback_preserves_foreign_unit_new ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test active_transaction_is_live_between_ssh_setup_commands ... ok
test breakit2_rollback_preserves_foreign_launcher_new ... ok
test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test compound_join_failure_preserves_the_original_status_and_boundary ... ok
test buffering_setup_reader_receives_no_payload_until_selection ... ok
test compound_restaging_refuses_a_foreign_journal_before_upload ... ok
test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok
test compound_setup_keeps_owned_rollback_and_linger_warning ... ok
test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok
test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok
test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok
test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok
test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok
test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok
test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok
test early_staging_preserves_canonical_foreign_root_refusal ... ok
test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok
test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok
test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok
test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test commit_signal_retains_journal_until_proof_and_on_cancel ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok
test framed_join_refusal_keeps_status_separate_from_upload ... ok
test crash_mid_install_can_roll_back_and_retry ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok
test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok
test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test installed_infraternal_agent_always_restarts_without_start_limit ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test interrupted_acquisition_cleanup_receipt_can_resume ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test full_payload_restaging_preserves_the_running_session_build ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test missing_payload_preserves_the_bootstrap_binary_remedy ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok
test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok
test known_failed_setup_finishes_without_a_second_confirmation ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test payload_reuse_never_adopts_a_foreign_cache_directory ... ok
test partial_full_upload_rebridges_from_a_verified_image ... ok
test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ignored, scripts/test-ssh-inode-reuse reports unsupported filesystems as ignored
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test reported_cache_digest_selects_reuse_without_sending_payload ... ok
test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok
test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok
test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534
test retry_resends_payload_when_cache_content_changes ... ok
test review_live_relative_control_socket_preserves_its_receipt ... ok
test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok
test retry_reuses_verified_payload_after_owned_rollback ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test setup_transaction_holds_a_live_lock_between_shell_commands ... ok
test review_restart_recovers_cleanup_after_base_retirement ... ok
test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok
test review_restart_recovers_cleanup_after_owner_retirement ... ok
test session_restaging_uses_one_compound_command ... ok
test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok
test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok
test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok
test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok
test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok
test restart_recovers_partial_stage_retirement ... ok
test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok
test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok

test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 7.22s

     Running tests/mesh_ssh.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/mesh_ssh-2fa83dcf733d059a)

running 1 test
test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/model.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/model-8dc28d474cf55d69)

running 6 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/payload_source-8da7588b1b1e7c2a)

running 2 tests
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok
test verification_failure_names_step_and_stops_before_upload ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/previous_attempt_liveness_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/previous_attempt_liveness_review-ce46fa87480131ee)

running 1 test
test home_alias_keeps_open_setup_descriptor_live ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/previous_attempt_shell.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/previous_attempt_shell-b9d97aec39edc4d4)

running 1 test
test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.54s

     Running tests/probe_check.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/probe_check-376aad85da0f0af1)

running 3 tests
test breakit2_no_systemd_names_the_required_manager ... ok
test shell_startup_refusal_names_an_interactive_only_remedy ... ok
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/process.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/process-c3eab8acd9e98988)

running 10 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test unavailable_negotiated_codec_never_sends_invitation ... ok
test negotiated_sources_require_an_exact_receipt_before_private_input ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test declared_payload_flows_before_receipts_and_private_input_waits ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.03s

     Running tests/proxy_policy.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/proxy_policy-ae5cb2b308a06ccf)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/publication.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/publication-0d82e771a08c3f68)

running 4 tests
test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok
test refused_publication_reports_failure_to_the_waiting_wizard ... ok
test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok
test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/real_ssh.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/real_ssh-bf1648c924584992)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/recovery_support.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/recovery_support-683687d40ea38ce9)

running 12 tests
test cleanup_script_requires_the_shipped_helper_level ... ok
test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok
test legacy_control_socket_in_spaced_home_preserves_receipt ... ok
test review_live_session_socket_in_newline_home_blocks_cleanup ... ok
test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image
test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok
test legacy_control_socket_in_newline_home_preserves_receipt ... ok
test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok
test review_bound_control_socket_before_listen_preserves_receipt ... ok
test private_legacy_control_socket_preserves_receipt ... ok
test review_live_session_socket_in_plain_home_blocks_cleanup ... ok
test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.40s

     Running tests/shadow_banner.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/shadow_banner-ec8803577a2b0cd0)

running 1 test
test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/shell_quoting.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/shell_quoting-e07d7690574ed5f8)

running 1 test
test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/single_connection-628041854be37518)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/source_completeness-4d7c035c7195b1ce)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/trust_round2-e8646687aedada12)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 8 tests
test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_server-f1c601004c6d4da6)

running 686 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::migration_data_tests::original_migration_metadata_and_checksums_are_unchanged ... ok
test auth::migration_data_tests::quoted_text_and_comment_looking_literals_keep_their_values ... ok
test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::migration_data_tests::dev_v29_and_production_v30_upgrade_without_retagging_or_losing_ownership ... ok
test auth::migration_data_tests::fresh_schemas_defaults_indexes_and_foreign_keys_match_original_sql ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_accepts_legacy_and_job_scoped_roots ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_rejects_unscoped_and_escaping_paths ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::public_status_result_fields_are_listed_in_the_auth_contract ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::canvas::canvas_real_socket_commits_and_runtime_disable_preserve_control ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok
test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok
test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok
test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok
test auth::tests::socket_tests::close_logging::revocation_wake_on_busy_store_logs_authority_unavailable_not_resume_refused ... ok
test auth::tests::socket_tests::close_logging::revoked_busy_wake_records_stream_end_within_the_existing_wait ... ok
test auth::tests::socket_tests::close_logging::revoked_session_during_transient_stall_logs_resume_refused ... ok
test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok
test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::close_logging::unrelated_logout_during_transient_stall_keeps_the_terminal_socket ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok
test auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply ... ok
test auth::tests::socket_tests::review_authority_cap::retries_whose_select_waits_stay_within_the_authority_cap ... ok
test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok
test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok
test auth::tests::socket_tests::review_busy_wake::idle_busy_revocation_wake_sends_server_busy_close_code ... ok
test auth::tests::socket_tests::review_busy_wake::sixteen_woken_sockets_recover_application_authority_after_a_short_stall ... ok
test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok
test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok
test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok
test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_absolute_session_expiry ... ok
test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_logout_revocation ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed has been running for over 60 seconds
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input ... ok
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok
test bootstrap_runtime::remote_backend::admission_tests::missing_route_uses_link_scaled_bound_without_inventory_extensions ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_after_both_route_phases ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_at_600_ms ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_is_monotonic_for_zero_and_outlier_samples ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok
test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_lock_timing_runs_inside_the_nested_setup_shell ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_setup_timing_preserves_transfer_upload_status ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok
test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test canvas_store::tests::cancelled_commit_still_invalidates_a_durable_change ... ok
test canvas_store::tests::cas_retry_and_foreign_account_isolation ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test canvas_store::tests::permanent_receipts_keep_the_original_json_digest_recipe ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok
test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok
test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok
test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok
test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok
test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok
test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok
test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok
test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok
test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok
test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok
test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::expired_route_retires_full_consumer ... ok
test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok
test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok
test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok
test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok
test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok
test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok
test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok
test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok
test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock.
test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok
test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok
test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok
test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok
test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok
test embedded::regressions::path_tests::review_reply_bypasses_queued_typing_without_losing_its_cursor_or_bytes ... ok
test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok
test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok
test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::reply_order_tests::browser_reply_follows_typing_across_both_forwarding_tasks ... ok
test embedded::reply_order_tests::full_reply_reservations_preserve_keyboard_bytes_and_all_eight_slots ... ok
test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok
test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok
test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok
test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok
test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok
test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok
test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok
test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok
test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok
test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok
test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok
test enrollment::migration_tests::canvas_layout_migration_upgrades_production_v27_and_fresh_schema_in_order ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test enrollment::migration_tests::hostname_migration_allocates_around_retained_names ... ok
test enrollment::migration_tests::hostname_migration_upgrades_release6_copy_without_changing_canvas_or_checksums ... ok
test enrollment::migration_tests::old_uuid_mesh_placeholders_upgrade_to_audited_unnamed_labels ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok
test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok
test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok
test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok
test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok
test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok
test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok
test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok
test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok
test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok
test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok
test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok
test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok
test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok
test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_inventory::name_tests::an_ip_added_host_uses_its_cached_hostname_and_old_facts_do_not_clear_it ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok
test remote_inventory::name_tests::inventory_hostname_changes_publish_once_and_preserve_hand_names ... ok
test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok
test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok
test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok
test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok
test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_inventory::name_tests::late_hostname_inventory_renames_the_attached_mesh_node_and_notifies_viewers ... ok
test remote_inventory::name_tests::reported_names_yield_to_records_and_collision_suffixes_and_server_identity_hold ... ok
test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok
test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok
test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok
test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok
test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok
test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok
test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok
test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok
test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok
test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok
test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok
test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok
test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok
test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required
test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok
test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok
test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok
test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok
test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok
test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok
test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok
test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok
test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok
test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok
test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok
test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok
test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok
test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok
test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok
test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok
test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok
test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok
test stream_close::tests::close_path_cost ... ignored, manual microbenchmark
test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok
test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok
test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok
test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok
test terminal_queries::review_tests::a_lagging_viewer_cannot_renew_a_deadline_after_the_first_viewer_answered ... ok
test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok
test terminal_queries::review_tests::trimmed_output_refuses_its_answer_without_reopening_an_accepted_position ... ok
test terminal_queries::review_tests::two_positions_in_one_chunk_are_claimed_in_order_without_reopening_either ... ok
test terminal_queries::tests::deadline_includes_incomplete_query ... ok
test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok
test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok
test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok
test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok
test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok
test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok
test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test terminal_queries::tests::marked_flood_never_allocates_queries ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok
test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok
test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::probe_authority::review_closed_watch::closed_revocation_watch_is_unavailable_and_never_polls_the_write ... ok
test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok
test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::writer_tests::authority_watchdog::authority_deadline_preserves_subsecond_session_expiry ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::cancelled_storm_returns_every_place_without_duplication ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::deadline_storm_retains_exactly_four_places_then_recovers ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::pool_acquire_timeout_recovers_places_without_releasing_the_connection ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::ready_result_observed_after_deadline_retries_current_authority ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok
test websocket::writer_tests::busy_edges::wall_expiry_and_monotonic_deadlines_keep_their_separate_roles ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::resume_refusals_distinguish_connection_state_and_lost_token_rotation ... ok
test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok
test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok
test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok
test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok
test websocket_transport::tests::visibility_notices_are_small_typed_transport_messages ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test terminal_queries::review_tests::all_session_tables_remain_bounded_at_the_registry_limit ... ok
test websocket::writer_tests::busy_edges::revoked_probe_across_attempt_backoff_and_total_wait_edges ... ok
test websocket::writer_tests::busy_edges::expiry_crossing_a_stalled_read_refuses_both_deadline_callers ... ok
test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::sqlite_busy_timeout_recovers_detached_storm_without_unlocking ... ok

test result: ok. 634 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 272.47s

     Running tests/canvas_convergence.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_convergence-1a7528827de3cb23)

running 20 tests
test competing_bootstraps_merge_targets_and_retry_after_restart ... ok
test a_tiled_import_cannot_duplicate_an_existing_graph_kind ... ok
test identical_and_empty_second_devices_do_not_advance_revision ... ok
test imports_use_account_wide_target_identity_and_keep_spanning_column_geometry ... ok
test importing_an_orphaned_recovery_view_does_not_create_another_recovery_name ... ok
test loading_repairs_only_matching_recovery_views_and_converges_clients ... ok
test initialize_and_apply_repair_before_writing_and_notify_subscribers ... ok
test merge_bounds_refuse_without_losing_the_existing_layout ... ok
test import_prefers_matching_names_before_the_first_view_of_its_kind ... ok
test no_op_imports_keep_retry_receipts_and_do_not_clear_operation_history ... ok
test simultaneous_first_devices_merge_disjoint_targets_into_one_view ... ok
test session_import_identity_ignores_labels_but_checks_account_ownership ... ok
test stale_noop_still_checks_numeric_bounds_before_committing ... ok
test owned_session_reference_and_all_bounds_are_transactional ... ok
test split_retry_is_durable_and_changed_idempotency_input_is_refused ... ok
test permanent_receipts_do_not_copy_large_bootstrap_documents ... ok
test two_devices_serialize_stale_edits_and_replay_every_committed_revision ... ok
test encoded_document_budget_is_enforced_by_the_host_transaction ... ok
test no_op_import_receipts_still_have_a_bounded_quota ... ok
test close_beats_move_resize_in_both_orders_and_survives_compaction ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.77s

     Running tests/canvas_receipt_count.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_receipt_count-dcb7b77ff3a854ab)

running 1 test
test historical_receipts_backfill_and_follow_transactions_and_account_removal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_receipt_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_receipt_review-f4b0654f8bb85a4f)

running 1 test
test historical_no_revision_receipts_preserve_replay_and_the_last_real_edit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.03s

     Running tests/canvas_recovery_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_recovery_review-f2d4bef103e06289)

running 5 tests
test repair_rebases_a_cursor_that_already_names_its_next_revision ... ok
test queued_close_of_unique_recovered_window_survives_repair ... ok
test independent_loads_and_base_edit_repair_exactly_once ... ok
test queued_resize_keeps_its_membership_after_a_separate_read_repair ... ok
test recovery_at_column_capacity_keeps_the_account_readable ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/canvas_replay_noop.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_replay_noop-f45368f3ae253f70)

running 1 test
test committed_noop_is_explicit_without_sending_all_closed_ids_to_clients ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/canvas_retired_reference.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_retired_reference-4ae1b19d3a90f2d6)

running 2 tests
test retired_reference_does_not_block_an_unrelated_edit ... ok
test retarget_checks_account_ownership_even_after_close ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/canvas_socket.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_socket-51aa35d48dc96a00)

running 1 test
test snapshot_then_ordered_commit_events_and_revocation_cancel_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_text_bounds.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_text_bounds-eb698aef9b5b9538)

running 2 tests
test text_uses_the_browser_utf16_bound ... ok
test imported_name_respects_the_browser_utf16_bound ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/catalog_startup.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/catalog_startup-c4f0c5c2b9e63826)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/enrollment-3533ffe0cf2749cb)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.24s

     Running tests/mesh_parser.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/mesh_parser-f3d43b86d3386706)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/mesh_review_plugin-1de5b08687140771)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/mesh_review_policy.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/mesh_review_policy-5801ffe603d49dec)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/mesh_review_role_scope-1867947f5f970cf5)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/native_probe_correlation_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/native_probe_correlation_review-0508c3491f4ab791)

running 25 tests
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok
test unissued_native_probe_reply_cannot_extend_readiness ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test healthy_real_socket_survives_a_150ms_server_stall ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/plugin_host_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/plugin_host_review-1f79717833c5fdb0)

running 7 tests
test review_undeclared_topic_is_left_to_the_core ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_disable_answers_inflight_call ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s

     Running tests/plugin_settings_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/plugin_settings_review-8e826064dc44171b)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.71s

     Running tests/remote_plugin_contract.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/remote_plugin_contract-c936186fbcfd8885)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s

     Running tests/review_mesh_host_removal.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_mesh_host_removal-56ed2d75e836d36e)

running 1 test
test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_session-f2f326f18dc6b30e)

running 2 tests
test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok

running 1 test
test tests::fresh_exec_closes_dumpability_before_private_startup ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

test tests::fresh_exec_closes_dumpability_before_private_startup ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_shim-7c35453813e3afe4)

running 105 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok
test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok

running 1 test
test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok
test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 104 filtered out; finished in 0.00s

test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 92 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 37.54s

     Running tests/detach.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/detach-6a47ad01fd5a59d3)

running 2 tests
test detached_child_restores_default_signals_without_changing_parent ... ok
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.77s

     Running tests/mouse.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/mouse-d13052bb88989529)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s

     Running tests/ppu_reliability.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/ppu_reliability-2964f940e0c6068a)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/ppu_reliability_memory.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/ppu_reliability_memory-a754448942207ef2)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/process_exit_descriptor.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/process_exit_descriptor-c4b349d2a498ffa6)

running 2 tests
test invalid_pid_never_creates_a_descriptor ... ok
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_status-7910dde34bdac077)

running 14 tests
test tests::installed_system_server_data_comes_from_its_effective_execstart ... ok
test tests::installed_server_discovery_recognizes_the_running_executable_identity ... ok
test tests::nothing_installed_says_so ... ok
test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok
test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok
test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok
test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok
test tests::rootless_agent_is_read_from_the_user_manager ... ok
test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok
test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok
test tests::server_and_host_on_one_machine_is_both ... ok
test tests::stopped_server_unit_is_stopped_not_unknown ... ok
test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok
test tests::the_headline_names_what_is_down_and_how_to_look ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_canvas

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 2 tests
test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 56) - compile fail ... ok
test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 63) - compile fail ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

   Doc-tests infraternal_status

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

(test: 855s)

==> SSH inode reuse fixture
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/ssh)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 4.91s
     Running tests/install.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/install-f0d19bd45bc9bae9)

running 1 test
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 0.29s
(SSH inode reuse fixture: 5s)

==> shim process-per-user
   Compiling nix v0.30.1
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-shim)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 54s
     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_shim-58e9712d9c0dc37c)

running 218 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::borrowed_output_keeps_frozen_bytes_and_refuses_before_batch_mutation ... ok
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test frame::checks::tests::batch_append_preserves_prefix_and_refuses_invalid_frames ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test heap_accounting::accounting_keeps_exact_layouts_and_balances_reallocation ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test heap_accounting::transient_allocations_are_visible_after_their_storage_is_freed ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap

running 1 test

running 1 test
test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test pty::output_readiness_tests::readable_byte_hint_preserves_the_complete_output_stream ... ok

running 1 test
test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test ring::checks::tests::empty_append_keeps_lazy_storage_unallocated ... ok
test ring::checks::tests::borrowed_ranges_obey_absolute_offsets_across_physical_wrap ... ok
test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok
test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00stest ring::checks::tests::merge_review_pool_refusal_retains_exact_suffix_and_releases_charge ... 

ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test session::inputs::host_budget_tests::alternating_writers_cannot_expand_shared_host_bookkeeping_without_bound ... ok
test ring::checks::tests::shared_history_reservation_never_rounds_past_its_share ... ok
test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok
test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::inputs::reply_tests::host_replies_preserve_segment_budget_and_account_for_promoted_storage ... ok
test session::inputs::tests::host_legacy_writer_needs_no_heap_table ... ok
test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok
test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::bounded_flush_keeps_partial_frame_and_wire_order ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.03s

test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::user_host::lazy_bench::geometry_replay_materialization_cost ... ignored, perf VM only: measure cold materialization after bounded geometry replay
test session::user_host::child_checks::ordinary_housekeeping_does_not_probe_child_status ... ok
test session::user_host::reactor::tests::actual_output_selector_keeps_a_bulk_turn_after_granted_and_denied_promotions ... ok
test session::user_host::reactor::tests::cancelled_bulk_membership_reuses_the_existing_deque_entry ... ok
test session::user_host::reactor::tests::cheap_replies_share_a_turn_but_expired_output_yields_to_input ... ok
test session::user_host::child_checks::threaded_startup_is_refused_before_creating_session_state ... ok
test session::user_host::reactor::tests::accounting_write_failure_disables_only_the_receipt ... ok
test session::user_host::reactor::tests::inline_and_extra_descriptor_flags_merge_without_losing_generations ... ok
test session::user_host::reactor::tests::exit_observed_before_settle_still_queues_one_retention_deadline ... ok
test session::user_host::reactor::tests::input_phase_retires_closed_identity_without_publishing_transient_interest ... ok
test session::user_host::reactor::tests::fresh_ack_fallback_avoids_writable_poll_and_finishes_with_new_input ... ok
test session::user_host::reactor::tests::one_session_readiness_fits_240_requested_bytes ... ok
test session::user_host::reactor::tests::readiness_membership_stays_within_five_bytes_per_session ... ok
test session::user_host::reactor::tests::readiness_storage_registration_is_at_most_sixteen_bytes ... ok
test session::user_host::reactor::tests::readiness_storage_two_descriptors_are_allocation_free ... ok
test session::user_host::reactor::tests::ready_rows_clear_only_touched_slots_and_fence_round_wrap ... ok
test session::user_host::reactor::tests::ready_rows_keep_two_descriptor_turns_allocation_free_within_64_bytes_per_slot ... ok
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.08s

test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok
test session::user_host::reactor::tests::ownership_receipt_separates_session_components_and_shared_capacities ... ok
test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... ok
test session::user_host::reactor::tests::queued_data_ack_needs_no_writable_poll_before_pty_service ... ok
test session::user_host::reactor::tests::round_reset_and_wrap_preserve_bulk_membership_without_reviving_reads ... ok
test session::user_host::reactor::tests::short_output_cohort_yields_before_the_next_input_poll ... ok
test session::user_host::reactor::tests::single_ready_descriptor_needs_no_heap_allocation ... ok
test session::user_host::reactor::tests::timer_membership_survives_bulk_promotion_cancellation_and_round_wrap ... ok

running 1 test
test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... test session::user_host::tests::admission_refuses_foreign_uid_duplicate_ids_and_geometry_before_spawn ... ok
test session::user_host::reactor::tests::replay_continues_after_its_frame_was_written_inline ... ok
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

test session::user_host::reactor::tests::unchanged_registration_sync_needs_no_heap_allocation ... ok
test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok
test session::user_host::tests::blocked_state_and_output_share_one_ordered_write_batch ... ok
test session::user_host::tests::deferred_data_ack_and_available_output_share_one_ordered_batch ... ok
test session::user_host::tests::bulk_turn_advances_sixteen_kib_and_yields_before_the_rest ... ok
test session::user_host::tests::full_pool_typing_echo_latency ... ignored, timing measurement runs on the perf VM
test session::user_host::tests::full_pool_reuses_ring_storage_for_newest_output ... ok
test session::user_host::tests::data_ack_can_wait_for_a_writable_visit_without_requiring_output ... ok
test session::user_host::tests::full_pool_refuses_new_session_and_keeps_existing_session_working ... ok
test session::user_host::tests::idle_session_ownership_ledger ... ignored, perf VM only: per-session requested-byte ownership ledger at scale
test session::user_host::tests::host_pool_scales_with_machine_memory_within_bounds ... ok

running 1 test
test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok
test session::user_host::tests::geometry_transcript_materializes_at_its_event_bound ... ok
test session::user_host::tests::lazy_prefix_materializes_exactly_before_overflow_and_resize ... ok
test session::user_host::tests::malformed_closed_peer_is_retired_once_and_keeps_its_sibling ... ok
test session::user_host::tests::output_bound_replays_retained_geometry_before_new_bytes ... ok
test session::user_host::tests::medium_geometry_materializes_before_deferred_cell_work_exceeds_the_bound ... ok
test session::user_host::tests::prefix_threshold_preserves_unfinished_sequences ... ok
test session::user_host::tests::quiet_geometry_changes_remain_lazy_and_replay_in_order ... ok
test session::user_host::tests::same_geometry_input_selection_keeps_vt_unallocated ... ok
test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok
test session::user_host::tests::session_constructor_retains_only_the_bound_socket_path ... ok
test session::user_host::tests::steady_replay_needs_no_payload_allocation ... ok
test session::user_host::tests::state_fences_and_input_only_acks_bypass_coalescing ... ok
test session::user_host::tests::unchanged_geometry_retains_native_resize_side_effects ... ok
test session::user_host::tests::vt_panic_retires_one_real_pty_and_sibling_keeps_its_output ... ok
test session::user_host::tests::writable_peer_receives_state_and_output_before_another_readiness_turn ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::user_host::tests::zero_ring_capacity_does_not_stall_a_live_pty ... ok
test session::user_host::tests::exhausted_pool_drains_live_ptys_during_random_session_churn ... ok
test terminal::checks::snapshot_during_discard_preserves_the_unfinished_string_boundary ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test pty::handoff::tests::all_masters_survive_original_owner_drop_with_cloexec ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test session::user_host::tests::large_geometry_cannot_defer_a_long_first_snapshot_reflow_queue ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::host_budget::erased_history_reset_and_geometry_return_native_memory ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test session::user_host::tests::geometry_transcript_property_cases_match_eager_native_state ... ok
test terminal::host_budget::page_nodes_never_fill_the_ordinary_data_cap ... ok
test terminal::checks::control_strings_cannot_grow_session_carry_without_bound ... ok
test terminal::host_budget::shared_host_budget_bounds_the_sum_and_keeps_every_terminal_exact ... ok
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::host_budget::every_history_share_fills_and_recycles_inside_its_reservation ... ok
test terminal::ppu_memory_bench::native_session_allocations_settle_after_geometry_warmup ... ignored, perf VM only: native heap/resident accounting; set PPU_VT_ACCOUNT_SESSIONS
test terminal::ppu_memory_bench::quiet_resize_churn_does_not_keep_new_resident_pools ... ignored, perf VM only: sparse resize ownership at 900 quiet sessions
test terminal::ppu_memory_bench::small_history_does_not_retain_megabyte_page_quanta ... ignored, perf VM only: sparse history residency and native ownership
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::ppu_memory_bench::fresh_shell_filler_snapshot_gap_is_independent_of_allocator_refusal ... ok
test terminal::review_r2::review_r2_escape_command_inside_discard_matches_short_string ... ok
test terminal::review_r2::review_r2_escape_high_byte_does_not_start_a_hidden_string ... ok
test terminal::host_budget::report_native_memory_numbers ... ok
test session::user_host::tests::pool_usage_never_exceeds_cap_under_open_write_close_sequences ... ok
test terminal::host_budget::widening_a_full_history_stays_inside_its_share ... ok
test terminal::review_r2::review_r2_ground_c1_introducer_stays_within_the_session_share ... ok
test terminal::review_r2::review_r2_resize_with_full_history_share_stays_exact ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::review_r2::review_r2_host_history_share_fits_the_native_reservation ... ok
test terminal::host_budget::laptop_screens_come_from_their_floors_not_the_pool ... ok
test terminal::review_r2::review_r2_resize_storm_does_not_ratchet_native_memory ... ok
test terminal::review_r2::review_r2_limiter_is_transparent_for_short_control_mixtures ... ok
test terminal::review_r3::review_r3_four_hundred_laptop_screens_fit_the_host ... ok
test terminal::review_r3::review_r3_host_accounting_balances_through_recovery ... ok
test terminal::review_r3::review_r3_recycled_unwrapped_history_keeps_exact_snapshot ... ok
test terminal::review_r3::review_r3_bounded_terminal_reflows_long_mixed_history ... ok
test terminal::review_r3::review_r3_history_share_without_ris_never_refuses ... ok
test terminal::review_r3::review_r3_noisy_neighbour_does_not_make_quiet_sessions_approximate ... ok
test terminal_limits::c1_tests::c1_string_inside_csi_has_a_seven_bit_replay_boundary ... ok
test terminal_limits::defensive_tests::executed_c0_between_escape_and_introducer_keeps_the_bound ... ok
test terminal_limits::tests::escape_after_discard_restarts_without_losing_the_next_command ... ok
test terminal::user_screen_pool_resize::taller_widening_keeps_history_rows_that_move_onto_the_screen ... ok
test terminal_limits::tests::finite_sequences_are_identical_for_every_fragment_boundary ... ok
test terminal_limits::tests::fragmented_overflow_stays_discarded_until_a_real_terminator ... ok
test terminal_memory::payload_tests::oversized_payload_is_refused_before_allocation_while_tagged_pool_is_allowed ... ok
test terminal_memory::tests::allocation_budget_includes_overhead_and_refusal_is_recoverable ... ok
test terminal_memory::payload_tests::residency_query_observes_only_owned_page_mappings_without_faulting_payload ... ok
test terminal_memory::tests::screen_pages_are_zero_filled_and_page_aligned ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal_native::owned_memory_tests::refused_resize_reclaims_every_owned_native_allocation ... ok
test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok
test terminal_native::owned_memory_tests::refusal_inside_reflow_never_touches_freed_pages ... ok
test terminal::review_r3::review_r3_thousand_sessions_and_one_flood ... ok
test terminal::review_r3::review_r3_recycled_history_matches_unbounded_reference ... ok
test terminal::review_r3::review_r3_hundred_laptop_sessions_keep_exact_state ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact has been running for over 60 seconds
test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact ... ok

test result: ok. 199 passed; 0 failed; 19 ignored; 0 measured; 0 filtered out; finished in 108.99s

(shim process-per-user: 224s)

==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-server v0.1.0 (*)
         │   │   │   │   └── infraternal-session v0.1.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-canvas v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   ├── infraternal-server v0.1.0 (*)
         │   └── infraternal-session v0.1.0
         ├── (build) infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-canvas v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   ├── infraternal-plugin-ssh v0.1.0
                     │   │   ├── infraternal v0.1.0 (*)
                     │   │   ├── infraternal-fuzz v0.1.0 (*)
                     │   │   ├── infraternal-server v0.1.0
                     │   │   │   ├── infraternal v0.1.0 (*)
                     │   │   │   └── infraternal-fuzz v0.1.0 (*)
                     │   │   └── infraternal-session v0.1.0
                     │   └── infraternal-server v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   ├── infraternal-fuzz v0.1.0 (*)
                     │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   ├── infraternal-server v0.1.0 (*)
     │   │   │       │   └── infraternal-session v0.1.0
     │   │   │       ├── (build) infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-canvas v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.46
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.16
             └── rustls v0.23.46 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   └── infraternal-session v0.1.0
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   ├── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-session v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── infraternal-plugin-remote v0.1.0 (*)
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.46
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.16
     │               └── rustls v0.23.46 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-canvas v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── (dev) infraternal-status v0.1.0
         │   └── infraternal v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   └── infraternal-session v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-canvas v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   │   ├── infraternal-server v0.1.0 (*)
             │   │   │   │   └── infraternal-session v0.1.0
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-canvas v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:200:1
    │  
200 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
201 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-server v0.1.0
          │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   └── infraternal-session v0.1.0
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   ├── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-session v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── infraternal-plugin-remote v0.1.0 (*)
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.46
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.16
          │               └── rustls v0.23.46 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-canvas v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── (dev) infraternal-status v0.1.0
              │   └── infraternal v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:202:1
    │  
202 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
204 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   ├── infraternal-plugin-ssh v0.1.0
              │   │   ├── infraternal v0.1.0 (*)
              │   │   ├── infraternal-fuzz v0.1.0 (*)
              │   │   ├── infraternal-server v0.1.0
              │   │   │   ├── infraternal v0.1.0 (*)
              │   │   │   └── infraternal-fuzz v0.1.0 (*)
              │   │   └── infraternal-session v0.1.0
              │   └── infraternal-server v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:205:1
    │  
205 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:207:1
    │  
207 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
208 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
209 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │   └── infraternal-session v0.1.0
      │   │       ├── (build) infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   ├── infraternal-plugin-ssh v0.1.0
      │               │   │   ├── infraternal v0.1.0 (*)
      │               │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   │   ├── infraternal-server v0.1.0
      │               │   │   │   ├── infraternal v0.1.0 (*)
      │               │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │   │   └── infraternal-session v0.1.0
      │               │   └── infraternal-server v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-session v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.46
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.16
      │   │               └── rustls v0.23.46 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── (dev) infraternal-status v0.1.0
      │       │   └── infraternal v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:251:1
    │  
251 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
252 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   ├── infraternal-server v0.1.0 (*)
      │           │   │   └── infraternal-session v0.1.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   ├── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-session v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-canvas v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── infraternal-plugin-canvas v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   ├── infraternal-server v0.1.0
      │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   └── infraternal-session v0.1.0
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-canvas v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       └── infraternal-shim v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-fuzz v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── infraternal-server v0.1.0 (*)
      │           └── infraternal-session v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── (build) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.46
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.16
      │       │   │           └── rustls v0.23.46 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── (dev) infraternal-status v0.1.0
      │       │   │       │   └── infraternal v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.46 (*)
      │       │           └── rustls-webpki v0.103.16 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.46 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.3
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:254:1
    │  
254 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
255 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   ├── infraternal-server v0.1.0
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   └── infraternal-session v0.1.0
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:257:1
    │  
257 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
258 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   ├── infraternal-server v0.1.0
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-session v0.1.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:259:1
    │  
259 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
260 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   ├── infraternal-plugin-ssh v0.1.0
          │       │   │   ├── infraternal v0.1.0 (*)
          │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │   │   ├── infraternal-server v0.1.0
          │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │   │   └── infraternal-session v0.1.0
          │       │   └── infraternal-server v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-canvas v0.1.0
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:317:1
    │  
317 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
318 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── infraternal-plugin-remote v0.1.0
          │   ├── infraternal v0.1.0
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0
          │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-server v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   └── infraternal-session v0.1.0
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-fuzz v0.1.0 (*)
          │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.46
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.16
              └── rustls v0.23.46 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   ├── infraternal-plugin-ssh v0.1.0
      │               │       │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   ├── infraternal-server v0.1.0
      │               │       │   │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   └── infraternal-session v0.1.0
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-canvas v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               ├── infraternal v0.1.0 (*)
      │               └── infraternal-shim v0.1.0
      │                   ├── infraternal v0.1.0 (*)
      │                   ├── infraternal-agent v0.1.0 (*)
      │                   ├── infraternal-fuzz v0.1.0 (*)
      │                   ├── infraternal-plugin-remote v0.1.0 (*)
      │                   ├── infraternal-plugin-ssh v0.1.0 (*)
      │                   ├── infraternal-server v0.1.0 (*)
      │                   └── infraternal-session v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.3
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-canvas v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── infraternal-shim v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.3 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.3 (*)
      ├── tokio v1.53.3 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok
(cargo-deny: 1s)

==> static builds
x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently
native compiler metadata: path independent; platform/date retained; unexpected syntax refused
Rust remapping: differently named checkout roots produce identical stripped artifacts
.
----------------------------------------------------------------------
Ran 1 test in 0.002s

OK
    Finished `release` profile [optimized] target(s) in 0.94s
AES-128-GCM NIST vector encrypt/decrypt passed
production trust: PASS (staging-trust authority absent)
/home/agent/.cache/codex-scratch/setup-token-fix/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21400400 bytes; cap: 21400400 bytes; delta: +0 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Key memory initialization=1; locked pages and dump exclusion enabled
    Finished `release` profile [optimized] target(s) in 0.73s
production trust: PASS (staging-trust authority absent)
/home/agent/.cache/codex-scratch/setup-token-fix/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 19575064 bytes; cap: 19575064 bytes; delta: +0 bytes
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
x86_64-unknown-linux-musl: exact 21400400-byte cap PASS; 21400401 bytes rejected PASS; smaller artifact requires ratchet PASS
aarch64-unknown-linux-musl: exact 19575064-byte cap PASS; 19575065 bytes rejected PASS; smaller artifact requires ratchet PASS
unsupported target: rejected PASS
bun test v1.4.2 (744846f84)

scripts/release/static-metadata-review.test.ts:
(pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [61.20ms]
(pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [44.53ms]

 2 pass
 0 fail
 16 expect() calls
Ran 2 tests across 1 file. [123.00ms]
server subcommand: exit 2, versioned JSON unavailable result
agent group: exit 0, one parsed versioned JSON listing of its commands
(static builds: 36s)

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

==> Compiler metadata generator checks
bun test v1.4.2 (744846f84)

scripts/release/build-metadata.test.ts:
(pass) native metadata canonicalization retains version fields and refuses changed syntax [49.64ms]
(pass) Rust and cached target compiles receive every environment remap [504.76ms]

 2 pass
 0 fail
 121 expect() calls
Ran 2 tests across 1 file. [582.00ms]

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

Checked 38 installs across 69 packages (no changes) [38.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [16.86ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [14.89ms]
(pass) layout review fixtures ship only in explicitly enabled preview builds [5786.88ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [0.64ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.03ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.08ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.15ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.07ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.17ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.25ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.04ms]

src/stale-screen.test.ts:
(pass) a program that redraws after reattach never shows the note, not for a frame [0.38ms]
(pass) a redraw that arrived before the replay painted needs no wait at all [0.04ms]
(pass) a shell that stays silent shows the note once the wait has run out [0.05ms]
(pass) output that arrives later clears the note [0.04ms]
(pass) a dropped link takes the note down and cancels a wait that has not ended [0.03ms]
(pass) the wait grows with the round trip and stays bounded [0.08ms]

src/synchronized-output.test.ts:
(pass) synchronized terminal output > recognizes a private mode split across byte and string writes [0.90ms]
(pass) synchronized terminal output > preserves mode transitions for every pair of input chunk boundaries [2.05ms]
(pass) synchronized terminal output > ignores CSI-looking bytes inside control strings and other mode numbers [0.15ms]
(pass) synchronized terminal output > RIS clears an active mode [0.12ms]
(pass) synchronized terminal output > bounds an unfinished control sequence [0.31ms]
(pass) synchronized terminal output > paints queued output on the first frame after reset and timeout release [0.43ms]

src/terminal-fit-lifecycle.test.ts:
(pass) a queued fit stops when the terminal becomes closed [0.31ms]
(pass) a queued fit stops when the terminal becomes suspended [0.02ms]
(pass) a queued fit stops when the terminal becomes frozen [0.01ms]

src/account-storage.test.ts:
(pass) clearing one account leaves a second account and device preferences alone [0.44ms]
(pass) the last-account pointer of another account stays [0.08ms]
(pass) an unknown account clears every account's data and keeps preferences [0.11ms]
(pass) coalesced account writes stop permanently before sign-out clears storage [0.27ms]

src/offline-drawing.test.ts:
(pass) cached identity needs a matching layout and sign-out removes it [1.35ms]
(pass) sign-in caches only public drawing labels [0.15ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.21ms]
(pass) repeating the front item changes nothing [0.04ms]
(pass) the list is capped, so the oldest items fall off [0.04ms]
(pass) top skips items that are no longer live, without losing them [0.06ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.11ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.02ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.07ms]

src/canvas/status.test.ts:
(pass) a lost server connection is an error toast, never a success tick [0.36ms]
(pass) routine connection states stay out of the toast [0.04ms]
(pass) repeated connection closes do not reopen the persistent reason toast [0.07ms]
(pass) a repeated close does not retake the shared toast after a newer message replaces it [0.15ms]
(pass) a close reason stays visible through a quick reconnect and clears after a stable attach [674.58ms]

src/canvas/toolbar/palette-actions.test.ts:
(pass) a deferred split:right selection retains its original window [0.31ms]
(pass) a deferred new:below selection retains its original window [0.02ms]
(pass) a deferred close selection retains its original window [0.01ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [0.71ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.15ms]
(pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.26ms]
(pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.18ms]
(pass) facts the host did not report are omitted by default, not shown as unknown [0.12ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.18ms]
(pass) before facts arrive the host's platform names the header [0.05ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.05ms]

src/canvas/windows/session-hooks.test.ts:
(pass) a failed idle warm-up shows no toast and retries when the browser is back online [10.98ms]
(pass) a failed open shows the toast, and opening again after the network returns succeeds [10.83ms]
(pass) an open that joins a failing idle warm-up still shows the toast [5.38ms]

src/canvas/mesh/api-retry-budget.test.ts:
(pass) a retained watch outage bounds retry requests over two logical minutes [2.17ms]

src/canvas/mesh/layout-model.test.ts:
(pass) a pin moved by another device invalidates a same-count pin cache [1.01ms]
(pass) a recovered graph owns its node positions independently [0.12ms]
(pass) a negative pin is drawn by shifting the whole graph by whole grid cells; no pin is rewritten [0.17ms]
(pass) with no negative pin the origin is zero and nothing shifts [0.10ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [0.53ms]
(pass) without `access` (today's server) the person may view and may not edit [0.23ms]
(pass) fields the server does not send are absent, never invented [0.15ms]
(pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.05ms]
(pass) anything that is not a list is refused, whole [2.23ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.21ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.34ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.06ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.11ms]

src/canvas/mesh/api-recovery.test.ts:
(pass) failed watch refreshes retain one subscription through retry and release it on disposal [1.07ms]
(pass) a synchronous subscription refusal leaves retry able to install a new watch [0.22ms]
(pass) a changed Mesh revision refreshes a renamed host in the existing view model [0.33ms]
(pass) a pushed recovery cancels the scheduled retry [0.23ms]
(pass) a pushed recovery supersedes an outstanding retry failure [0.34ms]
(pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.27ms]
(pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.07ms]
(pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.41ms]
(pass) a forbidden withdrawal cancels retry work from the retained watch [0.26ms]
(pass) a withdrawn view ignores an earlier outstanding retry result [0.21ms]
(pass) initial Mesh list handles closed transport [0.22ms]
(pass) initial Mesh list handles liveness deadline [0.03ms]
(pass) initial Mesh list handles unreadable JSON [0.04ms]
(pass) initial Mesh list handles unavailable storage [0.07ms]
(pass) initial Mesh list handles forbidden action [0.07ms]
(pass) initial Mesh list handles invalid stored host [0.07ms]
(pass) Mesh watch withdrawal handles forbidden [0.24ms]
(pass) Mesh watch withdrawal handles mesh unavailable [0.02ms]
(pass) Mesh watch withdrawal handles plugin unavailable [0.02ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.33ms]
(pass) the layout is deterministic and does not depend on input order [2.53ms]
(pass) no two cards overlap, and every card lies inside the graph [3.73ms]
(pass) the sheet is wider than tall, roughly 16:10 [0.99ms]
(pass) a pinned node stays where it was put and the others do not move [1.32ms]
(pass) a pin beyond the sheet grows the graph [0.13ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.17ms]
(pass) 1,000 nodes lay out in a few milliseconds [9.36ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.43ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.33ms]
(pass) a view taller than the viewport is scaled down so it fits [0.05ms]
(pass) nearestStop picks the stop whose centre is closest [0.13ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.18ms]
(pass) a small graph keeps one stop per node column [0.08ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.10ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.09ms]
(pass) D309: with a floor, a narrow column gets a stop of its drawn width and each column is reachable [0.09ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.06ms]
(pass) closing the new half gives the layout back exactly, in the model [0.99ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.39ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.18ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.40ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.27ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.12ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.28ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.07ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.16ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [37.26ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.41ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.31ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.25ms]
(pass) a narrow right split grows both drawn tracks to the canonical minimum [0.14ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.68ms]
(pass) a chain of neighbours is pushed in turn [0.10ms]
(pass) display settlement clears disconnected overlaps while keeping its one anchor fixed [0.27ms]
(pass) review: a viewport width increase after settlement keeps the Settings anchor clear [0.29ms]
(pass) snapping rounds to whole cells [0.03ms]
(pass) reach follows grants through tags and keeps the relay [0.20ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.10ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms]
(pass) a desktop column is the same alone and in a strip [0.01ms]
(pass) D309: a touch screen draws every column at least MIN_TOUCH_COLUMN wide, never wider than a lone column; a fine pointer has no floor [0.05ms]
(pass) D309: the content is as wide as the drawn columns, so the camera reaches every column [0.05ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [1.78ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.31ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.37ms]
(pass) superseded status snapshots release records for sessions this device never opened [0.86ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.12ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.10ms]
(pass) a final Close before the first positive census never revives a new ID [0.06ms]
(pass) a later absence retires a new ID after its first positive census [0.16ms]
(pass) another host's census cannot clear a new shell's census fence [0.09ms]
(pass) another host's close cannot clear a new shell's census fence [0.03ms]
(pass) shared membership marks windows open without any local attachment [0.41ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [0.69ms]
(pass) a detected operating system supplies the live popover mark [0.79ms]

src/canvas/sessions/live.test.ts:
(pass) the toolbar sessions seam exposes admitted host state and routes by identity [0.89ms]
(pass) an enrolled host opens by UUID and splits keep that authority [0.20ms]
(pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.16ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.07ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.15ms]
(pass) an authoritative host snapshot replaces admission with one notification [0.18ms]
(pass) the embedded inventory identity still opens locally beside an equally named remote [0.09ms]
(pass) the embedded host's mark does not wait for an account name, and no account is invented [0.08ms]

src/canvas/sessions/hosts.test.ts:
(pass) fresh storage lists an offline host added by another browser [0.86ms]
(pass) every welcome reconciles without duplicate subscriptions or hosts [0.16ms]
(pass) a removal in another browser withdraws the host [0.12ms]
(pass) a malformed page cannot partially replace the authoritative inventory [0.15ms]
(pass) a socket-authority refusal withdraws previously admitted hosts [0.31ms]
(pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.32ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.26ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.14ms]

src/canvas/sessions/hosts-scale-review.test.ts:
(pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [13.21ms]
(pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [10.13ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [4.13ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.46ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.27ms]
(pass) oversized refusal JSON is ignored before parsing [0.09ms]

src/canvas/sessions/focus-intent.test.ts:
(pass) focusin supersedes every older focus intent [0.25ms]
(pass) pointerdown supersedes every older focus intent [0.06ms]
(pass) keydown supersedes every older focus intent [0.04ms]
(pass) input supersedes every older focus intent [0.03ms]

src/canvas/model/server-store.test.ts:
(pass) a negative drop on a 1,025-node mesh writes one pin, and the peer ends with every pin (#24) [28.88ms]
(pass) repeated pin moves reach both coordinate limits; the next move is refused and rolled back [1.98ms]
(pass) a layout gap or withdrawn worker requests one fresh snapshot with bounded backoff [1.67ms]
(pass) layout recovery restores Math.random after its virtual timer test [0.03ms]
(pass) event before Result and duplicate events do not apply an optimistic edit twice [0.55ms]
(pass) reconnect retries the exact request and an old receipt removes its optimistic overlay [0.47ms]
(pass) legacy import remains intact until canonical confirmation even if another device initialized [0.47ms]
(pass) dispose cancels late cache writes after sign-out [0.34ms]
(pass) a pending reference preserves unrelated edits across remote paints and is never sent [1.67ms]
(pass) closing an unsent shell removes its unresolved birth without blocking surviving children [0.76ms]
LAYOUT_RETRY_SCHEDULE subscribers=60 first_minute=753 following_5s=47 first_delay_slots=60
(pass) sixty withdrawn layout subscriptions spread their coalesced retry timers [15.93ms]
(pass) multi-subscriber retry scheduling restores Math.random [0.10ms]
(pass) an acknowledgement after its ordered event does not repaint the same layout [0.68ms]
(pass) review: a missing layout revision is recovered before the cached document is used again [0.29ms]
(pass) a bootstrap receipt before its canonical snapshot keeps the legacy layout drawable [0.40ms]
(pass) ready edits share one network round trip with a bounded in-flight window [0.50ms]
(pass) the optimistic semantic projection paints before any server receipt [0.46ms]
(pass) a no-op drawing capture does not trigger another paint [0.21ms]
(pass) an interrupted first load does not turn a revision-zero cache into an intentional empty layout [0.44ms]
(pass) review: a refused structural edit cannot strand later valid edits [0.77ms]
(pass) a definitive refusal paints rollback, persists it and never retries after reconnect [0.61ms]
(pass) a stale refusal cannot discard a new-connection retry [0.27ms]
(pass) review r2: refusal drains independent edits waiting behind four in-flight requests [1.12ms]
(pass) recovery coalesces gaps and errors, ignores operations until a snapshot, and survives reconnect [0.68ms]
(pass) a normal reconnect snapshot arrives before any replacement is requested [0.23ms]

src/canvas/model/review-null.test.ts:
(pass) a mixed nullable resize cannot invalidate the canonical drawing document [0.15ms]

src/canvas/model/operations.test.ts:
(pass) independent resize and move commute; close survives a stale move [0.36ms]
(pass) right split of a stack preserves the upper band [0.17ms]
(pass) reorder uses stable neighbours and emits no document [0.66ms]
(pass) a completed split emits its semantic intent rather than intermediate sizing edits [0.26ms]
(pass) a three-window reorder sends one semantic move [0.24ms]
(pass) a split before the first reference is journalled opens its anchor before splitting [0.25ms]
(pass) a drop sends the moved membership once, without derived neighbour geometry [0.50ms]
(pass) a narrow right split widens first so both halves remain valid [0.32ms]
(pass) a short down split grows the anchor first so both halves meet the height floor [0.37ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.38ms]
(pass) a document survives JSON and rebuilds the same columns [0.25ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.08ms]
(pass) parseDocument rejects anything that is not a document of this format [0.21ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.10ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.19ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.24ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.04ms]
(pass) D309: the saved weights do not depend on how a touch screen draws the columns [0.17ms]
(pass) D309: a view this device pushed clear for display is saved where the layout has it [0.12ms]
(pass) an offscreen graph keeps its shared pins before any nodes are rendered [0.06ms]
(pass) a captured graph document is independent of the next pin drag [0.18ms]

src/canvas/model/sync.test.ts:
(pass) a pending session never delays other edits or waits for a network receipt [0.70ms]
(pass) inventory includes shared memberships that this device cannot render [1.00ms]
(pass) temporary flow windows are never treated as unsubmitted shared windows [0.14ms]

src/canvas/model/review-span.test.ts:
(pass) a down split shifts every column in a transitively connected group [0.24ms]

src/canvas/model/reducer-property.test.ts:
layout property: 32 seeds, 4096 operations, 4015 accepted, zero divergences
(pass) property: accepted random operation sequences match the real server reducer [20058.39ms]

src/canvas/model/cache.test.ts:
(pass) damaged pending opens cannot stall offline drawing [0.86ms]
(pass) a valid unresolved reference remains local and replayable [0.17ms]
(pass) a valid offline journal is retained beyond a short burst [0.92ms]

src/canvas/model/review-boundary-r2.test.ts:
review r2 boundary comparison: 8 seeds, 4096 operations, 3198 accepted
(pass) review r2: longer boundary-weighted sequences preserve every accepted projection [1496.70ms]

src/canvas/model/reconcile.test.ts:
(pass) review: removing the current shared view selects a surviving camera anchor [1.34ms]
(pass) a remote negative pin and node update preserve the world position of an unchanged card [0.82ms]

src/canvas/model/journal.test.ts:
(pass) an offline birth keeps its identity through hydration and reference completion [0.63ms]

src/canvas/addhost/setup-feed.test.ts:
(pass) createSetupFeed > subscribes with the host and window, then hands over events in order [0.62ms]
(pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.25ms]
(pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.63ms]
(pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.56ms]
(pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.33ms]
(pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [46.02ms]
(pass) review reconnect budget survives sockets that open then close without events [45.98ms]
(pass) review explicit retry resumes after the setup feed stops [46.23ms]

src/canvas/addhost/wizard.breakit2.test.ts:
(pass) breakit2 an explicit port on a listed host survives chip resolution [0.38ms]
(pass) breakit2 malformed bracketed IPv6 waits for correction [0.12ms]
(pass) listed host plus port retains its saved user in the serialized destination [0.09ms]
(pass) review listed inventory name plus port retains its resolved address [0.19ms]

src/canvas/addhost/setup-stages.test.ts:
(pass) parseSetupEvent > reads a well-formed event [0.10ms]
(pass) parseSetupEvent > drops anything malformed [0.05ms]
(pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.08ms]
(pass) foldSetup > stages before the event's are done, later ones pending [0.13ms]
(pass) foldSetup > a stage that reports done alone still finishes [0.03ms]
(pass) foldSetup > ready done completes the run [0.03ms]
(pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.06ms]
(pass) foldSetup > uploading belongs to install and the readiness check to ready [0.03ms]
(pass) setupGuide > says the other sessions keep working and what to do next, in plain words [0.11ms]
(pass) review malformed setup fields are dropped without coercion errors [0.09ms]
(pass) exhausted setup preserves eligibility and explains a new setup [0.09ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.19ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.04ms]
(pass) parsing the server's data > an install command needs a lifetime [0.06ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.80ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.21ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.95ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.21ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.28ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.13ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.28ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.28ms]
(pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.26ms]
(pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.11ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [0.89ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.21ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.11ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.11ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.09ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.25ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.07ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.05ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.05ms]
(pass) authLabel > names the method and a trusted network provider only [0.03ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.12ms]
(pass) guideFor > each failure kind names its fix [0.06ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.02ms]
(pass) parseTarget > reads user, host and port [0.05ms]
(pass) parseTarget > reads a pasted ssh command into the same fields [0.14ms]
(pass) parseTarget > reads an ssh:// address [0.05ms]
(pass) parseTarget > refuses garbage around an ssh command [0.07ms]
(pass) parseTarget > refuses what cannot name a host [0.03ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.43ms]
(pass) parseSshConfig > recognises config text [0.08ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.04ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.05ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.14ms]
(pass) only a completed canonical host identity becomes terminal authority [0.06ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.06ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.03ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.03ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.01ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.01ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.01ms]
(pass) install diagnostics name the failed step and public host error [0.04ms]
(pass) missing payload tells the operator the architecture and expected server path [0.03ms]
(pass) an already added host says so and offers opening its existing terminal [0.20ms]
(pass) release payload verification names the architecture step and plain reason [0.04ms]
(pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.06ms]
(pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.06ms]
(pass) early terminal publication selects only its canonical host-bound shim session [0.09ms]

src/canvas/addhost/already-added-breakit.test.ts:
(pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.05ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.33ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.23ms]
(pass) ready CA begins the requested installation mode without another prompt [0.08ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.27ms]
(pass) a typed root login requires explicit consent before any installation [0.09ms]

src/canvas/views/body.test.ts:
(pass) a clean terminal exit keeps the window while host setup can still fail [0.03ms]
(pass) clean exits still close ordinary windows, and failed exits stay visible [0.01ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.47ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.52ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.79ms]
(pass) a chunk that both sides use stays critical [0.12ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.13ms]
(pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.11ms]
(pass) automatic canonical painting loads after the first canvas draw [0.17ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [2.97ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [2.60ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [2.10ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [9.24ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [18.92ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [5.55ms]
(pass) abandoned word acknowledgement uploads nothing [1.92ms]
(pass) settled acknowledgement cannot upload later (dismissed) [1.91ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [1.57ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [1.28ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [0.90ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [0.81ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [0.83ms]
(pass) malformed or excessive remaining wait -1 is denied [1.19ms]
(pass) malformed or excessive remaining wait 0.5 is denied [0.74ms]
(pass) malformed or excessive remaining wait 172801 is denied [0.64ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [1.01ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.10ms]

test/link-doubt.test.ts:
(pass) a link doubt shows the indicator and keeps live replies and typing flowing [1.75ms]
(pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.29ms]
(pass) a notice type from a newer server is ignored, not a protocol failure [0.11ms]
(pass) the viewer announces the link-doubt capability in its Hello [1.41ms]

test/close-reasons.test.ts:
(pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.15ms]

src/close-reasons.test.ts:
(pass) a missed connection response keeps a plain and stable reason [0.02ms]
(pass) server and host close reasons identify why a terminal reconnects, in plain words [0.12ms]
(pass) routine detach and connection rotation reasons stay neutral [0.05ms]
(pass) a stream close that reattaches never says the terminal ended [0.08ms]
(pass) a recovering server link names its cause as routine status, never as a failure [0.03ms]
(pass) unknown close text is discarded instead of reaching the person or console [0.04ms]
(pass) a storm of closes prints one line per minute and counts the rest [0.29ms]
(pass) counted closes are reported when their window ends, without another close [0.04ms]

src/review-close-log.test.ts:
(pass) a reconnect the server refuses with a named Close frame still prints its console line [0.99ms]
(pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.04ms]

src/onboarding-load.test.ts:
(pass) a failed load says so in the error line, offers Try again, and mounts nothing [5.45ms]
(pass) the Try again button reloads the page: a failed import stays failed in the module map [5.30ms]
(pass) the online event retries by itself [5.25ms]

 356 pass
 0 fail
 21671 expect() calls
Ran 356 tests across 60 files. [28.69s]
bun test v1.4.2 (744846f84)

src/connection-correlation-review.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [8.11ms]

src/connection-idle.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 1 [4.12ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 1 [2.84ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 150 [1.17ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 150 [0.83ms]
(pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [3.99ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 1 [1.03ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 1 [0.76ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 1 [0.76ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 1 [0.78ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 30 [0.73ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 30 [0.83ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 30 [0.75ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 30 [0.78ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 150 [0.37ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 150 [0.35ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 150 [0.43ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 150 [0.65ms]
(pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [2.04ms]
(pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [3.61ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [1.20ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [0.84ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [1.14ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [0.91ms]
(pass) a healthy browser route survives 150ms scheduler delay across 1 streams [0.95ms]
(pass) a healthy browser route survives 150ms scheduler delay across 28 streams [0.94ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [0.90ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) browser jitter allowance decays after a stable link returns [7.47ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [1.34ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [0.81ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [0.67ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [1.13ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [0.87ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [0.76ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer without a reply counts subsequent responsive silence [0.78ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) an outstanding probe gets responsive observation after a renderer stall [2.32ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) retirement gives a queued mismatched pong one task turn [0.88ms]
(pass) retirement gives a queued correlated pong one task turn [0.62ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead typing route eventually retires when browser tasks run every 75ms [0.73ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 1000ms [0.69ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 60000ms [0.70ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [0.86ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [0.93ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [0.73ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) correlated queued replies replenish stall grace across successive healthy stalls [0.89ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) duplicate replies cannot replenish consumed stall grace [0.78ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) wrong timestamp replies cannot replenish consumed stall grace [0.64ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) unknown nonce replies cannot replenish consumed stall grace [0.53ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [0.91ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1
(pass) a replacement route receives its own one-shot local stall grace [1.13ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) continuous typing cannot cancel every silent-route confirmation turn [1.23ms]
(pass) a pending confirmation is reset by reconnect [0.99ms]
Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0
(pass) a pending confirmation is reset by close [1.03ms]
(pass) a pending confirmation is reset by dispose [1.04ms]
(pass) a stale confirmation from before reconnect cannot close the replacement route [1.31ms]
(pass) a hidden page resumes its lease after 5000ms without retiring queued replies [1.71ms]
(pass) a hidden page resumes its lease after 30000ms without retiring queued replies [1.59ms]
(pass) a socket lost while hidden waits for visibility before reconnecting [1.38ms]
(pass) mobile jitter and one retransmission keep a foreground browser lease [38.52ms]
(pass) visibility notices require both peers to support them: false [0.41ms]
(pass) visibility notices require both peers to support them: true [0.16ms]
(pass) hiding a page cancels a retry scheduled while it was visible [0.58ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [1.12ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [0.93ms]
(pass) a layout subscription starts the connection before any terminal exists [0.33ms]
(pass) resync replaces one subscription ID and disposal prevents later resyncs [0.92ms]
(pass) resync reopens a feature subscription with the same server ID [0.33ms]

src/connection-layout-removal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [10.73ms]

src/connection-liveness.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [1.80ms]

src/connection-pool.test.ts:
(pass) terminals fill the first socket, then open another, and a released slot is reused first [0.43ms]
(pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [0.57ms]

src/connection-probe-scheduling-review.test.ts:
(pass) a fully answered browser route survives a delayed next probe before a terminal attaches [0.57ms]
(pass) a fully answered browser route survives a delayed next probe with an attachment [0.19ms]

src/connection-query-capabilities.test.ts:
(pass) query replies negotiate independently with Hello caps 0 [0.05ms]
(pass) query replies negotiate independently with Hello caps 4
(pass) query replies negotiate independently with Hello caps 8
(pass) query replies negotiate independently with Hello caps 12

src/connection-query-refusal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [7.63ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [2.20ms]

src/connection-restart.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1
(pass) an overnight connection retains its writer and pending input when the server restarts [0.75ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a second quick server close leaves the fast path and backs off [0.54ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a failed first recovery handshake exits the one quick retry [0.47ms]
Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0
(pass) a server close reason survives socket retirement and the next retry [0.50ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0
(pass) a clean server socket close keeps its fallback reason through the next retry [0.32ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [10.09ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) online and foreground events cancel delays and preserve handshakes in progress [1.70ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [0.55ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.20ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.16ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.16ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.16ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [0.18ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.25ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.15ms]

src/connection-review-refusal-input.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [1.75ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [0.81ms]

src/connection-review-retained-lifetime.test.ts:
(pass) review: saved typing can be declined without closing the live shell [0.74ms]
(pass) review: new typing reaches the fresh shell while saved typing stays pending [0.16ms]
(pass) review: retained input and consent are local to their terminal window [0.13ms]
(pass) review: selecting a different session removes saved typing and its action [0.18ms]
(pass) review: another refused writer retains pending and unacknowledged fresh typing [0.18ms]
(pass) review: window disposal clears held input and rejects a stale resend action [0.30ms]

src/connection-startup-review.test.ts:
(pass) a healthy startup route can learn an RTT above the initial estimate [1.83ms]

src/connection-unattached-close.test.ts:
(pass) disposing a window before its welcome microtask sends no unbound Close [0.83ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [0.76ms]

 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [222.00ms]
bun test v1.4.2 (744846f84)

src/terminal-queries.test.ts:
(pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.40ms]
(pass) all requested query families have identities [0.10ms]
(pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [1.54ms]
(pass) oversized OSC retains BEL termination before a later query [0.10ms]

src/terminal-query-property.test.ts:
[ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2
(pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [178.12ms]

src/terminal-query-renderer-review.test.ts:
(pass) review: DECID gives every real renderer response an identity [0.95ms]
(pass) review: zero-padded CPR gives every real renderer response an identity [1.11ms]
(pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.25ms]
(pass) review: three adjacent requests keep distinct identities across different viewer chunking [7.71ms]

src/terminal-write-slices.test.ts:
(pass) every slice split preserves cells, cursor and all renderer answers [31.94ms]
(pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [2.11ms]
(pass) escaped writers cannot access released input and callback failure releases the scope [0.49ms]
(pass) nested writes and memory growth cannot replace borrowed input [0.36ms]
(pass) allocation refusal never writes or frees unowned memory [1.36ms]
(pass) empty scopes accept no input and reject later writer use [0.17ms]
(pass) input views of native memory survive allocation-driven memory growth [0.20ms]
(pass) throwing callbacks release exactly their owned input allocation [0.19ms]

 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [251.00ms]
$ bun run build.ts
built chunk-9pq0ny5g.js, chunk-qbb2e8b9.js, chunk-jmywrjwz.js, chunk-ndmmx2kq.js, chunk-91e0xr5j.js, chunk-h4mvr745.js, chunk-f1kyfxcw.js, chunk-rkhswyqm.js, chunk-n3qp561q.js, chunk-ze1px7x8.js, chunk-yvq3ah6x.js, chunk-vb52mqs5.js, chunk-gxvqf3b8.js, chunk-x90k904w.js, chunk-a2qgrc4j.js, chunk-msgjz9zc.js, chunk-jmwepdwg.js, chunk-8gqdshxw.js, chunk-yvxc2z6f.js, main.js, chunk-3zrccmtw.js, chunk-fxmz3y8j.js, chunk-wk9n9jj8.js, chunk-7ztnyfvv.js, chunk-rjh7301p.js, chunk-mb3x1ypg.js, chunk-2bkhjmwe.js, chunk-wah98t5n.js, chunk-ey4mzz99.js, chunk-nt31hwb7.js, chunk-ctwwa7ez.js, chunk-1ppp6y2t.js, chunk-c76h7v56.js, chunk-rv0kw7g8.js, chunk-fgyrfqxc.js, chunk-mbhpcg8f.js, chunk-3ptdnkq0.js, chunk-axbkkqp1.js, chunk-gywhvnnh.js, chunk-838yaj98.js, chunk-3ej4288n.js, chunk-b6khcbse.js, chunk-gypgjbag.js, chunk-aa15fynz.js, chunk-wqkxhp27.js, chunk-kw9mzccv.js, chunk-ffxpfp4z.js, chunk-kawna64c.js, chunk-0t2k7398.js, chunk-z48tcwe1.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-rfxv74kp.js, chunk-0fzprn2w.js, chunk-pmgxewne.js, chunk-gj6v42zn.js, chunk-3m9zj9sz.js, chunk-r04kg5zm.js, chunk-7hnrs8jb.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-sp5dgyk0.js, chunk-6fj93x4f.js, chunk-e02jh202.js, chunk-ff3nvh2r.js
critical chunk-mb3x1ypg.js: identity=2161 gzip=1060 brotli=906 bytes
critical chunk-r04kg5zm.js: identity=199 gzip=158 brotli=136 bytes
onDemand chunk-3ej4288n.js: identity=6148 gzip=2782 brotli=2511 bytes
onDemand chunk-91e0xr5j.js: identity=5812 gzip=2382 brotli=2145 bytes
critical chunk-yvxc2z6f.js: identity=2529 gzip=1016 brotli=888 bytes
critical chunk-e02jh202.js: identity=9907 gzip=4060 brotli=3499 bytes
critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes
onDemand chunk-f1kyfxcw.js: identity=3891 gzip=1735 brotli=1518 bytes
critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes
critical chunk-rkhswyqm.js: identity=5890 gzip=2461 brotli=2137 bytes
critical chunk-2bkhjmwe.js: identity=1188 gzip=691 brotli=582 bytes
onDemand chunk-n3qp561q.js: identity=2420 gzip=1193 brotli=1079 bytes
onDemand chunk-rv0kw7g8.js: identity=7662 gzip=3397 brotli=2968 bytes
onDemand chunk-wqkxhp27.js: identity=1649 gzip=776 brotli=675 bytes
onDemand chunk-6fj93x4f.js: identity=9158 gzip=3339 brotli=2890 bytes
onDemand chunk-ffxpfp4z.js: identity=11562 gzip=4695 brotli=4279 bytes
onDemand chunk-rfxv74kp.js: identity=49320 gzip=15453 brotli=13800 bytes
critical chunk-8gqdshxw.js: identity=386 gzip=236 brotli=195 bytes
onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes
critical chunk-msgjz9zc.js: identity=17631 gzip=6252 brotli=5572 bytes
onDemand chunk-gywhvnnh.js: identity=10904 gzip=4422 brotli=4025 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=480 bytes
critical backdrop.worker.js: identity=243 gzip=210 brotli=158 bytes
onDemand chunk-mbhpcg8f.js: identity=11126 gzip=4258 brotli=3885 bytes
critical chunk-a2qgrc4j.js: identity=6075 gzip=2536 brotli=2239 bytes
critical chunk-3zrccmtw.js: identity=5448 gzip=2606 brotli=2377 bytes
onDemand chunk-kawna64c.js: identity=5359 gzip=2581 brotli=2303 bytes
critical chunk-rjh7301p.js: identity=1776 gzip=855 brotli=694 bytes
deferred chunk-ctwwa7ez.js: identity=1560 gzip=804 brotli=733 bytes
deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes
onDemand chunk-3m9zj9sz.js: identity=1063 gzip=653 brotli=523 bytes
onDemand chunk-x90k904w.js: identity=2557 gzip=1180 brotli=1009 bytes
onDemand chunk-gj6v42zn.js: identity=6744 gzip=3167 brotli=2882 bytes
onDemand chunk-nt31hwb7.js: identity=1974 gzip=987 brotli=843 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
critical chunk-wk9n9jj8.js: identity=8377 gzip=3575 brotli=3184 bytes
critical chunk-jmwepdwg.js: identity=11739 gzip=4630 brotli=4113 bytes
onDemand chunk-yvq3ah6x.js: identity=2108 gzip=1038 brotli=870 bytes
onDemand chunk-0fzprn2w.js: identity=6983 gzip=3102 brotli=2811 bytes
onDemand chunk-wah98t5n.js: identity=2791 gzip=1373 brotli=1181 bytes
deferred chunk-h4mvr745.js: identity=38155 gzip=13871 brotli=12370 bytes
critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes
onDemand chunk-fgyrfqxc.js: identity=14598 gzip=5444 brotli=4884 bytes
onDemand chunk-kw9mzccv.js: identity=540 gzip=354 brotli=319 bytes
onDemand chunk-aa15fynz.js: identity=1170 gzip=705 brotli=623 bytes
onDemand chunk-qbb2e8b9.js: identity=228 gzip=178 brotli=158 bytes
onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes
critical chunk-9pq0ny5g.js: identity=34427 gzip=9985 brotli=8960 bytes
critical chunk-7hnrs8jb.js: identity=42945 gzip=14687 brotli=13166 bytes
critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes
onDemand chunk-ey4mzz99.js: identity=4561 gzip=2004 brotli=1774 bytes
onDemand chunk-jmywrjwz.js: identity=191 gzip=167 brotli=130 bytes
onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes
onDemand chunk-3ptdnkq0.js: identity=1026 gzip=623 brotli=500 bytes
critical chunk-vb52mqs5.js: identity=707 gzip=362 brotli=309 bytes
critical chunk-pmgxewne.js: identity=162 gzip=150 brotli=119 bytes
critical chunk-838yaj98.js: identity=729050 gzip=210325 brotli=170930 bytes
onDemand chunk-ze1px7x8.js: identity=6265 gzip=2101 brotli=1860 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
critical main.js: identity=104155 gzip=38351 brotli=33146 bytes
onDemand chunk-gypgjbag.js: identity=2522 gzip=1134 brotli=960 bytes
deferred chunk-7ztnyfvv.js: identity=14644 gzip=4802 brotli=4431 bytes
deferred chunk-1ppp6y2t.js: identity=110049 gzip=37193 brotli=32815 bytes
onDemand chunk-0t2k7398.js: identity=4696 gzip=1954 brotli=1727 bytes
deferred chunk-sp5dgyk0.js: identity=545 gzip=314 brotli=272 bytes
onDemand chunk-b6khcbse.js: identity=33394 gzip=12822 brotli=11547 bytes
onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes
critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes
critical chunk-fxmz3y8j.js: identity=1106 gzip=663 brotli=600 bytes
onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes
onDemand chunk-ndmmx2kq.js: identity=6493 gzip=2402 brotli=2140 bytes
JavaScript transfer, critical: identity=987711 gzip=305920/307200 brotli=254835/256000 bytes
JavaScript transfer, deferred: identity=166293 gzip=57666/61440 brotli=51212/55296 bytes
JavaScript transfer, onDemand: identity=231812 gzip=91864/20480 brotli=81945/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-rfxv74kp.js: gzip=15453/20480 brotli=13800/18432 bytes (class total gzip=91864 brotli=81945, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.15ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.41ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.15ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.14ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.11ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.17ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [6.08ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.17ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.62ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.18ms]
(pass) split mux header preserves trailing Close [0.14ms]
(pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.36ms]
(pass) empty marked input reports the stable invalid-body decoder failure [0.08ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.74ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [2.74ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.51ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.34ms]
(pass) superseded failure preserves a newer pending refresh [2.73ms]

src/stream.test.ts:
stream differential: 141 streams, 11988 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [2083.32ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [7.68ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [1.71ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [3.79ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.09ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.23ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.49ms]
(pass) review continuation stops after forbidden [1.19ms]
(pass) review continuation stops after superseded [1.16ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.27ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.11ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.12ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.01ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2}
(pass) watch never publishes a partial page; withdrawn=false [1.43ms]
(pass) watch never publishes a partial page; withdrawn=true [1.20ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.40ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.20ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.49ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [1.49ms]
(pass) shared Mesh event vectors drive the typed watch adapter [5.11ms]

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [2.15s]
Finished #252 at `9f7a0c977690119907be5004bd729136b3e8c7f7`, pushed to `setup-token-data` (remote verified; clean working tree). All five findings addressed in separate commits: accessible socket traversal (94b4af192), permission-specific sudo hint (0217eaa92), symlink executable identity (e71e2b042), approved public-status contract alignment (be588ee02), and phone card minimum-width constraint using the existing component (f6a91ec4d). Size caps and docs/PROCESS.md table ratcheted in 9f7a0c977. The three review test files remain byte-identical to review head; no tests weakened. Token secrecy retained. Focused checks: all six setup-output integration tests, real HTTP contract/public-status checks, both system-service browser tests, status tests and clippy pass. Production before/after screenshots at 393 and 375 px (both themes), plus desktop controls and geometry evidence, are attached in the earlier screenshot comment. Phone card right edge changed from 393.5 px to 373 px at 393 px and 355 px at 375 px; desktop geometry unchanged. These are functional geometry observations, not a visual-quality approval. D243 pinned static builds ran sequentially through build-slot.sh: x86_64 **21,400,400 bytes**, aarch64 **19,575,064 bytes**. Fresh merge-base x86_64 **21,386,512 bytes**: branch delta **+13,888 bytes** (under 16 KiB). Repairs versus reviewed head: +832 / +512 bytes. Exact caps and +1-byte rejection/shrink checks pass; no dependencies, features or build recipes changed. Final `scripts/verify fast` on this head: **exit 0**. All Rust rows, TypeScript/build checks, and protocol tests pass (39 pass, 0 fail, 36,135 expectations). Native aarch64 key-memory runtime is not exercised on this x86_64 host, as stated by the gate. Cleanup verified: CARGO_TARGET_DIR and comparison target deleted, temporary baseline worktree removed, both job server PIDs absent, ports 54252/54253 closed on IPv4/IPv6. The earlier setup-token-data worktree was left untouched. Evidence retained outside the repo and attached below. Issue remains open for review. [setup-r2.log](https://git.kayg.org/attachments/6fc4ca8b-8b4f-4a84-98ca-2436ca8d388c) [contract.log](https://git.kayg.org/attachments/a7899d4b-c010-4302-969b-cea59eba9962) [public-status.log](https://git.kayg.org/attachments/37889c71-eae6-4e14-aafa-84593727ac79) [phone-before.log](https://git.kayg.org/attachments/27c515ee-6a01-49bc-9b0c-33d8d2ea698f) [phone-after.log](https://git.kayg.org/attachments/26f56f66-a549-4ae5-b7f8-5eb6aa48e8d0) [sizes.json](https://git.kayg.org/attachments/f8849178-3896-4c22-bc43-98007ae4b6fa) [static-checks.log](https://git.kayg.org/attachments/660c397c-3edc-48d7-aeaa-0844a7561fe8) [baseline-static.log](https://git.kayg.org/attachments/185cdceb-c90d-4e5f-973c-fc3974b0d5c0) [baseline-size.txt](https://git.kayg.org/attachments/e7ba82cf-17ff-4cad-bdc0-125ee419f7fe) [final-integrity.json](https://git.kayg.org/attachments/a197c616-70ee-4339-9fe8-0c52e4e61da2) [verify-fast.log](https://git.kayg.org/attachments/06da0653-9825-43b7-a098-a0d79bef7421) [final-sizes.json](https://git.kayg.org/attachments/a77de9d8-e7cb-42da-a8bc-a3f56823735a) [cleanup.json](https://git.kayg.org/attachments/9c61fb7b-e1d7-40e0-91a4-2eab9c42a7d6) Full final gate output, verbatim: ```text ==> Repository artifact size gate repository artifact gate: PASS (38 changed path(s), merge base 4a6202a52993) ==> Release deployment functional checks .....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained .Build deferred: host capacity limit reached ......... ---------------------------------------------------------------------- Ran 15 tests in 0.662s OK . ---------------------------------------------------------------------- Ran 1 test in 0.067s OK bun test v1.4.2 (744846f84) scripts/release/deploy-review.test.ts: REMOTE_ADMISSION unsigned_x86_payload=true refused=true (pass) remote admission refuses an x86 payload outside the signed manifest [135.28ms] {"state": "deployed", "ca_unlocked": true} WEB_ONLY_RECORD candidate_binary_recorded=false (pass) web-only deployment does not record the candidate as the running binary [135.65ms] ALIAS_RECOVERY restart_requests=2 (pass) alias restoration failure still requests the retained warm rollback [128.28ms] 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [404.00ms] PASS proxy_forwarding samples=3 timed=false ==> fmt (fmt: 3s) ==> VT native fmt (VT native fmt: 0s) ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Compiling serde_core v1.0.229 Compiling memchr v2.8.3 Compiling syn v3.0.6 Compiling serde v1.0.229 Compiling serde_json v1.0.151 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-plugin-api) Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-shim) Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal) Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-status) Compiling vte v0.15.0 Compiling vt100 v0.16.2 Compiling uuid v1.27.0 Compiling serde_derive v1.0.229 Compiling clap_derive v4.6.7 Compiling tokio-macros v2.7.2 Compiling thiserror-impl v2.0.21 Compiling tokio v1.53.3 Compiling thiserror v2.0.21 Compiling clap v4.6.7 warning: function `print_progress` is never used --> crates/infraternal/src/cli/output.rs:592:8 | 592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) { | ^^^^^^^^^^^^^^ | = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default warning: function `write_output` is never used --> crates/infraternal/src/cli/output.rs:616:8 | 616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) { | ^^^^^^^^^^^^ warning: `infraternal` (bin "infraternal" test) generated 2 warnings Finished `test` profile [unoptimized + debuginfo] target(s) in 12.06s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal-fe1c5abfd68beec3) running 37 tests test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::exit_codes_follow_d303 ... ok {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-plugin-api) Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal) Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-mesh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/host-facts) Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/remote) Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/release) Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/canvas) Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/relay) Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/backup) Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/mesh) Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-agent) Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/ssh) Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-server) Finished `test` profile [unoptimized + debuginfo] target(s) in 52.40s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal-0a149f42b54b04db) running 104 tests test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 8.49s Compiling displaydoc v0.2.7 Compiling serde v1.0.229 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-plugin-api) Compiling getrandom v0.2.17 Compiling nix v0.30.1 Compiling tracing-core v0.1.36 Compiling syn v2.0.119 Compiling ring v0.17.14 Compiling tinystr v0.8.4 Compiling icu_locale_core v2.3.0 Compiling zerotrie v0.2.5 Compiling zeroize v1.9.0 Compiling rustls-pki-types v1.15.1 Compiling tracing v0.1.44 Compiling icu_provider v2.3.1 Compiling icu_collections v2.3.0 Compiling rustls-webpki v0.103.16 Compiling smallvec v1.16.2 Compiling quinn-udp v0.5.16 Compiling icu_properties v2.3.0 Compiling icu_normalizer v2.3.0 Compiling uuid v1.27.0 Compiling openssl-macros v0.1.1 Compiling rustls v0.23.46 Compiling openssl v0.10.81 Compiling percent-encoding v2.3.2 Compiling digest v0.10.7 Compiling form_urlencoded v1.2.2 Compiling futures-core v0.3.34 Compiling sha2 v0.10.9 Compiling futures-util v0.3.34 Compiling idna_adapter v1.2.2 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-shim) Compiling idna v1.1.0 Compiling url v2.5.8 Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/host-facts) Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-mesh) Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/relay) Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/backup) Compiling tokio-openssl v0.6.5 Compiling quinn-proto v0.11.19 Compiling quinn v0.11.12 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/remote) Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-agent) Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/ssh) Finished `test` profile [unoptimized + debuginfo] target(s) in 20.93s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_agent-f4f0113fecf22aee) running 1 test test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 75 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_mesh-c7263890e5528429) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_ssh-b96e878b9907f3df) running 1 test test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s (CLI plugin compile-out: 95s) ==> clippy Compiling jobserver v0.1.35 Compiling crossbeam-utils v0.8.23 Checking either v1.18.0 Checking nix v0.30.1 Checking regex-automata v0.4.18 Compiling cc v1.6.0 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-server) Checking crossbeam-queue v0.3.14 Checking arbitrary v1.4.2 Checking sqlx-core v0.8.6 Compiling crossbeam-epoch v0.9.21 Compiling crossbeam-deque v0.8.8 Compiling libsqlite3-sys v0.30.1 Compiling openssl-src v300.6.1+3.6.3 Compiling ring v0.17.14 Compiling openssl-sys v0.9.117 Checking matchers v0.2.0 Checking sqlx-sqlite v0.8.6 Checking tracing-subscriber v0.3.23 Compiling libfuzzer-sys v0.4.13 Checking infraternal-status v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-status) Compiling rayon-core v1.13.0 Checking plotters-backend v0.3.7 Checking ciborium-io v0.2.2 Checking ciborium-ll v0.2.2 Checking plotters-svg v0.3.7 Checking itertools v0.13.0 Checking same-file v1.0.6 Checking cast v0.3.0 Compiling rustls v0.23.46 Checking walkdir v2.5.0 Checking plotters v0.3.7 Compiling sqlx-macros-core v0.8.6 Checking criterion-plot v0.6.0 Checking rayon v1.12.0 Checking ciborium v0.2.2 Checking rustls-webpki v0.103.16 Checking regex v1.13.1 Checking tinytemplate v1.2.1 Checking oorandom v11.1.5 Compiling sqlx-macros v0.8.6 Checking anes v0.1.6 Compiling infraternal-session v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-session) Checking sqlx v0.8.6 Checking infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-plugin-api) Checking criterion v0.7.0 Checking infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-mesh) Checking infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/host-facts) Checking infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/release) Checking infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/canvas) Checking infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/relay) Checking infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/backup) Checking quinn-proto v0.11.19 Checking infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-protocol) Checking quinn v0.11.12 Compiling openssl v0.10.81 Compiling tokio-openssl v0.6.5 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-core v0.5.5 Checking infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/mesh) Checking infraternal-shim v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-shim) Checking axum-server v0.8.0 Checking infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/remote) Checking webauthn-rs v0.5.5 Checking infraternal-agent v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-agent) Checking infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/ssh) Checking infraternal v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal) Checking infraternal-fuzz v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/fuzz) Finished `dev` profile [unoptimized + debuginfo] target(s) in 2m 20s (clippy: 141s) ==> SSH runtime test helper Blocking waiting for file lock on package cache Compiling tokio v1.53.3 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-plugin-api) Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-shim) Compiling quinn v0.11.12 Compiling tokio-openssl v0.6.5 Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/ssh) Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/remote) Finished `dev` profile [unoptimized + debuginfo] target(s) in 17.34s (SSH runtime test helper: 17s) ==> real-binary fixture paths ... ---------------------------------------------------------------------- Ran 3 tests in 0.010s OK (real-binary fixture paths: 1s) ==> test Compiling crossbeam-utils v0.8.23 Compiling either v1.18.0 Compiling crossbeam-queue v0.3.14 Compiling libsqlite3-sys v0.30.1 Compiling openssl-sys v0.9.117 Compiling ring v0.17.14 Compiling regex-automata v0.4.18 Compiling sqlx-core v0.8.6 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-server) Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-status) Compiling crossbeam-epoch v0.9.21 Compiling crossbeam-deque v0.8.8 Compiling openssl v0.10.81 Compiling plotters-backend v0.3.7 Compiling rustls-webpki v0.103.16 Compiling ciborium-io v0.2.2 Compiling ciborium-ll v0.2.2 Compiling plotters-svg v0.3.7 Compiling sqlx-sqlite v0.8.6 Compiling rustls v0.23.46 Compiling rayon-core v1.13.0 Compiling matchers v0.2.0 Compiling tracing-subscriber v0.3.23 Compiling itertools v0.13.0 Compiling same-file v1.0.6 Compiling sqlx-macros-core v0.8.6 Compiling cast v0.3.0 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-shim) Compiling tokio-openssl v0.6.5 Compiling webauthn-attestation-ca v0.5.5 Compiling axum-server v0.8.0 Compiling webauthn-rs-core v0.5.5 Compiling sqlx-macros v0.8.6 Compiling criterion-plot v0.6.0 Compiling walkdir v2.5.0 Compiling rayon v1.12.0 Compiling regex v1.13.1 Compiling plotters v0.3.7 Compiling sqlx v0.8.6 Compiling quinn-proto v0.11.19 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-plugin-api) Compiling ciborium v0.2.2 Compiling tinytemplate v1.2.1 Compiling oorandom v11.1.5 Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-mesh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/host-facts) Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/release) Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/canvas) Compiling webauthn-rs v0.5.5 Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/backup) Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/relay) Compiling anes v0.1.6 Compiling infraternal-session v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-session) Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/mesh) Compiling criterion v0.7.0 Compiling quinn v0.11.12 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/remote) Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-protocol) Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-agent) Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/ssh) Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 5m 17s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal-6fb500f025e14506) running 104 tests test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 12.04s Running tests/agent_daemon.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/agent_daemon-07be34f79332b165) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.31s Running tests/agent_queues.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/agent_queues-230c59a5cd906663) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.32s Running tests/agent_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/agent_review-84c86525ad0fea2c) running 8 tests test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 14.20s Running tests/agent_sessions.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/agent_sessions-03d7a30371f14a27) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.46s Running tests/cli_envelope.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/cli_envelope-80a08214b8a5d410) running 8 tests test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok test a_missing_server_is_not_found_exit_4 ... ok test status_exits_0_on_a_machine_with_nothing_installed ... ok test bare_infraternal_is_the_overview_and_points_to_help ... ok test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok test read_only_commands_answer_in_the_envelope ... ok test status_exits_5_when_something_that_should_run_is_down ... ok test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/cli_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/cli_review-3291d67404d26089) running 17 tests test a_group_with_one_command_says_so_in_the_singular ... ok test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok test a_malformed_host_id_is_a_usage_error_exit_2 ... ok test a_dry_run_plan_keeps_its_line_breaks ... ok test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok test a_subcommand_does_not_advertise_options_it_ignores ... ok test an_unknown_skill_is_not_found_exit_4 ... ok test root_help_fits_80_columns ... ok test no_compiled_python_is_tracked ... ok test root_help_lists_server_init ... ok test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok test json_help_and_version_are_envelopes_too ... ok test a_dumb_terminal_gets_neither_colour_nor_marks ... ok test user_facing_text_never_says_agent_alone ... ok test an_empty_no_color_is_ignored ... ok test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.83s Running tests/cli_review_r2.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/cli_review_r2-23cf4131d1988fa6) running 11 tests test a_paged_listing_is_still_one_envelope ... ok test a_failed_later_page_emits_only_the_failure_envelope ... ok test an_unknown_skill_does_not_echo_what_was_typed ... ok test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok test three_pages_preserve_order_and_only_the_final_cursor ... ok test status_text_does_not_call_an_unanswered_unit_not_running ... ok test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok test ctrl_c_in_a_script_loop_stops_the_loop ... ok test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.01s Running tests/cli_review_r3.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/cli_review_r3-be7640ccd9aa03ea) running 4 tests test signal_fixture ... ok test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/cli_review_r3_arguments.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/cli_review_r3_arguments-212cdc3ed0a05eb1) running 1 test test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/idle_canary.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/idle_canary-5d1908992b4ff473) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.09s Running tests/key_memory.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/key_memory-4d4f4cc5516ea6b4) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/remote_output.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/remote_output-9105ebfda268049c) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/session_bounds_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/session_bounds_review-ea0b23d91d052373) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.97s Running tests/session_exit_events.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/session_exit_events-d98ed6fbf136b0d7) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.89s Running tests/session_retention.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/session_retention-8b939159efa2d0ab) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.62s Running tests/setup_output.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/setup_output-702013ba02916bdd) running 6 tests test setup_output_keeps_legacy_and_versioned_readers ... ok test unreadable_system_service_data_prints_one_sudo_command_line ... ok test setup_token_reads_a_traversable_directory_without_listing_access ... ok test setup_token_finds_the_data_dir_from_a_system_service_without_flags ... ok test setup_token_permission_hint_covers_a_private_socket_in_a_readable_directory ... ok test setup_token_discovers_a_service_installed_through_a_versioned_binary_symlink ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/shim.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/shim-30417b82dff06cc8) running 24 tests test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test disallowed_signal_only_disconnects_peer ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test double_fork_survives_parent_death ... ok test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok test attached_backpressure_and_detached_progress ... ok test independent_shared_writers_wait_for_the_same_global_queue ... ok test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok test delivered_exit_cannot_release_another_owning_window ... ok test parked_shared_writer_does_not_stop_detached_pty_progress ... ok test replacement_connection_and_malformed_limit ... ok test owned_exit_releases_promptly_on_window_close ... ok test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test shared_writer_coexists_and_replayed_input_is_written_once ... ok test shared_writer_restores_durable_geometry_after_another_writer_types ... ok test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok active test user_scope_survives_parent_unit_stop ... ok test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test legacy_output_subscription_unblocks_deferred_shared_input ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.64s Running tests/ssh_askpass.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/ssh_askpass-16fbd1b96c4af4ca) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.10s Running tests/ssh_connector_policy.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/ssh_connector_policy-dd9b13bec3dd9638) running 1 test test connector_preserves_configured_bind_address_refusal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s Running tests/user_host.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/user_host-4bee401db2fda08c) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/vt_credit.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/vt_credit-dd383ed03c38b306) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.34s Running tests/vt_reconnect.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/vt_reconnect-a0009109e49304ab) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.34s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_agent-b93583fbcebe1fd6) running 168 tests test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::reply_capacity_tests::full_reply_reservations_cannot_spend_keyboard_capacity ... ok test daemon::session_commands::reply_capacity_tests::sixteen_replies_and_eight_typing_commands_retain_their_order ... ok test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged. test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged. test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock. test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace. test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test result: ok. 148 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 11.12s Running tests/transport.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/transport-8f7e25a883145d8d) running 3 tests test replacing_the_callers_descriptor_cannot_redirect_registered_io ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_mesh-7fce9c81f3753067) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/default_arrow-718a820b17567011) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/properties-9b39f53037898c73) running 14 tests test overlaps_are_reported_without_silent_range_changes ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test directional_grants_union_and_minimal_updates ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test names_versions_and_backend_status ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.98s Running tests/rotation_time.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/rotation_time-d8fd70ac7360bfd5) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_api-49f4d2771da6f777) running 32 tests test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test host_name::tests::addresses_and_hostnames_give_a_machine_name ... ok test host_name::tests::odd_and_overlong_hostnames_give_no_name ... ok test host_name::tests::numeric_invalid_and_unnamed_inputs_give_no_name ... ok test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test present::tests::pairs_align_values_and_wrap_under_them ... ok test present::tests::tint_wraps_text_after_padding_is_measured ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok test present::tests::a_table_has_a_header_only_from_two_rows ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test server_path::tests::legacy_link_omits_the_optional_source_port ... ok test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes. test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/routing_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/routing_review-6f6c1a928eb26a7f) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_backup-9fdc1ecb14af9cc8) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_canvas-1446da2b8a090ad7) running 12 tests test model::tests::host_id_requires_canonical_lowercase_hyphenated_text ... ok test model::tests::reference_document_has_strict_shape_and_bounds ... ok test model::tests::graph_pin_coordinates_include_both_limits_but_refuse_the_next_integer ... ok test reducer::tests::concurrent_builtin_view_creation_preserves_existing_contents ... ok test reducer::tests::nullable_resize_preserves_existing_values_and_absent_fields ... ok test reducer::tests::sample_corpus_preserves_strict_variant_fields_and_round_trips ... ok test socket::tests::descriptor_declares_server_only_actions_and_strict_subscription ... ok test reducer::tests::split_divides_only_its_own_band ... ok test socket::tests::result_json_preserves_both_wire_shapes ... ok test reducer::tests::view_metadata_targets_and_column_neighbours_are_semantic ... ok test reducer::tests::repeated_open_close_does_not_exhaust_column_capacity ... ok test reducer::tests::independent_edits_commute_and_close_wins_in_both_orders ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_host_facts-8ccf6df635e66a77) running 14 tests test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::static_facts_report_the_machines_hostname ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_mesh-27583060726d1618) running 76 tests test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok test node_actions::peer_page_tests::poll_cost ... ignored, measurement test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok test node_presentation::tests::a_wide_table_stays_within_the_width ... ok test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok test node_presentation::tests::status_explains_the_observed_server_transport ... ok test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers. test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok test node_coordination::tests::a_name_a_person_chose_is_kept ... ok test node_coordination::tests::legacy_host_daemon_and_ip_record_do_not_leave_a_uuid_mesh_name ... ok test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes. test node_coordination::tests::placeholder_names_become_the_machines_names ... ok test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok test presence::tests::a_page_cursor_is_followed ... ok test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok test presence::tests::an_unreadable_node_is_no_reading ... ok test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok test presence::tests::replace_reports_only_visible_changes ... ok test presence::tests::the_edge_of_the_session_window_is_still_online ... ok test presence::tests::traffic_proves_a_session_until_it_ends ... ok test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok test node_coordination::tests::two_hosts_reporting_the_same_hostname_receive_distinct_names ... ok test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 0.39s Running tests/access_updates.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/access_updates-401a785178272a85) running 8 tests test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace test compact_identity_support_requires_an_explicit_strict_probe ... ok test range_objects_reject_unknown_duplicate_and_positional_fields ... ok test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok test default_tightening_at_1000_peers_fits_one_round_trip ... ok test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/authorized_local_binding.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/authorized_local_binding-9eb78243673aa0ef) running 2 tests test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/canonical_host_binding.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canonical_host_binding-77332b5113aa5170) running 1 test test enrollment_requires_canonical_host_uuid_spelling ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/configuration.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/configuration-edd5af664e4aa790) running 5 tests test edition_default_is_explicit_and_build_selected ... ok test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.31s Running tests/kernel.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/kernel-ae923fd8446e7953) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/naming.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/naming-7ef77dd298644e0e) running 4 tests test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok test the_servers_names_are_kept_for_the_server ... ok test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/policy_enrollment_binding.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/policy_enrollment_binding-109d95c10f4ea94b) running 4 tests test noncanonical_host_binding_is_refused ... ok test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok test refused_enrollment_preserves_removal_and_revision ... ok test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/policy_enrollment_identity.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/policy_enrollment_identity-f0cf7a0229e540f5) running 1 test test unbound_enrollment_public_key_is_not_host_authority ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/policy_snapshot_ordering.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/policy_snapshot_ordering-7cc2ac94da47cd98) running 6 tests test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/presence.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/presence-3e1bc5e55745d7e3) running 2 tests test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/restart_route_ownership.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/restart_route_ownership-0dc4cc52f478fbf8) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_authorized_reenrollment.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_authorized_reenrollment-7a5ac950aac5a6a3) running 2 tests test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_endpoint_transaction-0ef0c911cceaab22) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_firewall_marker.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_firewall_marker-c4dbb35430ae2de6) running 2 tests test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173. test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_ingress_translation-c0a4032b0502fe02) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_local_delivery-1712a7f25b19bf51) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_presence_r4.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_mesh_presence_r4-b35fd343e12c696d) running 3 tests test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_view_truth.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_mesh_view_truth-62e9d7f28a99b9eb) running 6 tests test an_address_that_is_an_ip_never_becomes_a_name ... ok test a_host_record_name_beats_another_machines_reported_hostname ... ok test a_remote_machine_cannot_be_called_server ... ok test a_remote_machine_cannot_take_the_servers_hostname ... ok test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.14s Running tests/review_mesh_view_truth_r2.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_mesh_view_truth_r2-f6106bc26caa5acf) running 9 tests test a_hex_ipv4_spelling_never_becomes_a_name ... ok test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236) test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok test a_viewer_without_host_facts_still_sees_distinct_names ... ok test no_viewer_sees_a_remote_machine_called_server ... ok test a_person_can_take_a_name_a_machine_reported ... ok test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok test evidence_migrations_0026_and_0029_upgrade_a_realistic_database_without_churn ... ok test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/review_mesh_view_truth_r3.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_mesh_view_truth_r3-acc7217987659c70) running 5 tests test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/review_mesh_view_truth_r4.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_mesh_view_truth_r4-c8f1176c83a6a2a1) running 7 tests test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok test evidence_server_hostname_moves_only_with_server_rename_authority ... ok test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s Running tests/review_restart_routes.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_restart_routes-012bc6e19af8712e) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_retire_ownership.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_retire_ownership-7e7abe5e49e18a66) running 7 tests test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft. test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace. test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace. test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_reverse_recreation.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_reverse_recreation-ba8322a4b4589131) running 4 tests test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_revoked_host_policy.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_revoked_host_policy-8f0b434cc4a6f49e) running 1 test test revoked_host_is_not_retained_in_compiled_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/review_route_inventory.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_route_inventory-db2612871fb84dbf) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_route_scope-7a63cc3e13aa42db) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_shutdown_budget-e6060242e37c449a) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_shutdown_restart-90e3bdbafd24755a) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/settings-b0c907b6b74ba896) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/store.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/store-0f17df0f12b6f327) running 6 tests test required_server_membership_cannot_be_deleted ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test absent_discovery_preserves_the_last_known_endpoint ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test attach_cancelled_at_any_await_leaves_the_store_writable ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.53s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_relay-d3de297fc8337bde) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_release-1d54d564a3117987) running 8 tests test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test latest::tests::cancellation_joins_verification ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.55s Running tests/review_pool.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_pool-51aabd0e805c8271) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.60s Running tests/review_restart.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_restart-c5f9f9cb62051e16) running 4 tests test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification test lookup_creates_private_staging_under_owner_restrictive_umask ... ok test restarted_latest_reclaims_metadata_after_process_stop ... ok test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.06s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_remote-ecf43ccc280cdfc1) running 114 tests test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance. test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance. test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers. test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections. test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence. test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections. test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections. test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock. test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline. test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok test runtime_lock::tests::dump_datagrams_split_exactly ... ok test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test 2 test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... ok test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok running 1 test test runtime_lock::tests::split_device_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... ok test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test running 1 test test runtime_lock::tests::foreign_inode_twin_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... ok test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok test uninstall::tests::review_planted_plan_is_never_followed ... ok test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test runtime_lock::tests::after_close_waits_for_a_slow_socket_snapshot ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok test result: ok. 99 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 5.43s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_plugin_ssh-17b36253c8d69c86) running 49 tests test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_order::tests::pending_forwards_the_caller_deadline_to_its_selected_session ... ok test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok test bootstrap::proof_tests::review_stalled_commit_cannot_outlive_attempt_cap ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test bootstrap::proof_tests::review_commit_clamps_outliers_and_releases_immediately ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test install::tests::transfer_caps_accept_only_the_fixed_record ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test payload::tests::settings_changes_keep_at_most_four_entries ... ok test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/already_added_breakit.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/already_added_breakit-e90e2f4c29cb707e) running 1 test test a_host_key_challenge_never_serializes_as_a_host_id ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/auth_order.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/auth_order-9968d66820e505cb) running 11 tests test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test manual_method_trust_refusal_never_loads_later_credentials ... ok test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/build_removal-9eec37b95ad57c8e) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.31s Running tests/concurrency.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/concurrency-f30db03603f4997a) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/config_isolation.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/config_isolation-9a944d95ba4eed2e) running 2 tests test synthetic_master_socket_is_private_at_creation ... ok test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/credentials.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/credentials-6e4e4044489fb506) running 4 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test kernel_running_helper_is_materialized_in_its_private_scope ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.23s Running tests/diagnostics.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/diagnostics-f0e6f7e48b04f404) running 12 tests test control_probe_statuses_preserve_actionable_setup_messages ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/event_metadata-8524db180f9a16df) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/foreground-10281428fe728d1d) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/host_trust.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/host_trust-50a4a769c45122d1) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/install-42c84fd1d4c4d48f) running 95 tests test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test breakit2_rollback_preserves_foreign_unit_new ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test active_transaction_is_live_between_ssh_setup_commands ... ok test breakit2_rollback_preserves_foreign_launcher_new ... ok test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test compound_join_failure_preserves_the_original_status_and_boundary ... ok test buffering_setup_reader_receives_no_payload_until_selection ... ok test compound_restaging_refuses_a_foreign_journal_before_upload ... ok test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok test compound_setup_keeps_owned_rollback_and_linger_warning ... ok test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok test early_staging_preserves_canonical_foreign_root_refusal ... ok test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test commit_signal_retains_journal_until_proof_and_on_cancel ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok test framed_join_refusal_keeps_status_separate_from_upload ... ok test crash_mid_install_can_roll_back_and_retry ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test installed_infraternal_agent_always_restarts_without_start_limit ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test interrupted_acquisition_cleanup_receipt_can_resume ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test full_payload_restaging_preserves_the_running_session_build ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test missing_payload_preserves_the_bootstrap_binary_remedy ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok test known_failed_setup_finishes_without_a_second_confirmation ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test payload_reuse_never_adopts_a_foreign_cache_directory ... ok test partial_full_upload_rebridges_from_a_verified_image ... ok test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test refused_previous_service_stop_only_removes_staging ... ok test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ignored, scripts/test-ssh-inode-reuse reports unsupported filesystems as ignored test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test reported_cache_digest_selects_reuse_without_sending_payload ... ok test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534 test retry_resends_payload_when_cache_content_changes ... ok test review_live_relative_control_socket_preserves_its_receipt ... ok test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok test retry_reuses_verified_payload_after_owned_rollback ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test setup_transaction_holds_a_live_lock_between_shell_commands ... ok test review_restart_recovers_cleanup_after_base_retirement ... ok test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok test review_restart_recovers_cleanup_after_owner_retirement ... ok test session_restaging_uses_one_compound_command ... ok test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok test restart_recovers_partial_stage_retirement ... ok test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 7.22s Running tests/mesh_ssh.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/mesh_ssh-2fa83dcf733d059a) running 1 test test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/model.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/model-8dc28d474cf55d69) running 6 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/payload_source-8da7588b1b1e7c2a) running 2 tests test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test verification_failure_names_step_and_stops_before_upload ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/previous_attempt_liveness_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/previous_attempt_liveness_review-ce46fa87480131ee) running 1 test test home_alias_keeps_open_setup_descriptor_live ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/previous_attempt_shell.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/previous_attempt_shell-b9d97aec39edc4d4) running 1 test test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.54s Running tests/probe_check.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/probe_check-376aad85da0f0af1) running 3 tests test breakit2_no_systemd_names_the_required_manager ... ok test shell_startup_refusal_names_an_interactive_only_remedy ... ok test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/process.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/process-c3eab8acd9e98988) running 10 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test cancellation_retires_the_helper_descendant_too ... ok test unavailable_negotiated_codec_never_sends_invitation ... ok test negotiated_sources_require_an_exact_receipt_before_private_input ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test declared_payload_flows_before_receipts_and_private_input_waits ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.03s Running tests/proxy_policy.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/proxy_policy-ae5cb2b308a06ccf) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/publication.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/publication-0d82e771a08c3f68) running 4 tests test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok test refused_publication_reports_failure_to_the_waiting_wizard ... ok test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/real_ssh.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/real_ssh-bf1648c924584992) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/recovery_support.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/recovery_support-683687d40ea38ce9) running 12 tests test cleanup_script_requires_the_shipped_helper_level ... ok test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok test legacy_control_socket_in_spaced_home_preserves_receipt ... ok test review_live_session_socket_in_newline_home_blocks_cleanup ... ok test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok test legacy_control_socket_in_newline_home_preserves_receipt ... ok test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok test review_bound_control_socket_before_listen_preserves_receipt ... ok test private_legacy_control_socket_preserves_receipt ... ok test review_live_session_socket_in_plain_home_blocks_cleanup ... ok test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.40s Running tests/shadow_banner.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/shadow_banner-ec8803577a2b0cd0) running 1 test test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/shell_quoting.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/shell_quoting-e07d7690574ed5f8) running 1 test test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/single_connection-628041854be37518) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/source_completeness-4d7c035c7195b1ce) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/trust_round2-e8646687aedada12) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 8 tests test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_server-f1c601004c6d4da6) running 686 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::migration_data_tests::original_migration_metadata_and_checksums_are_unchanged ... ok test auth::migration_data_tests::quoted_text_and_comment_looking_literals_keep_their_values ... ok test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::migration_data_tests::dev_v29_and_production_v30_upgrade_without_retagging_or_losing_ownership ... ok test auth::migration_data_tests::fresh_schemas_defaults_indexes_and_foreign_keys_match_original_sql ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_accepts_legacy_and_job_scoped_roots ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_rejects_unscoped_and_escaping_paths ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::public_status_result_fields_are_listed_in_the_auth_contract ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::canvas::canvas_real_socket_commits_and_runtime_disable_preserve_control ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok test auth::tests::socket_tests::close_logging::revocation_wake_on_busy_store_logs_authority_unavailable_not_resume_refused ... ok test auth::tests::socket_tests::close_logging::revoked_busy_wake_records_stream_end_within_the_existing_wait ... ok test auth::tests::socket_tests::close_logging::revoked_session_during_transient_stall_logs_resume_refused ... ok test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::close_logging::unrelated_logout_during_transient_stall_keeps_the_terminal_socket ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok test auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply ... ok test auth::tests::socket_tests::review_authority_cap::retries_whose_select_waits_stay_within_the_authority_cap ... ok test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok test auth::tests::socket_tests::review_busy_wake::idle_busy_revocation_wake_sends_server_busy_close_code ... ok test auth::tests::socket_tests::review_busy_wake::sixteen_woken_sockets_recover_application_authority_after_a_short_stall ... ok test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_absolute_session_expiry ... ok test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_logout_revocation ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed has been running for over 60 seconds test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input ... ok test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok test bootstrap_runtime::remote_backend::admission_tests::missing_route_uses_link_scaled_bound_without_inventory_extensions ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_after_both_route_phases ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_at_600_ms ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_is_monotonic_for_zero_and_outlier_samples ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_lock_timing_runs_inside_the_nested_setup_shell ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_setup_timing_preserves_transfer_upload_status ... ok test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test canvas_store::tests::cancelled_commit_still_invalidates_a_durable_change ... ok test canvas_store::tests::cas_retry_and_foreign_account_isolation ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test canvas_store::tests::permanent_receipts_keep_the_original_json_digest_recipe ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::expired_route_retires_full_consumer ... ok test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock. test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok test embedded::regressions::path_tests::review_reply_bypasses_queued_typing_without_losing_its_cursor_or_bytes ... ok test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::reply_order_tests::browser_reply_follows_typing_across_both_forwarding_tasks ... ok test embedded::reply_order_tests::full_reply_reservations_preserve_keyboard_bytes_and_all_eight_slots ... ok test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok test enrollment::migration_tests::canvas_layout_migration_upgrades_production_v27_and_fresh_schema_in_order ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test enrollment::migration_tests::hostname_migration_allocates_around_retained_names ... ok test enrollment::migration_tests::hostname_migration_upgrades_release6_copy_without_changing_canvas_or_checksums ... ok test enrollment::migration_tests::old_uuid_mesh_placeholders_upgrade_to_audited_unnamed_labels ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_inventory::name_tests::an_ip_added_host_uses_its_cached_hostname_and_old_facts_do_not_clear_it ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok test remote_inventory::name_tests::inventory_hostname_changes_publish_once_and_preserve_hand_names ... ok test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_inventory::name_tests::late_hostname_inventory_renames_the_attached_mesh_node_and_notifies_viewers ... ok test remote_inventory::name_tests::reported_names_yield_to_records_and_collision_suffixes_and_server_identity_hold ... ok test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok test stream_close::tests::close_path_cost ... ignored, manual microbenchmark test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok test terminal_queries::review_tests::a_lagging_viewer_cannot_renew_a_deadline_after_the_first_viewer_answered ... ok test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok test terminal_queries::review_tests::trimmed_output_refuses_its_answer_without_reopening_an_accepted_position ... ok test terminal_queries::review_tests::two_positions_in_one_chunk_are_claimed_in_order_without_reopening_either ... ok test terminal_queries::tests::deadline_includes_incomplete_query ... ok test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test terminal_queries::tests::marked_flood_never_allocates_queries ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::probe_authority::review_closed_watch::closed_revocation_watch_is_unavailable_and_never_polls_the_write ... ok test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::writer_tests::authority_watchdog::authority_deadline_preserves_subsecond_session_expiry ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::cancelled_storm_returns_every_place_without_duplication ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::deadline_storm_retains_exactly_four_places_then_recovers ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::pool_acquire_timeout_recovers_places_without_releasing_the_connection ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::ready_result_observed_after_deadline_retries_current_authority ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok test websocket::writer_tests::busy_edges::wall_expiry_and_monotonic_deadlines_keep_their_separate_roles ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::resume_refusals_distinguish_connection_state_and_lost_token_rotation ... ok test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok test websocket_transport::tests::visibility_notices_are_small_typed_transport_messages ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test terminal_queries::review_tests::all_session_tables_remain_bounded_at_the_registry_limit ... ok test websocket::writer_tests::busy_edges::revoked_probe_across_attempt_backoff_and_total_wait_edges ... ok test websocket::writer_tests::busy_edges::expiry_crossing_a_stalled_read_refuses_both_deadline_callers ... ok test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::sqlite_busy_timeout_recovers_detached_storm_without_unlocking ... ok test result: ok. 634 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 272.47s Running tests/canvas_convergence.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_convergence-1a7528827de3cb23) running 20 tests test competing_bootstraps_merge_targets_and_retry_after_restart ... ok test a_tiled_import_cannot_duplicate_an_existing_graph_kind ... ok test identical_and_empty_second_devices_do_not_advance_revision ... ok test imports_use_account_wide_target_identity_and_keep_spanning_column_geometry ... ok test importing_an_orphaned_recovery_view_does_not_create_another_recovery_name ... ok test loading_repairs_only_matching_recovery_views_and_converges_clients ... ok test initialize_and_apply_repair_before_writing_and_notify_subscribers ... ok test merge_bounds_refuse_without_losing_the_existing_layout ... ok test import_prefers_matching_names_before_the_first_view_of_its_kind ... ok test no_op_imports_keep_retry_receipts_and_do_not_clear_operation_history ... ok test simultaneous_first_devices_merge_disjoint_targets_into_one_view ... ok test session_import_identity_ignores_labels_but_checks_account_ownership ... ok test stale_noop_still_checks_numeric_bounds_before_committing ... ok test owned_session_reference_and_all_bounds_are_transactional ... ok test split_retry_is_durable_and_changed_idempotency_input_is_refused ... ok test permanent_receipts_do_not_copy_large_bootstrap_documents ... ok test two_devices_serialize_stale_edits_and_replay_every_committed_revision ... ok test encoded_document_budget_is_enforced_by_the_host_transaction ... ok test no_op_import_receipts_still_have_a_bounded_quota ... ok test close_beats_move_resize_in_both_orders_and_survives_compaction ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.77s Running tests/canvas_receipt_count.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_receipt_count-dcb7b77ff3a854ab) running 1 test test historical_receipts_backfill_and_follow_transactions_and_account_removal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_receipt_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_receipt_review-f4b0654f8bb85a4f) running 1 test test historical_no_revision_receipts_preserve_replay_and_the_last_real_edit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.03s Running tests/canvas_recovery_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_recovery_review-f2d4bef103e06289) running 5 tests test repair_rebases_a_cursor_that_already_names_its_next_revision ... ok test queued_close_of_unique_recovered_window_survives_repair ... ok test independent_loads_and_base_edit_repair_exactly_once ... ok test queued_resize_keeps_its_membership_after_a_separate_read_repair ... ok test recovery_at_column_capacity_keeps_the_account_readable ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/canvas_replay_noop.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_replay_noop-f45368f3ae253f70) running 1 test test committed_noop_is_explicit_without_sending_all_closed_ids_to_clients ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/canvas_retired_reference.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_retired_reference-4ae1b19d3a90f2d6) running 2 tests test retired_reference_does_not_block_an_unrelated_edit ... ok test retarget_checks_account_ownership_even_after_close ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/canvas_socket.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_socket-51aa35d48dc96a00) running 1 test test snapshot_then_ordered_commit_events_and_revocation_cancel_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_text_bounds.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/canvas_text_bounds-eb698aef9b5b9538) running 2 tests test text_uses_the_browser_utf16_bound ... ok test imported_name_respects_the_browser_utf16_bound ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/catalog_startup.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/catalog_startup-c4f0c5c2b9e63826) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/enrollment-3533ffe0cf2749cb) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.24s Running tests/mesh_parser.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/mesh_parser-f3d43b86d3386706) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/mesh_review_plugin-1de5b08687140771) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/mesh_review_policy.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/mesh_review_policy-5801ffe603d49dec) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/mesh_review_role_scope-1867947f5f970cf5) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/native_probe_correlation_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/native_probe_correlation_review-0508c3491f4ab791) running 25 tests test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok test unissued_native_probe_reply_cannot_extend_readiness ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test healthy_real_socket_survives_a_150ms_server_stall ... ok test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/plugin_host_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/plugin_host_review-1f79717833c5fdb0) running 7 tests test review_undeclared_topic_is_left_to_the_core ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_disable_answers_inflight_call ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s Running tests/plugin_settings_review.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/plugin_settings_review-8e826064dc44171b) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.71s Running tests/remote_plugin_contract.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/remote_plugin_contract-c936186fbcfd8885) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s Running tests/review_mesh_host_removal.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/review_mesh_host_removal-56ed2d75e836d36e) running 1 test test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_session-f2f326f18dc6b30e) running 2 tests test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok running 1 test test tests::fresh_exec_closes_dumpability_before_private_startup ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s test tests::fresh_exec_closes_dumpability_before_private_startup ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_shim-7c35453813e3afe4) running 105 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test frame::checks::tests::golden_and_fragmented ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok running 1 test test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 104 filtered out; finished in 0.00s test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 92 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 37.54s Running tests/detach.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/detach-6a47ad01fd5a59d3) running 2 tests test detached_child_restores_default_signals_without_changing_parent ... ok test closed_standard_descriptors_become_dev_null ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.77s Running tests/mouse.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/mouse-d13052bb88989529) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s Running tests/ppu_reliability.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/ppu_reliability-2964f940e0c6068a) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/ppu_reliability_memory.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/ppu_reliability_memory-a754448942207ef2) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/process_exit_descriptor.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/process_exit_descriptor-c4b349d2a498ffa6) running 2 tests test invalid_pid_never_creates_a_descriptor ... ok test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_status-7910dde34bdac077) running 14 tests test tests::installed_system_server_data_comes_from_its_effective_execstart ... ok test tests::installed_server_discovery_recognizes_the_running_executable_identity ... ok test tests::nothing_installed_says_so ... ok test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok test tests::rootless_agent_is_read_from_the_user_manager ... ok test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok test tests::server_and_host_on_one_machine_is_both ... ok test tests::stopped_server_unit_is_stopped_not_unknown ... ok test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok test tests::the_headline_names_what_is_down_and_how_to_look ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_canvas running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 2 tests test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 56) - compile fail ... ok test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 63) - compile fail ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Doc-tests infraternal_status running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s (test: 855s) ==> SSH inode reuse fixture Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/plugins/ssh) Finished `test` profile [unoptimized + debuginfo] target(s) in 4.91s Running tests/install.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/install-f0d19bd45bc9bae9) running 1 test test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 0.29s (SSH inode reuse fixture: 5s) ==> shim process-per-user Compiling nix v0.30.1 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/setup-token-fix/crates/infraternal-shim) Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 54s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/setup-token-fix/target/debug/deps/infraternal_shim-58e9712d9c0dc37c) running 218 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::borrowed_output_keeps_frozen_bytes_and_refuses_before_batch_mutation ... ok test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test frame::checks::tests::batch_append_preserves_prefix_and_refuses_invalid_frames ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test heap_accounting::accounting_keeps_exact_layouts_and_balances_reallocation ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test heap_accounting::transient_allocations_are_visible_after_their_storage_is_freed ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap running 1 test running 1 test test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test pty::output_readiness_tests::readable_byte_hint_preserves_the_complete_output_stream ... ok running 1 test test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test ring::checks::tests::empty_append_keeps_lazy_storage_unallocated ... ok test ring::checks::tests::borrowed_ranges_obey_absolute_offsets_across_physical_wrap ... ok test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00stest ring::checks::tests::merge_review_pool_refusal_retains_exact_suffix_and_releases_charge ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test session::inputs::host_budget_tests::alternating_writers_cannot_expand_shared_host_bookkeeping_without_bound ... ok test ring::checks::tests::shared_history_reservation_never_rounds_past_its_share ... ok test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::inputs::reply_tests::host_replies_preserve_segment_budget_and_account_for_promoted_storage ... ok test session::inputs::tests::host_legacy_writer_needs_no_heap_table ... ok test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::bounded_flush_keeps_partial_frame_and_wire_order ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.03s test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::user_host::lazy_bench::geometry_replay_materialization_cost ... ignored, perf VM only: measure cold materialization after bounded geometry replay test session::user_host::child_checks::ordinary_housekeeping_does_not_probe_child_status ... ok test session::user_host::reactor::tests::actual_output_selector_keeps_a_bulk_turn_after_granted_and_denied_promotions ... ok test session::user_host::reactor::tests::cancelled_bulk_membership_reuses_the_existing_deque_entry ... ok test session::user_host::reactor::tests::cheap_replies_share_a_turn_but_expired_output_yields_to_input ... ok test session::user_host::child_checks::threaded_startup_is_refused_before_creating_session_state ... ok test session::user_host::reactor::tests::accounting_write_failure_disables_only_the_receipt ... ok test session::user_host::reactor::tests::inline_and_extra_descriptor_flags_merge_without_losing_generations ... ok test session::user_host::reactor::tests::exit_observed_before_settle_still_queues_one_retention_deadline ... ok test session::user_host::reactor::tests::input_phase_retires_closed_identity_without_publishing_transient_interest ... ok test session::user_host::reactor::tests::fresh_ack_fallback_avoids_writable_poll_and_finishes_with_new_input ... ok test session::user_host::reactor::tests::one_session_readiness_fits_240_requested_bytes ... ok test session::user_host::reactor::tests::readiness_membership_stays_within_five_bytes_per_session ... ok test session::user_host::reactor::tests::readiness_storage_registration_is_at_most_sixteen_bytes ... ok test session::user_host::reactor::tests::readiness_storage_two_descriptors_are_allocation_free ... ok test session::user_host::reactor::tests::ready_rows_clear_only_touched_slots_and_fence_round_wrap ... ok test session::user_host::reactor::tests::ready_rows_keep_two_descriptor_turns_allocation_free_within_64_bytes_per_slot ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.08s test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok test session::user_host::reactor::tests::ownership_receipt_separates_session_components_and_shared_capacities ... ok test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... ok test session::user_host::reactor::tests::queued_data_ack_needs_no_writable_poll_before_pty_service ... ok test session::user_host::reactor::tests::round_reset_and_wrap_preserve_bulk_membership_without_reviving_reads ... ok test session::user_host::reactor::tests::short_output_cohort_yields_before_the_next_input_poll ... ok test session::user_host::reactor::tests::single_ready_descriptor_needs_no_heap_allocation ... ok test session::user_host::reactor::tests::timer_membership_survives_bulk_promotion_cancellation_and_round_wrap ... ok running 1 test test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... test session::user_host::tests::admission_refuses_foreign_uid_duplicate_ids_and_geometry_before_spawn ... ok test session::user_host::reactor::tests::replay_continues_after_its_frame_was_written_inline ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s test session::user_host::reactor::tests::unchanged_registration_sync_needs_no_heap_allocation ... ok test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok test session::user_host::tests::blocked_state_and_output_share_one_ordered_write_batch ... ok test session::user_host::tests::deferred_data_ack_and_available_output_share_one_ordered_batch ... ok test session::user_host::tests::bulk_turn_advances_sixteen_kib_and_yields_before_the_rest ... ok test session::user_host::tests::full_pool_typing_echo_latency ... ignored, timing measurement runs on the perf VM test session::user_host::tests::full_pool_reuses_ring_storage_for_newest_output ... ok test session::user_host::tests::data_ack_can_wait_for_a_writable_visit_without_requiring_output ... ok test session::user_host::tests::full_pool_refuses_new_session_and_keeps_existing_session_working ... ok test session::user_host::tests::idle_session_ownership_ledger ... ignored, perf VM only: per-session requested-byte ownership ledger at scale test session::user_host::tests::host_pool_scales_with_machine_memory_within_bounds ... ok running 1 test test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok test session::user_host::tests::geometry_transcript_materializes_at_its_event_bound ... ok test session::user_host::tests::lazy_prefix_materializes_exactly_before_overflow_and_resize ... ok test session::user_host::tests::malformed_closed_peer_is_retired_once_and_keeps_its_sibling ... ok test session::user_host::tests::output_bound_replays_retained_geometry_before_new_bytes ... ok test session::user_host::tests::medium_geometry_materializes_before_deferred_cell_work_exceeds_the_bound ... ok test session::user_host::tests::prefix_threshold_preserves_unfinished_sequences ... ok test session::user_host::tests::quiet_geometry_changes_remain_lazy_and_replay_in_order ... ok test session::user_host::tests::same_geometry_input_selection_keeps_vt_unallocated ... ok test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok test session::user_host::tests::session_constructor_retains_only_the_bound_socket_path ... ok test session::user_host::tests::steady_replay_needs_no_payload_allocation ... ok test session::user_host::tests::state_fences_and_input_only_acks_bypass_coalescing ... ok test session::user_host::tests::unchanged_geometry_retains_native_resize_side_effects ... ok test session::user_host::tests::vt_panic_retires_one_real_pty_and_sibling_keeps_its_output ... ok test session::user_host::tests::writable_peer_receives_state_and_output_before_another_readiness_turn ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::user_host::tests::zero_ring_capacity_does_not_stall_a_live_pty ... ok test session::user_host::tests::exhausted_pool_drains_live_ptys_during_random_session_churn ... ok test terminal::checks::snapshot_during_discard_preserves_the_unfinished_string_boundary ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test pty::handoff::tests::all_masters_survive_original_owner_drop_with_cloexec ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test session::user_host::tests::large_geometry_cannot_defer_a_long_first_snapshot_reflow_queue ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::host_budget::erased_history_reset_and_geometry_return_native_memory ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test session::user_host::tests::geometry_transcript_property_cases_match_eager_native_state ... ok test terminal::host_budget::page_nodes_never_fill_the_ordinary_data_cap ... ok test terminal::checks::control_strings_cannot_grow_session_carry_without_bound ... ok test terminal::host_budget::shared_host_budget_bounds_the_sum_and_keeps_every_terminal_exact ... ok test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::host_budget::every_history_share_fills_and_recycles_inside_its_reservation ... ok test terminal::ppu_memory_bench::native_session_allocations_settle_after_geometry_warmup ... ignored, perf VM only: native heap/resident accounting; set PPU_VT_ACCOUNT_SESSIONS test terminal::ppu_memory_bench::quiet_resize_churn_does_not_keep_new_resident_pools ... ignored, perf VM only: sparse resize ownership at 900 quiet sessions test terminal::ppu_memory_bench::small_history_does_not_retain_megabyte_page_quanta ... ignored, perf VM only: sparse history residency and native ownership test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::ppu_memory_bench::fresh_shell_filler_snapshot_gap_is_independent_of_allocator_refusal ... ok test terminal::review_r2::review_r2_escape_command_inside_discard_matches_short_string ... ok test terminal::review_r2::review_r2_escape_high_byte_does_not_start_a_hidden_string ... ok test terminal::host_budget::report_native_memory_numbers ... ok test session::user_host::tests::pool_usage_never_exceeds_cap_under_open_write_close_sequences ... ok test terminal::host_budget::widening_a_full_history_stays_inside_its_share ... ok test terminal::review_r2::review_r2_ground_c1_introducer_stays_within_the_session_share ... ok test terminal::review_r2::review_r2_resize_with_full_history_share_stays_exact ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::review_r2::review_r2_host_history_share_fits_the_native_reservation ... ok test terminal::host_budget::laptop_screens_come_from_their_floors_not_the_pool ... ok test terminal::review_r2::review_r2_resize_storm_does_not_ratchet_native_memory ... ok test terminal::review_r2::review_r2_limiter_is_transparent_for_short_control_mixtures ... ok test terminal::review_r3::review_r3_four_hundred_laptop_screens_fit_the_host ... ok test terminal::review_r3::review_r3_host_accounting_balances_through_recovery ... ok test terminal::review_r3::review_r3_recycled_unwrapped_history_keeps_exact_snapshot ... ok test terminal::review_r3::review_r3_bounded_terminal_reflows_long_mixed_history ... ok test terminal::review_r3::review_r3_history_share_without_ris_never_refuses ... ok test terminal::review_r3::review_r3_noisy_neighbour_does_not_make_quiet_sessions_approximate ... ok test terminal_limits::c1_tests::c1_string_inside_csi_has_a_seven_bit_replay_boundary ... ok test terminal_limits::defensive_tests::executed_c0_between_escape_and_introducer_keeps_the_bound ... ok test terminal_limits::tests::escape_after_discard_restarts_without_losing_the_next_command ... ok test terminal::user_screen_pool_resize::taller_widening_keeps_history_rows_that_move_onto_the_screen ... ok test terminal_limits::tests::finite_sequences_are_identical_for_every_fragment_boundary ... ok test terminal_limits::tests::fragmented_overflow_stays_discarded_until_a_real_terminator ... ok test terminal_memory::payload_tests::oversized_payload_is_refused_before_allocation_while_tagged_pool_is_allowed ... ok test terminal_memory::tests::allocation_budget_includes_overhead_and_refusal_is_recoverable ... ok test terminal_memory::payload_tests::residency_query_observes_only_owned_page_mappings_without_faulting_payload ... ok test terminal_memory::tests::screen_pages_are_zero_filled_and_page_aligned ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal_native::owned_memory_tests::refused_resize_reclaims_every_owned_native_allocation ... ok test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok test terminal_native::owned_memory_tests::refusal_inside_reflow_never_touches_freed_pages ... ok test terminal::review_r3::review_r3_thousand_sessions_and_one_flood ... ok test terminal::review_r3::review_r3_recycled_history_matches_unbounded_reference ... ok test terminal::review_r3::review_r3_hundred_laptop_sessions_keep_exact_state ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact has been running for over 60 seconds test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact ... ok test result: ok. 199 passed; 0 failed; 19 ignored; 0 measured; 0 filtered out; finished in 108.99s (shim process-per-user: 224s) ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 ├── (build) infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.16 └── rustls v0.23.46 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.16 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-canvas v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:200:1 │ 200 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 201 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.16 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-canvas v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:202:1 │ 202 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 204 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:205:1 │ 205 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:207:1 │ 207 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 208 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 209 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.16 │ │ └── rustls v0.23.46 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── (dev) infraternal-status v0.1.0 │ │ └── infraternal v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:251:1 │ 251 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 252 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ └── infraternal-session v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.46 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.16 │ │ │ └── rustls v0.23.46 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── (dev) infraternal-status v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-webpki v0.103.16 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.3 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:254:1 │ 254 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 255 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:257:1 │ 257 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 258 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:259:1 │ 259 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 260 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/agent/wt-infraternal/setup-token-fix/Cargo.lock:317:1 │ 317 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 318 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.16 └── rustls v0.23.46 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.3 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.3 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.3 (*) ├── tokio v1.53.3 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok (cargo-deny: 1s) ==> static builds x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently native compiler metadata: path independent; platform/date retained; unexpected syntax refused Rust remapping: differently named checkout roots produce identical stripped artifacts . ---------------------------------------------------------------------- Ran 1 test in 0.002s OK Finished `release` profile [optimized] target(s) in 0.94s AES-128-GCM NIST vector encrypt/decrypt passed production trust: PASS (staging-trust authority absent) /home/agent/.cache/codex-scratch/setup-token-fix/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21400400 bytes; cap: 21400400 bytes; delta: +0 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Key memory initialization=1; locked pages and dump exclusion enabled Finished `release` profile [optimized] target(s) in 0.73s production trust: PASS (staging-trust authority absent) /home/agent/.cache/codex-scratch/setup-token-fix/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 19575064 bytes; cap: 19575064 bytes; delta: +0 bytes key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) x86_64-unknown-linux-musl: exact 21400400-byte cap PASS; 21400401 bytes rejected PASS; smaller artifact requires ratchet PASS aarch64-unknown-linux-musl: exact 19575064-byte cap PASS; 19575065 bytes rejected PASS; smaller artifact requires ratchet PASS unsupported target: rejected PASS bun test v1.4.2 (744846f84) scripts/release/static-metadata-review.test.ts: (pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [61.20ms] (pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [44.53ms] 2 pass 0 fail 16 expect() calls Ran 2 tests across 1 file. [123.00ms] server subcommand: exit 2, versioned JSON unavailable result agent group: exit 0, one parsed versioned JSON listing of its commands (static builds: 36s) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ==> Compiler metadata generator checks bun test v1.4.2 (744846f84) scripts/release/build-metadata.test.ts: (pass) native metadata canonicalization retains version fields and refuses changed syntax [49.64ms] (pass) Rust and cached target compiles receive every environment remap [504.76ms] 2 pass 0 fail 121 expect() calls Ran 2 tests across 1 file. [582.00ms] ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) Checked 38 installs across 69 packages (no changes) [38.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [16.86ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [14.89ms] (pass) layout review fixtures ship only in explicitly enabled preview builds [5786.88ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [0.64ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.03ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.08ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.15ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.07ms] (pass) FrameDetector > fps, p95 and window read the ring [0.17ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.25ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.04ms] src/stale-screen.test.ts: (pass) a program that redraws after reattach never shows the note, not for a frame [0.38ms] (pass) a redraw that arrived before the replay painted needs no wait at all [0.04ms] (pass) a shell that stays silent shows the note once the wait has run out [0.05ms] (pass) output that arrives later clears the note [0.04ms] (pass) a dropped link takes the note down and cancels a wait that has not ended [0.03ms] (pass) the wait grows with the round trip and stays bounded [0.08ms] src/synchronized-output.test.ts: (pass) synchronized terminal output > recognizes a private mode split across byte and string writes [0.90ms] (pass) synchronized terminal output > preserves mode transitions for every pair of input chunk boundaries [2.05ms] (pass) synchronized terminal output > ignores CSI-looking bytes inside control strings and other mode numbers [0.15ms] (pass) synchronized terminal output > RIS clears an active mode [0.12ms] (pass) synchronized terminal output > bounds an unfinished control sequence [0.31ms] (pass) synchronized terminal output > paints queued output on the first frame after reset and timeout release [0.43ms] src/terminal-fit-lifecycle.test.ts: (pass) a queued fit stops when the terminal becomes closed [0.31ms] (pass) a queued fit stops when the terminal becomes suspended [0.02ms] (pass) a queued fit stops when the terminal becomes frozen [0.01ms] src/account-storage.test.ts: (pass) clearing one account leaves a second account and device preferences alone [0.44ms] (pass) the last-account pointer of another account stays [0.08ms] (pass) an unknown account clears every account's data and keeps preferences [0.11ms] (pass) coalesced account writes stop permanently before sign-out clears storage [0.27ms] src/offline-drawing.test.ts: (pass) cached identity needs a matching layout and sign-out removes it [1.35ms] (pass) sign-in caches only public drawing labels [0.15ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.21ms] (pass) repeating the front item changes nothing [0.04ms] (pass) the list is capped, so the oldest items fall off [0.04ms] (pass) top skips items that are no longer live, without losing them [0.06ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.11ms] (pass) recentRows: a view with three windows and no use shows them in order [0.02ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.07ms] src/canvas/status.test.ts: (pass) a lost server connection is an error toast, never a success tick [0.36ms] (pass) routine connection states stay out of the toast [0.04ms] (pass) repeated connection closes do not reopen the persistent reason toast [0.07ms] (pass) a repeated close does not retake the shared toast after a newer message replaces it [0.15ms] (pass) a close reason stays visible through a quick reconnect and clears after a stable attach [674.58ms] src/canvas/toolbar/palette-actions.test.ts: (pass) a deferred split:right selection retains its original window [0.31ms] (pass) a deferred new:below selection retains its original window [0.02ms] (pass) a deferred close selection retains its original window [0.01ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [0.71ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.15ms] (pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.26ms] (pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.18ms] (pass) facts the host did not report are omitted by default, not shown as unknown [0.12ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.18ms] (pass) before facts arrive the host's platform names the header [0.05ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.05ms] src/canvas/windows/session-hooks.test.ts: (pass) a failed idle warm-up shows no toast and retries when the browser is back online [10.98ms] (pass) a failed open shows the toast, and opening again after the network returns succeeds [10.83ms] (pass) an open that joins a failing idle warm-up still shows the toast [5.38ms] src/canvas/mesh/api-retry-budget.test.ts: (pass) a retained watch outage bounds retry requests over two logical minutes [2.17ms] src/canvas/mesh/layout-model.test.ts: (pass) a pin moved by another device invalidates a same-count pin cache [1.01ms] (pass) a recovered graph owns its node positions independently [0.12ms] (pass) a negative pin is drawn by shifting the whole graph by whole grid cells; no pin is rewritten [0.17ms] (pass) with no negative pin the origin is zero and nothing shifts [0.10ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [0.53ms] (pass) without `access` (today's server) the person may view and may not edit [0.23ms] (pass) fields the server does not send are absent, never invented [0.15ms] (pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.05ms] (pass) anything that is not a list is refused, whole [2.23ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.21ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.34ms] (pass) answers carry the new revision, and a create the new arrow's id [0.06ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.11ms] src/canvas/mesh/api-recovery.test.ts: (pass) failed watch refreshes retain one subscription through retry and release it on disposal [1.07ms] (pass) a synchronous subscription refusal leaves retry able to install a new watch [0.22ms] (pass) a changed Mesh revision refreshes a renamed host in the existing view model [0.33ms] (pass) a pushed recovery cancels the scheduled retry [0.23ms] (pass) a pushed recovery supersedes an outstanding retry failure [0.34ms] (pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.27ms] (pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.07ms] (pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.41ms] (pass) a forbidden withdrawal cancels retry work from the retained watch [0.26ms] (pass) a withdrawn view ignores an earlier outstanding retry result [0.21ms] (pass) initial Mesh list handles closed transport [0.22ms] (pass) initial Mesh list handles liveness deadline [0.03ms] (pass) initial Mesh list handles unreadable JSON [0.04ms] (pass) initial Mesh list handles unavailable storage [0.07ms] (pass) initial Mesh list handles forbidden action [0.07ms] (pass) initial Mesh list handles invalid stored host [0.07ms] (pass) Mesh watch withdrawal handles forbidden [0.24ms] (pass) Mesh watch withdrawal handles mesh unavailable [0.02ms] (pass) Mesh watch withdrawal handles plugin unavailable [0.02ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.33ms] (pass) the layout is deterministic and does not depend on input order [2.53ms] (pass) no two cards overlap, and every card lies inside the graph [3.73ms] (pass) the sheet is wider than tall, roughly 16:10 [0.99ms] (pass) a pinned node stays where it was put and the others do not move [1.32ms] (pass) a pin beyond the sheet grows the graph [0.13ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.17ms] (pass) 1,000 nodes lay out in a few milliseconds [9.36ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.43ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.33ms] (pass) a view taller than the viewport is scaled down so it fits [0.05ms] (pass) nearestStop picks the stop whose centre is closest [0.13ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.18ms] (pass) a small graph keeps one stop per node column [0.08ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.10ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.09ms] (pass) D309: with a floor, a narrow column gets a stop of its drawn width and each column is reachable [0.09ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.06ms] (pass) closing the new half gives the layout back exactly, in the model [0.99ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.39ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.18ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.40ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.27ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.12ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.28ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.07ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.16ms] (pass) random sequences of split right, split down, new window right and close never break the grid [37.26ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.41ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.31ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.25ms] (pass) a narrow right split grows both drawn tracks to the canonical minimum [0.14ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.68ms] (pass) a chain of neighbours is pushed in turn [0.10ms] (pass) display settlement clears disconnected overlaps while keeping its one anchor fixed [0.27ms] (pass) review: a viewport width increase after settlement keeps the Settings anchor clear [0.29ms] (pass) snapping rounds to whole cells [0.03ms] (pass) reach follows grants through tags and keeps the relay [0.20ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.10ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms] (pass) a desktop column is the same alone and in a strip [0.01ms] (pass) D309: a touch screen draws every column at least MIN_TOUCH_COLUMN wide, never wider than a lone column; a fine pointer has no floor [0.05ms] (pass) D309: the content is as wide as the drawn columns, so the camera reaches every column [0.05ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [1.78ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.31ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.37ms] (pass) superseded status snapshots release records for sessions this device never opened [0.86ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.12ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.10ms] (pass) a final Close before the first positive census never revives a new ID [0.06ms] (pass) a later absence retires a new ID after its first positive census [0.16ms] (pass) another host's census cannot clear a new shell's census fence [0.09ms] (pass) another host's close cannot clear a new shell's census fence [0.03ms] (pass) shared membership marks windows open without any local attachment [0.41ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [0.69ms] (pass) a detected operating system supplies the live popover mark [0.79ms] src/canvas/sessions/live.test.ts: (pass) the toolbar sessions seam exposes admitted host state and routes by identity [0.89ms] (pass) an enrolled host opens by UUID and splits keep that authority [0.20ms] (pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.16ms] (pass) unknown and ambiguous labels never open an embedded shell [0.07ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.15ms] (pass) an authoritative host snapshot replaces admission with one notification [0.18ms] (pass) the embedded inventory identity still opens locally beside an equally named remote [0.09ms] (pass) the embedded host's mark does not wait for an account name, and no account is invented [0.08ms] src/canvas/sessions/hosts.test.ts: (pass) fresh storage lists an offline host added by another browser [0.86ms] (pass) every welcome reconciles without duplicate subscriptions or hosts [0.16ms] (pass) a removal in another browser withdraws the host [0.12ms] (pass) a malformed page cannot partially replace the authoritative inventory [0.15ms] (pass) a socket-authority refusal withdraws previously admitted hosts [0.31ms] (pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.32ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.26ms] (pass) a known retired status survives repeated selection and generic ended answers [0.14ms] src/canvas/sessions/hosts-scale-review.test.ts: (pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [13.21ms] (pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [10.13ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [4.13ms] (pass) legacy refusals still work and malformed counters never reach the message [0.46ms] (pass) product copy names the host and counters and never renders untrusted server text [0.27ms] (pass) oversized refusal JSON is ignored before parsing [0.09ms] src/canvas/sessions/focus-intent.test.ts: (pass) focusin supersedes every older focus intent [0.25ms] (pass) pointerdown supersedes every older focus intent [0.06ms] (pass) keydown supersedes every older focus intent [0.04ms] (pass) input supersedes every older focus intent [0.03ms] src/canvas/model/server-store.test.ts: (pass) a negative drop on a 1,025-node mesh writes one pin, and the peer ends with every pin (#24) [28.88ms] (pass) repeated pin moves reach both coordinate limits; the next move is refused and rolled back [1.98ms] (pass) a layout gap or withdrawn worker requests one fresh snapshot with bounded backoff [1.67ms] (pass) layout recovery restores Math.random after its virtual timer test [0.03ms] (pass) event before Result and duplicate events do not apply an optimistic edit twice [0.55ms] (pass) reconnect retries the exact request and an old receipt removes its optimistic overlay [0.47ms] (pass) legacy import remains intact until canonical confirmation even if another device initialized [0.47ms] (pass) dispose cancels late cache writes after sign-out [0.34ms] (pass) a pending reference preserves unrelated edits across remote paints and is never sent [1.67ms] (pass) closing an unsent shell removes its unresolved birth without blocking surviving children [0.76ms] LAYOUT_RETRY_SCHEDULE subscribers=60 first_minute=753 following_5s=47 first_delay_slots=60 (pass) sixty withdrawn layout subscriptions spread their coalesced retry timers [15.93ms] (pass) multi-subscriber retry scheduling restores Math.random [0.10ms] (pass) an acknowledgement after its ordered event does not repaint the same layout [0.68ms] (pass) review: a missing layout revision is recovered before the cached document is used again [0.29ms] (pass) a bootstrap receipt before its canonical snapshot keeps the legacy layout drawable [0.40ms] (pass) ready edits share one network round trip with a bounded in-flight window [0.50ms] (pass) the optimistic semantic projection paints before any server receipt [0.46ms] (pass) a no-op drawing capture does not trigger another paint [0.21ms] (pass) an interrupted first load does not turn a revision-zero cache into an intentional empty layout [0.44ms] (pass) review: a refused structural edit cannot strand later valid edits [0.77ms] (pass) a definitive refusal paints rollback, persists it and never retries after reconnect [0.61ms] (pass) a stale refusal cannot discard a new-connection retry [0.27ms] (pass) review r2: refusal drains independent edits waiting behind four in-flight requests [1.12ms] (pass) recovery coalesces gaps and errors, ignores operations until a snapshot, and survives reconnect [0.68ms] (pass) a normal reconnect snapshot arrives before any replacement is requested [0.23ms] src/canvas/model/review-null.test.ts: (pass) a mixed nullable resize cannot invalidate the canonical drawing document [0.15ms] src/canvas/model/operations.test.ts: (pass) independent resize and move commute; close survives a stale move [0.36ms] (pass) right split of a stack preserves the upper band [0.17ms] (pass) reorder uses stable neighbours and emits no document [0.66ms] (pass) a completed split emits its semantic intent rather than intermediate sizing edits [0.26ms] (pass) a three-window reorder sends one semantic move [0.24ms] (pass) a split before the first reference is journalled opens its anchor before splitting [0.25ms] (pass) a drop sends the moved membership once, without derived neighbour geometry [0.50ms] (pass) a narrow right split widens first so both halves remain valid [0.32ms] (pass) a short down split grows the anchor first so both halves meet the height floor [0.37ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.38ms] (pass) a document survives JSON and rebuilds the same columns [0.25ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.08ms] (pass) parseDocument rejects anything that is not a document of this format [0.21ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.10ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.19ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.24ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.04ms] (pass) D309: the saved weights do not depend on how a touch screen draws the columns [0.17ms] (pass) D309: a view this device pushed clear for display is saved where the layout has it [0.12ms] (pass) an offscreen graph keeps its shared pins before any nodes are rendered [0.06ms] (pass) a captured graph document is independent of the next pin drag [0.18ms] src/canvas/model/sync.test.ts: (pass) a pending session never delays other edits or waits for a network receipt [0.70ms] (pass) inventory includes shared memberships that this device cannot render [1.00ms] (pass) temporary flow windows are never treated as unsubmitted shared windows [0.14ms] src/canvas/model/review-span.test.ts: (pass) a down split shifts every column in a transitively connected group [0.24ms] src/canvas/model/reducer-property.test.ts: layout property: 32 seeds, 4096 operations, 4015 accepted, zero divergences (pass) property: accepted random operation sequences match the real server reducer [20058.39ms] src/canvas/model/cache.test.ts: (pass) damaged pending opens cannot stall offline drawing [0.86ms] (pass) a valid unresolved reference remains local and replayable [0.17ms] (pass) a valid offline journal is retained beyond a short burst [0.92ms] src/canvas/model/review-boundary-r2.test.ts: review r2 boundary comparison: 8 seeds, 4096 operations, 3198 accepted (pass) review r2: longer boundary-weighted sequences preserve every accepted projection [1496.70ms] src/canvas/model/reconcile.test.ts: (pass) review: removing the current shared view selects a surviving camera anchor [1.34ms] (pass) a remote negative pin and node update preserve the world position of an unchanged card [0.82ms] src/canvas/model/journal.test.ts: (pass) an offline birth keeps its identity through hydration and reference completion [0.63ms] src/canvas/addhost/setup-feed.test.ts: (pass) createSetupFeed > subscribes with the host and window, then hands over events in order [0.62ms] (pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.25ms] (pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.63ms] (pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.56ms] (pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.33ms] (pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [46.02ms] (pass) review reconnect budget survives sockets that open then close without events [45.98ms] (pass) review explicit retry resumes after the setup feed stops [46.23ms] src/canvas/addhost/wizard.breakit2.test.ts: (pass) breakit2 an explicit port on a listed host survives chip resolution [0.38ms] (pass) breakit2 malformed bracketed IPv6 waits for correction [0.12ms] (pass) listed host plus port retains its saved user in the serialized destination [0.09ms] (pass) review listed inventory name plus port retains its resolved address [0.19ms] src/canvas/addhost/setup-stages.test.ts: (pass) parseSetupEvent > reads a well-formed event [0.10ms] (pass) parseSetupEvent > drops anything malformed [0.05ms] (pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.08ms] (pass) foldSetup > stages before the event's are done, later ones pending [0.13ms] (pass) foldSetup > a stage that reports done alone still finishes [0.03ms] (pass) foldSetup > ready done completes the run [0.03ms] (pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.06ms] (pass) foldSetup > uploading belongs to install and the readiness check to ready [0.03ms] (pass) setupGuide > says the other sessions keep working and what to do next, in plain words [0.11ms] (pass) review malformed setup fields are dropped without coercion errors [0.09ms] (pass) exhausted setup preserves eligibility and explains a new setup [0.09ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.19ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.04ms] (pass) parsing the server's data > an install command needs a lifetime [0.06ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.80ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.21ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.95ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.21ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.28ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.13ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.28ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.28ms] (pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.26ms] (pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.11ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [0.89ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.21ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.11ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.11ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.09ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.25ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.07ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.05ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.05ms] (pass) authLabel > names the method and a trusted network provider only [0.03ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.12ms] (pass) guideFor > each failure kind names its fix [0.06ms] (pass) guideFor > mesh-policy words say possible, not certain [0.02ms] (pass) parseTarget > reads user, host and port [0.05ms] (pass) parseTarget > reads a pasted ssh command into the same fields [0.14ms] (pass) parseTarget > reads an ssh:// address [0.05ms] (pass) parseTarget > refuses garbage around an ssh command [0.07ms] (pass) parseTarget > refuses what cannot name a host [0.03ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.43ms] (pass) parseSshConfig > recognises config text [0.08ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.04ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.05ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.14ms] (pass) only a completed canonical host identity becomes terminal authority [0.06ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.06ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.03ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.03ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.01ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.01ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.01ms] (pass) install diagnostics name the failed step and public host error [0.04ms] (pass) missing payload tells the operator the architecture and expected server path [0.03ms] (pass) an already added host says so and offers opening its existing terminal [0.20ms] (pass) release payload verification names the architecture step and plain reason [0.04ms] (pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.06ms] (pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.06ms] (pass) early terminal publication selects only its canonical host-bound shim session [0.09ms] src/canvas/addhost/already-added-breakit.test.ts: (pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.05ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.33ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.23ms] (pass) ready CA begins the requested installation mode without another prompt [0.08ms] (pass) closing during CA confirmation never starts an SSH attempt [0.27ms] (pass) a typed root login requires explicit consent before any installation [0.09ms] src/canvas/views/body.test.ts: (pass) a clean terminal exit keeps the window while host setup can still fail [0.03ms] (pass) clean exits still close ordinary windows, and failed exits stay visible [0.01ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.47ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.52ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.79ms] (pass) a chunk that both sides use stays critical [0.12ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.13ms] (pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.11ms] (pass) automatic canonical painting loads after the first canvas draw [0.17ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [2.97ms] (pass) compiled recovery UI mode preview obeys its URL boundary [2.60ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [2.10ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [9.24ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [18.92ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [5.55ms] (pass) abandoned word acknowledgement uploads nothing [1.92ms] (pass) settled acknowledgement cannot upload later (dismissed) [1.91ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [1.57ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [1.28ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [0.90ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [0.81ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [0.83ms] (pass) malformed or excessive remaining wait -1 is denied [1.19ms] (pass) malformed or excessive remaining wait 0.5 is denied [0.74ms] (pass) malformed or excessive remaining wait 172801 is denied [0.64ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [1.01ms] (pass) malformed or excessive remaining wait 90000 is denied [1.10ms] test/link-doubt.test.ts: (pass) a link doubt shows the indicator and keeps live replies and typing flowing [1.75ms] (pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.29ms] (pass) a notice type from a newer server is ignored, not a protocol failure [0.11ms] (pass) the viewer announces the link-doubt capability in its Hello [1.41ms] test/close-reasons.test.ts: (pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.15ms] src/close-reasons.test.ts: (pass) a missed connection response keeps a plain and stable reason [0.02ms] (pass) server and host close reasons identify why a terminal reconnects, in plain words [0.12ms] (pass) routine detach and connection rotation reasons stay neutral [0.05ms] (pass) a stream close that reattaches never says the terminal ended [0.08ms] (pass) a recovering server link names its cause as routine status, never as a failure [0.03ms] (pass) unknown close text is discarded instead of reaching the person or console [0.04ms] (pass) a storm of closes prints one line per minute and counts the rest [0.29ms] (pass) counted closes are reported when their window ends, without another close [0.04ms] src/review-close-log.test.ts: (pass) a reconnect the server refuses with a named Close frame still prints its console line [0.99ms] (pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.04ms] src/onboarding-load.test.ts: (pass) a failed load says so in the error line, offers Try again, and mounts nothing [5.45ms] (pass) the Try again button reloads the page: a failed import stays failed in the module map [5.30ms] (pass) the online event retries by itself [5.25ms] 356 pass 0 fail 21671 expect() calls Ran 356 tests across 60 files. [28.69s] bun test v1.4.2 (744846f84) src/connection-correlation-review.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [8.11ms] src/connection-idle.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 1 [4.12ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 1 [2.84ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 150 [1.17ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 150 [0.83ms] (pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [3.99ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 1 [1.03ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 1 [0.76ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 1 [0.76ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 1 [0.78ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 30 [0.73ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 30 [0.83ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 30 [0.75ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 30 [0.78ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 150 [0.37ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 150 [0.35ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 150 [0.43ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 150 [0.65ms] (pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [2.04ms] (pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [3.61ms] (pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [1.20ms] (pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [0.84ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [1.14ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [0.91ms] (pass) a healthy browser route survives 150ms scheduler delay across 1 streams [0.95ms] (pass) a healthy browser route survives 150ms scheduler delay across 28 streams [0.94ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [0.90ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) browser jitter allowance decays after a stable link returns [7.47ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [1.34ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [0.81ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [0.67ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [1.13ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [0.87ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [0.76ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer without a reply counts subsequent responsive silence [0.78ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) an outstanding probe gets responsive observation after a renderer stall [2.32ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) retirement gives a queued mismatched pong one task turn [0.88ms] (pass) retirement gives a queued correlated pong one task turn [0.62ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead typing route eventually retires when browser tasks run every 75ms [0.73ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 1000ms [0.69ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 60000ms [0.70ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [0.86ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [0.93ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [0.73ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) correlated queued replies replenish stall grace across successive healthy stalls [0.89ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) duplicate replies cannot replenish consumed stall grace [0.78ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) wrong timestamp replies cannot replenish consumed stall grace [0.64ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) unknown nonce replies cannot replenish consumed stall grace [0.53ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [0.91ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1 (pass) a replacement route receives its own one-shot local stall grace [1.13ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) continuous typing cannot cancel every silent-route confirmation turn [1.23ms] (pass) a pending confirmation is reset by reconnect [0.99ms] Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0 (pass) a pending confirmation is reset by close [1.03ms] (pass) a pending confirmation is reset by dispose [1.04ms] (pass) a stale confirmation from before reconnect cannot close the replacement route [1.31ms] (pass) a hidden page resumes its lease after 5000ms without retiring queued replies [1.71ms] (pass) a hidden page resumes its lease after 30000ms without retiring queued replies [1.59ms] (pass) a socket lost while hidden waits for visibility before reconnecting [1.38ms] (pass) mobile jitter and one retransmission keep a foreground browser lease [38.52ms] (pass) visibility notices require both peers to support them: false [0.41ms] (pass) visibility notices require both peers to support them: true [0.16ms] (pass) hiding a page cancels a retry scheduled while it was visible [0.58ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [1.12ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [0.93ms] (pass) a layout subscription starts the connection before any terminal exists [0.33ms] (pass) resync replaces one subscription ID and disposal prevents later resyncs [0.92ms] (pass) resync reopens a feature subscription with the same server ID [0.33ms] src/connection-layout-removal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [10.73ms] src/connection-liveness.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [1.80ms] src/connection-pool.test.ts: (pass) terminals fill the first socket, then open another, and a released slot is reused first [0.43ms] (pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [0.57ms] src/connection-probe-scheduling-review.test.ts: (pass) a fully answered browser route survives a delayed next probe before a terminal attaches [0.57ms] (pass) a fully answered browser route survives a delayed next probe with an attachment [0.19ms] src/connection-query-capabilities.test.ts: (pass) query replies negotiate independently with Hello caps 0 [0.05ms] (pass) query replies negotiate independently with Hello caps 4 (pass) query replies negotiate independently with Hello caps 8 (pass) query replies negotiate independently with Hello caps 12 src/connection-query-refusal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [7.63ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [2.20ms] src/connection-restart.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1 (pass) an overnight connection retains its writer and pending input when the server restarts [0.75ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a second quick server close leaves the fast path and backs off [0.54ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a failed first recovery handshake exits the one quick retry [0.47ms] Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0 (pass) a server close reason survives socket retirement and the next retry [0.50ms] Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0 (pass) a clean server socket close keeps its fallback reason through the next retry [0.32ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [10.09ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) online and foreground events cancel delays and preserve handshakes in progress [1.70ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [0.55ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.20ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.16ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.16ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.16ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [0.18ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.25ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.15ms] src/connection-review-refusal-input.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [1.75ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [0.81ms] src/connection-review-retained-lifetime.test.ts: (pass) review: saved typing can be declined without closing the live shell [0.74ms] (pass) review: new typing reaches the fresh shell while saved typing stays pending [0.16ms] (pass) review: retained input and consent are local to their terminal window [0.13ms] (pass) review: selecting a different session removes saved typing and its action [0.18ms] (pass) review: another refused writer retains pending and unacknowledged fresh typing [0.18ms] (pass) review: window disposal clears held input and rejects a stale resend action [0.30ms] src/connection-startup-review.test.ts: (pass) a healthy startup route can learn an RTT above the initial estimate [1.83ms] src/connection-unattached-close.test.ts: (pass) disposing a window before its welcome microtask sends no unbound Close [0.83ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [0.76ms] 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [222.00ms] bun test v1.4.2 (744846f84) src/terminal-queries.test.ts: (pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.40ms] (pass) all requested query families have identities [0.10ms] (pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [1.54ms] (pass) oversized OSC retains BEL termination before a later query [0.10ms] src/terminal-query-property.test.ts: [ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2 (pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [178.12ms] src/terminal-query-renderer-review.test.ts: (pass) review: DECID gives every real renderer response an identity [0.95ms] (pass) review: zero-padded CPR gives every real renderer response an identity [1.11ms] (pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.25ms] (pass) review: three adjacent requests keep distinct identities across different viewer chunking [7.71ms] src/terminal-write-slices.test.ts: (pass) every slice split preserves cells, cursor and all renderer answers [31.94ms] (pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [2.11ms] (pass) escaped writers cannot access released input and callback failure releases the scope [0.49ms] (pass) nested writes and memory growth cannot replace borrowed input [0.36ms] (pass) allocation refusal never writes or frees unowned memory [1.36ms] (pass) empty scopes accept no input and reject later writer use [0.17ms] (pass) input views of native memory survive allocation-driven memory growth [0.20ms] (pass) throwing callbacks release exactly their owned input allocation [0.19ms] 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [251.00ms] $ bun run build.ts built chunk-9pq0ny5g.js, chunk-qbb2e8b9.js, chunk-jmywrjwz.js, chunk-ndmmx2kq.js, chunk-91e0xr5j.js, chunk-h4mvr745.js, chunk-f1kyfxcw.js, chunk-rkhswyqm.js, chunk-n3qp561q.js, chunk-ze1px7x8.js, chunk-yvq3ah6x.js, chunk-vb52mqs5.js, chunk-gxvqf3b8.js, chunk-x90k904w.js, chunk-a2qgrc4j.js, chunk-msgjz9zc.js, chunk-jmwepdwg.js, chunk-8gqdshxw.js, chunk-yvxc2z6f.js, main.js, chunk-3zrccmtw.js, chunk-fxmz3y8j.js, chunk-wk9n9jj8.js, chunk-7ztnyfvv.js, chunk-rjh7301p.js, chunk-mb3x1ypg.js, chunk-2bkhjmwe.js, chunk-wah98t5n.js, chunk-ey4mzz99.js, chunk-nt31hwb7.js, chunk-ctwwa7ez.js, chunk-1ppp6y2t.js, chunk-c76h7v56.js, chunk-rv0kw7g8.js, chunk-fgyrfqxc.js, chunk-mbhpcg8f.js, chunk-3ptdnkq0.js, chunk-axbkkqp1.js, chunk-gywhvnnh.js, chunk-838yaj98.js, chunk-3ej4288n.js, chunk-b6khcbse.js, chunk-gypgjbag.js, chunk-aa15fynz.js, chunk-wqkxhp27.js, chunk-kw9mzccv.js, chunk-ffxpfp4z.js, chunk-kawna64c.js, chunk-0t2k7398.js, chunk-z48tcwe1.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-rfxv74kp.js, chunk-0fzprn2w.js, chunk-pmgxewne.js, chunk-gj6v42zn.js, chunk-3m9zj9sz.js, chunk-r04kg5zm.js, chunk-7hnrs8jb.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-sp5dgyk0.js, chunk-6fj93x4f.js, chunk-e02jh202.js, chunk-ff3nvh2r.js critical chunk-mb3x1ypg.js: identity=2161 gzip=1060 brotli=906 bytes critical chunk-r04kg5zm.js: identity=199 gzip=158 brotli=136 bytes onDemand chunk-3ej4288n.js: identity=6148 gzip=2782 brotli=2511 bytes onDemand chunk-91e0xr5j.js: identity=5812 gzip=2382 brotli=2145 bytes critical chunk-yvxc2z6f.js: identity=2529 gzip=1016 brotli=888 bytes critical chunk-e02jh202.js: identity=9907 gzip=4060 brotli=3499 bytes critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes onDemand chunk-f1kyfxcw.js: identity=3891 gzip=1735 brotli=1518 bytes critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes critical chunk-rkhswyqm.js: identity=5890 gzip=2461 brotli=2137 bytes critical chunk-2bkhjmwe.js: identity=1188 gzip=691 brotli=582 bytes onDemand chunk-n3qp561q.js: identity=2420 gzip=1193 brotli=1079 bytes onDemand chunk-rv0kw7g8.js: identity=7662 gzip=3397 brotli=2968 bytes onDemand chunk-wqkxhp27.js: identity=1649 gzip=776 brotli=675 bytes onDemand chunk-6fj93x4f.js: identity=9158 gzip=3339 brotli=2890 bytes onDemand chunk-ffxpfp4z.js: identity=11562 gzip=4695 brotli=4279 bytes onDemand chunk-rfxv74kp.js: identity=49320 gzip=15453 brotli=13800 bytes critical chunk-8gqdshxw.js: identity=386 gzip=236 brotli=195 bytes onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes critical chunk-msgjz9zc.js: identity=17631 gzip=6252 brotli=5572 bytes onDemand chunk-gywhvnnh.js: identity=10904 gzip=4422 brotli=4025 bytes critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=480 bytes critical backdrop.worker.js: identity=243 gzip=210 brotli=158 bytes onDemand chunk-mbhpcg8f.js: identity=11126 gzip=4258 brotli=3885 bytes critical chunk-a2qgrc4j.js: identity=6075 gzip=2536 brotli=2239 bytes critical chunk-3zrccmtw.js: identity=5448 gzip=2606 brotli=2377 bytes onDemand chunk-kawna64c.js: identity=5359 gzip=2581 brotli=2303 bytes critical chunk-rjh7301p.js: identity=1776 gzip=855 brotli=694 bytes deferred chunk-ctwwa7ez.js: identity=1560 gzip=804 brotli=733 bytes deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes onDemand chunk-3m9zj9sz.js: identity=1063 gzip=653 brotli=523 bytes onDemand chunk-x90k904w.js: identity=2557 gzip=1180 brotli=1009 bytes onDemand chunk-gj6v42zn.js: identity=6744 gzip=3167 brotli=2882 bytes onDemand chunk-nt31hwb7.js: identity=1974 gzip=987 brotli=843 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes critical chunk-wk9n9jj8.js: identity=8377 gzip=3575 brotli=3184 bytes critical chunk-jmwepdwg.js: identity=11739 gzip=4630 brotli=4113 bytes onDemand chunk-yvq3ah6x.js: identity=2108 gzip=1038 brotli=870 bytes onDemand chunk-0fzprn2w.js: identity=6983 gzip=3102 brotli=2811 bytes onDemand chunk-wah98t5n.js: identity=2791 gzip=1373 brotli=1181 bytes deferred chunk-h4mvr745.js: identity=38155 gzip=13871 brotli=12370 bytes critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes onDemand chunk-fgyrfqxc.js: identity=14598 gzip=5444 brotli=4884 bytes onDemand chunk-kw9mzccv.js: identity=540 gzip=354 brotli=319 bytes onDemand chunk-aa15fynz.js: identity=1170 gzip=705 brotli=623 bytes onDemand chunk-qbb2e8b9.js: identity=228 gzip=178 brotli=158 bytes onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes critical chunk-9pq0ny5g.js: identity=34427 gzip=9985 brotli=8960 bytes critical chunk-7hnrs8jb.js: identity=42945 gzip=14687 brotli=13166 bytes critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes onDemand chunk-ey4mzz99.js: identity=4561 gzip=2004 brotli=1774 bytes onDemand chunk-jmywrjwz.js: identity=191 gzip=167 brotli=130 bytes onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes onDemand chunk-3ptdnkq0.js: identity=1026 gzip=623 brotli=500 bytes critical chunk-vb52mqs5.js: identity=707 gzip=362 brotli=309 bytes critical chunk-pmgxewne.js: identity=162 gzip=150 brotli=119 bytes critical chunk-838yaj98.js: identity=729050 gzip=210325 brotli=170930 bytes onDemand chunk-ze1px7x8.js: identity=6265 gzip=2101 brotli=1860 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes critical main.js: identity=104155 gzip=38351 brotli=33146 bytes onDemand chunk-gypgjbag.js: identity=2522 gzip=1134 brotli=960 bytes deferred chunk-7ztnyfvv.js: identity=14644 gzip=4802 brotli=4431 bytes deferred chunk-1ppp6y2t.js: identity=110049 gzip=37193 brotli=32815 bytes onDemand chunk-0t2k7398.js: identity=4696 gzip=1954 brotli=1727 bytes deferred chunk-sp5dgyk0.js: identity=545 gzip=314 brotli=272 bytes onDemand chunk-b6khcbse.js: identity=33394 gzip=12822 brotli=11547 bytes onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes critical chunk-fxmz3y8j.js: identity=1106 gzip=663 brotli=600 bytes onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes onDemand chunk-ndmmx2kq.js: identity=6493 gzip=2402 brotli=2140 bytes JavaScript transfer, critical: identity=987711 gzip=305920/307200 brotli=254835/256000 bytes JavaScript transfer, deferred: identity=166293 gzip=57666/61440 brotli=51212/55296 bytes JavaScript transfer, onDemand: identity=231812 gzip=91864/20480 brotli=81945/18432 bytes JavaScript transfer, onDemand largest chunk chunk-rfxv74kp.js: gzip=15453/20480 brotli=13800/18432 bytes (class total gzip=91864 brotli=81945, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.15ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.41ms] (pass) subscription not found ends delivery before a late refresh rejection [1.15ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.14ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.11ms] (pass) synchronous subscription refusal releases the transport exactly once [0.17ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [6.08ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.17ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.62ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.18ms] (pass) split mux header preserves trailing Close [0.14ms] (pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.36ms] (pass) empty marked input reports the stable invalid-body decoder failure [0.08ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.74ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [2.74ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.51ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.34ms] (pass) superseded failure preserves a newer pending refresh [2.73ms] src/stream.test.ts: stream differential: 141 streams, 11988 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [2083.32ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [7.68ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [1.71ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [3.79ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.09ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.23ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.49ms] (pass) review continuation stops after forbidden [1.19ms] (pass) review continuation stops after superseded [1.16ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.27ms] (pass) a changed revision discards earlier pages before assembling its restart [0.11ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.12ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.01ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} (pass) watch never publishes a partial page; withdrawn=false [1.43ms] (pass) watch never publishes a partial page; withdrawn=true [1.20ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.40ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.20ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.49ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [1.49ms] (pass) shared Mesh event vectors drive the typed watch adapter [5.11ms] 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [2.15s] ```
kayg commented 2026-10-29 19:25:13 +00:00
Author
Owner
Copy link

Starting round-2 independent delta review on review-setup-token-r2, base 9f7a0c9776. Read round-1 verdict and repair report. Checking unchanged regressions, socket access, command quoting, executable discovery, public status, and phone screenshots. No implementation edits or deployment.

Starting round-2 independent delta review on review-setup-token-r2, base 9f7a0c977690119907be5004bd729136b3e8c7f7. Read round-1 verdict and repair report. Checking unchanged regressions, socket access, command quoting, executable discovery, public status, and phone screenshots. No implementation edits or deployment.
kayg commented 2026-10-29 19:28:07 +00:00
Author
Owner
Copy link

Round-2 completed checks: all three original review test files are byte-identical between 074141ee3 and 9f7a0c977 (each git diff --exit-code returns 0; SHA-256 receipt retained). Delta is six repair commits after the review-test merge; no dependency/feature/descriptor changes.

Inspected attached production screenshots at 393x852 and 375x667 in both themes through the shared browser: card and copy control remain inside the viewport. Existing ui-overlay-surface and shared copy-feedback are reused; only min-width: 0 was added to the existing card layout. Closed the review tab.

Contract repair changes the canonical result row and account-label text, retaining the additive non-secret command proposed earlier on #252, consistent with D16/D202. Decisions are unchanged. Full fast gate is compiling through build-slot; two additional review tests cover shell-sensitive path round trips and executable link loop/unrelated-program rejection. No confirmed new finding so far.

Round-2 completed checks: all three original review test files are byte-identical between 074141ee3 and 9f7a0c977 (each git diff --exit-code returns 0; SHA-256 receipt retained). Delta is six repair commits after the review-test merge; no dependency/feature/descriptor changes. Inspected attached production screenshots at 393x852 and 375x667 in both themes through the shared browser: card and copy control remain inside the viewport. Existing ui-overlay-surface and shared copy-feedback are reused; only min-width: 0 was added to the existing card layout. Closed the review tab. Contract repair changes the canonical result row and account-label text, retaining the additive non-secret command proposed earlier on #252, consistent with D16/D202. Decisions are unchanged. Full fast gate is compiling through build-slot; two additional review tests cover shell-sensitive path round trips and executable link loop/unrelated-program rejection. No confirmed new finding so far.
kayg commented 2026-10-29 19:46:42 +00:00
Author
Owner
Copy link

Review coverage committed and pushed at 64dce54eac on review-setup-token-r2. Only crates/infraternal/tests/setup_review_r2.rs is added.

The unchanged setup-output suite passes 6/6, including R252-01, R252-02 and R252-03. New review checks pass 2/2: six shell-sensitive paths (spaces, both quotes, dollar sign, backticks, newline) round-trip through the copied sudo hint as exactly one data argument; executable aliases use only the system-unit data value, while loops and unrelated executables are rejected. Workspace clippy, fresh fmt and diff checks pass. No implementation edits and no new confirmed finding. Full workspace/static gate continues; public-status and browser checks remain to be confirmed.

Review coverage committed and pushed at 64dce54eac54db77ad6fc364e997550a51cb00de on review-setup-token-r2. Only crates/infraternal/tests/setup_review_r2.rs is added. The unchanged setup-output suite passes 6/6, including R252-01, R252-02 and R252-03. New review checks pass 2/2: six shell-sensitive paths (spaces, both quotes, dollar sign, backticks, newline) round-trip through the copied sudo hint as exactly one data argument; executable aliases use only the system-unit data value, while loops and unrelated executables are rejected. Workspace clippy, fresh fmt and diff checks pass. No implementation edits and no new confirmed finding. Full workspace/static gate continues; public-status and browser checks remain to be confirmed.
kayg commented 2026-10-29 19:59:57 +00:00
Author
Owner
Copy link

Round-2 Rust verification step complete on review head 64dce54eac. All six unchanged setup-output tests, both public-status checks (including R252-04), and both added review tests pass. The full workspace tests, opt-in shim suite, clippy and cargo-deny pass; static builds are still running. No #118 baseline exception has been needed.

test-integrity.txt
rust-focused.log

Round-2 Rust verification step complete on review head 64dce54eac54db77ad6fc364e997550a51cb00de. All six unchanged setup-output tests, both public-status checks (including R252-04), and both added review tests pass. The full workspace tests, opt-in shim suite, clippy and cargo-deny pass; static builds are still running. No #118 baseline exception has been needed. [test-integrity.txt](https://git.kayg.org/attachments/f9514bde-177c-421d-9262-a814d92a7d69) [rust-focused.log](https://git.kayg.org/attachments/9bac4b2e-7594-4f17-b5eb-ee8580bcad1e)
kayg commented 2026-10-29 20:13:40 +00:00
Author
Owner
Copy link

Round-2 full gate completed: scripts/verify fast exits 0, with review head 64dce54eac (target implementation 9f7a0c977; only the new test file differs). Every Rust row passes; TypeScript/build/transfer checks pass; protocol tests: 39 pass, 0 fail, 36,135 expectations. No load exception. Static stripped sizes exactly reproduce 21,400,400 / 19,575,064 bytes, x86_64 / aarch64. Native x86_64 key-memory check passes; the aarch64 runtime check is not executed on this x86_64 host, as the gate states.

verify-fast.log

The two unchanged system-service browser regressions and a fresh merge-base size comparison are now running serially through one build slot. Verdict follows those results and cleanup. Full gate output will be quoted verbatim with the verdict.

Round-2 full gate completed: scripts/verify fast exits 0, with review head 64dce54eac54db77ad6fc364e997550a51cb00de (target implementation 9f7a0c977; only the new test file differs). Every Rust row passes; TypeScript/build/transfer checks pass; protocol tests: 39 pass, 0 fail, 36,135 expectations. No load exception. Static stripped sizes exactly reproduce 21,400,400 / 19,575,064 bytes, x86_64 / aarch64. Native x86_64 key-memory check passes; the aarch64 runtime check is not executed on this x86_64 host, as the gate states. [verify-fast.log](https://git.kayg.org/attachments/9babfbbd-4895-4ddf-aab2-fc0f080bd8ac) The two unchanged system-service browser regressions and a fresh merge-base size comparison are now running serially through one build slot. Verdict follows those results and cleanup. Full gate output will be quoted verbatim with the verdict.
kayg commented 2026-10-29 20:15:45 +00:00
Author
Owner
Copy link

Round-2 browser verification complete on review head 64dce54ea: both unchanged system-service tests pass against production assets, TRACER_TEST_PORT=55262, zero synthetic RTT for functional checks. Display/copy at 393x852 and card bounds at 375x667 pass. All five round-one regressions now pass, with all three original test files byte-identical to 074141ee3. The attached 393px screenshot is fresh; the four 393/375px repair screenshots in both themes were also inspected through the shared browser. No new confirmed finding. Merge-base size comparison and cleanup remain.

browser.log
system-service-setup-token-command.png

Round-2 browser verification complete on review head 64dce54ea: both unchanged system-service tests pass against production assets, TRACER_TEST_PORT=55262, zero synthetic RTT for functional checks. Display/copy at 393x852 and card bounds at 375x667 pass. All five round-one regressions now pass, with all three original test files byte-identical to 074141ee3. The attached 393px screenshot is fresh; the four 393/375px repair screenshots in both themes were also inspected through the shared browser. No new confirmed finding. Merge-base size comparison and cleanup remain. [browser.log](https://git.kayg.org/attachments/129a3d67-fdfa-4e74-9454-81967e440333) ![system-service-setup-token-command.png](https://git.kayg.org/attachments/c95dd714-e5b9-45c5-bd95-52455c11b380)
kayg commented 2026-10-29 20:29:13 +00:00
Author
Owner
Copy link

Independent delta review, round 2: merge.

Counts: P0 0, P1 0, P2 0, P3 0. No new or remaining confirmed finding.

Reviewed target setup-token-data at 9f7a0c977690119907be5004bd729136b3e8c7f7. Review branch review-setup-token-r2 is clean and pushed at 64dce54eac54db77ad6fc364e997550a51cb00de; it adds only crates/infraternal/tests/setup_review_r2.rs.

All five round-1 findings are resolved. Each of the three original test files is byte-identical to 074141ee3, with an empty individual git diff and matching SHA-256. The unchanged setup-output suite passes 6/6; public-status contract and exact-response tests pass; unchanged production-browser system-service tests pass 2/2 (display/copy at 393px, card bounds at 375px). Added review checks pass 2/2, covering six shell-sensitive path round trips and executable alias/loop/unrelated-program handling.

Socket permission advice now follows the real connection under the caller's effective user/groups, rather than a listing/existence preflight. Executable links only establish program identity; data still comes from the system unit, and socket access is checked at connection time. Token response bounds and sanitized errors remain intact; status and automatic page content expose only the allowlisted non-secret command. Permission fixtures do not access another account or a live service.

The contract changed to document the earlier additive proposal on #252, consistent with D16/D202; public-status implementation and decisions were not weakened. Inspected the attached production screenshots at 393x852 and 375x667 in both themes: card edges and copy controls remain inside the viewport. Existing shared overlay/copy helpers remain in use, with one layout constraint added to the existing card rule.

scripts/verify fast completed with exit 0, including all Rust rows, TypeScript/build/transfer checks and 39 protocol tests. No host-load exception. Both stripped static caps reproduce exactly: x86_64 21,400,400 bytes; aarch64 19,575,064 bytes. A fresh same-recipe merge-base x86_64 build measures 21,386,512 bytes, confirming +13,888 bytes for the complete branch (under 16 KiB). Restored-head static checks pass after that comparison. Native aarch64 key-memory execution is not checked on this x86_64 host, as reported by the gate; no runtime performance claim is made.

Cleanup verified: target deleted, temporary baseline checkout removed, review browser tab closed, and port 55262 refuses IPv4/IPv6 connections. Review worktree remains clean and pushed. No implementation fix, deployment or issue closure.

test-integrity.txt
rust-focused.log

browser.log
system-service-setup-token-command.png

verify-fast.log

findings.md
sizes.json
baseline-static.log
baseline-size.txt
static-recheck.log
cleanup.json
artifact-head.log

Full scripts/verify fast output on the reviewed implementation, including the added review tests, verbatim:


==> Repository artifact size gate
repository artifact gate: PASS (38 changed path(s), merge base 4a6202a52993)

==> Release deployment functional checks
.....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained
.Build deferred: host capacity limit reached
.........
----------------------------------------------------------------------
Ran 15 tests in 0.714s

OK
.
----------------------------------------------------------------------
Ran 1 test in 0.070s

OK
bun test v1.4.2 (744846f84)

scripts/release/deploy-review.test.ts:
REMOTE_ADMISSION unsigned_x86_payload=true refused=true
(pass) remote admission refuses an x86 payload outside the signed manifest [169.97ms]
{"state": "deployed", "ca_unlocked": true}
WEB_ONLY_RECORD candidate_binary_recorded=false
(pass) web-only deployment does not record the candidate as the running binary [147.26ms]
ALIAS_RECOVERY restart_requests=2
(pass) alias restoration failure still requests the retained warm rollback [132.11ms]

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [454.00ms]
PASS proxy_forwarding samples=3 timed=false

==> fmt
(fmt: 2s)

==> VT native fmt
(VT native fmt: 0s)

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
   Compiling proc-macro2 v1.0.107
   Compiling unicode-ident v1.0.26
   Compiling quote v1.0.47
   Compiling libc v0.2.190
   Compiling autocfg v1.5.1
   Compiling serde_core v1.0.229
   Compiling utf8parse v0.2.2
   Compiling cfg-if v1.0.5
   Compiling cfg_aliases v0.2.2
   Compiling memchr v2.8.3
   Compiling memoffset v0.9.1
   Compiling anstyle-parse v1.0.0
   Compiling nix v0.30.1
   Compiling is_terminal_polyfill v1.70.2
   Compiling colorchoice v1.0.5
   Compiling anstyle-query v1.1.5
   Compiling anstyle v1.0.14
   Compiling zmij v1.0.23
   Compiling anstream v1.0.0
   Compiling heck v0.5.0
   Compiling strsim v0.11.1
   Compiling clap_lex v1.1.1
   Compiling syn v3.0.6
   Compiling serde v1.0.229
   Compiling arrayvec v0.7.8
   Compiling serde_json v1.0.151
   Compiling itoa v1.0.18
   Compiling bitflags v2.13.2
   Compiling getrandom v0.4.3
   Compiling vte v0.15.0
   Compiling clap_builder v4.6.7
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api)
   Compiling errno v0.3.14
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim)
   Compiling thiserror v2.0.21
   Compiling signal-hook-registry v1.4.8
   Compiling mio v1.2.4
   Compiling socket2 v0.6.5
   Compiling serde_derive v1.0.229
   Compiling clap_derive v4.6.7
   Compiling tokio-macros v2.7.2
   Compiling thiserror-impl v2.0.21
   Compiling bytes v1.12.1
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal)
   Compiling clap v4.6.7
   Compiling pin-project-lite v0.2.17
   Compiling unicode-width v0.2.2
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-status)
   Compiling tokio v1.53.3
   Compiling uuid v1.27.0
   Compiling vt100 v0.16.2
warning: function `print_progress` is never used
   --> crates/infraternal/src/cli/output.rs:592:8
    |
592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) {
    |        ^^^^^^^^^^^^^^
    |
    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default

warning: function `write_output` is never used
   --> crates/infraternal/src/cli/output.rs:616:8
    |
616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) {
    |        ^^^^^^^^^^^^

warning: `infraternal` (bin "infraternal" test) generated 2 warnings
    Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 35s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal-fe1c5abfd68beec3)

running 37 tests
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
{"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok

test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s

   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.14
   Compiling serde v1.0.229
   Compiling syn v3.0.6
   Compiling syn v2.0.119
   Compiling futures-core v0.3.34
   Compiling memchr v2.8.3
   Compiling serde_core v1.0.229
   Compiling once_cell v1.21.4
   Compiling cc v1.6.0
   Compiling stable_deref_trait v1.2.1
   Compiling version_check v0.9.5
   Compiling typenum v1.20.1
   Compiling generic-array v0.14.7
   Compiling pkg-config v0.3.34
   Compiling vcpkg v0.2.15
   Compiling log v0.4.34
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling tracing-core v0.1.36
   Compiling icu_normalizer_data v2.3.0
   Compiling utf8_iter v1.0.4
   Compiling block-buffer v0.10.4
   Compiling crypto-common v0.1.7
   Compiling icu_properties_data v2.3.0
   Compiling smallvec v1.16.2
   Compiling percent-encoding v2.3.2
   Compiling futures-sink v0.3.34
   Compiling cpufeatures v0.2.17
   Compiling futures-task v0.3.34
   Compiling slab v0.4.12
   Compiling futures-io v0.3.34
   Compiling scopeguard v1.2.0
   Compiling subtle v2.6.1
   Compiling equivalent v1.0.2
   Compiling form_urlencoded v1.2.2
   Compiling lock_api v0.4.14
   Compiling parking_lot_core v0.9.12
   Compiling libc v0.2.190
   Compiling num-traits v0.2.19
   Compiling hashbrown v0.17.1
   Compiling tracing-attributes v0.1.31
   Compiling serde_derive v1.0.229
   Compiling synstructure v0.14.0
   Compiling displaydoc v0.2.7
   Compiling zerovec-derive v0.11.6
   Compiling zerofrom-derive v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling tokio-macros v2.7.2
   Compiling tracing v0.1.44
   Compiling thiserror-impl v2.0.21
   Compiling indexmap v2.14.2
   Compiling zerofrom v0.1.8
   Compiling tokio v1.53.3
   Compiling yoke v0.8.3
   Compiling digest v0.10.7
   Compiling zerovec v0.11.8
   Compiling zerotrie v0.2.5
   Compiling thiserror v2.0.21
   Compiling crossbeam-utils v0.8.23
   Compiling futures-macro v0.3.34
   Compiling foldhash v0.1.5
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling allocator-api2 v0.2.21
   Compiling icu_collections v2.3.0
   Compiling icu_locale_core v2.3.0
   Compiling futures-util v0.3.34
   Compiling hashbrown v0.15.5
   Compiling icu_provider v2.3.1
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling event-listener v5.4.2
   Compiling crc v3.4.0
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling sha2 v0.10.9
   Compiling crossbeam-queue v0.3.14
   Compiling hashlink v0.10.0
   Compiling mio v1.2.4
   Compiling socket2 v0.6.5
   Compiling idna_adapter v1.2.2
   Compiling spin v0.9.9
   Compiling idna v1.1.0
   Compiling libsqlite3-sys v0.30.1
   Compiling openssl-src v300.6.1+3.6.3
   Compiling serde_json v1.0.151
   Compiling ryu v1.0.23
   Compiling openssl-sys v0.9.117
   Compiling url v2.5.8
   Compiling parking_lot v0.12.5
   Compiling futures-channel v0.3.34
   Compiling futures-intrusive v0.5.0
   Compiling either v1.18.0
   Compiling hex v0.4.3
   Compiling base64 v0.22.1
   Compiling rand_core v0.10.1
   Compiling atoi v2.0.0
   Compiling futures-executor v0.3.34
   Compiling serde_urlencoded v0.7.1
   Compiling flume v0.11.1
   Compiling getrandom v0.4.3
   Compiling zerocopy v0.8.60
   Compiling tokio-stream v0.1.19
   Compiling zerocopy-derive v0.8.60
   Compiling sqlx-core v0.8.6
   Compiling getrandom v0.2.17
   Compiling dotenvy v0.15.7
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api)
   Compiling openssl v0.10.81
   Compiling foreign-types-shared v0.1.1
   Compiling openssl-macros v0.1.1
   Compiling http v1.5.0
   Compiling foreign-types v0.3.2
   Compiling sqlx-sqlite v0.8.6
   Compiling nix v0.30.1
   Compiling ring v0.17.14
   Compiling getrandom v0.3.4
   Compiling uuid v1.27.0
   Compiling zeroize v1.9.0
   Compiling ppv-lite86 v0.2.21
   Compiling untrusted v0.9.0
   Compiling sqlx-macros-core v0.8.6
   Compiling time-core v0.1.9
   Compiling num-conv v0.2.2
   Compiling httparse v1.10.1
   Compiling minimal-lexical v0.2.1
   Compiling thiserror v1.0.69
   Compiling time-macros v0.2.32
   Compiling sqlx-macros v0.8.6
   Compiling nom v7.1.3
   Compiling rand_core v0.9.5
   Compiling sqlx v0.8.6
   Compiling rustls-pki-types v1.15.1
   Compiling http-body v1.1.0
   Compiling thiserror-impl v1.0.69
   Compiling synstructure v0.13.2
   Compiling rustls v0.23.46
   Compiling tinyvec v1.13.3
   Compiling deranged v0.5.8
   Compiling powerfmt v0.2.1
   Compiling cpufeatures v0.3.1
   Compiling rustls-webpki v0.103.16
   Compiling asn1-rs-derive v0.5.1
   Compiling chacha20 v0.10.2
   Compiling rusticata-macros v4.1.0
   Compiling rand_chacha v0.9.0
   Compiling quinn-udp v0.5.16
   Compiling tokio-util v0.7.19
   Compiling asn1-rs-impl v0.2.0
   Compiling tokio-openssl v0.6.5
   Compiling tower-service v0.3.3
   Compiling time v0.3.55
   Compiling data-encoding v2.11.1
   Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-protocol)
   Compiling rand v0.9.5
   Compiling rand v0.10.3
   Compiling vte v0.15.0
   Compiling rand_core v0.6.4
   Compiling rand_pcg v0.10.2
   Compiling clap_derive v4.6.7
   Compiling quinn v0.11.12
   Compiling num-integer v0.1.47
   Compiling lru-slab v0.1.3
   Compiling lazy_static v1.5.1
   Compiling fnv v1.0.7
   Compiling asn1-rs v0.6.2
   Compiling base64 v0.21.7
   Compiling httpdate v1.0.3
   Compiling pastey v0.1.1
   Compiling try-lock v0.2.5
   Compiling rustc-hash v2.1.3
   Compiling oid-registry v0.7.1
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim)
   Compiling atomic-waker v1.1.2
   Compiling want v0.3.2
   Compiling base64urlsafedata v0.5.5
   Compiling h2 v0.4.19
   Compiling num-bigint v0.4.8
   Compiling clap v4.6.7
   Compiling webauthn-attestation-ca v0.5.5
   Compiling tower-layer v0.3.3
   Compiling mime v0.3.17
   Compiling unicase v2.10.0
   Compiling quinn-proto v0.11.19
   Compiling rustversion v1.0.23
   Compiling mime_guess v2.0.5
   Compiling http-body-util v0.1.5
   Compiling der-parser v9.0.0
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-mesh)
   Compiling half v2.7.1
   Compiling sha1 v0.10.7
   Compiling fs-err v3.3.2
   Compiling regex-syntax v0.8.11
   Compiling webauthn-rs-core v0.5.5
   Compiling sync_wrapper v1.0.2
   Compiling tungstenite v0.29.0
   Compiling serde_cbor_2 v0.13.0
   Compiling hyper v1.11.1
   Compiling x509-parser v0.16.0
   Compiling regex-automata v0.4.18
   Compiling webauthn-rs-proto v0.5.5
   Compiling rand_chacha v0.3.1
   Compiling hyper-util v0.1.21
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/host-facts)
   Compiling hex-conservative v0.2.3
   Compiling base64ct v1.8.3
   Compiling arc-swap v1.9.2
   Compiling rand v0.8.8
   Compiling password-hash v0.5.0
   Compiling bitcoin_hashes v0.14.101
   Compiling matchers v0.2.0
   Compiling tokio-tungstenite v0.29.0
   Compiling tower v0.5.3
   Compiling axum-core v0.5.6
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-server)
   Compiling tracing-serde v0.2.0
   Compiling blake2 v0.10.6
   Compiling tracing-log v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling thread_local v1.1.10
   Compiling matchit v0.8.4
   Compiling nu-ansi-term v0.50.3
   Compiling http-range-header v0.4.2
   Compiling argon2 v0.5.3
   Compiling bip39 v2.2.2
   Compiling tower-http v0.6.11
   Compiling tracing-subscriber v0.3.23
   Compiling axum v0.8.9
   Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/release)
   Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/canvas)
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal)
   Compiling vt100 v0.16.2
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/relay)
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/backup)
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-status)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/mesh)
   Compiling axum-server v0.8.0
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote)
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-agent)
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 4m 27s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal-0a149f42b54b04db)

running 104 tests
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
{"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok
test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok
test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok

test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 6.28s

   Compiling displaydoc v0.2.7
   Compiling serde v1.0.229
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api)
   Compiling nix v0.30.1
   Compiling getrandom v0.2.17
   Compiling tracing-core v0.1.36
   Compiling tokio v1.53.3
   Compiling ring v0.17.14
   Compiling tinystr v0.8.4
   Compiling zerotrie v0.2.5
   Compiling icu_locale_core v2.3.0
   Compiling zeroize v1.9.0
   Compiling rustls-pki-types v1.15.1
   Compiling tracing v0.1.44
   Compiling icu_provider v2.3.1
   Compiling icu_collections v2.3.0
   Compiling rustls-webpki v0.103.16
   Compiling syn v2.0.119
   Compiling smallvec v1.16.2
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim)
   Compiling icu_normalizer v2.3.0
   Compiling rustls v0.23.46
   Compiling icu_properties v2.3.0
   Compiling quinn-udp v0.5.16
   Compiling uuid v1.27.0
   Compiling idna_adapter v1.2.2
   Compiling percent-encoding v2.3.2
   Compiling openssl-macros v0.1.1
   Compiling form_urlencoded v1.2.2
   Compiling idna v1.1.0
   Compiling openssl v0.10.81
   Compiling digest v0.10.7
   Compiling futures-core v0.3.34
   Compiling sha2 v0.10.9
   Compiling futures-util v0.3.34
   Compiling url v2.5.8
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/host-facts)
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-mesh)
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/relay)
   Compiling quinn-proto v0.11.19
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/backup)
   Compiling tokio-openssl v0.6.5
   Compiling quinn v0.11.12
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh)
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-agent)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 05s
     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_agent-f4f0113fecf22aee)

running 1 test
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 75 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_mesh-c7263890e5528429)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_ssh-b96e878b9907f3df)

running 1 test
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s

(CLI plugin compile-out: 556s)

==> clippy
    Checking cfg-if v1.0.5
    Checking libc v0.2.190
   Compiling jobserver v0.1.35
    Checking pin-project-lite v0.2.17
    Checking serde_core v1.0.229
    Checking memchr v2.8.3
    Checking bytes v1.12.1
    Checking itoa v1.0.18
   Compiling cc v1.6.0
    Checking typenum v1.20.1
    Checking once_cell v1.21.4
    Checking subtle v2.6.1
    Checking log v0.4.34
    Checking tracing-core v0.1.36
    Checking futures-core v0.3.34
    Checking zerofrom v0.1.8
    Checking stable_deref_trait v1.2.1
    Checking generic-array v0.14.7
    Checking yoke v0.8.3
    Checking smallvec v1.16.2
    Checking getrandom v0.2.17
    Checking errno v0.3.14
    Checking socket2 v0.6.5
    Checking mio v1.2.4
    Checking rand_core v0.6.4
    Checking signal-hook-registry v1.4.8
    Checking serde v1.0.229
    Checking crypto-common v0.1.7
    Checking tracing v0.1.44
    Checking num-traits v0.2.19
    Checking tokio v1.53.3
    Checking zerovec v0.11.8
    Checking futures-sink v0.3.34
    Checking slab v0.4.12
   Compiling crossbeam-utils v0.8.23
    Checking block-buffer v0.10.4
    Checking cpufeatures v0.2.17
    Checking writeable v0.6.4
    Checking tinystr v0.8.4
    Checking litemap v0.8.3
    Checking digest v0.10.7
    Checking potential_utf v0.1.6
    Checking icu_locale_core v2.3.0
    Checking zerotrie v0.2.5
    Checking utf8_iter v1.0.4
    Checking icu_collections v2.3.0
    Checking icu_provider v2.3.1
    Checking either v1.18.0
    Checking zmij v1.0.23
    Checking equivalent v1.0.2
    Checking percent-encoding v2.3.2
    Checking serde_json v1.0.151
    Checking icu_properties_data v2.3.0
    Checking icu_normalizer_data v2.3.0
   Compiling scopeguard v1.2.0
    Checking icu_normalizer v2.3.0
   Compiling lock_api v0.4.14
    Checking icu_properties v2.3.0
    Checking futures-task v0.3.34
    Checking futures-io v0.3.34
    Checking hashbrown v0.17.1
    Checking futures-util v0.3.34
    Checking form_urlencoded v1.2.2
    Checking thiserror v2.0.21
    Checking indexmap v2.14.2
   Compiling libsqlite3-sys v0.30.1
    Checking idna_adapter v1.2.2
   Compiling sha2 v0.10.9
    Checking idna v1.1.0
   Compiling parking_lot_core v0.9.12
    Checking bitflags v2.13.2
   Compiling foldhash v0.1.5
   Compiling allocator-api2 v0.2.21
   Compiling parking_lot v0.12.5
   Compiling hashbrown v0.15.5
    Checking url v2.5.8
    Checking futures-channel v0.3.34
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling crc v3.4.0
   Compiling crossbeam-queue v0.3.14
   Compiling event-listener v5.4.2
   Compiling hashlink v0.10.0
   Compiling futures-intrusive v0.5.0
   Compiling spin v0.9.9
   Compiling ryu v1.0.23
   Compiling flume v0.11.1
   Compiling serde_urlencoded v0.7.1
   Compiling atoi v2.0.0
   Compiling futures-executor v0.3.34
    Checking base64 v0.22.1
    Checking tokio-stream v0.1.19
   Compiling hex v0.4.3
    Checking sqlx-core v0.8.6
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api)
    Checking memoffset v0.9.1
   Compiling openssl-src v300.6.1+3.6.3
    Checking rand_core v0.10.1
    Checking foreign-types-shared v0.1.1
    Checking nix v0.30.1
    Checking foreign-types v0.3.2
    Checking getrandom v0.4.3
    Checking infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-protocol)
   Compiling openssl-sys v0.9.117
    Checking uuid v1.27.0
    Checking zeroize v1.9.0
    Checking utf8parse v0.2.2
    Checking colorchoice v1.0.5
    Checking anstyle-parse v1.0.0
    Checking anstyle-query v1.1.5
    Checking anstyle v1.0.14
    Checking is_terminal_polyfill v1.70.2
    Checking sqlx-sqlite v0.8.6
    Checking strsim v0.11.1
    Checking anstream v1.0.0
    Checking clap_lex v1.1.1
    Checking arrayvec v0.7.8
    Checking clap_builder v4.6.7
    Checking vte v0.15.0
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim)
   Compiling ring v0.17.14
    Checking untrusted v0.9.0
    Checking rustls-pki-types v1.15.1
    Checking cpufeatures v0.3.1
    Checking tinyvec v1.13.3
    Checking clap v4.6.7
    Checking chacha20 v0.10.2
    Checking rand_pcg v0.10.2
    Checking rand v0.10.3
    Checking lru-slab v0.1.3
    Checking rustc-hash v2.1.3
    Checking quinn-udp v0.5.16
    Checking zerocopy v0.8.60
    Checking http v1.5.0
    Checking getrandom v0.3.4
    Checking regex-syntax v0.8.11
   Compiling num-conv v0.2.2
   Compiling sqlx-macros-core v0.8.6
   Compiling rustls v0.23.46
   Compiling time-core v0.1.9
    Checking minimal-lexical v0.2.1
   Compiling time-macros v0.2.32
    Checking nom v7.1.3
    Checking rustls-webpki v0.103.16
    Checking regex-automata v0.4.18
   Compiling sqlx-macros v0.8.6
    Checking sqlx v0.8.6
    Checking http-body v1.1.0
    Checking rand_core v0.9.5
    Checking deranged v0.5.8
    Checking ppv-lite86 v0.2.21
    Checking infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-mesh)
    Checking infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/host-facts)
    Checking half v2.7.1
    Checking powerfmt v0.2.1
    Checking rand_chacha v0.9.0
    Checking thiserror v1.0.69
    Checking rusticata-macros v4.1.0
    Checking httparse v1.10.1
    Checking time v0.3.55
    Checking tokio-util v0.7.19
    Checking tower-service v0.3.3
    Checking quinn-proto v0.11.19
    Checking data-encoding v2.11.1
    Checking rand v0.9.5
    Checking num-integer v0.1.47
    Checking atomic-waker v1.1.2
    Checking try-lock v0.2.5
    Checking base64 v0.21.7
    Checking fnv v1.0.7
    Checking lazy_static v1.5.1
    Checking httpdate v1.0.3
    Checking h2 v0.4.19
    Checking base64urlsafedata v0.5.5
    Checking want v0.3.2
    Checking num-bigint v0.4.8
    Checking tower-layer v0.3.3
    Checking mime v0.3.17
    Checking asn1-rs v0.6.2
   Compiling unicase v2.10.0
   Compiling mime_guess v2.0.5
    Checking http-body-util v0.1.5
    Checking sha1 v0.10.7
    Checking sync_wrapper v1.0.2
    Checking tungstenite v0.29.0
    Checking oid-registry v0.7.1
    Checking der-parser v9.0.0
    Checking quinn v0.11.12
    Checking webauthn-rs-proto v0.5.5
    Checking serde_cbor_2 v0.13.0
    Checking x509-parser v0.16.0
    Checking rand_chacha v0.3.1
    Checking infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/release)
    Checking hex-conservative v0.2.3
    Checking base64ct v1.8.3
    Checking bitcoin_hashes v0.14.101
    Checking rand v0.8.8
    Checking password-hash v0.5.0
    Checking tokio-tungstenite v0.29.0
    Checking arc-swap v1.9.2
    Checking hyper v1.11.1
    Checking fs-err v3.3.2
    Checking tower v0.5.3
    Checking axum-core v0.5.6
    Checking sharded-slab v0.1.7
    Checking matchers v0.2.0
    Checking infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/canvas)
    Checking unicode-normalization v0.1.25
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-server)
    Checking hyper-util v0.1.21
    Checking blake2 v0.10.6
    Checking tracing-serde v0.2.0
    Checking serde_path_to_error v0.1.20
    Checking tracing-log v0.2.0
    Checking thread_local v1.1.10
    Checking nu-ansi-term v0.50.3
    Checking matchit v0.8.4
    Checking http-range-header v0.4.2
    Checking argon2 v0.5.3
    Checking bip39 v2.2.2
    Checking tracing-subscriber v0.3.23
    Checking tower-http v0.6.11
    Checking axum v0.8.9
   Compiling libfuzzer-sys v0.4.13
    Checking arbitrary v1.4.2
    Checking inout v0.1.4
    Checking cipher v0.4.4
    Checking universal-hash v0.5.1
    Checking opaque-debug v0.3.1
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal)
    Checking ctr v0.9.2
    Checking polyval v0.6.2
    Checking aes v0.8.4
    Checking infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/backup)
    Checking ghash v0.5.1
    Checking infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/relay)
    Checking infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-status)
    Checking hmac v0.12.1
    Checking aead v0.5.2
    Checking unicode-width v0.2.2
    Checking hkdf v0.12.4
    Checking aes-gcm v0.10.3
   Compiling crossbeam-epoch v0.9.21
    Checking vt100 v0.16.2
   Compiling crossbeam-deque v0.8.8
   Compiling rayon-core v1.13.0
    Checking plotters-backend v0.3.7
    Checking ciborium-io v0.2.2
    Checking ciborium-ll v0.2.2
    Checking plotters-svg v0.3.7
    Checking itertools v0.13.0
    Checking same-file v1.0.6
    Checking cast v0.3.0
    Checking walkdir v2.5.0
    Checking rayon v1.12.0
    Checking plotters v0.3.7
    Checking ciborium v0.2.2
    Checking regex v1.13.1
    Checking tinytemplate v1.2.1
    Checking oorandom v11.1.5
    Checking anes v0.1.6
   Compiling infraternal-session v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-session)
    Checking criterion-plot v0.6.0
    Checking criterion v0.7.0
   Compiling openssl v0.10.81
   Compiling tokio-openssl v0.6.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-core v0.5.5
    Checking infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/mesh)
    Checking axum-server v0.8.0
    Checking infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote)
    Checking webauthn-rs v0.5.5
    Checking infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-agent)
    Checking infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh)
    Checking infraternal-fuzz v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/fuzz)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 2m 48s
(clippy: 169s)

==> SSH runtime test helper
   Compiling tokio v1.53.3
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api)
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim)
   Compiling quinn v0.11.12
   Compiling tokio-openssl v0.6.5
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh)
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 14.76s
(SSH runtime test helper: 15s)

==> real-binary fixture paths
...
----------------------------------------------------------------------
Ran 3 tests in 0.007s

OK
(real-binary fixture paths: 0s)

==> test
   Compiling crypto-common v0.1.7
   Compiling crossbeam-utils v0.8.23
   Compiling either v1.18.0
   Compiling crossbeam-queue v0.3.14
   Compiling libsqlite3-sys v0.30.1
   Compiling digest v0.10.7
   Compiling tokio-stream v0.1.19
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api)
   Compiling sha2 v0.10.9
   Compiling openssl-sys v0.9.117
   Compiling ring v0.17.14
   Compiling regex-automata v0.4.18
   Compiling tokio-util v0.7.19
   Compiling sqlx-core v0.8.6
   Compiling h2 v0.4.19
   Compiling openssl v0.10.81
   Compiling rustls-webpki v0.103.16
   Compiling rustls v0.23.46
   Compiling sha1 v0.10.7
   Compiling sqlx-sqlite v0.8.6
   Compiling tungstenite v0.29.0
   Compiling hyper v1.11.1
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim)
   Compiling tokio-openssl v0.6.5
   Compiling sqlx-macros-core v0.8.6
   Compiling webauthn-attestation-ca v0.5.5
   Compiling tokio-tungstenite v0.29.0
   Compiling fs-err v3.3.2
   Compiling tower v0.5.3
   Compiling webauthn-rs-core v0.5.5
   Compiling quinn-proto v0.11.19
   Compiling sqlx-macros v0.8.6
   Compiling matchers v0.2.0
   Compiling hyper-util v0.1.21
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-server)
   Compiling sqlx v0.8.6
   Compiling blake2 v0.10.6
   Compiling tower-http v0.6.11
   Compiling tracing-subscriber v0.3.23
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-mesh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/host-facts)
   Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/release)
   Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/canvas)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/mesh)
   Compiling argon2 v0.5.3
   Compiling webauthn-rs v0.5.5
   Compiling axum v0.8.9
   Compiling axum-server v0.8.0
   Compiling inout v0.1.4
   Compiling universal-hash v0.5.1
   Compiling cipher v0.4.4
   Compiling opaque-debug v0.3.1
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/backup)
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/relay)
   Compiling quinn v0.11.12
   Compiling polyval v0.6.2
   Compiling ctr v0.9.2
   Compiling aes v0.8.4
   Compiling ghash v0.5.1
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-status)
   Compiling hmac v0.12.1
   Compiling aead v0.5.2
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal)
   Compiling crossbeam-epoch v0.9.21
   Compiling hkdf v0.12.4
   Compiling aes-gcm v0.10.3
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote)
   Compiling crossbeam-deque v0.8.8
   Compiling plotters-backend v0.3.7
   Compiling ciborium-io v0.2.2
   Compiling rayon-core v1.13.0
   Compiling ciborium-ll v0.2.2
   Compiling plotters-svg v0.3.7
   Compiling itertools v0.13.0
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-agent)
   Compiling same-file v1.0.6
   Compiling cast v0.3.0
   Compiling walkdir v2.5.0
   Compiling rayon v1.12.0
   Compiling plotters v0.3.7
   Compiling ciborium v0.2.2
   Compiling regex v1.13.1
   Compiling criterion-plot v0.6.0
   Compiling tinytemplate v1.2.1
   Compiling anes v0.1.6
   Compiling oorandom v11.1.5
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh)
   Compiling infraternal-session v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-session)
   Compiling criterion v0.7.0
   Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-protocol)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 5m 10s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal-6fb500f025e14506)

running 104 tests
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
{"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok
test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok
test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok

test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 8.80s

     Running tests/agent_daemon.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/agent_daemon-07be34f79332b165)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.86s

     Running tests/agent_queues.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/agent_queues-230c59a5cd906663)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.64s

     Running tests/agent_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/agent_review-84c86525ad0fea2c)

running 8 tests
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.75s

     Running tests/agent_sessions.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/agent_sessions-03d7a30371f14a27)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s

     Running tests/cli_envelope.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/cli_envelope-80a08214b8a5d410)

running 8 tests
test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok
test a_missing_server_is_not_found_exit_4 ... ok
test bare_infraternal_is_the_overview_and_points_to_help ... ok
test status_exits_0_on_a_machine_with_nothing_installed ... ok
test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok
test read_only_commands_answer_in_the_envelope ... ok
test status_exits_5_when_something_that_should_run_is_down ... ok
test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/cli_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/cli_review-3291d67404d26089)

running 17 tests
test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok
test a_group_with_one_command_says_so_in_the_singular ... ok
test a_malformed_host_id_is_a_usage_error_exit_2 ... ok
test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok
test a_dry_run_plan_keeps_its_line_breaks ... ok
test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok
test an_unknown_skill_is_not_found_exit_4 ... ok
test no_compiled_python_is_tracked ... ok
test a_subcommand_does_not_advertise_options_it_ignores ... ok
test a_dumb_terminal_gets_neither_colour_nor_marks ... ok
test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok
test root_help_lists_server_init ... ok
test root_help_fits_80_columns ... ok
test user_facing_text_never_says_agent_alone ... ok
test json_help_and_version_are_envelopes_too ... ok
test an_empty_no_color_is_ignored ... ok
test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok

test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s

     Running tests/cli_review_r2.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/cli_review_r2-23cf4131d1988fa6)

running 11 tests
test an_unknown_skill_does_not_echo_what_was_typed ... ok
test a_paged_listing_is_still_one_envelope ... ok
test a_failed_later_page_emits_only_the_failure_envelope ... ok
test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok
test status_text_does_not_call_an_unanswered_unit_not_running ... ok
test three_pages_preserve_order_and_only_the_final_cursor ... ok
test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok
test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok
test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok
test ctrl_c_in_a_script_loop_stops_the_loop ... ok
test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.01s

     Running tests/cli_review_r3.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/cli_review_r3-be7640ccd9aa03ea)

running 4 tests
test signal_fixture ... ok
test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok
test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok
test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/cli_review_r3_arguments.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/cli_review_r3_arguments-212cdc3ed0a05eb1)

running 1 test
test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/idle_canary.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/idle_canary-5d1908992b4ff473)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.08s

     Running tests/key_memory.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/key_memory-4d4f4cc5516ea6b4)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/remote_output.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/remote_output-9105ebfda268049c)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/session_bounds_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/session_bounds_review-ea0b23d91d052373)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.96s

     Running tests/session_exit_events.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/session_exit_events-d98ed6fbf136b0d7)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.02s

     Running tests/session_retention.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/session_retention-8b939159efa2d0ab)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.66s

     Running tests/setup_output.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/setup_output-702013ba02916bdd)

running 6 tests
test setup_token_permission_hint_covers_a_private_socket_in_a_readable_directory ... ok
test setup_output_keeps_legacy_and_versioned_readers ... ok
test unreadable_system_service_data_prints_one_sudo_command_line ... ok
test setup_token_finds_the_data_dir_from_a_system_service_without_flags ... ok
test setup_token_reads_a_traversable_directory_without_listing_access ... ok
test setup_token_discovers_a_service_installed_through_a_versioned_binary_symlink ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/setup_review_r2.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/setup_review_r2-da958e09046ebe35)

running 2 tests
test executable_links_cannot_supply_a_data_path_outside_the_system_unit ... ok
test setup_permission_hint_preserves_each_shell_sensitive_path_as_one_argument ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/shim.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/shim-30417b82dff06cc8)

running 24 tests
test detached_shell_exit_reaps_shim_within_one_second ... ok
test double_fork_survives_parent_death ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok
test disallowed_signal_only_disconnects_peer ... ok
test attached_backpressure_and_detached_progress ... ok
test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok
test independent_shared_writers_wait_for_the_same_global_queue ... ok
test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test parked_shared_writer_does_not_stop_detached_pty_progress ... ok
test replacement_connection_and_malformed_limit ... ok
test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test shared_writer_coexists_and_replayed_input_is_written_once ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test shared_writer_restores_durable_geometry_after_another_writer_types ... ok
test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test legacy_output_subscription_unblocks_deferred_shared_input ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.64s

     Running tests/ssh_askpass.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/ssh_askpass-16fbd1b96c4af4ca)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.27s

     Running tests/ssh_connector_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/ssh_connector_policy-dd9b13bec3dd9638)

running 1 test
test connector_preserves_configured_bind_address_refusal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s

     Running tests/user_host.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/user_host-4bee401db2fda08c)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/vt_credit.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/vt_credit-dd383ed03c38b306)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.62s

     Running tests/vt_reconnect.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/vt_reconnect-a0009109e49304ab)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.88s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_agent-b93583fbcebe1fd6)

running 168 tests
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok
test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::reply_capacity_tests::full_reply_reservations_cannot_spend_keyboard_capacity ... ok
test daemon::session_commands::reply_capacity_tests::sixteen_replies_and_eight_typing_commands_retain_their_order ... ok
test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok
test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok
test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok
test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok
test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok
test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok
test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok
test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok
test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok
test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok
test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok
test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok
test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok
test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok
test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok
test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok
test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok
test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok
test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok
test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok
test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok
test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok
test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok
test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok
test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok
test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok
test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok
test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok
test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok
test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok
test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok
test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok
test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok
test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok
test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok
test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged.
test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged.
test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok
test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock.
test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok
test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok
test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok
test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace.
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok
test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok

test result: ok. 148 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 11.16s

     Running tests/transport.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/transport-8f7e25a883145d8d)

running 3 tests
test replacing_the_callers_descriptor_cannot_redirect_registered_io ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_mesh-7fce9c81f3753067)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/default_arrow-718a820b17567011)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/properties-9b39f53037898c73)

running 14 tests
test exhausted_versions_reject_mutations_without_changing_state ... ok
test directional_grants_union_and_minimal_updates ... ok
test names_versions_and_backend_status ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.25s

     Running tests/rotation_time.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/rotation_time-d8fd70ac7360bfd5)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_api-49f4d2771da6f777)

running 32 tests
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test host_name::tests::addresses_and_hostnames_give_a_machine_name ... ok
test host_name::tests::numeric_invalid_and_unnamed_inputs_give_no_name ... ok
test host_name::tests::odd_and_overlong_hostnames_give_no_name ... ok
test present::tests::pairs_align_values_and_wrap_under_them ... ok
test present::tests::a_table_has_a_header_only_from_two_rows ... ok
test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok
test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok
test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test present::tests::tint_wraps_text_after_padding_is_measured ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test server_path::tests::legacy_link_omits_the_optional_source_port ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes.
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_routes_only_declared_actions ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok

test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/routing_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/routing_review-6f6c1a928eb26a7f)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_backup-9fdc1ecb14af9cc8)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_canvas-1446da2b8a090ad7)

running 12 tests
test model::tests::graph_pin_coordinates_include_both_limits_but_refuse_the_next_integer ... ok
test model::tests::reference_document_has_strict_shape_and_bounds ... ok
test model::tests::host_id_requires_canonical_lowercase_hyphenated_text ... ok
test reducer::tests::concurrent_builtin_view_creation_preserves_existing_contents ... ok
test reducer::tests::sample_corpus_preserves_strict_variant_fields_and_round_trips ... ok
test socket::tests::descriptor_declares_server_only_actions_and_strict_subscription ... ok
test reducer::tests::nullable_resize_preserves_existing_values_and_absent_fields ... ok
test socket::tests::result_json_preserves_both_wire_shapes ... ok
test reducer::tests::split_divides_only_its_own_band ... ok
test reducer::tests::view_metadata_targets_and_column_neighbours_are_semantic ... ok
test reducer::tests::repeated_open_close_does_not_exhaust_column_capacity ... ok
test reducer::tests::independent_edits_commute_and_close_wins_in_both_orders ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_host_facts-8ccf6df635e66a77)

running 14 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::static_facts_report_the_machines_hostname ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_mesh-27583060726d1618)

running 76 tests
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok
test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok
test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok
test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok
test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::peer_page_tests::poll_cost ... ignored, measurement
test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok
test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok
test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok
test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok
test node_presentation::tests::a_wide_table_stays_within_the_width ... ok
test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok
test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok
test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok
test node_presentation::tests::status_explains_the_observed_server_transport ... ok
test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers.
test node_coordination::tests::legacy_host_daemon_and_ip_record_do_not_leave_a_uuid_mesh_name ... ok
test node_coordination::tests::a_name_a_person_chose_is_kept ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok
test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok
test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok
test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes.
test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok
test presence::tests::a_page_cursor_is_followed ... ok
test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok
test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok
test presence::tests::an_unreadable_node_is_no_reading ... ok
test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok
test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok
test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok
test presence::tests::replace_reports_only_visible_changes ... ok
test presence::tests::the_edge_of_the_session_window_is_still_online ... ok
test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok
test presence::tests::traffic_proves_a_session_until_it_ends ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok
test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok
test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok
test node_coordination::tests::placeholder_names_become_the_machines_names ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok
test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok
test node_coordination::tests::two_hosts_reporting_the_same_hostname_receive_distinct_names ... ok
test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok
test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok

test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 0.47s

     Running tests/access_updates.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/access_updates-401a785178272a85)

running 8 tests
test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace
test compact_identity_support_requires_an_explicit_strict_probe ... ok
test range_objects_reject_unknown_duplicate_and_positional_fields ... ok
test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok
test default_tightening_at_1000_peers_fits_one_round_trip ... ok
test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok

test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/authorized_local_binding.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/authorized_local_binding-9eb78243673aa0ef)

running 2 tests
test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.
test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/canonical_host_binding.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canonical_host_binding-77332b5113aa5170)

running 1 test
test enrollment_requires_canonical_host_uuid_spelling ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/configuration.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/configuration-edd5af664e4aa790)

running 5 tests
test edition_default_is_explicit_and_build_selected ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok
test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.33s

     Running tests/kernel.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/kernel-ae923fd8446e7953)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/naming.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/naming-7ef77dd298644e0e)

running 4 tests
test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok
test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok
test the_servers_names_are_kept_for_the_server ... ok
test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/policy_enrollment_binding.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/policy_enrollment_binding-109d95c10f4ea94b)

running 4 tests
test noncanonical_host_binding_is_refused ... ok
test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok
test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok
test refused_enrollment_preserves_removal_and_revision ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/policy_enrollment_identity.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/policy_enrollment_identity-f0cf7a0229e540f5)

running 1 test
test unbound_enrollment_public_key_is_not_host_authority ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/policy_snapshot_ordering.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/policy_snapshot_ordering-7cc2ac94da47cd98)

running 6 tests
test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.
test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/presence.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/presence-3e1bc5e55745d7e3)

running 2 tests
test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok
test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/restart_route_ownership.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/restart_route_ownership-0dc4cc52f478fbf8)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_authorized_reenrollment.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_authorized_reenrollment-7a5ac950aac5a6a3)

running 2 tests
test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.
test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_endpoint_transaction-0ef0c911cceaab22)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_firewall_marker.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_firewall_marker-c4dbb35430ae2de6)

running 2 tests
test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173.
test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_ingress_translation-c0a4032b0502fe02)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_local_delivery-1712a7f25b19bf51)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_presence_r4.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_mesh_presence_r4-b35fd343e12c696d)

running 3 tests
test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok
test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok
test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_view_truth.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_mesh_view_truth-62e9d7f28a99b9eb)

running 6 tests
test an_address_that_is_an_ip_never_becomes_a_name ... ok
test a_remote_machine_cannot_be_called_server ... ok
test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok
test a_host_record_name_beats_another_machines_reported_hostname ... ok
test a_remote_machine_cannot_take_the_servers_hostname ... ok
test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.17s

     Running tests/review_mesh_view_truth_r2.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_mesh_view_truth_r2-f6106bc26caa5acf)

running 9 tests
test a_hex_ipv4_spelling_never_becomes_a_name ... ok
test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236)
test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok
test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok
test no_viewer_sees_a_remote_machine_called_server ... ok
test a_person_can_take_a_name_a_machine_reported ... ok
test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok
test a_viewer_without_host_facts_still_sees_distinct_names ... ok
test evidence_migrations_0026_and_0029_upgrade_a_realistic_database_without_churn ... ok

test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.17s

     Running tests/review_mesh_view_truth_r3.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_mesh_view_truth_r3-acc7217987659c70)

running 5 tests
test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok
test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok
test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok
test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok
test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/review_mesh_view_truth_r4.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_mesh_view_truth_r4-c8f1176c83a6a2a1)

running 7 tests
test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok
test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok
test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok
test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok
test evidence_server_hostname_moves_only_with_server_rename_authority ... ok
test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok
test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.45s

     Running tests/review_restart_routes.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_restart_routes-012bc6e19af8712e)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_retire_ownership.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_retire_ownership-7e7abe5e49e18a66)

running 7 tests
test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft.
test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace.
test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace.
test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft.

test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_reverse_recreation.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_reverse_recreation-ba8322a4b4589131)

running 4 tests
test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.

test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_revoked_host_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_revoked_host_policy-8f0b434cc4a6f49e)

running 1 test
test revoked_host_is_not_retained_in_compiled_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/review_route_inventory.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_route_inventory-db2612871fb84dbf)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_route_scope-7a63cc3e13aa42db)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_shutdown_budget-e6060242e37c449a)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_shutdown_restart-90e3bdbafd24755a)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/settings-b0c907b6b74ba896)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/store.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/store-0f17df0f12b6f327)

running 6 tests
test required_server_membership_cannot_be_deleted ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test absent_discovery_preserves_the_last_known_endpoint ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test attach_cancelled_at_any_await_leaves_the_store_writable ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_relay-d3de297fc8337bde)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_release-1d54d564a3117987)

running 8 tests
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test latest::tests::cancellation_joins_verification ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.55s

     Running tests/review_pool.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_pool-51aabd0e805c8271)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.60s

     Running tests/review_restart.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_restart-c5f9f9cb62051e16)

running 4 tests
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification
test lookup_creates_private_staging_under_owner_restrictive_umask ... ok
test restarted_latest_reclaims_metadata_after_process_stop ... ok

test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_remote-ecf43ccc280cdfc1)

running 114 tests
test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance.
test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok
test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok
test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok
test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok
test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok
test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok
test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok
test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok
test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok
test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok
test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok
test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok
test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok
test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok
test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok
test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok
test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok
test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok
test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok
test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok
test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok
test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok
test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok
test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok
test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock
test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok
test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok
test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok
test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok
test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok
test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok
test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok
test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok
test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok
test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance.
test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok
test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok
test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok
test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok
test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers.
test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok
test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok
test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok
test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok
test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok
test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok
test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok
test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok
test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections.
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence.
test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections.
test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections.
test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok
test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock.
test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok
test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok
test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok
test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline.
test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok
test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok
test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok
test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok
test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok
test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok
test runtime_lock::tests::dump_datagrams_split_exactly ... ok
test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok
test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test
2
test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... ok
test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok

running 1 test
test runtime_lock::tests::split_device_inner ... test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s

test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok
test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok
test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok
test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... ok
test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok
test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test
test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok
test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok
test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok

running 1 test
test runtime_lock::tests::foreign_inode_twin_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s

test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok
test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok
test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok
test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok
test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok
test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok
test uninstall::tests::review_planted_plan_is_never_followed ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test runtime_lock::tests::after_close_waits_for_a_slow_socket_snapshot ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok
test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok
test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok

test result: ok. 99 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 5.37s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_ssh-17b36253c8d69c86)

running 49 tests
test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok
test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok
test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok
test auth_order::tests::pending_forwards_the_caller_deadline_to_its_selected_session ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok
test bootstrap::proof_tests::review_stalled_commit_cannot_outlive_attempt_cap ... ok
test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok
test bootstrap::proof_tests::review_commit_clamps_outliers_and_releases_immediately ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test install::tests::transfer_caps_accept_only_the_fixed_record ... ok
test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only
test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok
test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok
test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok
test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok
test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok
test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok
test payload::tests::settings_changes_keep_at_most_four_entries ... ok
test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok
test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok
test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok
test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok
test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok
test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok
test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok
test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok
test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok
test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok
test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok
test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/already_added_breakit.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/already_added_breakit-e90e2f4c29cb707e)

running 1 test
test a_host_key_challenge_never_serializes_as_a_host_id ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/auth_order.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/auth_order-9968d66820e505cb)

running 11 tests
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok
test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok
test manual_method_trust_refusal_never_loads_later_credentials ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok
test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/build_removal-9eec37b95ad57c8e)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.31s

     Running tests/concurrency.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/concurrency-f30db03603f4997a)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/config_isolation-9a944d95ba4eed2e)

running 2 tests
test synthetic_master_socket_is_private_at_creation ... ok
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/credentials.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/credentials-6e4e4044489fb506)

running 4 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test kernel_running_helper_is_materialized_in_its_private_scope ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.30s

     Running tests/diagnostics.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/diagnostics-f0e6f7e48b04f404)

running 12 tests
test control_probe_statuses_preserve_actionable_setup_messages ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok
test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/event_metadata-8524db180f9a16df)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/foreground-10281428fe728d1d)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/host_trust.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/host_trust-50a4a769c45122d1)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/install-42c84fd1d4c4d48f)

running 95 tests
test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok
test breakit2_rollback_preserves_foreign_unit_new ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test active_transaction_is_live_between_ssh_setup_commands ... ok
test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok
test breakit2_rollback_preserves_foreign_launcher_new ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test compound_join_failure_preserves_the_original_status_and_boundary ... ok
test buffering_setup_reader_receives_no_payload_until_selection ... ok
test compound_restaging_refuses_a_foreign_journal_before_upload ... ok
test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok
test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok
test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok
test compound_setup_keeps_owned_rollback_and_linger_warning ... ok
test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok
test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok
test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok
test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok
test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok
test early_staging_preserves_canonical_foreign_root_refusal ... ok
test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok
test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok
test commit_signal_retains_journal_until_proof_and_on_cancel ... ok
test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok
test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok
test framed_join_refusal_keeps_status_separate_from_upload ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test crash_mid_install_can_roll_back_and_retry ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok
test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok
test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok
test installed_infraternal_agent_always_restarts_without_start_limit ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_acquisition_cleanup_receipt_can_resume ... ok
test full_payload_restaging_preserves_the_running_session_build ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test missing_payload_preserves_the_bootstrap_binary_remedy ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok
test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok
test known_failed_setup_finishes_without_a_second_confirmation ... ok
test payload_reuse_never_adopts_a_foreign_cache_directory ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test partial_full_upload_rebridges_from_a_verified_image ... ok
test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ignored, scripts/test-ssh-inode-reuse reports unsupported filesystems as ignored
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok
test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok
test reported_cache_digest_selects_reuse_without_sending_payload ... ok
test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534
test retry_resends_payload_when_cache_content_changes ... ok
test review_live_relative_control_socket_preserves_its_receipt ... ok
test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok
test retry_reuses_verified_payload_after_owned_rollback ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test setup_transaction_holds_a_live_lock_between_shell_commands ... ok
test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok
test review_restart_recovers_cleanup_after_owner_retirement ... ok
test review_restart_recovers_cleanup_after_base_retirement ... ok
test session_restaging_uses_one_compound_command ... ok
test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok
test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok
test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok
test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok
test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok
test restart_recovers_partial_stage_retirement ... ok
test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok
test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok

test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 7.58s

     Running tests/mesh_ssh.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/mesh_ssh-2fa83dcf733d059a)

running 1 test
test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/model.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/model-8dc28d474cf55d69)

running 6 tests
test addresses_never_become_options_or_shell_syntax ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/payload_source-8da7588b1b1e7c2a)

running 2 tests
test verification_failure_names_step_and_stops_before_upload ... ok
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/previous_attempt_liveness_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/previous_attempt_liveness_review-ce46fa87480131ee)

running 1 test
test home_alias_keeps_open_setup_descriptor_live ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/previous_attempt_shell.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/previous_attempt_shell-b9d97aec39edc4d4)

running 1 test
test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.36s

     Running tests/probe_check.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/probe_check-376aad85da0f0af1)

running 3 tests
test breakit2_no_systemd_names_the_required_manager ... ok
test shell_startup_refusal_names_an_interactive_only_remedy ... ok
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/process.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/process-c3eab8acd9e98988)

running 10 tests
test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test unavailable_negotiated_codec_never_sends_invitation ... ok
test negotiated_sources_require_an_exact_receipt_before_private_input ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test declared_payload_flows_before_receipts_and_private_input_waits ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.01s

     Running tests/proxy_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/proxy_policy-ae5cb2b308a06ccf)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/publication.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/publication-0d82e771a08c3f68)

running 4 tests
test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok
test refused_publication_reports_failure_to_the_waiting_wizard ... ok
test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok
test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/real_ssh.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/real_ssh-bf1648c924584992)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/recovery_support.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/recovery_support-683687d40ea38ce9)

running 12 tests
test cleanup_script_requires_the_shipped_helper_level ... ok
test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok
test legacy_control_socket_in_newline_home_preserves_receipt ... ok
test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image
test review_bound_control_socket_before_listen_preserves_receipt ... ok
test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok
test legacy_control_socket_in_spaced_home_preserves_receipt ... ok
test private_legacy_control_socket_preserves_receipt ... ok
test review_live_session_socket_in_newline_home_blocks_cleanup ... ok
test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok
test review_live_session_socket_in_plain_home_blocks_cleanup ... ok
test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.43s

     Running tests/shadow_banner.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/shadow_banner-ec8803577a2b0cd0)

running 1 test
test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/shell_quoting.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/shell_quoting-e07d7690574ed5f8)

running 1 test
test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/single_connection-628041854be37518)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/source_completeness-4d7c035c7195b1ce)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/trust_round2-e8646687aedada12)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 8 tests
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_server-f1c601004c6d4da6)

running 686 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::migration_data_tests::original_migration_metadata_and_checksums_are_unchanged ... ok
test auth::migration_data_tests::quoted_text_and_comment_looking_literals_keep_their_values ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::migration_data_tests::dev_v29_and_production_v30_upgrade_without_retagging_or_losing_ownership ... ok
test auth::migration_data_tests::fresh_schemas_defaults_indexes_and_foreign_keys_match_original_sql ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_accepts_legacy_and_job_scoped_roots ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_rejects_unscoped_and_escaping_paths ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::public_status_result_fields_are_listed_in_the_auth_contract ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::canvas::canvas_real_socket_commits_and_runtime_disable_preserve_control ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok
test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok
test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok
test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok
test auth::tests::socket_tests::close_logging::revocation_wake_on_busy_store_logs_authority_unavailable_not_resume_refused ... ok
test auth::tests::socket_tests::close_logging::revoked_busy_wake_records_stream_end_within_the_existing_wait ... ok
test auth::tests::socket_tests::close_logging::revoked_session_during_transient_stall_logs_resume_refused ... ok
test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok
test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::close_logging::unrelated_logout_during_transient_stall_keeps_the_terminal_socket ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok
test auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply ... ok
test auth::tests::socket_tests::review_authority_cap::retries_whose_select_waits_stay_within_the_authority_cap ... ok
test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok
test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok
test auth::tests::socket_tests::review_busy_wake::idle_busy_revocation_wake_sends_server_busy_close_code ... ok
test auth::tests::socket_tests::review_busy_wake::sixteen_woken_sockets_recover_application_authority_after_a_short_stall ... ok
test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok
test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok
test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok
test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_absolute_session_expiry ... ok
test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_logout_revocation ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input ... ok
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok
test bootstrap_runtime::remote_backend::admission_tests::missing_route_uses_link_scaled_bound_without_inventory_extensions ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_after_both_route_phases ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_at_600_ms ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_is_monotonic_for_zero_and_outlier_samples ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok
test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py
test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_lock_timing_runs_inside_the_nested_setup_shell ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_setup_timing_preserves_transfer_upload_status ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok
test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok
test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test canvas_store::tests::cancelled_commit_still_invalidates_a_durable_change ... ok
test canvas_store::tests::cas_retry_and_foreign_account_isolation ... ok
test canvas_store::tests::permanent_receipts_keep_the_original_json_digest_recipe ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok
test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok
test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok
test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok
test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok
test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok
test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok
test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok
test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok
test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok
test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::expired_route_retires_full_consumer ... ok
test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok
test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok
test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok
test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok
test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok
test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok
test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok
test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok
test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock.
test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok
test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok
test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok
test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok
test embedded::regressions::path_tests::review_reply_bypasses_queued_typing_without_losing_its_cursor_or_bytes ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok
test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok
test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok
test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::reply_order_tests::browser_reply_follows_typing_across_both_forwarding_tasks ... ok
test embedded::reply_order_tests::full_reply_reservations_preserve_keyboard_bytes_and_all_eight_slots ... ok
test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok
test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok
test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok
test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok
test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok
test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok
test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok
test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok
test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok
test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok
test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok
test enrollment::migration_tests::canvas_layout_migration_upgrades_production_v27_and_fresh_schema_in_order ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test enrollment::migration_tests::hostname_migration_allocates_around_retained_names ... ok
test enrollment::migration_tests::hostname_migration_upgrades_release6_copy_without_changing_canvas_or_checksums ... ok
test enrollment::migration_tests::old_uuid_mesh_placeholders_upgrade_to_audited_unnamed_labels ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok
test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok
test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok
test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok
test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok
test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok
test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok
test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok
test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok
test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok
test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok
test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok
test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok
test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_inventory::name_tests::an_ip_added_host_uses_its_cached_hostname_and_old_facts_do_not_clear_it ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_inventory::name_tests::late_hostname_inventory_renames_the_attached_mesh_node_and_notifies_viewers ... ok
test remote_inventory::name_tests::inventory_hostname_changes_publish_once_and_preserve_hand_names ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok
test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok
test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok
test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok
test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_inventory::name_tests::reported_names_yield_to_records_and_collision_suffixes_and_server_identity_hold ... ok
test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok
test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok
test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok
test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok
test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok
test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok
test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok
test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok
test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok
test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok
test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok
test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok
test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok
test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required
test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok
test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok
test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok
test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok
test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok
test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok
test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok
test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok
test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok
test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok
test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok
test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok
test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok
test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok
test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok
test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok
test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok
test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok
test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok
test stream_close::tests::close_path_cost ... ignored, manual microbenchmark
test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok
test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok
test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok
test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok
test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok
test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok
test terminal_queries::review_tests::a_lagging_viewer_cannot_renew_a_deadline_after_the_first_viewer_answered ... ok
test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok
test terminal_queries::review_tests::trimmed_output_refuses_its_answer_without_reopening_an_accepted_position ... ok
test terminal_queries::review_tests::two_positions_in_one_chunk_are_claimed_in_order_without_reopening_either ... ok
test terminal_queries::tests::deadline_includes_incomplete_query ... ok
test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok
test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok
test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok
test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok
test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok
test terminal_queries::tests::marked_flood_never_allocates_queries ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok
test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok
test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok
test websocket::probe_authority::review_closed_watch::closed_revocation_watch_is_unavailable_and_never_polls_the_write ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok
test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::writer_tests::authority_watchdog::authority_deadline_preserves_subsecond_session_expiry ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::cancelled_storm_returns_every_place_without_duplication ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::deadline_storm_retains_exactly_four_places_then_recovers ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::pool_acquire_timeout_recovers_places_without_releasing_the_connection ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::ready_result_observed_after_deadline_retries_current_authority ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok
test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok
test websocket::writer_tests::busy_edges::wall_expiry_and_monotonic_deadlines_keep_their_separate_roles ... ok
test websocket::writer_tests::resume_refusals_distinguish_connection_state_and_lost_token_rotation ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok
test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok
test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok
test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok
test websocket_transport::tests::visibility_notices_are_small_typed_transport_messages ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test terminal_queries::review_tests::all_session_tables_remain_bounded_at_the_registry_limit ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test websocket::writer_tests::busy_edges::revoked_probe_across_attempt_backoff_and_total_wait_edges ... ok
test websocket::writer_tests::busy_edges::expiry_crossing_a_stalled_read_refuses_both_deadline_callers ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::sqlite_busy_timeout_recovers_detached_storm_without_unlocking ... ok
test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok

test result: ok. 634 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 247.79s

     Running tests/canvas_convergence.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_convergence-1a7528827de3cb23)

running 20 tests
test a_tiled_import_cannot_duplicate_an_existing_graph_kind ... ok
test competing_bootstraps_merge_targets_and_retry_after_restart ... ok
test imports_use_account_wide_target_identity_and_keep_spanning_column_geometry ... ok
test identical_and_empty_second_devices_do_not_advance_revision ... ok
test importing_an_orphaned_recovery_view_does_not_create_another_recovery_name ... ok
test loading_repairs_only_matching_recovery_views_and_converges_clients ... ok
test merge_bounds_refuse_without_losing_the_existing_layout ... ok
test initialize_and_apply_repair_before_writing_and_notify_subscribers ... ok
test import_prefers_matching_names_before_the_first_view_of_its_kind ... ok
test no_op_imports_keep_retry_receipts_and_do_not_clear_operation_history ... ok
test session_import_identity_ignores_labels_but_checks_account_ownership ... ok
test simultaneous_first_devices_merge_disjoint_targets_into_one_view ... ok
test stale_noop_still_checks_numeric_bounds_before_committing ... ok
test split_retry_is_durable_and_changed_idempotency_input_is_refused ... ok
test owned_session_reference_and_all_bounds_are_transactional ... ok
test permanent_receipts_do_not_copy_large_bootstrap_documents ... ok
test two_devices_serialize_stale_edits_and_replay_every_committed_revision ... ok
test encoded_document_budget_is_enforced_by_the_host_transaction ... ok
test no_op_import_receipts_still_have_a_bounded_quota ... ok
test close_beats_move_resize_in_both_orders_and_survives_compaction ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.59s

     Running tests/canvas_receipt_count.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_receipt_count-dcb7b77ff3a854ab)

running 1 test
test historical_receipts_backfill_and_follow_transactions_and_account_removal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_receipt_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_receipt_review-f4b0654f8bb85a4f)

running 1 test
test historical_no_revision_receipts_preserve_replay_and_the_last_real_edit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.74s

     Running tests/canvas_recovery_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_recovery_review-f2d4bef103e06289)

running 5 tests
test repair_rebases_a_cursor_that_already_names_its_next_revision ... ok
test queued_close_of_unique_recovered_window_survives_repair ... ok
test queued_resize_keeps_its_membership_after_a_separate_read_repair ... ok
test independent_loads_and_base_edit_repair_exactly_once ... ok
test recovery_at_column_capacity_keeps_the_account_readable ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/canvas_replay_noop.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_replay_noop-f45368f3ae253f70)

running 1 test
test committed_noop_is_explicit_without_sending_all_closed_ids_to_clients ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_retired_reference.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_retired_reference-4ae1b19d3a90f2d6)

running 2 tests
test retired_reference_does_not_block_an_unrelated_edit ... ok
test retarget_checks_account_ownership_even_after_close ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_socket.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_socket-51aa35d48dc96a00)

running 1 test
test snapshot_then_ordered_commit_events_and_revocation_cancel_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_text_bounds.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_text_bounds-eb698aef9b5b9538)

running 2 tests
test text_uses_the_browser_utf16_bound ... ok
test imported_name_respects_the_browser_utf16_bound ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/catalog_startup.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/catalog_startup-c4f0c5c2b9e63826)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/enrollment-3533ffe0cf2749cb)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.24s

     Running tests/mesh_parser.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/mesh_parser-f3d43b86d3386706)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/mesh_review_plugin-1de5b08687140771)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/mesh_review_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/mesh_review_policy-5801ffe603d49dec)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/mesh_review_role_scope-1867947f5f970cf5)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/native_probe_correlation_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/native_probe_correlation_review-0508c3491f4ab791)

running 25 tests
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test unissued_native_probe_reply_cannot_extend_readiness ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test healthy_real_socket_survives_a_150ms_server_stall ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/plugin_host_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/plugin_host_review-1f79717833c5fdb0)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_disable_answers_inflight_call ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s

     Running tests/plugin_settings_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/plugin_settings_review-8e826064dc44171b)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.60s

     Running tests/remote_plugin_contract.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/remote_plugin_contract-c936186fbcfd8885)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s

     Running tests/review_mesh_host_removal.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_mesh_host_removal-56ed2d75e836d36e)

running 1 test
test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_session-f2f326f18dc6b30e)

running 2 tests
test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok

running 1 test
test tests::fresh_exec_closes_dumpability_before_private_startup ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

test tests::fresh_exec_closes_dumpability_before_private_startup ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_shim-7c35453813e3afe4)

running 105 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok

running 1 test
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 104 filtered out; finished in 0.00s

test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 92 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 30.02s

     Running tests/detach.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/detach-6a47ad01fd5a59d3)

running 2 tests
test detached_child_restores_default_signals_without_changing_parent ... ok
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.39s

     Running tests/mouse.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/mouse-d13052bb88989529)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.01s

     Running tests/ppu_reliability.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/ppu_reliability-2964f940e0c6068a)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/ppu_reliability_memory.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/ppu_reliability_memory-a754448942207ef2)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/process_exit_descriptor.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/process_exit_descriptor-c4b349d2a498ffa6)

running 2 tests
test invalid_pid_never_creates_a_descriptor ... ok
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_status-7910dde34bdac077)

running 14 tests
test tests::installed_server_discovery_recognizes_the_running_executable_identity ... ok
test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok
test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok
test tests::installed_system_server_data_comes_from_its_effective_execstart ... ok
test tests::nothing_installed_says_so ... ok
test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok
test tests::server_and_host_on_one_machine_is_both ... ok
test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok
test tests::rootless_agent_is_read_from_the_user_manager ... ok
test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok
test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok
test tests::stopped_server_unit_is_stopped_not_unknown ... ok
test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok
test tests::the_headline_names_what_is_down_and_how_to_look ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_canvas

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 2 tests
test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 56) - compile fail ... ok
test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 63) - compile fail ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

   Doc-tests infraternal_status

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

(test: 816s)

==> SSH inode reuse fixture
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 3.56s
     Running tests/install.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/install-f0d19bd45bc9bae9)

running 1 test
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 0.20s
(SSH inode reuse fixture: 3s)

==> shim process-per-user
   Compiling nix v0.30.1
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 20s
     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_shim-58e9712d9c0dc37c)

running 218 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::borrowed_output_keeps_frozen_bytes_and_refuses_before_batch_mutation ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::batch_append_preserves_prefix_and_refuses_invalid_frames ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test heap_accounting::transient_allocations_are_visible_after_their_storage_is_freed ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test heap_accounting::accounting_keeps_exact_layouts_and_balances_reallocation ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok

running 1 test
test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... 
running 1 test
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok

running 1 test
test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... test pty::output_readiness_tests::readable_byte_hint_preserves_the_complete_output_stream ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test ring::checks::tests::borrowed_ranges_obey_absolute_offsets_across_physical_wrap ... ok
test ring::checks::tests::empty_append_keeps_lazy_storage_unallocated ... ok
test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

test ring::checks::tests::merge_review_pool_refusal_retains_exact_suffix_and_releases_charge ... ok
test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test ring::checks::tests::shared_history_reservation_never_rounds_past_its_share ... ok
test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok
test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok
test session::inputs::host_budget_tests::alternating_writers_cannot_expand_shared_host_bookkeeping_without_bound ... ok
test session::inputs::reply_tests::host_replies_preserve_segment_budget_and_account_for_promoted_storage ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::inputs::tests::host_legacy_writer_needs_no_heap_table ... ok
test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::bounded_flush_keeps_partial_frame_and_wire_order ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::user_host::child_checks::ordinary_housekeeping_does_not_probe_child_status ... ok
test session::user_host::child_checks::threaded_startup_is_refused_before_creating_session_state ... ok
test session::user_host::lazy_bench::geometry_replay_materialization_cost ... ignored, perf VM only: measure cold materialization after bounded geometry replay
test session::user_host::reactor::tests::accounting_write_failure_disables_only_the_receipt ... ok
test session::user_host::reactor::tests::actual_output_selector_keeps_a_bulk_turn_after_granted_and_denied_promotions ... ok
test session::user_host::reactor::tests::cancelled_bulk_membership_reuses_the_existing_deque_entry ... ok
test session::user_host::reactor::tests::cheap_replies_share_a_turn_but_expired_output_yields_to_input ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::user_host::reactor::tests::fresh_ack_fallback_avoids_writable_poll_and_finishes_with_new_input ... ok
test session::user_host::reactor::tests::inline_and_extra_descriptor_flags_merge_without_losing_generations ... ok
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.03s

test session::user_host::reactor::tests::exit_observed_before_settle_still_queues_one_retention_deadline ... ok
test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... ok
test session::user_host::reactor::tests::input_phase_retires_closed_identity_without_publishing_transient_interest ... ok
test session::user_host::reactor::tests::one_session_readiness_fits_240_requested_bytes ... ok
test session::user_host::reactor::tests::readiness_membership_stays_within_five_bytes_per_session ... ok
test session::user_host::reactor::tests::readiness_storage_registration_is_at_most_sixteen_bytes ... ok
test session::user_host::reactor::tests::readiness_storage_two_descriptors_are_allocation_free ... ok
test session::user_host::reactor::tests::ready_rows_clear_only_touched_slots_and_fence_round_wrap ... ok
test session::user_host::reactor::tests::ownership_receipt_separates_session_components_and_shared_capacities ... ok
test session::user_host::reactor::tests::ready_rows_keep_two_descriptor_turns_allocation_free_within_64_bytes_per_slot ... ok

running 1 test
test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok
test session::user_host::reactor::tests::replay_continues_after_its_frame_was_written_inline ... ok
test session::user_host::reactor::tests::round_reset_and_wrap_preserve_bulk_membership_without_reviving_reads ... ok
test session::user_host::reactor::tests::short_output_cohort_yields_before_the_next_input_poll ... ok
test session::user_host::reactor::tests::single_ready_descriptor_needs_no_heap_allocation ... ok
test session::user_host::reactor::tests::timer_membership_survives_bulk_promotion_cancellation_and_round_wrap ... ok
test session::user_host::tests::admission_refuses_foreign_uid_duplicate_ids_and_geometry_before_spawn ... ok
test session::user_host::reactor::tests::queued_data_ack_needs_no_writable_poll_before_pty_service ... ok
test session::user_host::reactor::tests::unchanged_registration_sync_needs_no_heap_allocation ... ok
test session::user_host::tests::blocked_state_and_output_share_one_ordered_write_batch ... ok
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.08s

test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... ok
test session::user_host::tests::deferred_data_ack_and_available_output_share_one_ordered_batch ... ok
test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok
test session::user_host::tests::data_ack_can_wait_for_a_writable_visit_without_requiring_output ... ok
test session::user_host::tests::bulk_turn_advances_sixteen_kib_and_yields_before_the_rest ... ok
test session::user_host::tests::full_pool_typing_echo_latency ... ignored, timing measurement runs on the perf VM
test session::user_host::tests::full_pool_reuses_ring_storage_for_newest_output ... ok
test session::user_host::tests::host_pool_scales_with_machine_memory_within_bounds ... ok
test session::user_host::tests::idle_session_ownership_ledger ... ignored, perf VM only: per-session requested-byte ownership ledger at scale
test session::user_host::tests::full_pool_refuses_new_session_and_keeps_existing_session_working ... ok

running 1 test
test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok
test session::user_host::tests::geometry_transcript_materializes_at_its_event_bound ... ok
test session::user_host::tests::lazy_prefix_materializes_exactly_before_overflow_and_resize ... ok
test session::user_host::tests::medium_geometry_materializes_before_deferred_cell_work_exceeds_the_bound ... ok
test session::user_host::tests::output_bound_replays_retained_geometry_before_new_bytes ... ok
test session::user_host::tests::malformed_closed_peer_is_retired_once_and_keeps_its_sibling ... ok
test session::user_host::tests::prefix_threshold_preserves_unfinished_sequences ... ok
test session::user_host::tests::quiet_geometry_changes_remain_lazy_and_replay_in_order ... ok
test session::user_host::tests::same_geometry_input_selection_keeps_vt_unallocated ... ok
test session::user_host::tests::session_constructor_retains_only_the_bound_socket_path ... ok
test session::user_host::tests::state_fences_and_input_only_acks_bypass_coalescing ... ok
test session::user_host::tests::steady_replay_needs_no_payload_allocation ... ok
test session::user_host::tests::unchanged_geometry_retains_native_resize_side_effects ... ok
test session::user_host::tests::vt_panic_retires_one_real_pty_and_sibling_keeps_its_output ... ok
test session::user_host::tests::writable_peer_receives_state_and_output_before_another_readiness_turn ... ok
test session::user_host::tests::zero_ring_capacity_does_not_stall_a_live_pty ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok
test session::user_host::tests::exhausted_pool_drains_live_ptys_during_random_session_churn ... ok
test terminal::checks::snapshot_during_discard_preserves_the_unfinished_string_boundary ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test pty::handoff::tests::all_masters_survive_original_owner_drop_with_cloexec ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test session::user_host::tests::large_geometry_cannot_defer_a_long_first_snapshot_reflow_queue ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test session::user_host::tests::geometry_transcript_property_cases_match_eager_native_state ... ok
test terminal::host_budget::erased_history_reset_and_geometry_return_native_memory ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::host_budget::page_nodes_never_fill_the_ordinary_data_cap ... ok
test terminal::host_budget::shared_host_budget_bounds_the_sum_and_keeps_every_terminal_exact ... ok
test terminal::host_budget::every_history_share_fills_and_recycles_inside_its_reservation ... ok
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::ppu_memory_bench::fresh_shell_filler_snapshot_gap_is_independent_of_allocator_refusal ... ok
test terminal::ppu_memory_bench::native_session_allocations_settle_after_geometry_warmup ... ignored, perf VM only: native heap/resident accounting; set PPU_VT_ACCOUNT_SESSIONS
test terminal::ppu_memory_bench::quiet_resize_churn_does_not_keep_new_resident_pools ... ignored, perf VM only: sparse resize ownership at 900 quiet sessions
test terminal::ppu_memory_bench::small_history_does_not_retain_megabyte_page_quanta ... ignored, perf VM only: sparse history residency and native ownership
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test session::user_host::tests::pool_usage_never_exceeds_cap_under_open_write_close_sequences ... ok
test terminal::checks::control_strings_cannot_grow_session_carry_without_bound ... ok
test terminal::review_r2::review_r2_escape_high_byte_does_not_start_a_hidden_string ... ok
test terminal::host_budget::report_native_memory_numbers ... ok
test terminal::review_r2::review_r2_escape_command_inside_discard_matches_short_string ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::review_r2::review_r2_resize_storm_does_not_ratchet_native_memory ... ok
test terminal::host_budget::widening_a_full_history_stays_inside_its_share ... ok
test terminal::review_r2::review_r2_limiter_is_transparent_for_short_control_mixtures ... ok
test terminal::review_r2::review_r2_resize_with_full_history_share_stays_exact ... ok
test terminal::review_r3::review_r3_four_hundred_laptop_screens_fit_the_host ... ok
test terminal::review_r2::review_r2_host_history_share_fits_the_native_reservation ... ok
test terminal::host_budget::laptop_screens_come_from_their_floors_not_the_pool ... ok
test terminal::review_r2::review_r2_ground_c1_introducer_stays_within_the_session_share ... ok
test terminal::review_r3::review_r3_bounded_terminal_reflows_long_mixed_history ... ok
test terminal::review_r3::review_r3_recycled_unwrapped_history_keeps_exact_snapshot ... ok
test terminal::review_r3::review_r3_host_accounting_balances_through_recovery ... ok
test terminal::review_r3::review_r3_history_share_without_ris_never_refuses ... ok
test terminal::user_screen_pool_resize::taller_widening_keeps_history_rows_that_move_onto_the_screen ... ok
test terminal_limits::c1_tests::c1_string_inside_csi_has_a_seven_bit_replay_boundary ... ok
test terminal_limits::defensive_tests::executed_c0_between_escape_and_introducer_keeps_the_bound ... ok
test terminal_limits::tests::escape_after_discard_restarts_without_losing_the_next_command ... ok
test terminal_limits::tests::finite_sequences_are_identical_for_every_fragment_boundary ... ok
test terminal_limits::tests::fragmented_overflow_stays_discarded_until_a_real_terminator ... ok
test terminal_memory::payload_tests::oversized_payload_is_refused_before_allocation_while_tagged_pool_is_allowed ... ok
test terminal_memory::payload_tests::residency_query_observes_only_owned_page_mappings_without_faulting_payload ... ok
test terminal_memory::tests::allocation_budget_includes_overhead_and_refusal_is_recoverable ... ok
test terminal_memory::tests::screen_pages_are_zero_filled_and_page_aligned ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok
test terminal_native::owned_memory_tests::refused_resize_reclaims_every_owned_native_allocation ... ok
test terminal_native::owned_memory_tests::refusal_inside_reflow_never_touches_freed_pages ... ok
test terminal::review_r3::review_r3_noisy_neighbour_does_not_make_quiet_sessions_approximate ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::review_r3::review_r3_recycled_history_matches_unbounded_reference ... ok
test terminal::review_r3::review_r3_thousand_sessions_and_one_flood ... ok
test terminal::review_r3::review_r3_hundred_laptop_sessions_keep_exact_state ... ok
test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact has been running for over 60 seconds
test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact ... ok

test result: ok. 199 passed; 0 failed; 19 ignored; 0 measured; 0 filtered out; finished in 101.07s

(shim process-per-user: 182s)

==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-server v0.1.0 (*)
         │   │   │   │   └── infraternal-session v0.1.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-canvas v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   ├── infraternal-server v0.1.0 (*)
         │   └── infraternal-session v0.1.0
         ├── (build) infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-canvas v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   ├── infraternal-plugin-ssh v0.1.0
                     │   │   ├── infraternal v0.1.0 (*)
                     │   │   ├── infraternal-fuzz v0.1.0 (*)
                     │   │   ├── infraternal-server v0.1.0
                     │   │   │   ├── infraternal v0.1.0 (*)
                     │   │   │   └── infraternal-fuzz v0.1.0 (*)
                     │   │   └── infraternal-session v0.1.0
                     │   └── infraternal-server v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   ├── infraternal-fuzz v0.1.0 (*)
                     │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   ├── infraternal-server v0.1.0 (*)
     │   │   │       │   └── infraternal-session v0.1.0
     │   │   │       ├── (build) infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-canvas v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.46
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.16
             └── rustls v0.23.46 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   └── infraternal-session v0.1.0
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   ├── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-session v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── infraternal-plugin-remote v0.1.0 (*)
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.46
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.16
     │               └── rustls v0.23.46 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-canvas v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── (dev) infraternal-status v0.1.0
         │   └── infraternal v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   └── infraternal-session v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-canvas v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   │   ├── infraternal-server v0.1.0 (*)
             │   │   │   │   └── infraternal-session v0.1.0
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-canvas v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:200:1
    │  
200 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
201 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-server v0.1.0
          │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   └── infraternal-session v0.1.0
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   ├── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-session v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── infraternal-plugin-remote v0.1.0 (*)
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.46
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.16
          │               └── rustls v0.23.46 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-canvas v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── (dev) infraternal-status v0.1.0
              │   └── infraternal v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:202:1
    │  
202 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
204 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   ├── infraternal-plugin-ssh v0.1.0
              │   │   ├── infraternal v0.1.0 (*)
              │   │   ├── infraternal-fuzz v0.1.0 (*)
              │   │   ├── infraternal-server v0.1.0
              │   │   │   ├── infraternal v0.1.0 (*)
              │   │   │   └── infraternal-fuzz v0.1.0 (*)
              │   │   └── infraternal-session v0.1.0
              │   └── infraternal-server v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:205:1
    │  
205 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:207:1
    │  
207 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
208 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
209 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │   └── infraternal-session v0.1.0
      │   │       ├── (build) infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   ├── infraternal-plugin-ssh v0.1.0
      │               │   │   ├── infraternal v0.1.0 (*)
      │               │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   │   ├── infraternal-server v0.1.0
      │               │   │   │   ├── infraternal v0.1.0 (*)
      │               │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │   │   └── infraternal-session v0.1.0
      │               │   └── infraternal-server v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-session v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.46
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.16
      │   │               └── rustls v0.23.46 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── (dev) infraternal-status v0.1.0
      │       │   └── infraternal v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:251:1
    │  
251 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
252 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   ├── infraternal-server v0.1.0 (*)
      │           │   │   └── infraternal-session v0.1.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   ├── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-session v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-canvas v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── infraternal-plugin-canvas v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   ├── infraternal-server v0.1.0
      │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   └── infraternal-session v0.1.0
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-canvas v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       └── infraternal-shim v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-fuzz v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── infraternal-server v0.1.0 (*)
      │           └── infraternal-session v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── (build) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.46
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.16
      │       │   │           └── rustls v0.23.46 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── (dev) infraternal-status v0.1.0
      │       │   │       │   └── infraternal v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.46 (*)
      │       │           └── rustls-webpki v0.103.16 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.46 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.3
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:254:1
    │  
254 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
255 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   ├── infraternal-server v0.1.0
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   └── infraternal-session v0.1.0
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:257:1
    │  
257 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
258 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   ├── infraternal-server v0.1.0
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-session v0.1.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:259:1
    │  
259 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
260 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   ├── infraternal-plugin-ssh v0.1.0
          │       │   │   ├── infraternal v0.1.0 (*)
          │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │   │   ├── infraternal-server v0.1.0
          │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │   │   └── infraternal-session v0.1.0
          │       │   └── infraternal-server v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-canvas v0.1.0
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:317:1
    │  
317 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
318 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── infraternal-plugin-remote v0.1.0
          │   ├── infraternal v0.1.0
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0
          │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-server v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   └── infraternal-session v0.1.0
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-fuzz v0.1.0 (*)
          │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.46
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.16
              └── rustls v0.23.46 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   ├── infraternal-plugin-ssh v0.1.0
      │               │       │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   ├── infraternal-server v0.1.0
      │               │       │   │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   └── infraternal-session v0.1.0
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-canvas v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               ├── infraternal v0.1.0 (*)
      │               └── infraternal-shim v0.1.0
      │                   ├── infraternal v0.1.0 (*)
      │                   ├── infraternal-agent v0.1.0 (*)
      │                   ├── infraternal-fuzz v0.1.0 (*)
      │                   ├── infraternal-plugin-remote v0.1.0 (*)
      │                   ├── infraternal-plugin-ssh v0.1.0 (*)
      │                   ├── infraternal-server v0.1.0 (*)
      │                   └── infraternal-session v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.3
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-canvas v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── infraternal-shim v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.3 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.3 (*)
      ├── tokio v1.53.3 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok
(cargo-deny: 2s)

==> static builds
x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently
native compiler metadata: path independent; platform/date retained; unexpected syntax refused
Rust remapping: differently named checkout roots produce identical stripped artifacts
.
----------------------------------------------------------------------
Ran 1 test in 0.002s

OK
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.26
   Compiling libc v0.2.190
   Compiling cfg-if v1.0.5
   Compiling find-msvc-tools v0.1.14
   Compiling shlex v2.0.1
   Compiling serde v1.0.229
   Compiling autocfg v1.5.1
   Compiling pin-project-lite v0.2.17
   Compiling serde_core v1.0.229
   Compiling cc v1.6.0
   Compiling version_check v0.9.5
   Compiling vcpkg v0.2.15
   Compiling generic-array v0.14.7
   Compiling bytes v1.12.1
   Compiling pkg-config v0.3.34
   Compiling memchr v2.8.3
   Compiling icu_normalizer_data v2.3.0
   Compiling icu_properties_data v2.3.0
   Compiling once_cell v1.21.4
   Compiling log v0.4.34
   Compiling itoa v1.0.18
   Compiling syn v3.0.6
   Compiling syn v2.0.119
   Compiling tracing-core v0.1.36
   Compiling futures-core v0.3.34
   Compiling errno v0.3.14
   Compiling socket2 v0.6.5
   Compiling stable_deref_trait v1.2.1
   Compiling signal-hook-registry v1.4.8
   Compiling mio v1.2.4
   Compiling smallvec v1.16.2
   Compiling thiserror v2.0.21
   Compiling futures-sink v0.3.34
   Compiling slab v0.4.12
   Compiling parking_lot_core v0.9.12
   Compiling subtle v2.6.1
   Compiling zmij v1.0.23
   Compiling typenum v1.20.1
   Compiling num-traits v0.2.19
   Compiling crossbeam-utils v0.8.23
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling tracing-attributes v0.1.31
   Compiling synstructure v0.14.0
   Compiling displaydoc v0.2.7
   Compiling zerovec-derive v0.11.6
   Compiling serde_derive v1.0.229
   Compiling tokio-macros v2.7.2
   Compiling tracing v0.1.44
   Compiling thiserror-impl v2.0.21
   Compiling zerofrom-derive v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling tokio v1.53.3
   Compiling zerofrom v0.1.8
   Compiling utf8_iter v1.0.4
   Compiling yoke v0.8.3
   Compiling crypto-common v0.1.7
   Compiling zerovec v0.11.8
   Compiling zerotrie v0.2.5
   Compiling block-buffer v0.10.4
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling icu_locale_core v2.3.0
   Compiling icu_collections v2.3.0
   Compiling equivalent v1.0.2
   Compiling percent-encoding v2.3.2
   Compiling icu_provider v2.3.1
   Compiling digest v0.10.7
   Compiling scopeguard v1.2.0
   Compiling lock_api v0.4.14
   Compiling icu_normalizer v2.3.0
   Compiling icu_properties v2.3.0
   Compiling futures-macro v0.3.34
   Compiling libsqlite3-sys v0.30.1
   Compiling cpufeatures v0.2.17
   Compiling futures-io v0.3.34
   Compiling futures-task v0.3.34
   Compiling hashbrown v0.17.1
   Compiling futures-util v0.3.34
   Compiling idna_adapter v1.2.2
   Compiling form_urlencoded v1.2.2
   Compiling indexmap v2.14.2
   Compiling sha2 v0.10.9
   Compiling idna v1.1.0
   Compiling openssl-src v300.6.1+3.6.3
   Compiling serde_json v1.0.151
   Compiling allocator-api2 v0.2.21
   Compiling foldhash v0.1.5
   Compiling openssl-sys v0.9.117
   Compiling hashbrown v0.15.5
   Compiling url v2.5.8
   Compiling parking_lot v0.12.5
   Compiling futures-channel v0.3.34
   Compiling heck v0.5.0
   Compiling cfg_aliases v0.2.2
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling event-listener v5.4.2
   Compiling crc v3.4.0
   Compiling futures-intrusive v0.5.0
   Compiling crossbeam-queue v0.3.14
   Compiling hashlink v0.10.0
   Compiling either v1.18.0
   Compiling spin v0.9.9
   Compiling tokio-stream v0.1.19
   Compiling ryu v1.0.23
   Compiling bitflags v2.13.2
   Compiling rand_core v0.10.1
   Compiling base64 v0.22.1
   Compiling serde_urlencoded v0.7.1
   Compiling atoi v2.0.0
   Compiling flume v0.11.1
   Compiling sqlx-core v0.8.6
   Compiling futures-executor v0.3.34
   Compiling zerocopy v0.8.60
   Compiling getrandom v0.4.3
   Compiling sqlx-sqlite v0.8.6
   Compiling zerocopy-derive v0.8.60
   Compiling getrandom v0.2.17
   Compiling dotenvy v0.15.7
   Compiling hex v0.4.3
   Compiling sqlx-macros-core v0.8.6
   Compiling sqlx-macros v0.8.6
   Compiling foreign-types-shared v0.1.1
   Compiling openssl v0.10.81
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api)
   Compiling foreign-types v0.3.2
   Compiling openssl-macros v0.1.1
   Compiling http v1.5.0
   Compiling memoffset v0.9.1
   Compiling nix v0.30.1
   Compiling ring v0.17.14
   Compiling getrandom v0.3.4
   Compiling ppv-lite86 v0.2.21
   Compiling uuid v1.27.0
   Compiling zeroize v1.9.0
   Compiling num-conv v0.2.2
   Compiling untrusted v0.9.0
   Compiling thiserror v1.0.69
   Compiling utf8parse v0.2.2
   Compiling httparse v1.10.1
   Compiling minimal-lexical v0.2.1
   Compiling arrayvec v0.7.8
   Compiling time-core v0.1.9
   Compiling nom v7.1.3
   Compiling time-macros v0.2.32
   Compiling anstyle-parse v1.0.0
   Compiling rand_core v0.9.5
   Compiling rustls-pki-types v1.15.1
   Compiling http-body v1.1.0
   Compiling thiserror-impl v1.0.69
   Compiling synstructure v0.13.2
   Compiling cpufeatures v0.3.1
   Compiling anstyle v1.0.14
   Compiling deranged v0.5.8
   Compiling powerfmt v0.2.1
   Compiling colorchoice v1.0.5
   Compiling rustls v0.23.46
   Compiling is_terminal_polyfill v1.70.2
   Compiling tinyvec v1.13.3
   Compiling anstyle-query v1.1.5
   Compiling time v0.3.55
   Compiling anstream v1.0.0
   Compiling asn1-rs-derive v0.5.1
   Compiling chacha20 v0.10.2
   Compiling rand_chacha v0.9.0
   Compiling rusticata-macros v4.1.0
   Compiling quinn-udp v0.5.16
   Compiling tokio-util v0.7.19
   Compiling asn1-rs-impl v0.2.0
   Compiling clap_lex v1.1.1
   Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-protocol)
   Compiling tower-service v0.3.3
   Compiling tokio-openssl v0.6.5
   Compiling strsim v0.11.1
   Compiling data-encoding v2.11.1
   Compiling asn1-rs v0.6.2
   Compiling clap_builder v4.6.7
   Compiling rand v0.9.5
   Compiling rand v0.10.3
   Compiling rand_core v0.6.4
   Compiling rand_pcg v0.10.2
   Compiling quinn v0.11.12
   Compiling clap_derive v4.6.7
   Compiling num-integer v0.1.47
   Compiling rustls-webpki v0.103.16
   Compiling pastey v0.1.1
   Compiling httpdate v1.0.3
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim)
   Compiling try-lock v0.2.5
   Compiling base64 v0.21.7
   Compiling lazy_static v1.5.1
   Compiling rustc-hash v2.1.3
   Compiling atomic-waker v1.1.2
   Compiling oid-registry v0.7.1
   Compiling lru-slab v0.1.3
   Compiling fnv v1.0.7
   Compiling base64urlsafedata v0.5.5
   Compiling h2 v0.4.19
   Compiling clap v4.6.7
   Compiling want v0.3.2
   Compiling num-bigint v0.4.8
   Compiling vte v0.15.0
   Compiling unicase v2.10.0
   Compiling webauthn-attestation-ca v0.5.5
   Compiling tower-layer v0.3.3
   Compiling mime v0.3.17
   Compiling rustversion v1.0.23
   Compiling hyper v1.11.1
   Compiling mime_guess v2.0.5
   Compiling der-parser v9.0.0
   Compiling quinn-proto v0.11.19
   Compiling http-body-util v0.1.5
   Compiling half v2.7.1
   Compiling sha1 v0.10.7
   Compiling fs-err v3.3.2
   Compiling webauthn-rs-core v0.5.5
   Compiling sync_wrapper v1.0.2
   Compiling regex-syntax v0.8.11
   Compiling tungstenite v0.29.0
   Compiling serde_cbor_2 v0.13.0
   Compiling hyper-util v0.1.21
   Compiling regex-automata v0.4.18
   Compiling x509-parser v0.16.0
   Compiling webauthn-rs-proto v0.5.5
   Compiling rand_chacha v0.3.1
   Compiling hex-conservative v0.2.3
   Compiling base64ct v1.8.3
   Compiling password-hash v0.5.0
   Compiling rand v0.8.8
   Compiling bitcoin_hashes v0.14.101
   Compiling matchers v0.2.0
   Compiling arc-swap v1.9.2
   Compiling tokio-tungstenite v0.29.0
   Compiling tower v0.5.3
   Compiling axum-core v0.5.6
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-server)
   Compiling blake2 v0.10.6
   Compiling tracing-serde v0.2.0
   Compiling tracing-log v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling thread_local v1.1.10
   Compiling http-range-header v0.4.2
   Compiling matchit v0.8.4
   Compiling nu-ansi-term v0.50.3
   Compiling tower-http v0.6.11
   Compiling axum v0.8.9
   Compiling tracing-subscriber v0.3.23
   Compiling argon2 v0.5.3
   Compiling bip39 v2.2.2
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal)
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-status)
   Compiling sqlx v0.8.6
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-mesh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/host-facts)
   Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/release)
   Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/canvas)
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/relay)
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/backup)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/mesh)
   Compiling axum-server v0.8.0
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote)
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-agent)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh)
    Finished `release` profile [optimized] target(s) in 8m 14s
AES-128-GCM NIST vector encrypt/decrypt passed
production trust: PASS (staging-trust authority absent)
/home/agent/.cache/codex-scratch/review-setup-token-r2/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21400400 bytes; cap: 21400400 bytes; delta: +0 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Key memory initialization=1; locked pages and dump exclusion enabled
   Compiling cfg-if v1.0.5
   Compiling libc v0.2.190
   Compiling pin-project-lite v0.2.17
   Compiling serde_core v1.0.229
   Compiling bytes v1.12.1
   Compiling serde v1.0.229
   Compiling memchr v2.8.3
   Compiling once_cell v1.21.4
   Compiling log v0.4.34
   Compiling itoa v1.0.18
   Compiling tracing-core v0.1.36
   Compiling futures-core v0.3.34
   Compiling zerofrom v0.1.8
   Compiling stable_deref_trait v1.2.1
   Compiling smallvec v1.16.2
   Compiling futures-sink v0.3.34
   Compiling yoke v0.8.3
   Compiling tracing v0.1.44
   Compiling subtle v2.6.1
   Compiling slab v0.4.12
   Compiling socket2 v0.6.5
   Compiling errno v0.3.14
   Compiling mio v1.2.4
   Compiling zerovec v0.11.8
   Compiling generic-array v0.14.7
   Compiling typenum v1.20.1
   Compiling signal-hook-registry v1.4.8
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling tokio v1.53.3
   Compiling num-traits v0.2.19
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling zerotrie v0.2.5
   Compiling utf8_iter v1.0.4
   Compiling icu_locale_core v2.3.0
   Compiling icu_normalizer_data v2.3.0
   Compiling icu_properties_data v2.3.0
   Compiling equivalent v1.0.2
   Compiling icu_collections v2.3.0
   Compiling crypto-common v0.1.7
   Compiling block-buffer v0.10.4
   Compiling percent-encoding v2.3.2
   Compiling digest v0.10.7
   Compiling thiserror v2.0.21
   Compiling hashbrown v0.17.1
   Compiling futures-io v0.3.34
   Compiling futures-task v0.3.34
   Compiling form_urlencoded v1.2.2
   Compiling futures-util v0.3.34
   Compiling icu_provider v2.3.1
   Compiling cpufeatures v0.2.17
   Compiling scopeguard v1.2.0
   Compiling indexmap v2.14.2
   Compiling zmij v1.0.23
   Compiling serde_json v1.0.151
   Compiling lock_api v0.4.14
   Compiling icu_normalizer v2.3.0
   Compiling icu_properties v2.3.0
   Compiling parking_lot_core v0.9.12
   Compiling futures-channel v0.3.34
   Compiling openssl-sys v0.9.117
   Compiling crossbeam-utils v0.8.23
   Compiling bitflags v2.13.2
   Compiling rand_core v0.10.1
   Compiling idna_adapter v1.2.2
   Compiling foldhash v0.1.5
   Compiling allocator-api2 v0.2.21
   Compiling idna v1.1.0
   Compiling hashbrown v0.15.5
   Compiling parking_lot v0.12.5
   Compiling either v1.18.0
   Compiling crc-catalog v2.5.0
   Compiling parking v2.2.1
   Compiling base64 v0.22.1
   Compiling crc v3.4.0
   Compiling url v2.5.8
   Compiling event-listener v5.4.2
   Compiling futures-intrusive v0.5.0
   Compiling zerocopy v0.8.60
   Compiling getrandom v0.4.3
   Compiling hashlink v0.10.0
   Compiling tokio-stream v0.1.19
   Compiling crossbeam-queue v0.3.14
   Compiling spin v0.9.9
   Compiling sha2 v0.10.9
   Compiling libsqlite3-sys v0.30.1
   Compiling getrandom v0.2.17
   Compiling ryu v1.0.23
   Compiling flume v0.11.1
   Compiling sqlx-core v0.8.6
   Compiling serde_urlencoded v0.7.1
   Compiling futures-executor v0.3.34
   Compiling atoi v2.0.0
   Compiling foreign-types-shared v0.1.1
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api)
   Compiling http v1.5.0
   Compiling foreign-types v0.3.2
   Compiling memoffset v0.9.1
   Compiling getrandom v0.3.4
   Compiling ring v0.17.14
   Compiling nix v0.30.1
   Compiling uuid v1.27.0
   Compiling zeroize v1.9.0
   Compiling ppv-lite86 v0.2.21
   Compiling utf8parse v0.2.2
   Compiling arrayvec v0.7.8
   Compiling untrusted v0.9.0
   Compiling minimal-lexical v0.2.1
   Compiling thiserror v1.0.69
   Compiling nom v7.1.3
   Compiling anstyle-parse v1.0.0
   Compiling httparse v1.10.1
   Compiling rand_core v0.9.5
   Compiling rustls-pki-types v1.15.1
   Compiling http-body v1.1.0
   Compiling time-core v0.1.9
   Compiling colorchoice v1.0.5
   Compiling deranged v0.5.8
   Compiling powerfmt v0.2.1
   Compiling is_terminal_polyfill v1.70.2
   Compiling num-conv v0.2.2
   Compiling anstyle v1.0.14
   Compiling anstyle-query v1.1.5
   Compiling tinyvec v1.13.3
   Compiling anstream v1.0.0
   Compiling time v0.3.55
   Compiling rusticata-macros v4.1.0
   Compiling rand_chacha v0.9.0
   Compiling tokio-util v0.7.19
   Compiling chacha20 v0.10.2
   Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-protocol)
   Compiling rustls v0.23.46
   Compiling tower-service v0.3.3
   Compiling clap_lex v1.1.1
   Compiling strsim v0.11.1
   Compiling data-encoding v2.11.1
   Compiling asn1-rs v0.6.2
   Compiling clap_builder v4.6.7
   Compiling quinn-udp v0.5.16
   Compiling rand v0.10.3
   Compiling rustls-webpki v0.103.16
   Compiling rand v0.9.5
   Compiling rand_core v0.6.4
   Compiling rand_pcg v0.10.2
   Compiling num-integer v0.1.47
   Compiling lru-slab v0.1.3
   Compiling fnv v1.0.7
   Compiling httpdate v1.0.3
   Compiling base64 v0.21.7
   Compiling rustc-hash v2.1.3
   Compiling lazy_static v1.5.1
   Compiling atomic-waker v1.1.2
   Compiling try-lock v0.2.5
   Compiling h2 v0.4.19
   Compiling want v0.3.2
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim)
   Compiling clap v4.6.7
   Compiling base64urlsafedata v0.5.5
   Compiling num-bigint v0.4.8
   Compiling oid-registry v0.7.1
   Compiling quinn v0.11.12
   Compiling vte v0.15.0
   Compiling tower-layer v0.3.3
   Compiling quinn-proto v0.11.19
   Compiling mime v0.3.17
   Compiling hyper v1.11.1
   Compiling der-parser v9.0.0
   Compiling http-body-util v0.1.5
   Compiling half v2.7.1
   Compiling sha1 v0.10.7
   Compiling regex-syntax v0.8.11
   Compiling sync_wrapper v1.0.2
   Compiling tungstenite v0.29.0
   Compiling fs-err v3.3.2
   Compiling serde_cbor_2 v0.13.0
   Compiling regex-automata v0.4.18
   Compiling hyper-util v0.1.21
   Compiling x509-parser v0.16.0
   Compiling mime_guess v2.0.5
   Compiling webauthn-rs-proto v0.5.5
   Compiling rand_chacha v0.3.1
   Compiling hex-conservative v0.2.3
   Compiling unicase v2.10.0
   Compiling base64ct v1.8.3
   Compiling hex v0.4.3
   Compiling bitcoin_hashes v0.14.101
   Compiling password-hash v0.5.0
   Compiling rand v0.8.8
   Compiling matchers v0.2.0
   Compiling arc-swap v1.9.2
   Compiling tokio-tungstenite v0.29.0
   Compiling tower v0.5.3
   Compiling axum-core v0.5.6
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling blake2 v0.10.6
   Compiling tracing-serde v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling tracing-log v0.2.0
   Compiling thread_local v1.1.10
   Compiling nu-ansi-term v0.50.3
   Compiling matchit v0.8.4
   Compiling http-range-header v0.4.2
   Compiling tracing-subscriber v0.3.23
   Compiling axum v0.8.9
   Compiling tower-http v0.6.11
   Compiling argon2 v0.5.3
   Compiling bip39 v2.2.2
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal)
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-status)
   Compiling sqlx-sqlite v0.8.6
   Compiling sqlx v0.8.6
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-mesh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/host-facts)
   Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/release)
   Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/canvas)
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/backup)
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/relay)
   Compiling openssl v0.10.81
   Compiling tokio-openssl v0.6.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-core v0.5.5
   Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/mesh)
   Compiling axum-server v0.8.0
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote)
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-agent)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh)
    Finished `release` profile [optimized] target(s) in 8m 32s
production trust: PASS (staging-trust authority absent)
/home/agent/.cache/codex-scratch/review-setup-token-r2/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 19575064 bytes; cap: 19575064 bytes; delta: +0 bytes
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
x86_64-unknown-linux-musl: exact 21400400-byte cap PASS; 21400401 bytes rejected PASS; smaller artifact requires ratchet PASS
aarch64-unknown-linux-musl: exact 19575064-byte cap PASS; 19575065 bytes rejected PASS; smaller artifact requires ratchet PASS
unsupported target: rejected PASS
bun test v1.4.2 (744846f84)

scripts/release/static-metadata-review.test.ts:
(pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [48.95ms]
(pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [45.53ms]

 2 pass
 0 fail
 16 expect() calls
Ran 2 tests across 1 file. [114.00ms]
server subcommand: exit 2, versioned JSON unavailable result
agent group: exit 0, one parsed versioned JSON listing of its commands
(static builds: 1045s)

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

==> Compiler metadata generator checks
bun test v1.4.2 (744846f84)

scripts/release/build-metadata.test.ts:
(pass) native metadata canonicalization retains version fields and refuses changed syntax [31.39ms]
(pass) Rust and cached target compiles receive every environment remap [440.63ms]

 2 pass
 0 fail
 121 expect() calls
Ran 2 tests across 1 file. [493.00ms]

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

+ @types/bun@1.3.8
+ @types/node@22.19.0
+ @types/ws@8.5.10
+ playwright@1.61.1
+ typescript@5.9.3
+ ws@8.18.3
+ @scure/bip39@2.2.0
+ geist@1.7.2

38 packages installed [687.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [23.19ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [21.17ms]
(pass) layout review fixtures ship only in explicitly enabled preview builds [7237.60ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [3.99ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.13ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.11ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.19ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.12ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.23ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.38ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.10ms]

src/stale-screen.test.ts:
(pass) a program that redraws after reattach never shows the note, not for a frame [0.49ms]
(pass) a redraw that arrived before the replay painted needs no wait at all [0.06ms]
(pass) a shell that stays silent shows the note once the wait has run out [0.07ms]
(pass) output that arrives later clears the note [0.05ms]
(pass) a dropped link takes the note down and cancels a wait that has not ended [0.04ms]
(pass) the wait grows with the round trip and stays bounded [0.11ms]

src/synchronized-output.test.ts:
(pass) synchronized terminal output > recognizes a private mode split across byte and string writes [1.06ms]
(pass) synchronized terminal output > preserves mode transitions for every pair of input chunk boundaries [2.27ms]
(pass) synchronized terminal output > ignores CSI-looking bytes inside control strings and other mode numbers [0.18ms]
(pass) synchronized terminal output > RIS clears an active mode [0.16ms]
(pass) synchronized terminal output > bounds an unfinished control sequence [0.23ms]
(pass) synchronized terminal output > paints queued output on the first frame after reset and timeout release [0.45ms]

src/terminal-fit-lifecycle.test.ts:
(pass) a queued fit stops when the terminal becomes closed [0.47ms]
(pass) a queued fit stops when the terminal becomes suspended [0.08ms]
(pass) a queued fit stops when the terminal becomes frozen [0.02ms]

src/account-storage.test.ts:
(pass) clearing one account leaves a second account and device preferences alone [0.80ms]
(pass) the last-account pointer of another account stays [0.09ms]
(pass) an unknown account clears every account's data and keeps preferences [0.19ms]
(pass) coalesced account writes stop permanently before sign-out clears storage [0.52ms]

src/offline-drawing.test.ts:
(pass) cached identity needs a matching layout and sign-out removes it [2.77ms]
(pass) sign-in caches only public drawing labels [0.27ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.34ms]
(pass) repeating the front item changes nothing [0.05ms]
(pass) the list is capped, so the oldest items fall off [0.06ms]
(pass) top skips items that are no longer live, without losing them [0.07ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.21ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.08ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.07ms]

src/canvas/status.test.ts:
(pass) a lost server connection is an error toast, never a success tick [0.94ms]
(pass) routine connection states stay out of the toast [0.11ms]
(pass) repeated connection closes do not reopen the persistent reason toast [0.11ms]
(pass) a repeated close does not retake the shared toast after a newer message replaces it [0.32ms]
(pass) a close reason stays visible through a quick reconnect and clears after a stable attach [674.65ms]

src/canvas/toolbar/palette-actions.test.ts:
(pass) a deferred split:right selection retains its original window [0.65ms]
(pass) a deferred new:below selection retains its original window [0.20ms]
(pass) a deferred close selection retains its original window [0.05ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [1.18ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.26ms]
(pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.37ms]
(pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.26ms]
(pass) facts the host did not report are omitted by default, not shown as unknown [0.15ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.23ms]
(pass) before facts arrive the host's platform names the header [0.08ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.08ms]

src/canvas/windows/session-hooks.test.ts:
(pass) a failed idle warm-up shows no toast and retries when the browser is back online [11.26ms]
(pass) a failed open shows the toast, and opening again after the network returns succeeds [11.01ms]
(pass) an open that joins a failing idle warm-up still shows the toast [5.53ms]

src/canvas/mesh/api-retry-budget.test.ts:
(pass) a retained watch outage bounds retry requests over two logical minutes [2.81ms]

src/canvas/mesh/layout-model.test.ts:
(pass) a pin moved by another device invalidates a same-count pin cache [1.53ms]
(pass) a recovered graph owns its node positions independently [0.22ms]
(pass) a negative pin is drawn by shifting the whole graph by whole grid cells; no pin is rewritten [0.26ms]
(pass) with no negative pin the origin is zero and nothing shifts [0.13ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [1.02ms]
(pass) without `access` (today's server) the person may view and may not edit [0.32ms]
(pass) fields the server does not send are absent, never invented [0.27ms]
(pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.09ms]
(pass) anything that is not a list is refused, whole [3.46ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.21ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.39ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.11ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.10ms]

src/canvas/mesh/api-recovery.test.ts:
(pass) failed watch refreshes retain one subscription through retry and release it on disposal [1.86ms]
(pass) a synchronous subscription refusal leaves retry able to install a new watch [0.42ms]
(pass) a changed Mesh revision refreshes a renamed host in the existing view model [0.58ms]
(pass) a pushed recovery cancels the scheduled retry [0.44ms]
(pass) a pushed recovery supersedes an outstanding retry failure [0.52ms]
(pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.69ms]
(pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.19ms]
(pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.65ms]
(pass) a forbidden withdrawal cancels retry work from the retained watch [0.42ms]
(pass) a withdrawn view ignores an earlier outstanding retry result [0.41ms]
(pass) initial Mesh list handles closed transport [0.30ms]
(pass) initial Mesh list handles liveness deadline [0.06ms]
(pass) initial Mesh list handles unreadable JSON [0.10ms]
(pass) initial Mesh list handles unavailable storage [0.21ms]
(pass) initial Mesh list handles forbidden action [0.28ms]
(pass) initial Mesh list handles invalid stored host [0.16ms]
(pass) Mesh watch withdrawal handles forbidden [0.29ms]
(pass) Mesh watch withdrawal handles mesh unavailable [0.04ms]
(pass) Mesh watch withdrawal handles plugin unavailable [0.04ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.47ms]
(pass) the layout is deterministic and does not depend on input order [3.61ms]
(pass) no two cards overlap, and every card lies inside the graph [7.65ms]
(pass) the sheet is wider than tall, roughly 16:10 [2.16ms]
(pass) a pinned node stays where it was put and the others do not move [2.86ms]
(pass) a pin beyond the sheet grows the graph [0.45ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.30ms]
(pass) 1,000 nodes lay out in a few milliseconds [12.87ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.56ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.26ms]
(pass) a view taller than the viewport is scaled down so it fits [0.06ms]
(pass) nearestStop picks the stop whose centre is closest [0.21ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.31ms]
(pass) a small graph keeps one stop per node column [0.18ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.09ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.32ms]
(pass) D309: with a floor, a narrow column gets a stop of its drawn width and each column is reachable [0.10ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.62ms]
(pass) closing the new half gives the layout back exactly, in the model [1.40ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.46ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.31ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.59ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.46ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.21ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.29ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.11ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.10ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [46.50ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.46ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.20ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.20ms]
(pass) a narrow right split grows both drawn tracks to the canonical minimum [0.11ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.88ms]
(pass) a chain of neighbours is pushed in turn [0.15ms]
(pass) display settlement clears disconnected overlaps while keeping its one anchor fixed [0.46ms]
(pass) review: a viewport width increase after settlement keeps the Settings anchor clear [0.53ms]
(pass) snapping rounds to whole cells [0.06ms]
(pass) reach follows grants through tags and keeps the relay [0.36ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.13ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.05ms]
(pass) a desktop column is the same alone and in a strip [0.02ms]
(pass) D309: a touch screen draws every column at least MIN_TOUCH_COLUMN wide, never wider than a lone column; a fine pointer has no floor [0.10ms]
(pass) D309: the content is as wide as the drawn columns, so the camera reaches every column [0.10ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [2.31ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.45ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.48ms]
(pass) superseded status snapshots release records for sessions this device never opened [1.38ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.21ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.26ms]
(pass) a final Close before the first positive census never revives a new ID [0.16ms]
(pass) a later absence retires a new ID after its first positive census [0.16ms]
(pass) another host's census cannot clear a new shell's census fence [0.14ms]
(pass) another host's close cannot clear a new shell's census fence [0.04ms]
(pass) shared membership marks windows open without any local attachment [0.58ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [0.97ms]
(pass) a detected operating system supplies the live popover mark [0.86ms]

src/canvas/sessions/live.test.ts:
(pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.51ms]
(pass) an enrolled host opens by UUID and splits keep that authority [0.25ms]
(pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.20ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.14ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.17ms]
(pass) an authoritative host snapshot replaces admission with one notification [0.27ms]
(pass) the embedded inventory identity still opens locally beside an equally named remote [0.16ms]
(pass) the embedded host's mark does not wait for an account name, and no account is invented [0.11ms]

src/canvas/sessions/hosts.test.ts:
(pass) fresh storage lists an offline host added by another browser [1.73ms]
(pass) every welcome reconciles without duplicate subscriptions or hosts [0.32ms]
(pass) a removal in another browser withdraws the host [0.24ms]
(pass) a malformed page cannot partially replace the authoritative inventory [0.32ms]
(pass) a socket-authority refusal withdraws previously admitted hosts [0.51ms]
(pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.55ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.51ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.22ms]

src/canvas/sessions/hosts-scale-review.test.ts:
(pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [20.79ms]
(pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [12.98ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [3.02ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.57ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.42ms]
(pass) oversized refusal JSON is ignored before parsing [0.22ms]

src/canvas/sessions/focus-intent.test.ts:
(pass) focusin supersedes every older focus intent [0.48ms]
(pass) pointerdown supersedes every older focus intent [0.04ms]
(pass) keydown supersedes every older focus intent [0.03ms]
(pass) input supersedes every older focus intent [0.02ms]

src/canvas/model/server-store.test.ts:
(pass) a negative drop on a 1,025-node mesh writes one pin, and the peer ends with every pin (#24) [46.27ms]
(pass) repeated pin moves reach both coordinate limits; the next move is refused and rolled back [4.20ms]
(pass) a layout gap or withdrawn worker requests one fresh snapshot with bounded backoff [3.11ms]
(pass) layout recovery restores Math.random after its virtual timer test [0.04ms]
(pass) event before Result and duplicate events do not apply an optimistic edit twice [0.99ms]
(pass) reconnect retries the exact request and an old receipt removes its optimistic overlay [1.00ms]
(pass) legacy import remains intact until canonical confirmation even if another device initialized [0.86ms]
(pass) dispose cancels late cache writes after sign-out [0.56ms]
(pass) a pending reference preserves unrelated edits across remote paints and is never sent [3.54ms]
(pass) closing an unsent shell removes its unresolved birth without blocking surviving children [1.38ms]
LAYOUT_RETRY_SCHEDULE subscribers=60 first_minute=753 following_5s=47 first_delay_slots=60
(pass) sixty withdrawn layout subscriptions spread their coalesced retry timers [30.36ms]
(pass) multi-subscriber retry scheduling restores Math.random [0.11ms]
(pass) an acknowledgement after its ordered event does not repaint the same layout [1.06ms]
(pass) review: a missing layout revision is recovered before the cached document is used again [0.74ms]
(pass) a bootstrap receipt before its canonical snapshot keeps the legacy layout drawable [1.41ms]
(pass) ready edits share one network round trip with a bounded in-flight window [1.51ms]
(pass) the optimistic semantic projection paints before any server receipt [0.94ms]
(pass) a no-op drawing capture does not trigger another paint [0.46ms]
(pass) an interrupted first load does not turn a revision-zero cache into an intentional empty layout [0.70ms]
(pass) review: a refused structural edit cannot strand later valid edits [1.01ms]
(pass) a definitive refusal paints rollback, persists it and never retries after reconnect [0.87ms]
(pass) a stale refusal cannot discard a new-connection retry [0.66ms]
(pass) review r2: refusal drains independent edits waiting behind four in-flight requests [2.16ms]
(pass) recovery coalesces gaps and errors, ignores operations until a snapshot, and survives reconnect [1.56ms]
(pass) a normal reconnect snapshot arrives before any replacement is requested [1.00ms]

src/canvas/model/review-null.test.ts:
(pass) a mixed nullable resize cannot invalidate the canonical drawing document [0.58ms]

src/canvas/model/operations.test.ts:
(pass) independent resize and move commute; close survives a stale move [0.66ms]
(pass) right split of a stack preserves the upper band [0.26ms]
(pass) reorder uses stable neighbours and emits no document [0.63ms]
(pass) a completed split emits its semantic intent rather than intermediate sizing edits [0.37ms]
(pass) a three-window reorder sends one semantic move [0.85ms]
(pass) a split before the first reference is journalled opens its anchor before splitting [0.92ms]
(pass) a drop sends the moved membership once, without derived neighbour geometry [0.92ms]
(pass) a narrow right split widens first so both halves remain valid [0.77ms]
(pass) a short down split grows the anchor first so both halves meet the height floor [0.94ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.69ms]
(pass) a document survives JSON and rebuilds the same columns [0.47ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.16ms]
(pass) parseDocument rejects anything that is not a document of this format [0.34ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.18ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.36ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.45ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.07ms]
(pass) D309: the saved weights do not depend on how a touch screen draws the columns [0.29ms]
(pass) D309: a view this device pushed clear for display is saved where the layout has it [0.14ms]
(pass) an offscreen graph keeps its shared pins before any nodes are rendered [0.31ms]
(pass) a captured graph document is independent of the next pin drag [0.09ms]

src/canvas/model/sync.test.ts:
(pass) a pending session never delays other edits or waits for a network receipt [1.26ms]
(pass) inventory includes shared memberships that this device cannot render [1.30ms]
(pass) temporary flow windows are never treated as unsubmitted shared windows [0.28ms]

src/canvas/model/review-span.test.ts:
(pass) a down split shifts every column in a transitively connected group [0.36ms]

src/canvas/model/reducer-property.test.ts:
layout property: 32 seeds, 4096 operations, 4015 accepted, zero divergences
(pass) property: accepted random operation sequences match the real server reducer [25873.58ms]

src/canvas/model/cache.test.ts:
(pass) damaged pending opens cannot stall offline drawing [3.28ms]
(pass) a valid unresolved reference remains local and replayable [0.63ms]
(pass) a valid offline journal is retained beyond a short burst [1.88ms]

src/canvas/model/review-boundary-r2.test.ts:
review r2 boundary comparison: 8 seeds, 4096 operations, 3198 accepted
(pass) review r2: longer boundary-weighted sequences preserve every accepted projection [1723.41ms]

src/canvas/model/reconcile.test.ts:
(pass) review: removing the current shared view selects a surviving camera anchor [3.17ms]
(pass) a remote negative pin and node update preserve the world position of an unchanged card [2.03ms]

src/canvas/model/journal.test.ts:
(pass) an offline birth keeps its identity through hydration and reference completion [1.59ms]

src/canvas/addhost/setup-feed.test.ts:
(pass) createSetupFeed > subscribes with the host and window, then hands over events in order [1.25ms]
(pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.49ms]
(pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.88ms]
(pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.76ms]
(pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.52ms]
(pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [46.48ms]
(pass) review reconnect budget survives sockets that open then close without events [46.60ms]
(pass) review explicit retry resumes after the setup feed stops [47.71ms]

src/canvas/addhost/wizard.breakit2.test.ts:
(pass) breakit2 an explicit port on a listed host survives chip resolution [0.73ms]
(pass) breakit2 malformed bracketed IPv6 waits for correction [0.16ms]
(pass) listed host plus port retains its saved user in the serialized destination [0.18ms]
(pass) review listed inventory name plus port retains its resolved address [0.25ms]

src/canvas/addhost/setup-stages.test.ts:
(pass) parseSetupEvent > reads a well-formed event [0.12ms]
(pass) parseSetupEvent > drops anything malformed [0.11ms]
(pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.07ms]
(pass) foldSetup > stages before the event's are done, later ones pending [0.22ms]
(pass) foldSetup > a stage that reports done alone still finishes [0.04ms]
(pass) foldSetup > ready done completes the run [0.05ms]
(pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.14ms]
(pass) foldSetup > uploading belongs to install and the readiness check to ready [0.06ms]
(pass) setupGuide > says the other sessions keep working and what to do next, in plain words [0.18ms]
(pass) review malformed setup fields are dropped without coercion errors [0.18ms]
(pass) exhausted setup preserves eligibility and explains a new setup [0.20ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.44ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.14ms]
(pass) parsing the server's data > an install command needs a lifetime [0.07ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.56ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.35ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.14ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.27ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.25ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.17ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.42ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.56ms]
(pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.43ms]
(pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.31ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [21.79ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.29ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.23ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.15ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.26ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.27ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.09ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.08ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.12ms]
(pass) authLabel > names the method and a trusted network provider only [0.05ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.29ms]
(pass) guideFor > each failure kind names its fix [0.12ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.03ms]
(pass) parseTarget > reads user, host and port [0.20ms]
(pass) parseTarget > reads a pasted ssh command into the same fields [0.29ms]
(pass) parseTarget > reads an ssh:// address [0.09ms]
(pass) parseTarget > refuses garbage around an ssh command [0.12ms]
(pass) parseTarget > refuses what cannot name a host [0.05ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.48ms]
(pass) parseSshConfig > recognises config text [0.07ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.13ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.08ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.13ms]
(pass) only a completed canonical host identity becomes terminal authority [0.15ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.11ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.06ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.07ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.03ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.03ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.03ms]
(pass) install diagnostics name the failed step and public host error [0.09ms]
(pass) missing payload tells the operator the architecture and expected server path [0.08ms]
(pass) an already added host says so and offers opening its existing terminal [0.33ms]
(pass) release payload verification names the architecture step and plain reason [0.04ms]
(pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.13ms]
(pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.09ms]
(pass) early terminal publication selects only its canonical host-bound shim session [0.14ms]

src/canvas/addhost/already-added-breakit.test.ts:
(pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.11ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.64ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.47ms]
(pass) ready CA begins the requested installation mode without another prompt [0.16ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.39ms]
(pass) a typed root login requires explicit consent before any installation [0.18ms]

src/canvas/views/body.test.ts:
(pass) a clean terminal exit keeps the window while host setup can still fail [0.07ms]
(pass) clean exits still close ordinary windows, and failed exits stay visible [0.02ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.76ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.72ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.38ms]
(pass) a chunk that both sides use stays critical [0.20ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.22ms]
(pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.15ms]
(pass) automatic canonical painting loads after the first canvas draw [0.22ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [3.88ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [3.32ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [3.49ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [20.57ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [20.45ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [11.27ms]
(pass) abandoned word acknowledgement uploads nothing [4.42ms]
(pass) settled acknowledgement cannot upload later (dismissed) [4.71ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [3.67ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [4.35ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [2.12ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [2.08ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [2.36ms]
(pass) malformed or excessive remaining wait -1 is denied [1.72ms]
(pass) malformed or excessive remaining wait 0.5 is denied [1.73ms]
(pass) malformed or excessive remaining wait 172801 is denied [1.28ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [1.47ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.59ms]

test/link-doubt.test.ts:
(pass) a link doubt shows the indicator and keeps live replies and typing flowing [1.50ms]
(pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.40ms]
(pass) a notice type from a newer server is ignored, not a protocol failure [0.13ms]
(pass) the viewer announces the link-doubt capability in its Hello [2.20ms]

test/close-reasons.test.ts:
(pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.28ms]

src/close-reasons.test.ts:
(pass) a missed connection response keeps a plain and stable reason [0.05ms]
(pass) server and host close reasons identify why a terminal reconnects, in plain words [0.25ms]
(pass) routine detach and connection rotation reasons stay neutral [0.02ms]
(pass) a stream close that reattaches never says the terminal ended [0.10ms]
(pass) a recovering server link names its cause as routine status, never as a failure [0.04ms]
(pass) unknown close text is discarded instead of reaching the person or console [0.07ms]
(pass) a storm of closes prints one line per minute and counts the rest [0.38ms]
(pass) counted closes are reported when their window ends, without another close [0.07ms]

src/review-close-log.test.ts:
(pass) a reconnect the server refuses with a named Close frame still prints its console line [1.71ms]
(pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.13ms]

src/onboarding-load.test.ts:
(pass) a failed load says so in the error line, offers Try again, and mounts nothing [5.66ms]
(pass) the Try again button reloads the page: a failed import stays failed in the module map [5.55ms]
(pass) the online event retries by itself [5.45ms]

 356 pass
 0 fail
 21671 expect() calls
Ran 356 tests across 60 files. [36.50s]
bun test v1.4.2 (744846f84)

src/connection-correlation-review.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [10.15ms]

src/connection-idle.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 1 [5.20ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 1 [2.81ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 150 [1.25ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 150 [1.45ms]
(pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [6.00ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 1 [1.26ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 1 [1.15ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 1 [1.37ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 1 [1.23ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 30 [0.90ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 30 [1.03ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 30 [0.94ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 30 [1.20ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 150 [0.83ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 150 [0.77ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 150 [0.80ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 150 [1.05ms]
(pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [3.29ms]
(pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [4.90ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [2.26ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [1.70ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [1.83ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [1.89ms]
(pass) a healthy browser route survives 150ms scheduler delay across 1 streams [2.19ms]
(pass) a healthy browser route survives 150ms scheduler delay across 28 streams [2.22ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [2.07ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) browser jitter allowance decays after a stable link returns [15.10ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [2.13ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [1.84ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [1.76ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [2.32ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [2.13ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [2.47ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer without a reply counts subsequent responsive silence [1.93ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) an outstanding probe gets responsive observation after a renderer stall [4.17ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) retirement gives a queued mismatched pong one task turn [2.14ms]
(pass) retirement gives a queued correlated pong one task turn [1.76ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead typing route eventually retires when browser tasks run every 75ms [2.04ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 1000ms [1.44ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 60000ms [1.28ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [1.91ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [1.85ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [1.85ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) correlated queued replies replenish stall grace across successive healthy stalls [2.16ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) duplicate replies cannot replenish consumed stall grace [1.95ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) wrong timestamp replies cannot replenish consumed stall grace [1.83ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) unknown nonce replies cannot replenish consumed stall grace [1.70ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [2.33ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1
(pass) a replacement route receives its own one-shot local stall grace [2.86ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) continuous typing cannot cancel every silent-route confirmation turn [2.68ms]
(pass) a pending confirmation is reset by reconnect [2.70ms]
Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0
(pass) a pending confirmation is reset by close [4.05ms]
(pass) a pending confirmation is reset by dispose [1.95ms]
(pass) a stale confirmation from before reconnect cannot close the replacement route [2.96ms]
(pass) a hidden page resumes its lease after 5000ms without retiring queued replies [3.26ms]
(pass) a hidden page resumes its lease after 30000ms without retiring queued replies [2.46ms]
(pass) a socket lost while hidden waits for visibility before reconnecting [1.84ms]
(pass) mobile jitter and one retransmission keep a foreground browser lease [73.21ms]
(pass) visibility notices require both peers to support them: false [0.60ms]
(pass) visibility notices require both peers to support them: true [0.28ms]
(pass) hiding a page cancels a retry scheduled while it was visible [1.33ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [2.48ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [2.15ms]
(pass) a layout subscription starts the connection before any terminal exists [0.64ms]
(pass) resync replaces one subscription ID and disposal prevents later resyncs [1.40ms]
(pass) resync reopens a feature subscription with the same server ID [0.70ms]

src/connection-layout-removal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [14.05ms]

src/connection-liveness.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [2.69ms]

src/connection-pool.test.ts:
(pass) terminals fill the first socket, then open another, and a released slot is reused first [0.94ms]
(pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [0.67ms]

src/connection-probe-scheduling-review.test.ts:
(pass) a fully answered browser route survives a delayed next probe before a terminal attaches [1.70ms]
(pass) a fully answered browser route survives a delayed next probe with an attachment [0.55ms]

src/connection-query-capabilities.test.ts:
(pass) query replies negotiate independently with Hello caps 0 [0.13ms]
(pass) query replies negotiate independently with Hello caps 4 [0.01ms]
(pass) query replies negotiate independently with Hello caps 8
(pass) query replies negotiate independently with Hello caps 12

src/connection-query-refusal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [10.48ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [3.07ms]

src/connection-restart.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1
(pass) an overnight connection retains its writer and pending input when the server restarts [0.88ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a second quick server close leaves the fast path and backs off [0.50ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a failed first recovery handshake exits the one quick retry [0.44ms]
Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0
(pass) a server close reason survives socket retirement and the next retry [0.45ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0
(pass) a clean server socket close keeps its fallback reason through the next retry [0.44ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [10.92ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) online and foreground events cancel delays and preserve handshakes in progress [1.84ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [0.76ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.27ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.21ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.18ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.15ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [0.12ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.26ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.25ms]

src/connection-review-refusal-input.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [2.14ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [0.87ms]

src/connection-review-retained-lifetime.test.ts:
(pass) review: saved typing can be declined without closing the live shell [0.78ms]
(pass) review: new typing reaches the fresh shell while saved typing stays pending [0.19ms]
(pass) review: retained input and consent are local to their terminal window [0.21ms]
(pass) review: selecting a different session removes saved typing and its action [0.14ms]
(pass) review: another refused writer retains pending and unacknowledged fresh typing [0.22ms]
(pass) review: window disposal clears held input and rejects a stale resend action [0.41ms]

src/connection-startup-review.test.ts:
(pass) a healthy startup route can learn an RTT above the initial estimate [2.53ms]

src/connection-unattached-close.test.ts:
(pass) disposing a window before its welcome microtask sends no unbound Close [1.03ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [0.71ms]

 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [341.00ms]
bun test v1.4.2 (744846f84)

src/terminal-queries.test.ts:
(pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.56ms]
(pass) all requested query families have identities [0.12ms]
(pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [1.40ms]
(pass) oversized OSC retains BEL termination before a later query [0.11ms]

src/terminal-query-property.test.ts:
[ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2
(pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [249.56ms]

src/terminal-query-renderer-review.test.ts:
(pass) review: DECID gives every real renderer response an identity [1.04ms]
(pass) review: zero-padded CPR gives every real renderer response an identity [1.21ms]
(pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.23ms]
(pass) review: three adjacent requests keep distinct identities across different viewer chunking [6.51ms]

src/terminal-write-slices.test.ts:
(pass) every slice split preserves cells, cursor and all renderer answers [39.11ms]
(pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [2.41ms]
(pass) escaped writers cannot access released input and callback failure releases the scope [0.66ms]
(pass) nested writes and memory growth cannot replace borrowed input [0.52ms]
(pass) allocation refusal never writes or frees unowned memory [2.28ms]
(pass) empty scopes accept no input and reject later writer use [0.29ms]
(pass) input views of native memory survive allocation-driven memory growth [0.35ms]
(pass) throwing callbacks release exactly their owned input allocation [0.32ms]

 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [333.00ms]
$ bun run build.ts
built chunk-bpwcsapc.js, chunk-qbb2e8b9.js, chunk-mybev37s.js, chunk-v54dey49.js, chunk-790c27me.js, chunk-79j5ah7y.js, chunk-kbvrkzq1.js, chunk-rkhswyqm.js, chunk-g5r2bypb.js, chunk-6jfv98vb.js, chunk-yvq3ah6x.js, chunk-vb52mqs5.js, chunk-gxvqf3b8.js, chunk-x90k904w.js, chunk-nn2dffvt.js, chunk-x8dtqyz6.js, chunk-80vngjpw.js, chunk-8gqdshxw.js, chunk-n2ga1wk8.js, main.js, chunk-3zrccmtw.js, chunk-fxmz3y8j.js, chunk-wk9n9jj8.js, chunk-vgjq68cy.js, chunk-6n6ggpfc.js, chunk-ej8jagvh.js, chunk-4tc0fn3g.js, chunk-nmprrnaq.js, chunk-5yk4q6v9.js, chunk-8khh7fgx.js, chunk-5tj6gke2.js, chunk-5hrbp5az.js, chunk-c76h7v56.js, chunk-w3g0tqz4.js, chunk-pk1m193e.js, chunk-r33grk7w.js, chunk-0ppc5rhe.js, chunk-axbkkqp1.js, chunk-4nyfg4h3.js, chunk-06vkzx1x.js, chunk-zs1d5mk0.js, chunk-qhbq8tqn.js, chunk-efvp39px.js, chunk-hgx4sjjk.js, chunk-pf8vrp7e.js, chunk-p4npgmsh.js, chunk-vcwa9ccx.js, chunk-qmx5f3qe.js, chunk-he4csrpw.js, chunk-z48tcwe1.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-1k506s33.js, chunk-e9t3w684.js, chunk-pmgxewne.js, chunk-q5wz2jzh.js, chunk-3m9zj9sz.js, chunk-r04kg5zm.js, chunk-xgywewyx.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-wjy5jnes.js, chunk-fsf2ghcj.js, chunk-g602dptg.js, chunk-ff3nvh2r.js
onDemand chunk-q5wz2jzh.js: identity=6744 gzip=3167 brotli=2880 bytes
onDemand chunk-vcwa9ccx.js: identity=11562 gzip=4696 brotli=4279 bytes
critical chunk-r04kg5zm.js: identity=199 gzip=158 brotli=136 bytes
deferred chunk-5tj6gke2.js: identity=1560 gzip=802 brotli=732 bytes
onDemand chunk-hgx4sjjk.js: identity=1170 gzip=709 brotli=632 bytes
critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes
onDemand chunk-fsf2ghcj.js: identity=9158 gzip=3338 brotli=2890 bytes
critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes
deferred chunk-5hrbp5az.js: identity=110049 gzip=37193 brotli=32770 bytes
onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes
onDemand chunk-kbvrkzq1.js: identity=3891 gzip=1735 brotli=1518 bytes
critical chunk-rkhswyqm.js: identity=5890 gzip=2461 brotli=2137 bytes
onDemand chunk-qhbq8tqn.js: identity=33394 gzip=12822 brotli=11528 bytes
onDemand chunk-he4csrpw.js: identity=4696 gzip=1956 brotli=1727 bytes
onDemand chunk-4nyfg4h3.js: identity=10904 gzip=4422 brotli=4027 bytes
onDemand chunk-r33grk7w.js: identity=11126 gzip=4258 brotli=3885 bytes
critical chunk-8gqdshxw.js: identity=386 gzip=236 brotli=195 bytes
onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes
onDemand chunk-qmx5f3qe.js: identity=5359 gzip=2580 brotli=2304 bytes
critical chunk-xgywewyx.js: identity=42945 gzip=14687 brotli=13161 bytes
onDemand chunk-mybev37s.js: identity=191 gzip=167 brotli=130 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=480 bytes
critical backdrop.worker.js: identity=243 gzip=210 brotli=158 bytes
deferred chunk-79j5ah7y.js: identity=38155 gzip=13872 brotli=12386 bytes
critical chunk-3zrccmtw.js: identity=5448 gzip=2606 brotli=2377 bytes
critical chunk-ej8jagvh.js: identity=2161 gzip=1060 brotli=904 bytes
onDemand chunk-w3g0tqz4.js: identity=7662 gzip=3398 brotli=2968 bytes
onDemand chunk-1k506s33.js: identity=49320 gzip=15455 brotli=13784 bytes
deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes
onDemand chunk-efvp39px.js: identity=2522 gzip=1133 brotli=960 bytes
onDemand chunk-p4npgmsh.js: identity=540 gzip=354 brotli=319 bytes
onDemand chunk-3m9zj9sz.js: identity=1063 gzip=653 brotli=523 bytes
critical chunk-nn2dffvt.js: identity=6075 gzip=2536 brotli=2233 bytes
onDemand chunk-x90k904w.js: identity=2557 gzip=1180 brotli=1009 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
critical chunk-wk9n9jj8.js: identity=8377 gzip=3575 brotli=3184 bytes
onDemand chunk-yvq3ah6x.js: identity=2108 gzip=1038 brotli=870 bytes
critical chunk-x8dtqyz6.js: identity=17631 gzip=6251 brotli=5569 bytes
critical chunk-bpwcsapc.js: identity=34427 gzip=9985 brotli=8967 bytes
critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes
onDemand chunk-e9t3w684.js: identity=6983 gzip=3107 brotli=2810 bytes
onDemand chunk-pf8vrp7e.js: identity=1649 gzip=776 brotli=676 bytes
critical chunk-80vngjpw.js: identity=11739 gzip=4630 brotli=4120 bytes
critical chunk-6n6ggpfc.js: identity=1776 gzip=855 brotli=694 bytes
onDemand chunk-qbb2e8b9.js: identity=228 gzip=178 brotli=158 bytes
onDemand chunk-6jfv98vb.js: identity=6265 gzip=2101 brotli=1862 bytes
onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes
critical chunk-n2ga1wk8.js: identity=2529 gzip=1018 brotli=890 bytes
onDemand chunk-pk1m193e.js: identity=14598 gzip=5447 brotli=4891 bytes
deferred chunk-vgjq68cy.js: identity=14644 gzip=4802 brotli=4431 bytes
onDemand chunk-g5r2bypb.js: identity=2420 gzip=1194 brotli=1069 bytes
critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes
onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes
onDemand chunk-5yk4q6v9.js: identity=4561 gzip=2003 brotli=1772 bytes
deferred chunk-wjy5jnes.js: identity=545 gzip=315 brotli=272 bytes
onDemand chunk-zs1d5mk0.js: identity=6148 gzip=2780 brotli=2507 bytes
onDemand chunk-8khh7fgx.js: identity=1974 gzip=987 brotli=843 bytes
critical chunk-vb52mqs5.js: identity=707 gzip=362 brotli=309 bytes
critical chunk-pmgxewne.js: identity=162 gzip=150 brotli=119 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
critical main.js: identity=104155 gzip=38354 brotli=33076 bytes
onDemand chunk-790c27me.js: identity=5812 gzip=2382 brotli=2151 bytes
onDemand chunk-v54dey49.js: identity=6493 gzip=2402 brotli=2140 bytes
onDemand chunk-0ppc5rhe.js: identity=1026 gzip=624 brotli=499 bytes
critical chunk-06vkzx1x.js: identity=729050 gzip=210327 brotli=170874 bytes
onDemand chunk-nmprrnaq.js: identity=2791 gzip=1373 brotli=1181 bytes
onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes
critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes
critical chunk-g602dptg.js: identity=9907 gzip=4060 brotli=3499 bytes
critical chunk-4tc0fn3g.js: identity=1188 gzip=691 brotli=582 bytes
critical chunk-fxmz3y8j.js: identity=1106 gzip=663 brotli=600 bytes
onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes
JavaScript transfer, critical: identity=987711 gzip=305926/307200 brotli=254709/256000 bytes
JavaScript transfer, deferred: identity=166293 gzip=57666/61440 brotli=51182/55296 bytes
JavaScript transfer, onDemand: identity=231812 gzip=91878/20480 brotli=81918/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-1k506s33.js: gzip=15455/20480 brotli=13784/18432 bytes (class total gzip=91878 brotli=81918, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.80ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.62ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.21ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.24ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.20ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.26ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [11.62ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.27ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.76ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.19ms]
(pass) split mux header preserves trailing Close [0.19ms]
(pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.70ms]
(pass) empty marked input reports the stable invalid-body decoder failure [0.13ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.79ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.00ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.76ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.62ms]
(pass) superseded failure preserves a newer pending refresh [2.81ms]

src/stream.test.ts:
stream differential: 141 streams, 11988 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [2597.41ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [10.07ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [3.78ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [4.65ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.22ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.29ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.73ms]
(pass) review continuation stops after forbidden [1.32ms]
(pass) review continuation stops after superseded [1.31ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.39ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.24ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.30ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms]
(pass) watch never publishes a partial page; withdrawn=false [1.68ms]
(pass) watch never publishes a partial page; withdrawn=true [1.33ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.71ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.35ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.72ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [2.17ms]
(pass) shared Mesh event vectors drive the typed watch adapter [6.12ms]

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [2.69s]
Independent delta review, round 2: **merge**. Counts: **P0 0, P1 0, P2 0, P3 0**. No new or remaining confirmed finding. Reviewed target `setup-token-data` at `9f7a0c977690119907be5004bd729136b3e8c7f7`. Review branch `review-setup-token-r2` is clean and pushed at `64dce54eac54db77ad6fc364e997550a51cb00de`; it adds only `crates/infraternal/tests/setup_review_r2.rs`. All five round-1 findings are resolved. Each of the three original test files is byte-identical to `074141ee3`, with an empty individual git diff and matching SHA-256. The unchanged setup-output suite passes 6/6; public-status contract and exact-response tests pass; unchanged production-browser system-service tests pass 2/2 (display/copy at 393px, card bounds at 375px). Added review checks pass 2/2, covering six shell-sensitive path round trips and executable alias/loop/unrelated-program handling. Socket permission advice now follows the real connection under the caller's effective user/groups, rather than a listing/existence preflight. Executable links only establish program identity; data still comes from the system unit, and socket access is checked at connection time. Token response bounds and sanitized errors remain intact; status and automatic page content expose only the allowlisted non-secret command. Permission fixtures do not access another account or a live service. The contract changed to document the earlier additive proposal on #252, consistent with D16/D202; public-status implementation and decisions were not weakened. Inspected the attached production screenshots at 393x852 and 375x667 in both themes: card edges and copy controls remain inside the viewport. Existing shared overlay/copy helpers remain in use, with one layout constraint added to the existing card rule. `scripts/verify fast` completed with **exit 0**, including all Rust rows, TypeScript/build/transfer checks and 39 protocol tests. No host-load exception. Both stripped static caps reproduce exactly: x86_64 21,400,400 bytes; aarch64 19,575,064 bytes. A fresh same-recipe merge-base x86_64 build measures 21,386,512 bytes, confirming +13,888 bytes for the complete branch (under 16 KiB). Restored-head static checks pass after that comparison. Native aarch64 key-memory execution is not checked on this x86_64 host, as reported by the gate; no runtime performance claim is made. Cleanup verified: target deleted, temporary baseline checkout removed, review browser tab closed, and port 55262 refuses IPv4/IPv6 connections. Review worktree remains clean and pushed. No implementation fix, deployment or issue closure. [test-integrity.txt](https://git.kayg.org/attachments/f9514bde-177c-421d-9262-a814d92a7d69) [rust-focused.log](https://git.kayg.org/attachments/9bac4b2e-7594-4f17-b5eb-ee8580bcad1e) [browser.log](https://git.kayg.org/attachments/129a3d67-fdfa-4e74-9454-81967e440333) ![system-service-setup-token-command.png](https://git.kayg.org/attachments/c95dd714-e5b9-45c5-bd95-52455c11b380) [verify-fast.log](https://git.kayg.org/attachments/9babfbbd-4895-4ddf-aab2-fc0f080bd8ac) [findings.md](https://git.kayg.org/attachments/e3d93ba0-9ae5-43d0-8d7f-7ce6a42815b0) [sizes.json](https://git.kayg.org/attachments/12924b69-46fe-433d-b023-ad343569a40c) [baseline-static.log](https://git.kayg.org/attachments/bdd56d2b-eb13-473f-b12e-fdd360ced2f4) [baseline-size.txt](https://git.kayg.org/attachments/1f95fbe8-c17f-4ae8-9eab-e9b4600ac43b) [static-recheck.log](https://git.kayg.org/attachments/59466e87-ceae-44c2-8a2a-a32a9358c13e) [cleanup.json](https://git.kayg.org/attachments/95939750-480a-4210-bdcf-d6b9e3e5947f) [artifact-head.log](https://git.kayg.org/attachments/ce4420de-aa1d-44f5-b670-c167f0668a4b) Full `scripts/verify fast` output on the reviewed implementation, including the added review tests, verbatim: ```text ==> Repository artifact size gate repository artifact gate: PASS (38 changed path(s), merge base 4a6202a52993) ==> Release deployment functional checks .....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained .Build deferred: host capacity limit reached ......... ---------------------------------------------------------------------- Ran 15 tests in 0.714s OK . ---------------------------------------------------------------------- Ran 1 test in 0.070s OK bun test v1.4.2 (744846f84) scripts/release/deploy-review.test.ts: REMOTE_ADMISSION unsigned_x86_payload=true refused=true (pass) remote admission refuses an x86 payload outside the signed manifest [169.97ms] {"state": "deployed", "ca_unlocked": true} WEB_ONLY_RECORD candidate_binary_recorded=false (pass) web-only deployment does not record the candidate as the running binary [147.26ms] ALIAS_RECOVERY restart_requests=2 (pass) alias restoration failure still requests the retained warm rollback [132.11ms] 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [454.00ms] PASS proxy_forwarding samples=3 timed=false ==> fmt (fmt: 2s) ==> VT native fmt (VT native fmt: 0s) ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Compiling proc-macro2 v1.0.107 Compiling unicode-ident v1.0.26 Compiling quote v1.0.47 Compiling libc v0.2.190 Compiling autocfg v1.5.1 Compiling serde_core v1.0.229 Compiling utf8parse v0.2.2 Compiling cfg-if v1.0.5 Compiling cfg_aliases v0.2.2 Compiling memchr v2.8.3 Compiling memoffset v0.9.1 Compiling anstyle-parse v1.0.0 Compiling nix v0.30.1 Compiling is_terminal_polyfill v1.70.2 Compiling colorchoice v1.0.5 Compiling anstyle-query v1.1.5 Compiling anstyle v1.0.14 Compiling zmij v1.0.23 Compiling anstream v1.0.0 Compiling heck v0.5.0 Compiling strsim v0.11.1 Compiling clap_lex v1.1.1 Compiling syn v3.0.6 Compiling serde v1.0.229 Compiling arrayvec v0.7.8 Compiling serde_json v1.0.151 Compiling itoa v1.0.18 Compiling bitflags v2.13.2 Compiling getrandom v0.4.3 Compiling vte v0.15.0 Compiling clap_builder v4.6.7 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api) Compiling errno v0.3.14 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim) Compiling thiserror v2.0.21 Compiling signal-hook-registry v1.4.8 Compiling mio v1.2.4 Compiling socket2 v0.6.5 Compiling serde_derive v1.0.229 Compiling clap_derive v4.6.7 Compiling tokio-macros v2.7.2 Compiling thiserror-impl v2.0.21 Compiling bytes v1.12.1 Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal) Compiling clap v4.6.7 Compiling pin-project-lite v0.2.17 Compiling unicode-width v0.2.2 Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-status) Compiling tokio v1.53.3 Compiling uuid v1.27.0 Compiling vt100 v0.16.2 warning: function `print_progress` is never used --> crates/infraternal/src/cli/output.rs:592:8 | 592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) { | ^^^^^^^^^^^^^^ | = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default warning: function `write_output` is never used --> crates/infraternal/src/cli/output.rs:616:8 | 616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) { | ^^^^^^^^^^^^ warning: `infraternal` (bin "infraternal" test) generated 2 warnings Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 35s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal-fe1c5abfd68beec3) running 37 tests test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::exit_codes_follow_d303 ... ok {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s Compiling shlex v2.0.1 Compiling find-msvc-tools v0.1.14 Compiling serde v1.0.229 Compiling syn v3.0.6 Compiling syn v2.0.119 Compiling futures-core v0.3.34 Compiling memchr v2.8.3 Compiling serde_core v1.0.229 Compiling once_cell v1.21.4 Compiling cc v1.6.0 Compiling stable_deref_trait v1.2.1 Compiling version_check v0.9.5 Compiling typenum v1.20.1 Compiling generic-array v0.14.7 Compiling pkg-config v0.3.34 Compiling vcpkg v0.2.15 Compiling log v0.4.34 Compiling writeable v0.6.4 Compiling litemap v0.8.3 Compiling tracing-core v0.1.36 Compiling icu_normalizer_data v2.3.0 Compiling utf8_iter v1.0.4 Compiling block-buffer v0.10.4 Compiling crypto-common v0.1.7 Compiling icu_properties_data v2.3.0 Compiling smallvec v1.16.2 Compiling percent-encoding v2.3.2 Compiling futures-sink v0.3.34 Compiling cpufeatures v0.2.17 Compiling futures-task v0.3.34 Compiling slab v0.4.12 Compiling futures-io v0.3.34 Compiling scopeguard v1.2.0 Compiling subtle v2.6.1 Compiling equivalent v1.0.2 Compiling form_urlencoded v1.2.2 Compiling lock_api v0.4.14 Compiling parking_lot_core v0.9.12 Compiling libc v0.2.190 Compiling num-traits v0.2.19 Compiling hashbrown v0.17.1 Compiling tracing-attributes v0.1.31 Compiling serde_derive v1.0.229 Compiling synstructure v0.14.0 Compiling displaydoc v0.2.7 Compiling zerovec-derive v0.11.6 Compiling zerofrom-derive v0.1.8 Compiling yoke-derive v0.8.4 Compiling tokio-macros v2.7.2 Compiling tracing v0.1.44 Compiling thiserror-impl v2.0.21 Compiling indexmap v2.14.2 Compiling zerofrom v0.1.8 Compiling tokio v1.53.3 Compiling yoke v0.8.3 Compiling digest v0.10.7 Compiling zerovec v0.11.8 Compiling zerotrie v0.2.5 Compiling thiserror v2.0.21 Compiling crossbeam-utils v0.8.23 Compiling futures-macro v0.3.34 Compiling foldhash v0.1.5 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling allocator-api2 v0.2.21 Compiling icu_collections v2.3.0 Compiling icu_locale_core v2.3.0 Compiling futures-util v0.3.34 Compiling hashbrown v0.15.5 Compiling icu_provider v2.3.1 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling event-listener v5.4.2 Compiling crc v3.4.0 Compiling icu_properties v2.3.0 Compiling icu_normalizer v2.3.0 Compiling sha2 v0.10.9 Compiling crossbeam-queue v0.3.14 Compiling hashlink v0.10.0 Compiling mio v1.2.4 Compiling socket2 v0.6.5 Compiling idna_adapter v1.2.2 Compiling spin v0.9.9 Compiling idna v1.1.0 Compiling libsqlite3-sys v0.30.1 Compiling openssl-src v300.6.1+3.6.3 Compiling serde_json v1.0.151 Compiling ryu v1.0.23 Compiling openssl-sys v0.9.117 Compiling url v2.5.8 Compiling parking_lot v0.12.5 Compiling futures-channel v0.3.34 Compiling futures-intrusive v0.5.0 Compiling either v1.18.0 Compiling hex v0.4.3 Compiling base64 v0.22.1 Compiling rand_core v0.10.1 Compiling atoi v2.0.0 Compiling futures-executor v0.3.34 Compiling serde_urlencoded v0.7.1 Compiling flume v0.11.1 Compiling getrandom v0.4.3 Compiling zerocopy v0.8.60 Compiling tokio-stream v0.1.19 Compiling zerocopy-derive v0.8.60 Compiling sqlx-core v0.8.6 Compiling getrandom v0.2.17 Compiling dotenvy v0.15.7 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api) Compiling openssl v0.10.81 Compiling foreign-types-shared v0.1.1 Compiling openssl-macros v0.1.1 Compiling http v1.5.0 Compiling foreign-types v0.3.2 Compiling sqlx-sqlite v0.8.6 Compiling nix v0.30.1 Compiling ring v0.17.14 Compiling getrandom v0.3.4 Compiling uuid v1.27.0 Compiling zeroize v1.9.0 Compiling ppv-lite86 v0.2.21 Compiling untrusted v0.9.0 Compiling sqlx-macros-core v0.8.6 Compiling time-core v0.1.9 Compiling num-conv v0.2.2 Compiling httparse v1.10.1 Compiling minimal-lexical v0.2.1 Compiling thiserror v1.0.69 Compiling time-macros v0.2.32 Compiling sqlx-macros v0.8.6 Compiling nom v7.1.3 Compiling rand_core v0.9.5 Compiling sqlx v0.8.6 Compiling rustls-pki-types v1.15.1 Compiling http-body v1.1.0 Compiling thiserror-impl v1.0.69 Compiling synstructure v0.13.2 Compiling rustls v0.23.46 Compiling tinyvec v1.13.3 Compiling deranged v0.5.8 Compiling powerfmt v0.2.1 Compiling cpufeatures v0.3.1 Compiling rustls-webpki v0.103.16 Compiling asn1-rs-derive v0.5.1 Compiling chacha20 v0.10.2 Compiling rusticata-macros v4.1.0 Compiling rand_chacha v0.9.0 Compiling quinn-udp v0.5.16 Compiling tokio-util v0.7.19 Compiling asn1-rs-impl v0.2.0 Compiling tokio-openssl v0.6.5 Compiling tower-service v0.3.3 Compiling time v0.3.55 Compiling data-encoding v2.11.1 Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-protocol) Compiling rand v0.9.5 Compiling rand v0.10.3 Compiling vte v0.15.0 Compiling rand_core v0.6.4 Compiling rand_pcg v0.10.2 Compiling clap_derive v4.6.7 Compiling quinn v0.11.12 Compiling num-integer v0.1.47 Compiling lru-slab v0.1.3 Compiling lazy_static v1.5.1 Compiling fnv v1.0.7 Compiling asn1-rs v0.6.2 Compiling base64 v0.21.7 Compiling httpdate v1.0.3 Compiling pastey v0.1.1 Compiling try-lock v0.2.5 Compiling rustc-hash v2.1.3 Compiling oid-registry v0.7.1 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim) Compiling atomic-waker v1.1.2 Compiling want v0.3.2 Compiling base64urlsafedata v0.5.5 Compiling h2 v0.4.19 Compiling num-bigint v0.4.8 Compiling clap v4.6.7 Compiling webauthn-attestation-ca v0.5.5 Compiling tower-layer v0.3.3 Compiling mime v0.3.17 Compiling unicase v2.10.0 Compiling quinn-proto v0.11.19 Compiling rustversion v1.0.23 Compiling mime_guess v2.0.5 Compiling http-body-util v0.1.5 Compiling der-parser v9.0.0 Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-mesh) Compiling half v2.7.1 Compiling sha1 v0.10.7 Compiling fs-err v3.3.2 Compiling regex-syntax v0.8.11 Compiling webauthn-rs-core v0.5.5 Compiling sync_wrapper v1.0.2 Compiling tungstenite v0.29.0 Compiling serde_cbor_2 v0.13.0 Compiling hyper v1.11.1 Compiling x509-parser v0.16.0 Compiling regex-automata v0.4.18 Compiling webauthn-rs-proto v0.5.5 Compiling rand_chacha v0.3.1 Compiling hyper-util v0.1.21 Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/host-facts) Compiling hex-conservative v0.2.3 Compiling base64ct v1.8.3 Compiling arc-swap v1.9.2 Compiling rand v0.8.8 Compiling password-hash v0.5.0 Compiling bitcoin_hashes v0.14.101 Compiling matchers v0.2.0 Compiling tokio-tungstenite v0.29.0 Compiling tower v0.5.3 Compiling axum-core v0.5.6 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-server) Compiling tracing-serde v0.2.0 Compiling blake2 v0.10.6 Compiling tracing-log v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling thread_local v1.1.10 Compiling matchit v0.8.4 Compiling nu-ansi-term v0.50.3 Compiling http-range-header v0.4.2 Compiling argon2 v0.5.3 Compiling bip39 v2.2.2 Compiling tower-http v0.6.11 Compiling tracing-subscriber v0.3.23 Compiling axum v0.8.9 Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/release) Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/canvas) Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal) Compiling vt100 v0.16.2 Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/relay) Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/backup) Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-status) Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/mesh) Compiling axum-server v0.8.0 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote) Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-agent) Compiling webauthn-rs v0.5.5 Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh) Finished `test` profile [unoptimized + debuginfo] target(s) in 4m 27s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal-0a149f42b54b04db) running 104 tests test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::output::tests::exit_codes_follow_d303 ... ok {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 6.28s Compiling displaydoc v0.2.7 Compiling serde v1.0.229 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api) Compiling nix v0.30.1 Compiling getrandom v0.2.17 Compiling tracing-core v0.1.36 Compiling tokio v1.53.3 Compiling ring v0.17.14 Compiling tinystr v0.8.4 Compiling zerotrie v0.2.5 Compiling icu_locale_core v2.3.0 Compiling zeroize v1.9.0 Compiling rustls-pki-types v1.15.1 Compiling tracing v0.1.44 Compiling icu_provider v2.3.1 Compiling icu_collections v2.3.0 Compiling rustls-webpki v0.103.16 Compiling syn v2.0.119 Compiling smallvec v1.16.2 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim) Compiling icu_normalizer v2.3.0 Compiling rustls v0.23.46 Compiling icu_properties v2.3.0 Compiling quinn-udp v0.5.16 Compiling uuid v1.27.0 Compiling idna_adapter v1.2.2 Compiling percent-encoding v2.3.2 Compiling openssl-macros v0.1.1 Compiling form_urlencoded v1.2.2 Compiling idna v1.1.0 Compiling openssl v0.10.81 Compiling digest v0.10.7 Compiling futures-core v0.3.34 Compiling sha2 v0.10.9 Compiling futures-util v0.3.34 Compiling url v2.5.8 Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/host-facts) Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-mesh) Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/relay) Compiling quinn-proto v0.11.19 Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/backup) Compiling tokio-openssl v0.6.5 Compiling quinn v0.11.12 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote) Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh) Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-agent) Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 05s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_agent-f4f0113fecf22aee) running 1 test test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 75 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_mesh-c7263890e5528429) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_ssh-b96e878b9907f3df) running 1 test test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s (CLI plugin compile-out: 556s) ==> clippy Checking cfg-if v1.0.5 Checking libc v0.2.190 Compiling jobserver v0.1.35 Checking pin-project-lite v0.2.17 Checking serde_core v1.0.229 Checking memchr v2.8.3 Checking bytes v1.12.1 Checking itoa v1.0.18 Compiling cc v1.6.0 Checking typenum v1.20.1 Checking once_cell v1.21.4 Checking subtle v2.6.1 Checking log v0.4.34 Checking tracing-core v0.1.36 Checking futures-core v0.3.34 Checking zerofrom v0.1.8 Checking stable_deref_trait v1.2.1 Checking generic-array v0.14.7 Checking yoke v0.8.3 Checking smallvec v1.16.2 Checking getrandom v0.2.17 Checking errno v0.3.14 Checking socket2 v0.6.5 Checking mio v1.2.4 Checking rand_core v0.6.4 Checking signal-hook-registry v1.4.8 Checking serde v1.0.229 Checking crypto-common v0.1.7 Checking tracing v0.1.44 Checking num-traits v0.2.19 Checking tokio v1.53.3 Checking zerovec v0.11.8 Checking futures-sink v0.3.34 Checking slab v0.4.12 Compiling crossbeam-utils v0.8.23 Checking block-buffer v0.10.4 Checking cpufeatures v0.2.17 Checking writeable v0.6.4 Checking tinystr v0.8.4 Checking litemap v0.8.3 Checking digest v0.10.7 Checking potential_utf v0.1.6 Checking icu_locale_core v2.3.0 Checking zerotrie v0.2.5 Checking utf8_iter v1.0.4 Checking icu_collections v2.3.0 Checking icu_provider v2.3.1 Checking either v1.18.0 Checking zmij v1.0.23 Checking equivalent v1.0.2 Checking percent-encoding v2.3.2 Checking serde_json v1.0.151 Checking icu_properties_data v2.3.0 Checking icu_normalizer_data v2.3.0 Compiling scopeguard v1.2.0 Checking icu_normalizer v2.3.0 Compiling lock_api v0.4.14 Checking icu_properties v2.3.0 Checking futures-task v0.3.34 Checking futures-io v0.3.34 Checking hashbrown v0.17.1 Checking futures-util v0.3.34 Checking form_urlencoded v1.2.2 Checking thiserror v2.0.21 Checking indexmap v2.14.2 Compiling libsqlite3-sys v0.30.1 Checking idna_adapter v1.2.2 Compiling sha2 v0.10.9 Checking idna v1.1.0 Compiling parking_lot_core v0.9.12 Checking bitflags v2.13.2 Compiling foldhash v0.1.5 Compiling allocator-api2 v0.2.21 Compiling parking_lot v0.12.5 Compiling hashbrown v0.15.5 Checking url v2.5.8 Checking futures-channel v0.3.34 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling crc v3.4.0 Compiling crossbeam-queue v0.3.14 Compiling event-listener v5.4.2 Compiling hashlink v0.10.0 Compiling futures-intrusive v0.5.0 Compiling spin v0.9.9 Compiling ryu v1.0.23 Compiling flume v0.11.1 Compiling serde_urlencoded v0.7.1 Compiling atoi v2.0.0 Compiling futures-executor v0.3.34 Checking base64 v0.22.1 Checking tokio-stream v0.1.19 Compiling hex v0.4.3 Checking sqlx-core v0.8.6 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api) Checking memoffset v0.9.1 Compiling openssl-src v300.6.1+3.6.3 Checking rand_core v0.10.1 Checking foreign-types-shared v0.1.1 Checking nix v0.30.1 Checking foreign-types v0.3.2 Checking getrandom v0.4.3 Checking infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-protocol) Compiling openssl-sys v0.9.117 Checking uuid v1.27.0 Checking zeroize v1.9.0 Checking utf8parse v0.2.2 Checking colorchoice v1.0.5 Checking anstyle-parse v1.0.0 Checking anstyle-query v1.1.5 Checking anstyle v1.0.14 Checking is_terminal_polyfill v1.70.2 Checking sqlx-sqlite v0.8.6 Checking strsim v0.11.1 Checking anstream v1.0.0 Checking clap_lex v1.1.1 Checking arrayvec v0.7.8 Checking clap_builder v4.6.7 Checking vte v0.15.0 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim) Compiling ring v0.17.14 Checking untrusted v0.9.0 Checking rustls-pki-types v1.15.1 Checking cpufeatures v0.3.1 Checking tinyvec v1.13.3 Checking clap v4.6.7 Checking chacha20 v0.10.2 Checking rand_pcg v0.10.2 Checking rand v0.10.3 Checking lru-slab v0.1.3 Checking rustc-hash v2.1.3 Checking quinn-udp v0.5.16 Checking zerocopy v0.8.60 Checking http v1.5.0 Checking getrandom v0.3.4 Checking regex-syntax v0.8.11 Compiling num-conv v0.2.2 Compiling sqlx-macros-core v0.8.6 Compiling rustls v0.23.46 Compiling time-core v0.1.9 Checking minimal-lexical v0.2.1 Compiling time-macros v0.2.32 Checking nom v7.1.3 Checking rustls-webpki v0.103.16 Checking regex-automata v0.4.18 Compiling sqlx-macros v0.8.6 Checking sqlx v0.8.6 Checking http-body v1.1.0 Checking rand_core v0.9.5 Checking deranged v0.5.8 Checking ppv-lite86 v0.2.21 Checking infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-mesh) Checking infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/host-facts) Checking half v2.7.1 Checking powerfmt v0.2.1 Checking rand_chacha v0.9.0 Checking thiserror v1.0.69 Checking rusticata-macros v4.1.0 Checking httparse v1.10.1 Checking time v0.3.55 Checking tokio-util v0.7.19 Checking tower-service v0.3.3 Checking quinn-proto v0.11.19 Checking data-encoding v2.11.1 Checking rand v0.9.5 Checking num-integer v0.1.47 Checking atomic-waker v1.1.2 Checking try-lock v0.2.5 Checking base64 v0.21.7 Checking fnv v1.0.7 Checking lazy_static v1.5.1 Checking httpdate v1.0.3 Checking h2 v0.4.19 Checking base64urlsafedata v0.5.5 Checking want v0.3.2 Checking num-bigint v0.4.8 Checking tower-layer v0.3.3 Checking mime v0.3.17 Checking asn1-rs v0.6.2 Compiling unicase v2.10.0 Compiling mime_guess v2.0.5 Checking http-body-util v0.1.5 Checking sha1 v0.10.7 Checking sync_wrapper v1.0.2 Checking tungstenite v0.29.0 Checking oid-registry v0.7.1 Checking der-parser v9.0.0 Checking quinn v0.11.12 Checking webauthn-rs-proto v0.5.5 Checking serde_cbor_2 v0.13.0 Checking x509-parser v0.16.0 Checking rand_chacha v0.3.1 Checking infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/release) Checking hex-conservative v0.2.3 Checking base64ct v1.8.3 Checking bitcoin_hashes v0.14.101 Checking rand v0.8.8 Checking password-hash v0.5.0 Checking tokio-tungstenite v0.29.0 Checking arc-swap v1.9.2 Checking hyper v1.11.1 Checking fs-err v3.3.2 Checking tower v0.5.3 Checking axum-core v0.5.6 Checking sharded-slab v0.1.7 Checking matchers v0.2.0 Checking infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/canvas) Checking unicode-normalization v0.1.25 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-server) Checking hyper-util v0.1.21 Checking blake2 v0.10.6 Checking tracing-serde v0.2.0 Checking serde_path_to_error v0.1.20 Checking tracing-log v0.2.0 Checking thread_local v1.1.10 Checking nu-ansi-term v0.50.3 Checking matchit v0.8.4 Checking http-range-header v0.4.2 Checking argon2 v0.5.3 Checking bip39 v2.2.2 Checking tracing-subscriber v0.3.23 Checking tower-http v0.6.11 Checking axum v0.8.9 Compiling libfuzzer-sys v0.4.13 Checking arbitrary v1.4.2 Checking inout v0.1.4 Checking cipher v0.4.4 Checking universal-hash v0.5.1 Checking opaque-debug v0.3.1 Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal) Checking ctr v0.9.2 Checking polyval v0.6.2 Checking aes v0.8.4 Checking infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/backup) Checking ghash v0.5.1 Checking infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/relay) Checking infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-status) Checking hmac v0.12.1 Checking aead v0.5.2 Checking unicode-width v0.2.2 Checking hkdf v0.12.4 Checking aes-gcm v0.10.3 Compiling crossbeam-epoch v0.9.21 Checking vt100 v0.16.2 Compiling crossbeam-deque v0.8.8 Compiling rayon-core v1.13.0 Checking plotters-backend v0.3.7 Checking ciborium-io v0.2.2 Checking ciborium-ll v0.2.2 Checking plotters-svg v0.3.7 Checking itertools v0.13.0 Checking same-file v1.0.6 Checking cast v0.3.0 Checking walkdir v2.5.0 Checking rayon v1.12.0 Checking plotters v0.3.7 Checking ciborium v0.2.2 Checking regex v1.13.1 Checking tinytemplate v1.2.1 Checking oorandom v11.1.5 Checking anes v0.1.6 Compiling infraternal-session v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-session) Checking criterion-plot v0.6.0 Checking criterion v0.7.0 Compiling openssl v0.10.81 Compiling tokio-openssl v0.6.5 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-core v0.5.5 Checking infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/mesh) Checking axum-server v0.8.0 Checking infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote) Checking webauthn-rs v0.5.5 Checking infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-agent) Checking infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh) Checking infraternal-fuzz v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/fuzz) Finished `dev` profile [unoptimized + debuginfo] target(s) in 2m 48s (clippy: 169s) ==> SSH runtime test helper Compiling tokio v1.53.3 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api) Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim) Compiling quinn v0.11.12 Compiling tokio-openssl v0.6.5 Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh) Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote) Finished `dev` profile [unoptimized + debuginfo] target(s) in 14.76s (SSH runtime test helper: 15s) ==> real-binary fixture paths ... ---------------------------------------------------------------------- Ran 3 tests in 0.007s OK (real-binary fixture paths: 0s) ==> test Compiling crypto-common v0.1.7 Compiling crossbeam-utils v0.8.23 Compiling either v1.18.0 Compiling crossbeam-queue v0.3.14 Compiling libsqlite3-sys v0.30.1 Compiling digest v0.10.7 Compiling tokio-stream v0.1.19 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api) Compiling sha2 v0.10.9 Compiling openssl-sys v0.9.117 Compiling ring v0.17.14 Compiling regex-automata v0.4.18 Compiling tokio-util v0.7.19 Compiling sqlx-core v0.8.6 Compiling h2 v0.4.19 Compiling openssl v0.10.81 Compiling rustls-webpki v0.103.16 Compiling rustls v0.23.46 Compiling sha1 v0.10.7 Compiling sqlx-sqlite v0.8.6 Compiling tungstenite v0.29.0 Compiling hyper v1.11.1 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim) Compiling tokio-openssl v0.6.5 Compiling sqlx-macros-core v0.8.6 Compiling webauthn-attestation-ca v0.5.5 Compiling tokio-tungstenite v0.29.0 Compiling fs-err v3.3.2 Compiling tower v0.5.3 Compiling webauthn-rs-core v0.5.5 Compiling quinn-proto v0.11.19 Compiling sqlx-macros v0.8.6 Compiling matchers v0.2.0 Compiling hyper-util v0.1.21 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-server) Compiling sqlx v0.8.6 Compiling blake2 v0.10.6 Compiling tower-http v0.6.11 Compiling tracing-subscriber v0.3.23 Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-mesh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/host-facts) Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/release) Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/canvas) Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/mesh) Compiling argon2 v0.5.3 Compiling webauthn-rs v0.5.5 Compiling axum v0.8.9 Compiling axum-server v0.8.0 Compiling inout v0.1.4 Compiling universal-hash v0.5.1 Compiling cipher v0.4.4 Compiling opaque-debug v0.3.1 Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/backup) Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/relay) Compiling quinn v0.11.12 Compiling polyval v0.6.2 Compiling ctr v0.9.2 Compiling aes v0.8.4 Compiling ghash v0.5.1 Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-status) Compiling hmac v0.12.1 Compiling aead v0.5.2 Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal) Compiling crossbeam-epoch v0.9.21 Compiling hkdf v0.12.4 Compiling aes-gcm v0.10.3 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote) Compiling crossbeam-deque v0.8.8 Compiling plotters-backend v0.3.7 Compiling ciborium-io v0.2.2 Compiling rayon-core v1.13.0 Compiling ciborium-ll v0.2.2 Compiling plotters-svg v0.3.7 Compiling itertools v0.13.0 Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-agent) Compiling same-file v1.0.6 Compiling cast v0.3.0 Compiling walkdir v2.5.0 Compiling rayon v1.12.0 Compiling plotters v0.3.7 Compiling ciborium v0.2.2 Compiling regex v1.13.1 Compiling criterion-plot v0.6.0 Compiling tinytemplate v1.2.1 Compiling anes v0.1.6 Compiling oorandom v11.1.5 Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh) Compiling infraternal-session v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-session) Compiling criterion v0.7.0 Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-protocol) Finished `test` profile [unoptimized + debuginfo] target(s) in 5m 10s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal-6fb500f025e14506) running 104 tests test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 8.80s Running tests/agent_daemon.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/agent_daemon-07be34f79332b165) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.86s Running tests/agent_queues.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/agent_queues-230c59a5cd906663) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.64s Running tests/agent_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/agent_review-84c86525ad0fea2c) running 8 tests test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.75s Running tests/agent_sessions.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/agent_sessions-03d7a30371f14a27) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s Running tests/cli_envelope.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/cli_envelope-80a08214b8a5d410) running 8 tests test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok test a_missing_server_is_not_found_exit_4 ... ok test bare_infraternal_is_the_overview_and_points_to_help ... ok test status_exits_0_on_a_machine_with_nothing_installed ... ok test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok test read_only_commands_answer_in_the_envelope ... ok test status_exits_5_when_something_that_should_run_is_down ... ok test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/cli_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/cli_review-3291d67404d26089) running 17 tests test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok test a_group_with_one_command_says_so_in_the_singular ... ok test a_malformed_host_id_is_a_usage_error_exit_2 ... ok test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok test a_dry_run_plan_keeps_its_line_breaks ... ok test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok test an_unknown_skill_is_not_found_exit_4 ... ok test no_compiled_python_is_tracked ... ok test a_subcommand_does_not_advertise_options_it_ignores ... ok test a_dumb_terminal_gets_neither_colour_nor_marks ... ok test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok test root_help_lists_server_init ... ok test root_help_fits_80_columns ... ok test user_facing_text_never_says_agent_alone ... ok test json_help_and_version_are_envelopes_too ... ok test an_empty_no_color_is_ignored ... ok test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s Running tests/cli_review_r2.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/cli_review_r2-23cf4131d1988fa6) running 11 tests test an_unknown_skill_does_not_echo_what_was_typed ... ok test a_paged_listing_is_still_one_envelope ... ok test a_failed_later_page_emits_only_the_failure_envelope ... ok test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok test status_text_does_not_call_an_unanswered_unit_not_running ... ok test three_pages_preserve_order_and_only_the_final_cursor ... ok test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok test ctrl_c_in_a_script_loop_stops_the_loop ... ok test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.01s Running tests/cli_review_r3.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/cli_review_r3-be7640ccd9aa03ea) running 4 tests test signal_fixture ... ok test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/cli_review_r3_arguments.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/cli_review_r3_arguments-212cdc3ed0a05eb1) running 1 test test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/idle_canary.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/idle_canary-5d1908992b4ff473) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.08s Running tests/key_memory.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/key_memory-4d4f4cc5516ea6b4) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/remote_output.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/remote_output-9105ebfda268049c) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/session_bounds_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/session_bounds_review-ea0b23d91d052373) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.96s Running tests/session_exit_events.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/session_exit_events-d98ed6fbf136b0d7) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.02s Running tests/session_retention.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/session_retention-8b939159efa2d0ab) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.66s Running tests/setup_output.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/setup_output-702013ba02916bdd) running 6 tests test setup_token_permission_hint_covers_a_private_socket_in_a_readable_directory ... ok test setup_output_keeps_legacy_and_versioned_readers ... ok test unreadable_system_service_data_prints_one_sudo_command_line ... ok test setup_token_finds_the_data_dir_from_a_system_service_without_flags ... ok test setup_token_reads_a_traversable_directory_without_listing_access ... ok test setup_token_discovers_a_service_installed_through_a_versioned_binary_symlink ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/setup_review_r2.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/setup_review_r2-da958e09046ebe35) running 2 tests test executable_links_cannot_supply_a_data_path_outside_the_system_unit ... ok test setup_permission_hint_preserves_each_shell_sensitive_path_as_one_argument ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/shim.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/shim-30417b82dff06cc8) running 24 tests test detached_shell_exit_reaps_shim_within_one_second ... ok test double_fork_survives_parent_death ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok test disallowed_signal_only_disconnects_peer ... ok test attached_backpressure_and_detached_progress ... ok test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok test independent_shared_writers_wait_for_the_same_global_queue ... ok test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok test delivered_exit_cannot_release_another_owning_window ... ok test parked_shared_writer_does_not_stop_detached_pty_progress ... ok test replacement_connection_and_malformed_limit ... ok test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok test owned_exit_releases_promptly_on_window_close ... ok test shared_writer_coexists_and_replayed_input_is_written_once ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test shared_writer_restores_durable_geometry_after_another_writer_types ... ok test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok active test user_scope_survives_parent_unit_stop ... ok test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test legacy_output_subscription_unblocks_deferred_shared_input ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.64s Running tests/ssh_askpass.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/ssh_askpass-16fbd1b96c4af4ca) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.27s Running tests/ssh_connector_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/ssh_connector_policy-dd9b13bec3dd9638) running 1 test test connector_preserves_configured_bind_address_refusal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s Running tests/user_host.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/user_host-4bee401db2fda08c) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/vt_credit.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/vt_credit-dd383ed03c38b306) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.62s Running tests/vt_reconnect.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/vt_reconnect-a0009109e49304ab) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.88s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_agent-b93583fbcebe1fd6) running 168 tests test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::reply_capacity_tests::full_reply_reservations_cannot_spend_keyboard_capacity ... ok test daemon::session_commands::reply_capacity_tests::sixteen_replies_and_eight_typing_commands_retain_their_order ... ok test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged. test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged. test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock. test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace. test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test result: ok. 148 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 11.16s Running tests/transport.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/transport-8f7e25a883145d8d) running 3 tests test replacing_the_callers_descriptor_cannot_redirect_registered_io ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_mesh-7fce9c81f3753067) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/default_arrow-718a820b17567011) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/properties-9b39f53037898c73) running 14 tests test exhausted_versions_reject_mutations_without_changing_state ... ok test directional_grants_union_and_minimal_updates ... ok test names_versions_and_backend_status ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test overlaps_are_reported_without_silent_range_changes ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.25s Running tests/rotation_time.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/rotation_time-d8fd70ac7360bfd5) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_api-49f4d2771da6f777) running 32 tests test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test host_name::tests::addresses_and_hostnames_give_a_machine_name ... ok test host_name::tests::numeric_invalid_and_unnamed_inputs_give_no_name ... ok test host_name::tests::odd_and_overlong_hostnames_give_no_name ... ok test present::tests::pairs_align_values_and_wrap_under_them ... ok test present::tests::a_table_has_a_header_only_from_two_rows ... ok test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test present::tests::tint_wraps_text_after_padding_is_measured ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test server_path::tests::legacy_link_omits_the_optional_source_port ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes. test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_routes_only_declared_actions ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/routing_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/routing_review-6f6c1a928eb26a7f) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_backup-9fdc1ecb14af9cc8) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_canvas-1446da2b8a090ad7) running 12 tests test model::tests::graph_pin_coordinates_include_both_limits_but_refuse_the_next_integer ... ok test model::tests::reference_document_has_strict_shape_and_bounds ... ok test model::tests::host_id_requires_canonical_lowercase_hyphenated_text ... ok test reducer::tests::concurrent_builtin_view_creation_preserves_existing_contents ... ok test reducer::tests::sample_corpus_preserves_strict_variant_fields_and_round_trips ... ok test socket::tests::descriptor_declares_server_only_actions_and_strict_subscription ... ok test reducer::tests::nullable_resize_preserves_existing_values_and_absent_fields ... ok test socket::tests::result_json_preserves_both_wire_shapes ... ok test reducer::tests::split_divides_only_its_own_band ... ok test reducer::tests::view_metadata_targets_and_column_neighbours_are_semantic ... ok test reducer::tests::repeated_open_close_does_not_exhaust_column_capacity ... ok test reducer::tests::independent_edits_commute_and_close_wins_in_both_orders ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_host_facts-8ccf6df635e66a77) running 14 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::static_facts_report_the_machines_hostname ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_mesh-27583060726d1618) running 76 tests test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::peer_page_tests::poll_cost ... ignored, measurement test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok test node_presentation::tests::a_wide_table_stays_within_the_width ... ok test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok test node_presentation::tests::status_explains_the_observed_server_transport ... ok test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers. test node_coordination::tests::legacy_host_daemon_and_ip_record_do_not_leave_a_uuid_mesh_name ... ok test node_coordination::tests::a_name_a_person_chose_is_kept ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes. test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok test presence::tests::a_page_cursor_is_followed ... ok test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok test presence::tests::an_unreadable_node_is_no_reading ... ok test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok test presence::tests::replace_reports_only_visible_changes ... ok test presence::tests::the_edge_of_the_session_window_is_still_online ... ok test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok test presence::tests::traffic_proves_a_session_until_it_ends ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok test node_coordination::tests::placeholder_names_become_the_machines_names ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok test node_coordination::tests::two_hosts_reporting_the_same_hostname_receive_distinct_names ... ok test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 0.47s Running tests/access_updates.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/access_updates-401a785178272a85) running 8 tests test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace test compact_identity_support_requires_an_explicit_strict_probe ... ok test range_objects_reject_unknown_duplicate_and_positional_fields ... ok test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok test default_tightening_at_1000_peers_fits_one_round_trip ... ok test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/authorized_local_binding.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/authorized_local_binding-9eb78243673aa0ef) running 2 tests test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/canonical_host_binding.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canonical_host_binding-77332b5113aa5170) running 1 test test enrollment_requires_canonical_host_uuid_spelling ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/configuration.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/configuration-edd5af664e4aa790) running 5 tests test edition_default_is_explicit_and_build_selected ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.33s Running tests/kernel.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/kernel-ae923fd8446e7953) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/naming.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/naming-7ef77dd298644e0e) running 4 tests test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok test the_servers_names_are_kept_for_the_server ... ok test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/policy_enrollment_binding.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/policy_enrollment_binding-109d95c10f4ea94b) running 4 tests test noncanonical_host_binding_is_refused ... ok test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok test refused_enrollment_preserves_removal_and_revision ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/policy_enrollment_identity.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/policy_enrollment_identity-f0cf7a0229e540f5) running 1 test test unbound_enrollment_public_key_is_not_host_authority ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/policy_snapshot_ordering.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/policy_snapshot_ordering-7cc2ac94da47cd98) running 6 tests test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/presence.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/presence-3e1bc5e55745d7e3) running 2 tests test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/restart_route_ownership.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/restart_route_ownership-0dc4cc52f478fbf8) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_authorized_reenrollment.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_authorized_reenrollment-7a5ac950aac5a6a3) running 2 tests test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_endpoint_transaction-0ef0c911cceaab22) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_firewall_marker.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_firewall_marker-c4dbb35430ae2de6) running 2 tests test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173. test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_ingress_translation-c0a4032b0502fe02) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_local_delivery-1712a7f25b19bf51) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_presence_r4.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_mesh_presence_r4-b35fd343e12c696d) running 3 tests test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_view_truth.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_mesh_view_truth-62e9d7f28a99b9eb) running 6 tests test an_address_that_is_an_ip_never_becomes_a_name ... ok test a_remote_machine_cannot_be_called_server ... ok test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok test a_host_record_name_beats_another_machines_reported_hostname ... ok test a_remote_machine_cannot_take_the_servers_hostname ... ok test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.17s Running tests/review_mesh_view_truth_r2.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_mesh_view_truth_r2-f6106bc26caa5acf) running 9 tests test a_hex_ipv4_spelling_never_becomes_a_name ... ok test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236) test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok test no_viewer_sees_a_remote_machine_called_server ... ok test a_person_can_take_a_name_a_machine_reported ... ok test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok test a_viewer_without_host_facts_still_sees_distinct_names ... ok test evidence_migrations_0026_and_0029_upgrade_a_realistic_database_without_churn ... ok test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.17s Running tests/review_mesh_view_truth_r3.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_mesh_view_truth_r3-acc7217987659c70) running 5 tests test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/review_mesh_view_truth_r4.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_mesh_view_truth_r4-c8f1176c83a6a2a1) running 7 tests test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok test evidence_server_hostname_moves_only_with_server_rename_authority ... ok test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.45s Running tests/review_restart_routes.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_restart_routes-012bc6e19af8712e) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_retire_ownership.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_retire_ownership-7e7abe5e49e18a66) running 7 tests test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft. test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace. test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace. test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_reverse_recreation.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_reverse_recreation-ba8322a4b4589131) running 4 tests test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_revoked_host_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_revoked_host_policy-8f0b434cc4a6f49e) running 1 test test revoked_host_is_not_retained_in_compiled_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/review_route_inventory.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_route_inventory-db2612871fb84dbf) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_route_scope-7a63cc3e13aa42db) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_shutdown_budget-e6060242e37c449a) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_shutdown_restart-90e3bdbafd24755a) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/settings-b0c907b6b74ba896) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/store.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/store-0f17df0f12b6f327) running 6 tests test required_server_membership_cannot_be_deleted ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test absent_discovery_preserves_the_last_known_endpoint ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test attach_cancelled_at_any_await_leaves_the_store_writable ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_relay-d3de297fc8337bde) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_release-1d54d564a3117987) running 8 tests test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test latest::tests::cancellation_joins_verification ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.55s Running tests/review_pool.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_pool-51aabd0e805c8271) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.60s Running tests/review_restart.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_restart-c5f9f9cb62051e16) running 4 tests test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification test lookup_creates_private_staging_under_owner_restrictive_umask ... ok test restarted_latest_reclaims_metadata_after_process_stop ... ok test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.05s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_remote-ecf43ccc280cdfc1) running 114 tests test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance. test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance. test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers. test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections. test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence. test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections. test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections. test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock. test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline. test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok test runtime_lock::tests::dump_datagrams_split_exactly ... ok test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test 2 test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... ok test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok running 1 test test runtime_lock::tests::split_device_inner ... test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... ok test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok running 1 test test runtime_lock::tests::foreign_inode_twin_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok test uninstall::tests::review_planted_plan_is_never_followed ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test runtime_lock::tests::after_close_waits_for_a_slow_socket_snapshot ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok test result: ok. 99 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 5.37s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_plugin_ssh-17b36253c8d69c86) running 49 tests test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok test auth_order::tests::pending_forwards_the_caller_deadline_to_its_selected_session ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok test bootstrap::proof_tests::review_stalled_commit_cannot_outlive_attempt_cap ... ok test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok test bootstrap::proof_tests::review_commit_clamps_outliers_and_releases_immediately ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test install::tests::transfer_caps_accept_only_the_fixed_record ... ok test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok test payload::tests::settings_changes_keep_at_most_four_entries ... ok test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/already_added_breakit.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/already_added_breakit-e90e2f4c29cb707e) running 1 test test a_host_key_challenge_never_serializes_as_a_host_id ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/auth_order.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/auth_order-9968d66820e505cb) running 11 tests test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok test manual_method_trust_refusal_never_loads_later_credentials ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/build_removal-9eec37b95ad57c8e) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.31s Running tests/concurrency.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/concurrency-f30db03603f4997a) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/config_isolation-9a944d95ba4eed2e) running 2 tests test synthetic_master_socket_is_private_at_creation ... ok test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/credentials.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/credentials-6e4e4044489fb506) running 4 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test kernel_running_helper_is_materialized_in_its_private_scope ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.30s Running tests/diagnostics.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/diagnostics-f0e6f7e48b04f404) running 12 tests test control_probe_statuses_preserve_actionable_setup_messages ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/event_metadata-8524db180f9a16df) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/foreground-10281428fe728d1d) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/host_trust.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/host_trust-50a4a769c45122d1) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/install-42c84fd1d4c4d48f) running 95 tests test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok test breakit2_rollback_preserves_foreign_unit_new ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test active_transaction_is_live_between_ssh_setup_commands ... ok test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok test breakit2_rollback_preserves_foreign_launcher_new ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test compound_join_failure_preserves_the_original_status_and_boundary ... ok test buffering_setup_reader_receives_no_payload_until_selection ... ok test compound_restaging_refuses_a_foreign_journal_before_upload ... ok test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok test compound_setup_keeps_owned_rollback_and_linger_warning ... ok test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok test early_staging_preserves_canonical_foreign_root_refusal ... ok test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok test commit_signal_retains_journal_until_proof_and_on_cancel ... ok test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok test framed_join_refusal_keeps_status_separate_from_upload ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test crash_mid_install_can_roll_back_and_retry ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok test installed_infraternal_agent_always_restarts_without_start_limit ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_acquisition_cleanup_receipt_can_resume ... ok test full_payload_restaging_preserves_the_running_session_build ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test missing_payload_preserves_the_bootstrap_binary_remedy ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok test known_failed_setup_finishes_without_a_second_confirmation ... ok test payload_reuse_never_adopts_a_foreign_cache_directory ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test partial_full_upload_rebridges_from_a_verified_image ... ok test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test refused_previous_service_stop_only_removes_staging ... ok test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ignored, scripts/test-ssh-inode-reuse reports unsupported filesystems as ignored test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok test reported_cache_digest_selects_reuse_without_sending_payload ... ok test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534 test retry_resends_payload_when_cache_content_changes ... ok test review_live_relative_control_socket_preserves_its_receipt ... ok test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok test retry_reuses_verified_payload_after_owned_rollback ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test setup_transaction_holds_a_live_lock_between_shell_commands ... ok test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok test review_restart_recovers_cleanup_after_owner_retirement ... ok test review_restart_recovers_cleanup_after_base_retirement ... ok test session_restaging_uses_one_compound_command ... ok test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok test restart_recovers_partial_stage_retirement ... ok test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 7.58s Running tests/mesh_ssh.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/mesh_ssh-2fa83dcf733d059a) running 1 test test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/model.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/model-8dc28d474cf55d69) running 6 tests test addresses_never_become_options_or_shell_syntax ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/payload_source-8da7588b1b1e7c2a) running 2 tests test verification_failure_names_step_and_stops_before_upload ... ok test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/previous_attempt_liveness_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/previous_attempt_liveness_review-ce46fa87480131ee) running 1 test test home_alias_keeps_open_setup_descriptor_live ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/previous_attempt_shell.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/previous_attempt_shell-b9d97aec39edc4d4) running 1 test test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.36s Running tests/probe_check.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/probe_check-376aad85da0f0af1) running 3 tests test breakit2_no_systemd_names_the_required_manager ... ok test shell_startup_refusal_names_an_interactive_only_remedy ... ok test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/process.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/process-c3eab8acd9e98988) running 10 tests test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test unavailable_negotiated_codec_never_sends_invitation ... ok test negotiated_sources_require_an_exact_receipt_before_private_input ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test declared_payload_flows_before_receipts_and_private_input_waits ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.01s Running tests/proxy_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/proxy_policy-ae5cb2b308a06ccf) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/publication.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/publication-0d82e771a08c3f68) running 4 tests test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok test refused_publication_reports_failure_to_the_waiting_wizard ... ok test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/real_ssh.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/real_ssh-bf1648c924584992) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/recovery_support.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/recovery_support-683687d40ea38ce9) running 12 tests test cleanup_script_requires_the_shipped_helper_level ... ok test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok test legacy_control_socket_in_newline_home_preserves_receipt ... ok test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image test review_bound_control_socket_before_listen_preserves_receipt ... ok test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok test legacy_control_socket_in_spaced_home_preserves_receipt ... ok test private_legacy_control_socket_preserves_receipt ... ok test review_live_session_socket_in_newline_home_blocks_cleanup ... ok test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok test review_live_session_socket_in_plain_home_blocks_cleanup ... ok test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.43s Running tests/shadow_banner.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/shadow_banner-ec8803577a2b0cd0) running 1 test test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/shell_quoting.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/shell_quoting-e07d7690574ed5f8) running 1 test test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/single_connection-628041854be37518) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/source_completeness-4d7c035c7195b1ce) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/trust_round2-e8646687aedada12) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 8 tests test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_server-f1c601004c6d4da6) running 686 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::migration_data_tests::original_migration_metadata_and_checksums_are_unchanged ... ok test auth::migration_data_tests::quoted_text_and_comment_looking_literals_keep_their_values ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::migration_data_tests::dev_v29_and_production_v30_upgrade_without_retagging_or_losing_ownership ... ok test auth::migration_data_tests::fresh_schemas_defaults_indexes_and_foreign_keys_match_original_sql ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_accepts_legacy_and_job_scoped_roots ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_rejects_unscoped_and_escaping_paths ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::public_status_result_fields_are_listed_in_the_auth_contract ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::canvas::canvas_real_socket_commits_and_runtime_disable_preserve_control ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok test auth::tests::socket_tests::close_logging::revocation_wake_on_busy_store_logs_authority_unavailable_not_resume_refused ... ok test auth::tests::socket_tests::close_logging::revoked_busy_wake_records_stream_end_within_the_existing_wait ... ok test auth::tests::socket_tests::close_logging::revoked_session_during_transient_stall_logs_resume_refused ... ok test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::close_logging::unrelated_logout_during_transient_stall_keeps_the_terminal_socket ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok test auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply ... ok test auth::tests::socket_tests::review_authority_cap::retries_whose_select_waits_stay_within_the_authority_cap ... ok test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok test auth::tests::socket_tests::review_busy_wake::idle_busy_revocation_wake_sends_server_busy_close_code ... ok test auth::tests::socket_tests::review_busy_wake::sixteen_woken_sockets_recover_application_authority_after_a_short_stall ... ok test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_absolute_session_expiry ... ok test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_logout_revocation ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input ... ok test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok test bootstrap_runtime::remote_backend::admission_tests::missing_route_uses_link_scaled_bound_without_inventory_extensions ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_after_both_route_phases ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_at_600_ms ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_is_monotonic_for_zero_and_outlier_samples ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_lock_timing_runs_inside_the_nested_setup_shell ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_setup_timing_preserves_transfer_upload_status ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test canvas_store::tests::cancelled_commit_still_invalidates_a_durable_change ... ok test canvas_store::tests::cas_retry_and_foreign_account_isolation ... ok test canvas_store::tests::permanent_receipts_keep_the_original_json_digest_recipe ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::expired_route_retires_full_consumer ... ok test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock. test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok test embedded::regressions::path_tests::review_reply_bypasses_queued_typing_without_losing_its_cursor_or_bytes ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::reply_order_tests::browser_reply_follows_typing_across_both_forwarding_tasks ... ok test embedded::reply_order_tests::full_reply_reservations_preserve_keyboard_bytes_and_all_eight_slots ... ok test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok test enrollment::migration_tests::canvas_layout_migration_upgrades_production_v27_and_fresh_schema_in_order ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test enrollment::migration_tests::hostname_migration_allocates_around_retained_names ... ok test enrollment::migration_tests::hostname_migration_upgrades_release6_copy_without_changing_canvas_or_checksums ... ok test enrollment::migration_tests::old_uuid_mesh_placeholders_upgrade_to_audited_unnamed_labels ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_inventory::name_tests::an_ip_added_host_uses_its_cached_hostname_and_old_facts_do_not_clear_it ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_inventory::name_tests::late_hostname_inventory_renames_the_attached_mesh_node_and_notifies_viewers ... ok test remote_inventory::name_tests::inventory_hostname_changes_publish_once_and_preserve_hand_names ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_inventory::name_tests::reported_names_yield_to_records_and_collision_suffixes_and_server_identity_hold ... ok test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok test stream_close::tests::close_path_cost ... ignored, manual microbenchmark test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok test terminal_queries::review_tests::a_lagging_viewer_cannot_renew_a_deadline_after_the_first_viewer_answered ... ok test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok test terminal_queries::review_tests::trimmed_output_refuses_its_answer_without_reopening_an_accepted_position ... ok test terminal_queries::review_tests::two_positions_in_one_chunk_are_claimed_in_order_without_reopening_either ... ok test terminal_queries::tests::deadline_includes_incomplete_query ... ok test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok test terminal_queries::tests::marked_flood_never_allocates_queries ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok test websocket::probe_authority::review_closed_watch::closed_revocation_watch_is_unavailable_and_never_polls_the_write ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::writer_tests::authority_watchdog::authority_deadline_preserves_subsecond_session_expiry ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::cancelled_storm_returns_every_place_without_duplication ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::deadline_storm_retains_exactly_four_places_then_recovers ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::pool_acquire_timeout_recovers_places_without_releasing_the_connection ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::ready_result_observed_after_deadline_retries_current_authority ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok test websocket::writer_tests::busy_edges::wall_expiry_and_monotonic_deadlines_keep_their_separate_roles ... ok test websocket::writer_tests::resume_refusals_distinguish_connection_state_and_lost_token_rotation ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok test websocket_transport::tests::visibility_notices_are_small_typed_transport_messages ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test terminal_queries::review_tests::all_session_tables_remain_bounded_at_the_registry_limit ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test websocket::writer_tests::busy_edges::revoked_probe_across_attempt_backoff_and_total_wait_edges ... ok test websocket::writer_tests::busy_edges::expiry_crossing_a_stalled_read_refuses_both_deadline_callers ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::sqlite_busy_timeout_recovers_detached_storm_without_unlocking ... ok test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok test result: ok. 634 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 247.79s Running tests/canvas_convergence.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_convergence-1a7528827de3cb23) running 20 tests test a_tiled_import_cannot_duplicate_an_existing_graph_kind ... ok test competing_bootstraps_merge_targets_and_retry_after_restart ... ok test imports_use_account_wide_target_identity_and_keep_spanning_column_geometry ... ok test identical_and_empty_second_devices_do_not_advance_revision ... ok test importing_an_orphaned_recovery_view_does_not_create_another_recovery_name ... ok test loading_repairs_only_matching_recovery_views_and_converges_clients ... ok test merge_bounds_refuse_without_losing_the_existing_layout ... ok test initialize_and_apply_repair_before_writing_and_notify_subscribers ... ok test import_prefers_matching_names_before_the_first_view_of_its_kind ... ok test no_op_imports_keep_retry_receipts_and_do_not_clear_operation_history ... ok test session_import_identity_ignores_labels_but_checks_account_ownership ... ok test simultaneous_first_devices_merge_disjoint_targets_into_one_view ... ok test stale_noop_still_checks_numeric_bounds_before_committing ... ok test split_retry_is_durable_and_changed_idempotency_input_is_refused ... ok test owned_session_reference_and_all_bounds_are_transactional ... ok test permanent_receipts_do_not_copy_large_bootstrap_documents ... ok test two_devices_serialize_stale_edits_and_replay_every_committed_revision ... ok test encoded_document_budget_is_enforced_by_the_host_transaction ... ok test no_op_import_receipts_still_have_a_bounded_quota ... ok test close_beats_move_resize_in_both_orders_and_survives_compaction ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.59s Running tests/canvas_receipt_count.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_receipt_count-dcb7b77ff3a854ab) running 1 test test historical_receipts_backfill_and_follow_transactions_and_account_removal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_receipt_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_receipt_review-f4b0654f8bb85a4f) running 1 test test historical_no_revision_receipts_preserve_replay_and_the_last_real_edit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.74s Running tests/canvas_recovery_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_recovery_review-f2d4bef103e06289) running 5 tests test repair_rebases_a_cursor_that_already_names_its_next_revision ... ok test queued_close_of_unique_recovered_window_survives_repair ... ok test queued_resize_keeps_its_membership_after_a_separate_read_repair ... ok test independent_loads_and_base_edit_repair_exactly_once ... ok test recovery_at_column_capacity_keeps_the_account_readable ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/canvas_replay_noop.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_replay_noop-f45368f3ae253f70) running 1 test test committed_noop_is_explicit_without_sending_all_closed_ids_to_clients ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_retired_reference.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_retired_reference-4ae1b19d3a90f2d6) running 2 tests test retired_reference_does_not_block_an_unrelated_edit ... ok test retarget_checks_account_ownership_even_after_close ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_socket.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_socket-51aa35d48dc96a00) running 1 test test snapshot_then_ordered_commit_events_and_revocation_cancel_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_text_bounds.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/canvas_text_bounds-eb698aef9b5b9538) running 2 tests test text_uses_the_browser_utf16_bound ... ok test imported_name_respects_the_browser_utf16_bound ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/catalog_startup.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/catalog_startup-c4f0c5c2b9e63826) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/enrollment-3533ffe0cf2749cb) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.24s Running tests/mesh_parser.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/mesh_parser-f3d43b86d3386706) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/mesh_review_plugin-1de5b08687140771) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/mesh_review_policy.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/mesh_review_policy-5801ffe603d49dec) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/mesh_review_role_scope-1867947f5f970cf5) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/native_probe_correlation_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/native_probe_correlation_review-0508c3491f4ab791) running 25 tests test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test unissued_native_probe_reply_cannot_extend_readiness ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test healthy_real_socket_survives_a_150ms_server_stall ... ok test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/plugin_host_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/plugin_host_review-1f79717833c5fdb0) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_disable_answers_inflight_call ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s Running tests/plugin_settings_review.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/plugin_settings_review-8e826064dc44171b) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.60s Running tests/remote_plugin_contract.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/remote_plugin_contract-c936186fbcfd8885) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s Running tests/review_mesh_host_removal.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/review_mesh_host_removal-56ed2d75e836d36e) running 1 test test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_session-f2f326f18dc6b30e) running 2 tests test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok running 1 test test tests::fresh_exec_closes_dumpability_before_private_startup ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s test tests::fresh_exec_closes_dumpability_before_private_startup ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_shim-7c35453813e3afe4) running 105 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test frame::checks::tests::golden_and_fragmented ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok running 1 test test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 104 filtered out; finished in 0.00s test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 92 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 30.02s Running tests/detach.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/detach-6a47ad01fd5a59d3) running 2 tests test detached_child_restores_default_signals_without_changing_parent ... ok test closed_standard_descriptors_become_dev_null ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.39s Running tests/mouse.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/mouse-d13052bb88989529) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.01s Running tests/ppu_reliability.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/ppu_reliability-2964f940e0c6068a) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/ppu_reliability_memory.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/ppu_reliability_memory-a754448942207ef2) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/process_exit_descriptor.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/process_exit_descriptor-c4b349d2a498ffa6) running 2 tests test invalid_pid_never_creates_a_descriptor ... ok test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_status-7910dde34bdac077) running 14 tests test tests::installed_server_discovery_recognizes_the_running_executable_identity ... ok test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok test tests::installed_system_server_data_comes_from_its_effective_execstart ... ok test tests::nothing_installed_says_so ... ok test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok test tests::server_and_host_on_one_machine_is_both ... ok test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok test tests::rootless_agent_is_read_from_the_user_manager ... ok test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok test tests::stopped_server_unit_is_stopped_not_unknown ... ok test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok test tests::the_headline_names_what_is_down_and_how_to_look ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_canvas running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 2 tests test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 56) - compile fail ... ok test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 63) - compile fail ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Doc-tests infraternal_status running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s (test: 816s) ==> SSH inode reuse fixture Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh) Finished `test` profile [unoptimized + debuginfo] target(s) in 3.56s Running tests/install.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/install-f0d19bd45bc9bae9) running 1 test test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 0.20s (SSH inode reuse fixture: 3s) ==> shim process-per-user Compiling nix v0.30.1 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim) Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 20s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/review-setup-token-r2/target/debug/deps/infraternal_shim-58e9712d9c0dc37c) running 218 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::borrowed_output_keeps_frozen_bytes_and_refuses_before_batch_mutation ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::batch_append_preserves_prefix_and_refuses_invalid_frames ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::tests::golden_and_fragmented ... ok test heap_accounting::transient_allocations_are_visible_after_their_storage_is_freed ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test heap_accounting::accounting_keeps_exact_layouts_and_balances_reallocation ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok running 1 test test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... running 1 test test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok running 1 test test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... test pty::output_readiness_tests::readable_byte_hint_preserves_the_complete_output_stream ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test ring::checks::tests::borrowed_ranges_obey_absolute_offsets_across_physical_wrap ... ok test ring::checks::tests::empty_append_keeps_lazy_storage_unallocated ... ok test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s test ring::checks::tests::merge_review_pool_refusal_retains_exact_suffix_and_releases_charge ... ok test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test ring::checks::tests::shared_history_reservation_never_rounds_past_its_share ... ok test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok test session::inputs::host_budget_tests::alternating_writers_cannot_expand_shared_host_bookkeeping_without_bound ... ok test session::inputs::reply_tests::host_replies_preserve_segment_budget_and_account_for_promoted_storage ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::inputs::tests::host_legacy_writer_needs_no_heap_table ... ok test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::bounded_flush_keeps_partial_frame_and_wire_order ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::user_host::child_checks::ordinary_housekeeping_does_not_probe_child_status ... ok test session::user_host::child_checks::threaded_startup_is_refused_before_creating_session_state ... ok test session::user_host::lazy_bench::geometry_replay_materialization_cost ... ignored, perf VM only: measure cold materialization after bounded geometry replay test session::user_host::reactor::tests::accounting_write_failure_disables_only_the_receipt ... ok test session::user_host::reactor::tests::actual_output_selector_keeps_a_bulk_turn_after_granted_and_denied_promotions ... ok test session::user_host::reactor::tests::cancelled_bulk_membership_reuses_the_existing_deque_entry ... ok test session::user_host::reactor::tests::cheap_replies_share_a_turn_but_expired_output_yields_to_input ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::user_host::reactor::tests::fresh_ack_fallback_avoids_writable_poll_and_finishes_with_new_input ... ok test session::user_host::reactor::tests::inline_and_extra_descriptor_flags_merge_without_losing_generations ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.03s test session::user_host::reactor::tests::exit_observed_before_settle_still_queues_one_retention_deadline ... ok test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... ok test session::user_host::reactor::tests::input_phase_retires_closed_identity_without_publishing_transient_interest ... ok test session::user_host::reactor::tests::one_session_readiness_fits_240_requested_bytes ... ok test session::user_host::reactor::tests::readiness_membership_stays_within_five_bytes_per_session ... ok test session::user_host::reactor::tests::readiness_storage_registration_is_at_most_sixteen_bytes ... ok test session::user_host::reactor::tests::readiness_storage_two_descriptors_are_allocation_free ... ok test session::user_host::reactor::tests::ready_rows_clear_only_touched_slots_and_fence_round_wrap ... ok test session::user_host::reactor::tests::ownership_receipt_separates_session_components_and_shared_capacities ... ok test session::user_host::reactor::tests::ready_rows_keep_two_descriptor_turns_allocation_free_within_64_bytes_per_slot ... ok running 1 test test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok test session::user_host::reactor::tests::replay_continues_after_its_frame_was_written_inline ... ok test session::user_host::reactor::tests::round_reset_and_wrap_preserve_bulk_membership_without_reviving_reads ... ok test session::user_host::reactor::tests::short_output_cohort_yields_before_the_next_input_poll ... ok test session::user_host::reactor::tests::single_ready_descriptor_needs_no_heap_allocation ... ok test session::user_host::reactor::tests::timer_membership_survives_bulk_promotion_cancellation_and_round_wrap ... ok test session::user_host::tests::admission_refuses_foreign_uid_duplicate_ids_and_geometry_before_spawn ... ok test session::user_host::reactor::tests::queued_data_ack_needs_no_writable_poll_before_pty_service ... ok test session::user_host::reactor::tests::unchanged_registration_sync_needs_no_heap_allocation ... ok test session::user_host::tests::blocked_state_and_output_share_one_ordered_write_batch ... ok ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.08s test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... ok test session::user_host::tests::deferred_data_ack_and_available_output_share_one_ordered_batch ... ok test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok test session::user_host::tests::data_ack_can_wait_for_a_writable_visit_without_requiring_output ... ok test session::user_host::tests::bulk_turn_advances_sixteen_kib_and_yields_before_the_rest ... ok test session::user_host::tests::full_pool_typing_echo_latency ... ignored, timing measurement runs on the perf VM test session::user_host::tests::full_pool_reuses_ring_storage_for_newest_output ... ok test session::user_host::tests::host_pool_scales_with_machine_memory_within_bounds ... ok test session::user_host::tests::idle_session_ownership_ledger ... ignored, perf VM only: per-session requested-byte ownership ledger at scale test session::user_host::tests::full_pool_refuses_new_session_and_keeps_existing_session_working ... ok running 1 test test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok test session::user_host::tests::geometry_transcript_materializes_at_its_event_bound ... ok test session::user_host::tests::lazy_prefix_materializes_exactly_before_overflow_and_resize ... ok test session::user_host::tests::medium_geometry_materializes_before_deferred_cell_work_exceeds_the_bound ... ok test session::user_host::tests::output_bound_replays_retained_geometry_before_new_bytes ... ok test session::user_host::tests::malformed_closed_peer_is_retired_once_and_keeps_its_sibling ... ok test session::user_host::tests::prefix_threshold_preserves_unfinished_sequences ... ok test session::user_host::tests::quiet_geometry_changes_remain_lazy_and_replay_in_order ... ok test session::user_host::tests::same_geometry_input_selection_keeps_vt_unallocated ... ok test session::user_host::tests::session_constructor_retains_only_the_bound_socket_path ... ok test session::user_host::tests::state_fences_and_input_only_acks_bypass_coalescing ... ok test session::user_host::tests::steady_replay_needs_no_payload_allocation ... ok test session::user_host::tests::unchanged_geometry_retains_native_resize_side_effects ... ok test session::user_host::tests::vt_panic_retires_one_real_pty_and_sibling_keeps_its_output ... ok test session::user_host::tests::writable_peer_receives_state_and_output_before_another_readiness_turn ... ok test session::user_host::tests::zero_ring_capacity_does_not_stall_a_live_pty ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok test session::user_host::tests::exhausted_pool_drains_live_ptys_during_random_session_churn ... ok test terminal::checks::snapshot_during_discard_preserves_the_unfinished_string_boundary ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test pty::handoff::tests::all_masters_survive_original_owner_drop_with_cloexec ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test session::user_host::tests::large_geometry_cannot_defer_a_long_first_snapshot_reflow_queue ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test session::user_host::tests::geometry_transcript_property_cases_match_eager_native_state ... ok test terminal::host_budget::erased_history_reset_and_geometry_return_native_memory ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::host_budget::page_nodes_never_fill_the_ordinary_data_cap ... ok test terminal::host_budget::shared_host_budget_bounds_the_sum_and_keeps_every_terminal_exact ... ok test terminal::host_budget::every_history_share_fills_and_recycles_inside_its_reservation ... ok test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::ppu_memory_bench::fresh_shell_filler_snapshot_gap_is_independent_of_allocator_refusal ... ok test terminal::ppu_memory_bench::native_session_allocations_settle_after_geometry_warmup ... ignored, perf VM only: native heap/resident accounting; set PPU_VT_ACCOUNT_SESSIONS test terminal::ppu_memory_bench::quiet_resize_churn_does_not_keep_new_resident_pools ... ignored, perf VM only: sparse resize ownership at 900 quiet sessions test terminal::ppu_memory_bench::small_history_does_not_retain_megabyte_page_quanta ... ignored, perf VM only: sparse history residency and native ownership test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test session::user_host::tests::pool_usage_never_exceeds_cap_under_open_write_close_sequences ... ok test terminal::checks::control_strings_cannot_grow_session_carry_without_bound ... ok test terminal::review_r2::review_r2_escape_high_byte_does_not_start_a_hidden_string ... ok test terminal::host_budget::report_native_memory_numbers ... ok test terminal::review_r2::review_r2_escape_command_inside_discard_matches_short_string ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::review_r2::review_r2_resize_storm_does_not_ratchet_native_memory ... ok test terminal::host_budget::widening_a_full_history_stays_inside_its_share ... ok test terminal::review_r2::review_r2_limiter_is_transparent_for_short_control_mixtures ... ok test terminal::review_r2::review_r2_resize_with_full_history_share_stays_exact ... ok test terminal::review_r3::review_r3_four_hundred_laptop_screens_fit_the_host ... ok test terminal::review_r2::review_r2_host_history_share_fits_the_native_reservation ... ok test terminal::host_budget::laptop_screens_come_from_their_floors_not_the_pool ... ok test terminal::review_r2::review_r2_ground_c1_introducer_stays_within_the_session_share ... ok test terminal::review_r3::review_r3_bounded_terminal_reflows_long_mixed_history ... ok test terminal::review_r3::review_r3_recycled_unwrapped_history_keeps_exact_snapshot ... ok test terminal::review_r3::review_r3_host_accounting_balances_through_recovery ... ok test terminal::review_r3::review_r3_history_share_without_ris_never_refuses ... ok test terminal::user_screen_pool_resize::taller_widening_keeps_history_rows_that_move_onto_the_screen ... ok test terminal_limits::c1_tests::c1_string_inside_csi_has_a_seven_bit_replay_boundary ... ok test terminal_limits::defensive_tests::executed_c0_between_escape_and_introducer_keeps_the_bound ... ok test terminal_limits::tests::escape_after_discard_restarts_without_losing_the_next_command ... ok test terminal_limits::tests::finite_sequences_are_identical_for_every_fragment_boundary ... ok test terminal_limits::tests::fragmented_overflow_stays_discarded_until_a_real_terminator ... ok test terminal_memory::payload_tests::oversized_payload_is_refused_before_allocation_while_tagged_pool_is_allowed ... ok test terminal_memory::payload_tests::residency_query_observes_only_owned_page_mappings_without_faulting_payload ... ok test terminal_memory::tests::allocation_budget_includes_overhead_and_refusal_is_recoverable ... ok test terminal_memory::tests::screen_pages_are_zero_filled_and_page_aligned ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok test terminal_native::owned_memory_tests::refused_resize_reclaims_every_owned_native_allocation ... ok test terminal_native::owned_memory_tests::refusal_inside_reflow_never_touches_freed_pages ... ok test terminal::review_r3::review_r3_noisy_neighbour_does_not_make_quiet_sessions_approximate ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::review_r3::review_r3_recycled_history_matches_unbounded_reference ... ok test terminal::review_r3::review_r3_thousand_sessions_and_one_flood ... ok test terminal::review_r3::review_r3_hundred_laptop_sessions_keep_exact_state ... ok test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact has been running for over 60 seconds test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact ... ok test result: ok. 199 passed; 0 failed; 19 ignored; 0 measured; 0 filtered out; finished in 101.07s (shim process-per-user: 182s) ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 ├── (build) infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.16 └── rustls v0.23.46 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.16 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-canvas v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:200:1 │ 200 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 201 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.16 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-canvas v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:202:1 │ 202 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 204 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:205:1 │ 205 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:207:1 │ 207 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 208 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 209 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.16 │ │ └── rustls v0.23.46 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── (dev) infraternal-status v0.1.0 │ │ └── infraternal v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:251:1 │ 251 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 252 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ └── infraternal-session v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.46 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.16 │ │ │ └── rustls v0.23.46 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── (dev) infraternal-status v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-webpki v0.103.16 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.3 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:254:1 │ 254 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 255 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:257:1 │ 257 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 258 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:259:1 │ 259 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 260 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/agent/wt-infraternal/review-setup-token-r2/Cargo.lock:317:1 │ 317 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 318 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.16 └── rustls v0.23.46 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.3 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.3 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.3 (*) ├── tokio v1.53.3 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok (cargo-deny: 2s) ==> static builds x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently native compiler metadata: path independent; platform/date retained; unexpected syntax refused Rust remapping: differently named checkout roots produce identical stripped artifacts . ---------------------------------------------------------------------- Ran 1 test in 0.002s OK Compiling proc-macro2 v1.0.107 Compiling quote v1.0.47 Compiling unicode-ident v1.0.26 Compiling libc v0.2.190 Compiling cfg-if v1.0.5 Compiling find-msvc-tools v0.1.14 Compiling shlex v2.0.1 Compiling serde v1.0.229 Compiling autocfg v1.5.1 Compiling pin-project-lite v0.2.17 Compiling serde_core v1.0.229 Compiling cc v1.6.0 Compiling version_check v0.9.5 Compiling vcpkg v0.2.15 Compiling generic-array v0.14.7 Compiling bytes v1.12.1 Compiling pkg-config v0.3.34 Compiling memchr v2.8.3 Compiling icu_normalizer_data v2.3.0 Compiling icu_properties_data v2.3.0 Compiling once_cell v1.21.4 Compiling log v0.4.34 Compiling itoa v1.0.18 Compiling syn v3.0.6 Compiling syn v2.0.119 Compiling tracing-core v0.1.36 Compiling futures-core v0.3.34 Compiling errno v0.3.14 Compiling socket2 v0.6.5 Compiling stable_deref_trait v1.2.1 Compiling signal-hook-registry v1.4.8 Compiling mio v1.2.4 Compiling smallvec v1.16.2 Compiling thiserror v2.0.21 Compiling futures-sink v0.3.34 Compiling slab v0.4.12 Compiling parking_lot_core v0.9.12 Compiling subtle v2.6.1 Compiling zmij v1.0.23 Compiling typenum v1.20.1 Compiling num-traits v0.2.19 Compiling crossbeam-utils v0.8.23 Compiling writeable v0.6.4 Compiling litemap v0.8.3 Compiling tracing-attributes v0.1.31 Compiling synstructure v0.14.0 Compiling displaydoc v0.2.7 Compiling zerovec-derive v0.11.6 Compiling serde_derive v1.0.229 Compiling tokio-macros v2.7.2 Compiling tracing v0.1.44 Compiling thiserror-impl v2.0.21 Compiling zerofrom-derive v0.1.8 Compiling yoke-derive v0.8.4 Compiling tokio v1.53.3 Compiling zerofrom v0.1.8 Compiling utf8_iter v1.0.4 Compiling yoke v0.8.3 Compiling crypto-common v0.1.7 Compiling zerovec v0.11.8 Compiling zerotrie v0.2.5 Compiling block-buffer v0.10.4 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling icu_locale_core v2.3.0 Compiling icu_collections v2.3.0 Compiling equivalent v1.0.2 Compiling percent-encoding v2.3.2 Compiling icu_provider v2.3.1 Compiling digest v0.10.7 Compiling scopeguard v1.2.0 Compiling lock_api v0.4.14 Compiling icu_normalizer v2.3.0 Compiling icu_properties v2.3.0 Compiling futures-macro v0.3.34 Compiling libsqlite3-sys v0.30.1 Compiling cpufeatures v0.2.17 Compiling futures-io v0.3.34 Compiling futures-task v0.3.34 Compiling hashbrown v0.17.1 Compiling futures-util v0.3.34 Compiling idna_adapter v1.2.2 Compiling form_urlencoded v1.2.2 Compiling indexmap v2.14.2 Compiling sha2 v0.10.9 Compiling idna v1.1.0 Compiling openssl-src v300.6.1+3.6.3 Compiling serde_json v1.0.151 Compiling allocator-api2 v0.2.21 Compiling foldhash v0.1.5 Compiling openssl-sys v0.9.117 Compiling hashbrown v0.15.5 Compiling url v2.5.8 Compiling parking_lot v0.12.5 Compiling futures-channel v0.3.34 Compiling heck v0.5.0 Compiling cfg_aliases v0.2.2 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling event-listener v5.4.2 Compiling crc v3.4.0 Compiling futures-intrusive v0.5.0 Compiling crossbeam-queue v0.3.14 Compiling hashlink v0.10.0 Compiling either v1.18.0 Compiling spin v0.9.9 Compiling tokio-stream v0.1.19 Compiling ryu v1.0.23 Compiling bitflags v2.13.2 Compiling rand_core v0.10.1 Compiling base64 v0.22.1 Compiling serde_urlencoded v0.7.1 Compiling atoi v2.0.0 Compiling flume v0.11.1 Compiling sqlx-core v0.8.6 Compiling futures-executor v0.3.34 Compiling zerocopy v0.8.60 Compiling getrandom v0.4.3 Compiling sqlx-sqlite v0.8.6 Compiling zerocopy-derive v0.8.60 Compiling getrandom v0.2.17 Compiling dotenvy v0.15.7 Compiling hex v0.4.3 Compiling sqlx-macros-core v0.8.6 Compiling sqlx-macros v0.8.6 Compiling foreign-types-shared v0.1.1 Compiling openssl v0.10.81 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api) Compiling foreign-types v0.3.2 Compiling openssl-macros v0.1.1 Compiling http v1.5.0 Compiling memoffset v0.9.1 Compiling nix v0.30.1 Compiling ring v0.17.14 Compiling getrandom v0.3.4 Compiling ppv-lite86 v0.2.21 Compiling uuid v1.27.0 Compiling zeroize v1.9.0 Compiling num-conv v0.2.2 Compiling untrusted v0.9.0 Compiling thiserror v1.0.69 Compiling utf8parse v0.2.2 Compiling httparse v1.10.1 Compiling minimal-lexical v0.2.1 Compiling arrayvec v0.7.8 Compiling time-core v0.1.9 Compiling nom v7.1.3 Compiling time-macros v0.2.32 Compiling anstyle-parse v1.0.0 Compiling rand_core v0.9.5 Compiling rustls-pki-types v1.15.1 Compiling http-body v1.1.0 Compiling thiserror-impl v1.0.69 Compiling synstructure v0.13.2 Compiling cpufeatures v0.3.1 Compiling anstyle v1.0.14 Compiling deranged v0.5.8 Compiling powerfmt v0.2.1 Compiling colorchoice v1.0.5 Compiling rustls v0.23.46 Compiling is_terminal_polyfill v1.70.2 Compiling tinyvec v1.13.3 Compiling anstyle-query v1.1.5 Compiling time v0.3.55 Compiling anstream v1.0.0 Compiling asn1-rs-derive v0.5.1 Compiling chacha20 v0.10.2 Compiling rand_chacha v0.9.0 Compiling rusticata-macros v4.1.0 Compiling quinn-udp v0.5.16 Compiling tokio-util v0.7.19 Compiling asn1-rs-impl v0.2.0 Compiling clap_lex v1.1.1 Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-protocol) Compiling tower-service v0.3.3 Compiling tokio-openssl v0.6.5 Compiling strsim v0.11.1 Compiling data-encoding v2.11.1 Compiling asn1-rs v0.6.2 Compiling clap_builder v4.6.7 Compiling rand v0.9.5 Compiling rand v0.10.3 Compiling rand_core v0.6.4 Compiling rand_pcg v0.10.2 Compiling quinn v0.11.12 Compiling clap_derive v4.6.7 Compiling num-integer v0.1.47 Compiling rustls-webpki v0.103.16 Compiling pastey v0.1.1 Compiling httpdate v1.0.3 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim) Compiling try-lock v0.2.5 Compiling base64 v0.21.7 Compiling lazy_static v1.5.1 Compiling rustc-hash v2.1.3 Compiling atomic-waker v1.1.2 Compiling oid-registry v0.7.1 Compiling lru-slab v0.1.3 Compiling fnv v1.0.7 Compiling base64urlsafedata v0.5.5 Compiling h2 v0.4.19 Compiling clap v4.6.7 Compiling want v0.3.2 Compiling num-bigint v0.4.8 Compiling vte v0.15.0 Compiling unicase v2.10.0 Compiling webauthn-attestation-ca v0.5.5 Compiling tower-layer v0.3.3 Compiling mime v0.3.17 Compiling rustversion v1.0.23 Compiling hyper v1.11.1 Compiling mime_guess v2.0.5 Compiling der-parser v9.0.0 Compiling quinn-proto v0.11.19 Compiling http-body-util v0.1.5 Compiling half v2.7.1 Compiling sha1 v0.10.7 Compiling fs-err v3.3.2 Compiling webauthn-rs-core v0.5.5 Compiling sync_wrapper v1.0.2 Compiling regex-syntax v0.8.11 Compiling tungstenite v0.29.0 Compiling serde_cbor_2 v0.13.0 Compiling hyper-util v0.1.21 Compiling regex-automata v0.4.18 Compiling x509-parser v0.16.0 Compiling webauthn-rs-proto v0.5.5 Compiling rand_chacha v0.3.1 Compiling hex-conservative v0.2.3 Compiling base64ct v1.8.3 Compiling password-hash v0.5.0 Compiling rand v0.8.8 Compiling bitcoin_hashes v0.14.101 Compiling matchers v0.2.0 Compiling arc-swap v1.9.2 Compiling tokio-tungstenite v0.29.0 Compiling tower v0.5.3 Compiling axum-core v0.5.6 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-server) Compiling blake2 v0.10.6 Compiling tracing-serde v0.2.0 Compiling tracing-log v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling thread_local v1.1.10 Compiling http-range-header v0.4.2 Compiling matchit v0.8.4 Compiling nu-ansi-term v0.50.3 Compiling tower-http v0.6.11 Compiling axum v0.8.9 Compiling tracing-subscriber v0.3.23 Compiling argon2 v0.5.3 Compiling bip39 v2.2.2 Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal) Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-status) Compiling sqlx v0.8.6 Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-mesh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/host-facts) Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/release) Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/canvas) Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/relay) Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/backup) Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/mesh) Compiling axum-server v0.8.0 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote) Compiling webauthn-rs v0.5.5 Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-agent) Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh) Finished `release` profile [optimized] target(s) in 8m 14s AES-128-GCM NIST vector encrypt/decrypt passed production trust: PASS (staging-trust authority absent) /home/agent/.cache/codex-scratch/review-setup-token-r2/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21400400 bytes; cap: 21400400 bytes; delta: +0 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Key memory initialization=1; locked pages and dump exclusion enabled Compiling cfg-if v1.0.5 Compiling libc v0.2.190 Compiling pin-project-lite v0.2.17 Compiling serde_core v1.0.229 Compiling bytes v1.12.1 Compiling serde v1.0.229 Compiling memchr v2.8.3 Compiling once_cell v1.21.4 Compiling log v0.4.34 Compiling itoa v1.0.18 Compiling tracing-core v0.1.36 Compiling futures-core v0.3.34 Compiling zerofrom v0.1.8 Compiling stable_deref_trait v1.2.1 Compiling smallvec v1.16.2 Compiling futures-sink v0.3.34 Compiling yoke v0.8.3 Compiling tracing v0.1.44 Compiling subtle v2.6.1 Compiling slab v0.4.12 Compiling socket2 v0.6.5 Compiling errno v0.3.14 Compiling mio v1.2.4 Compiling zerovec v0.11.8 Compiling generic-array v0.14.7 Compiling typenum v1.20.1 Compiling signal-hook-registry v1.4.8 Compiling writeable v0.6.4 Compiling litemap v0.8.3 Compiling tokio v1.53.3 Compiling num-traits v0.2.19 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling zerotrie v0.2.5 Compiling utf8_iter v1.0.4 Compiling icu_locale_core v2.3.0 Compiling icu_normalizer_data v2.3.0 Compiling icu_properties_data v2.3.0 Compiling equivalent v1.0.2 Compiling icu_collections v2.3.0 Compiling crypto-common v0.1.7 Compiling block-buffer v0.10.4 Compiling percent-encoding v2.3.2 Compiling digest v0.10.7 Compiling thiserror v2.0.21 Compiling hashbrown v0.17.1 Compiling futures-io v0.3.34 Compiling futures-task v0.3.34 Compiling form_urlencoded v1.2.2 Compiling futures-util v0.3.34 Compiling icu_provider v2.3.1 Compiling cpufeatures v0.2.17 Compiling scopeguard v1.2.0 Compiling indexmap v2.14.2 Compiling zmij v1.0.23 Compiling serde_json v1.0.151 Compiling lock_api v0.4.14 Compiling icu_normalizer v2.3.0 Compiling icu_properties v2.3.0 Compiling parking_lot_core v0.9.12 Compiling futures-channel v0.3.34 Compiling openssl-sys v0.9.117 Compiling crossbeam-utils v0.8.23 Compiling bitflags v2.13.2 Compiling rand_core v0.10.1 Compiling idna_adapter v1.2.2 Compiling foldhash v0.1.5 Compiling allocator-api2 v0.2.21 Compiling idna v1.1.0 Compiling hashbrown v0.15.5 Compiling parking_lot v0.12.5 Compiling either v1.18.0 Compiling crc-catalog v2.5.0 Compiling parking v2.2.1 Compiling base64 v0.22.1 Compiling crc v3.4.0 Compiling url v2.5.8 Compiling event-listener v5.4.2 Compiling futures-intrusive v0.5.0 Compiling zerocopy v0.8.60 Compiling getrandom v0.4.3 Compiling hashlink v0.10.0 Compiling tokio-stream v0.1.19 Compiling crossbeam-queue v0.3.14 Compiling spin v0.9.9 Compiling sha2 v0.10.9 Compiling libsqlite3-sys v0.30.1 Compiling getrandom v0.2.17 Compiling ryu v1.0.23 Compiling flume v0.11.1 Compiling sqlx-core v0.8.6 Compiling serde_urlencoded v0.7.1 Compiling futures-executor v0.3.34 Compiling atoi v2.0.0 Compiling foreign-types-shared v0.1.1 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-plugin-api) Compiling http v1.5.0 Compiling foreign-types v0.3.2 Compiling memoffset v0.9.1 Compiling getrandom v0.3.4 Compiling ring v0.17.14 Compiling nix v0.30.1 Compiling uuid v1.27.0 Compiling zeroize v1.9.0 Compiling ppv-lite86 v0.2.21 Compiling utf8parse v0.2.2 Compiling arrayvec v0.7.8 Compiling untrusted v0.9.0 Compiling minimal-lexical v0.2.1 Compiling thiserror v1.0.69 Compiling nom v7.1.3 Compiling anstyle-parse v1.0.0 Compiling httparse v1.10.1 Compiling rand_core v0.9.5 Compiling rustls-pki-types v1.15.1 Compiling http-body v1.1.0 Compiling time-core v0.1.9 Compiling colorchoice v1.0.5 Compiling deranged v0.5.8 Compiling powerfmt v0.2.1 Compiling is_terminal_polyfill v1.70.2 Compiling num-conv v0.2.2 Compiling anstyle v1.0.14 Compiling anstyle-query v1.1.5 Compiling tinyvec v1.13.3 Compiling anstream v1.0.0 Compiling time v0.3.55 Compiling rusticata-macros v4.1.0 Compiling rand_chacha v0.9.0 Compiling tokio-util v0.7.19 Compiling chacha20 v0.10.2 Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-protocol) Compiling rustls v0.23.46 Compiling tower-service v0.3.3 Compiling clap_lex v1.1.1 Compiling strsim v0.11.1 Compiling data-encoding v2.11.1 Compiling asn1-rs v0.6.2 Compiling clap_builder v4.6.7 Compiling quinn-udp v0.5.16 Compiling rand v0.10.3 Compiling rustls-webpki v0.103.16 Compiling rand v0.9.5 Compiling rand_core v0.6.4 Compiling rand_pcg v0.10.2 Compiling num-integer v0.1.47 Compiling lru-slab v0.1.3 Compiling fnv v1.0.7 Compiling httpdate v1.0.3 Compiling base64 v0.21.7 Compiling rustc-hash v2.1.3 Compiling lazy_static v1.5.1 Compiling atomic-waker v1.1.2 Compiling try-lock v0.2.5 Compiling h2 v0.4.19 Compiling want v0.3.2 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-shim) Compiling clap v4.6.7 Compiling base64urlsafedata v0.5.5 Compiling num-bigint v0.4.8 Compiling oid-registry v0.7.1 Compiling quinn v0.11.12 Compiling vte v0.15.0 Compiling tower-layer v0.3.3 Compiling quinn-proto v0.11.19 Compiling mime v0.3.17 Compiling hyper v1.11.1 Compiling der-parser v9.0.0 Compiling http-body-util v0.1.5 Compiling half v2.7.1 Compiling sha1 v0.10.7 Compiling regex-syntax v0.8.11 Compiling sync_wrapper v1.0.2 Compiling tungstenite v0.29.0 Compiling fs-err v3.3.2 Compiling serde_cbor_2 v0.13.0 Compiling regex-automata v0.4.18 Compiling hyper-util v0.1.21 Compiling x509-parser v0.16.0 Compiling mime_guess v2.0.5 Compiling webauthn-rs-proto v0.5.5 Compiling rand_chacha v0.3.1 Compiling hex-conservative v0.2.3 Compiling unicase v2.10.0 Compiling base64ct v1.8.3 Compiling hex v0.4.3 Compiling bitcoin_hashes v0.14.101 Compiling password-hash v0.5.0 Compiling rand v0.8.8 Compiling matchers v0.2.0 Compiling arc-swap v1.9.2 Compiling tokio-tungstenite v0.29.0 Compiling tower v0.5.3 Compiling axum-core v0.5.6 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling blake2 v0.10.6 Compiling tracing-serde v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling tracing-log v0.2.0 Compiling thread_local v1.1.10 Compiling nu-ansi-term v0.50.3 Compiling matchit v0.8.4 Compiling http-range-header v0.4.2 Compiling tracing-subscriber v0.3.23 Compiling axum v0.8.9 Compiling tower-http v0.6.11 Compiling argon2 v0.5.3 Compiling bip39 v2.2.2 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal) Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-status) Compiling sqlx-sqlite v0.8.6 Compiling sqlx v0.8.6 Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-mesh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/host-facts) Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/release) Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/canvas) Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/backup) Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/relay) Compiling openssl v0.10.81 Compiling tokio-openssl v0.6.5 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-core v0.5.5 Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/mesh) Compiling axum-server v0.8.0 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/remote) Compiling webauthn-rs v0.5.5 Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/infraternal-agent) Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/review-setup-token-r2/crates/plugins/ssh) Finished `release` profile [optimized] target(s) in 8m 32s production trust: PASS (staging-trust authority absent) /home/agent/.cache/codex-scratch/review-setup-token-r2/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 19575064 bytes; cap: 19575064 bytes; delta: +0 bytes key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) x86_64-unknown-linux-musl: exact 21400400-byte cap PASS; 21400401 bytes rejected PASS; smaller artifact requires ratchet PASS aarch64-unknown-linux-musl: exact 19575064-byte cap PASS; 19575065 bytes rejected PASS; smaller artifact requires ratchet PASS unsupported target: rejected PASS bun test v1.4.2 (744846f84) scripts/release/static-metadata-review.test.ts: (pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [48.95ms] (pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [45.53ms] 2 pass 0 fail 16 expect() calls Ran 2 tests across 1 file. [114.00ms] server subcommand: exit 2, versioned JSON unavailable result agent group: exit 0, one parsed versioned JSON listing of its commands (static builds: 1045s) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ==> Compiler metadata generator checks bun test v1.4.2 (744846f84) scripts/release/build-metadata.test.ts: (pass) native metadata canonicalization retains version fields and refuses changed syntax [31.39ms] (pass) Rust and cached target compiles receive every environment remap [440.63ms] 2 pass 0 fail 121 expect() calls Ran 2 tests across 1 file. [493.00ms] ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) + @types/bun@1.3.8 + @types/node@22.19.0 + @types/ws@8.5.10 + playwright@1.61.1 + typescript@5.9.3 + ws@8.18.3 + @scure/bip39@2.2.0 + geist@1.7.2 38 packages installed [687.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [23.19ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [21.17ms] (pass) layout review fixtures ship only in explicitly enabled preview builds [7237.60ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [3.99ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.13ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.11ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.19ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.12ms] (pass) FrameDetector > fps, p95 and window read the ring [0.23ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.38ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.10ms] src/stale-screen.test.ts: (pass) a program that redraws after reattach never shows the note, not for a frame [0.49ms] (pass) a redraw that arrived before the replay painted needs no wait at all [0.06ms] (pass) a shell that stays silent shows the note once the wait has run out [0.07ms] (pass) output that arrives later clears the note [0.05ms] (pass) a dropped link takes the note down and cancels a wait that has not ended [0.04ms] (pass) the wait grows with the round trip and stays bounded [0.11ms] src/synchronized-output.test.ts: (pass) synchronized terminal output > recognizes a private mode split across byte and string writes [1.06ms] (pass) synchronized terminal output > preserves mode transitions for every pair of input chunk boundaries [2.27ms] (pass) synchronized terminal output > ignores CSI-looking bytes inside control strings and other mode numbers [0.18ms] (pass) synchronized terminal output > RIS clears an active mode [0.16ms] (pass) synchronized terminal output > bounds an unfinished control sequence [0.23ms] (pass) synchronized terminal output > paints queued output on the first frame after reset and timeout release [0.45ms] src/terminal-fit-lifecycle.test.ts: (pass) a queued fit stops when the terminal becomes closed [0.47ms] (pass) a queued fit stops when the terminal becomes suspended [0.08ms] (pass) a queued fit stops when the terminal becomes frozen [0.02ms] src/account-storage.test.ts: (pass) clearing one account leaves a second account and device preferences alone [0.80ms] (pass) the last-account pointer of another account stays [0.09ms] (pass) an unknown account clears every account's data and keeps preferences [0.19ms] (pass) coalesced account writes stop permanently before sign-out clears storage [0.52ms] src/offline-drawing.test.ts: (pass) cached identity needs a matching layout and sign-out removes it [2.77ms] (pass) sign-in caches only public drawing labels [0.27ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.34ms] (pass) repeating the front item changes nothing [0.05ms] (pass) the list is capped, so the oldest items fall off [0.06ms] (pass) top skips items that are no longer live, without losing them [0.07ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.21ms] (pass) recentRows: a view with three windows and no use shows them in order [0.08ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.07ms] src/canvas/status.test.ts: (pass) a lost server connection is an error toast, never a success tick [0.94ms] (pass) routine connection states stay out of the toast [0.11ms] (pass) repeated connection closes do not reopen the persistent reason toast [0.11ms] (pass) a repeated close does not retake the shared toast after a newer message replaces it [0.32ms] (pass) a close reason stays visible through a quick reconnect and clears after a stable attach [674.65ms] src/canvas/toolbar/palette-actions.test.ts: (pass) a deferred split:right selection retains its original window [0.65ms] (pass) a deferred new:below selection retains its original window [0.20ms] (pass) a deferred close selection retains its original window [0.05ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [1.18ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.26ms] (pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.37ms] (pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.26ms] (pass) facts the host did not report are omitted by default, not shown as unknown [0.15ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.23ms] (pass) before facts arrive the host's platform names the header [0.08ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.08ms] src/canvas/windows/session-hooks.test.ts: (pass) a failed idle warm-up shows no toast and retries when the browser is back online [11.26ms] (pass) a failed open shows the toast, and opening again after the network returns succeeds [11.01ms] (pass) an open that joins a failing idle warm-up still shows the toast [5.53ms] src/canvas/mesh/api-retry-budget.test.ts: (pass) a retained watch outage bounds retry requests over two logical minutes [2.81ms] src/canvas/mesh/layout-model.test.ts: (pass) a pin moved by another device invalidates a same-count pin cache [1.53ms] (pass) a recovered graph owns its node positions independently [0.22ms] (pass) a negative pin is drawn by shifting the whole graph by whole grid cells; no pin is rewritten [0.26ms] (pass) with no negative pin the origin is zero and nothing shifts [0.13ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [1.02ms] (pass) without `access` (today's server) the person may view and may not edit [0.32ms] (pass) fields the server does not send are absent, never invented [0.27ms] (pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.09ms] (pass) anything that is not a list is refused, whole [3.46ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.21ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.39ms] (pass) answers carry the new revision, and a create the new arrow's id [0.11ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.10ms] src/canvas/mesh/api-recovery.test.ts: (pass) failed watch refreshes retain one subscription through retry and release it on disposal [1.86ms] (pass) a synchronous subscription refusal leaves retry able to install a new watch [0.42ms] (pass) a changed Mesh revision refreshes a renamed host in the existing view model [0.58ms] (pass) a pushed recovery cancels the scheduled retry [0.44ms] (pass) a pushed recovery supersedes an outstanding retry failure [0.52ms] (pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.69ms] (pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.19ms] (pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.65ms] (pass) a forbidden withdrawal cancels retry work from the retained watch [0.42ms] (pass) a withdrawn view ignores an earlier outstanding retry result [0.41ms] (pass) initial Mesh list handles closed transport [0.30ms] (pass) initial Mesh list handles liveness deadline [0.06ms] (pass) initial Mesh list handles unreadable JSON [0.10ms] (pass) initial Mesh list handles unavailable storage [0.21ms] (pass) initial Mesh list handles forbidden action [0.28ms] (pass) initial Mesh list handles invalid stored host [0.16ms] (pass) Mesh watch withdrawal handles forbidden [0.29ms] (pass) Mesh watch withdrawal handles mesh unavailable [0.04ms] (pass) Mesh watch withdrawal handles plugin unavailable [0.04ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.47ms] (pass) the layout is deterministic and does not depend on input order [3.61ms] (pass) no two cards overlap, and every card lies inside the graph [7.65ms] (pass) the sheet is wider than tall, roughly 16:10 [2.16ms] (pass) a pinned node stays where it was put and the others do not move [2.86ms] (pass) a pin beyond the sheet grows the graph [0.45ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.30ms] (pass) 1,000 nodes lay out in a few milliseconds [12.87ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.56ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.26ms] (pass) a view taller than the viewport is scaled down so it fits [0.06ms] (pass) nearestStop picks the stop whose centre is closest [0.21ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.31ms] (pass) a small graph keeps one stop per node column [0.18ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.09ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.32ms] (pass) D309: with a floor, a narrow column gets a stop of its drawn width and each column is reachable [0.10ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.62ms] (pass) closing the new half gives the layout back exactly, in the model [1.40ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.46ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.31ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.59ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.46ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.21ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.29ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.11ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.10ms] (pass) random sequences of split right, split down, new window right and close never break the grid [46.50ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.46ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.20ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.20ms] (pass) a narrow right split grows both drawn tracks to the canonical minimum [0.11ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.88ms] (pass) a chain of neighbours is pushed in turn [0.15ms] (pass) display settlement clears disconnected overlaps while keeping its one anchor fixed [0.46ms] (pass) review: a viewport width increase after settlement keeps the Settings anchor clear [0.53ms] (pass) snapping rounds to whole cells [0.06ms] (pass) reach follows grants through tags and keeps the relay [0.36ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.13ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.05ms] (pass) a desktop column is the same alone and in a strip [0.02ms] (pass) D309: a touch screen draws every column at least MIN_TOUCH_COLUMN wide, never wider than a lone column; a fine pointer has no floor [0.10ms] (pass) D309: the content is as wide as the drawn columns, so the camera reaches every column [0.10ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [2.31ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.45ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.48ms] (pass) superseded status snapshots release records for sessions this device never opened [1.38ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.21ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.26ms] (pass) a final Close before the first positive census never revives a new ID [0.16ms] (pass) a later absence retires a new ID after its first positive census [0.16ms] (pass) another host's census cannot clear a new shell's census fence [0.14ms] (pass) another host's close cannot clear a new shell's census fence [0.04ms] (pass) shared membership marks windows open without any local attachment [0.58ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [0.97ms] (pass) a detected operating system supplies the live popover mark [0.86ms] src/canvas/sessions/live.test.ts: (pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.51ms] (pass) an enrolled host opens by UUID and splits keep that authority [0.25ms] (pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.20ms] (pass) unknown and ambiguous labels never open an embedded shell [0.14ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.17ms] (pass) an authoritative host snapshot replaces admission with one notification [0.27ms] (pass) the embedded inventory identity still opens locally beside an equally named remote [0.16ms] (pass) the embedded host's mark does not wait for an account name, and no account is invented [0.11ms] src/canvas/sessions/hosts.test.ts: (pass) fresh storage lists an offline host added by another browser [1.73ms] (pass) every welcome reconciles without duplicate subscriptions or hosts [0.32ms] (pass) a removal in another browser withdraws the host [0.24ms] (pass) a malformed page cannot partially replace the authoritative inventory [0.32ms] (pass) a socket-authority refusal withdraws previously admitted hosts [0.51ms] (pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.55ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.51ms] (pass) a known retired status survives repeated selection and generic ended answers [0.22ms] src/canvas/sessions/hosts-scale-review.test.ts: (pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [20.79ms] (pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [12.98ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [3.02ms] (pass) legacy refusals still work and malformed counters never reach the message [0.57ms] (pass) product copy names the host and counters and never renders untrusted server text [0.42ms] (pass) oversized refusal JSON is ignored before parsing [0.22ms] src/canvas/sessions/focus-intent.test.ts: (pass) focusin supersedes every older focus intent [0.48ms] (pass) pointerdown supersedes every older focus intent [0.04ms] (pass) keydown supersedes every older focus intent [0.03ms] (pass) input supersedes every older focus intent [0.02ms] src/canvas/model/server-store.test.ts: (pass) a negative drop on a 1,025-node mesh writes one pin, and the peer ends with every pin (#24) [46.27ms] (pass) repeated pin moves reach both coordinate limits; the next move is refused and rolled back [4.20ms] (pass) a layout gap or withdrawn worker requests one fresh snapshot with bounded backoff [3.11ms] (pass) layout recovery restores Math.random after its virtual timer test [0.04ms] (pass) event before Result and duplicate events do not apply an optimistic edit twice [0.99ms] (pass) reconnect retries the exact request and an old receipt removes its optimistic overlay [1.00ms] (pass) legacy import remains intact until canonical confirmation even if another device initialized [0.86ms] (pass) dispose cancels late cache writes after sign-out [0.56ms] (pass) a pending reference preserves unrelated edits across remote paints and is never sent [3.54ms] (pass) closing an unsent shell removes its unresolved birth without blocking surviving children [1.38ms] LAYOUT_RETRY_SCHEDULE subscribers=60 first_minute=753 following_5s=47 first_delay_slots=60 (pass) sixty withdrawn layout subscriptions spread their coalesced retry timers [30.36ms] (pass) multi-subscriber retry scheduling restores Math.random [0.11ms] (pass) an acknowledgement after its ordered event does not repaint the same layout [1.06ms] (pass) review: a missing layout revision is recovered before the cached document is used again [0.74ms] (pass) a bootstrap receipt before its canonical snapshot keeps the legacy layout drawable [1.41ms] (pass) ready edits share one network round trip with a bounded in-flight window [1.51ms] (pass) the optimistic semantic projection paints before any server receipt [0.94ms] (pass) a no-op drawing capture does not trigger another paint [0.46ms] (pass) an interrupted first load does not turn a revision-zero cache into an intentional empty layout [0.70ms] (pass) review: a refused structural edit cannot strand later valid edits [1.01ms] (pass) a definitive refusal paints rollback, persists it and never retries after reconnect [0.87ms] (pass) a stale refusal cannot discard a new-connection retry [0.66ms] (pass) review r2: refusal drains independent edits waiting behind four in-flight requests [2.16ms] (pass) recovery coalesces gaps and errors, ignores operations until a snapshot, and survives reconnect [1.56ms] (pass) a normal reconnect snapshot arrives before any replacement is requested [1.00ms] src/canvas/model/review-null.test.ts: (pass) a mixed nullable resize cannot invalidate the canonical drawing document [0.58ms] src/canvas/model/operations.test.ts: (pass) independent resize and move commute; close survives a stale move [0.66ms] (pass) right split of a stack preserves the upper band [0.26ms] (pass) reorder uses stable neighbours and emits no document [0.63ms] (pass) a completed split emits its semantic intent rather than intermediate sizing edits [0.37ms] (pass) a three-window reorder sends one semantic move [0.85ms] (pass) a split before the first reference is journalled opens its anchor before splitting [0.92ms] (pass) a drop sends the moved membership once, without derived neighbour geometry [0.92ms] (pass) a narrow right split widens first so both halves remain valid [0.77ms] (pass) a short down split grows the anchor first so both halves meet the height floor [0.94ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.69ms] (pass) a document survives JSON and rebuilds the same columns [0.47ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.16ms] (pass) parseDocument rejects anything that is not a document of this format [0.34ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.18ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.36ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.45ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.07ms] (pass) D309: the saved weights do not depend on how a touch screen draws the columns [0.29ms] (pass) D309: a view this device pushed clear for display is saved where the layout has it [0.14ms] (pass) an offscreen graph keeps its shared pins before any nodes are rendered [0.31ms] (pass) a captured graph document is independent of the next pin drag [0.09ms] src/canvas/model/sync.test.ts: (pass) a pending session never delays other edits or waits for a network receipt [1.26ms] (pass) inventory includes shared memberships that this device cannot render [1.30ms] (pass) temporary flow windows are never treated as unsubmitted shared windows [0.28ms] src/canvas/model/review-span.test.ts: (pass) a down split shifts every column in a transitively connected group [0.36ms] src/canvas/model/reducer-property.test.ts: layout property: 32 seeds, 4096 operations, 4015 accepted, zero divergences (pass) property: accepted random operation sequences match the real server reducer [25873.58ms] src/canvas/model/cache.test.ts: (pass) damaged pending opens cannot stall offline drawing [3.28ms] (pass) a valid unresolved reference remains local and replayable [0.63ms] (pass) a valid offline journal is retained beyond a short burst [1.88ms] src/canvas/model/review-boundary-r2.test.ts: review r2 boundary comparison: 8 seeds, 4096 operations, 3198 accepted (pass) review r2: longer boundary-weighted sequences preserve every accepted projection [1723.41ms] src/canvas/model/reconcile.test.ts: (pass) review: removing the current shared view selects a surviving camera anchor [3.17ms] (pass) a remote negative pin and node update preserve the world position of an unchanged card [2.03ms] src/canvas/model/journal.test.ts: (pass) an offline birth keeps its identity through hydration and reference completion [1.59ms] src/canvas/addhost/setup-feed.test.ts: (pass) createSetupFeed > subscribes with the host and window, then hands over events in order [1.25ms] (pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.49ms] (pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.88ms] (pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.76ms] (pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.52ms] (pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [46.48ms] (pass) review reconnect budget survives sockets that open then close without events [46.60ms] (pass) review explicit retry resumes after the setup feed stops [47.71ms] src/canvas/addhost/wizard.breakit2.test.ts: (pass) breakit2 an explicit port on a listed host survives chip resolution [0.73ms] (pass) breakit2 malformed bracketed IPv6 waits for correction [0.16ms] (pass) listed host plus port retains its saved user in the serialized destination [0.18ms] (pass) review listed inventory name plus port retains its resolved address [0.25ms] src/canvas/addhost/setup-stages.test.ts: (pass) parseSetupEvent > reads a well-formed event [0.12ms] (pass) parseSetupEvent > drops anything malformed [0.11ms] (pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.07ms] (pass) foldSetup > stages before the event's are done, later ones pending [0.22ms] (pass) foldSetup > a stage that reports done alone still finishes [0.04ms] (pass) foldSetup > ready done completes the run [0.05ms] (pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.14ms] (pass) foldSetup > uploading belongs to install and the readiness check to ready [0.06ms] (pass) setupGuide > says the other sessions keep working and what to do next, in plain words [0.18ms] (pass) review malformed setup fields are dropped without coercion errors [0.18ms] (pass) exhausted setup preserves eligibility and explains a new setup [0.20ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.44ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.14ms] (pass) parsing the server's data > an install command needs a lifetime [0.07ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.56ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.35ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.14ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.27ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.25ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.17ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.42ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.56ms] (pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.43ms] (pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.31ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [21.79ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.29ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.23ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.15ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.26ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.27ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.09ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.08ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.12ms] (pass) authLabel > names the method and a trusted network provider only [0.05ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.29ms] (pass) guideFor > each failure kind names its fix [0.12ms] (pass) guideFor > mesh-policy words say possible, not certain [0.03ms] (pass) parseTarget > reads user, host and port [0.20ms] (pass) parseTarget > reads a pasted ssh command into the same fields [0.29ms] (pass) parseTarget > reads an ssh:// address [0.09ms] (pass) parseTarget > refuses garbage around an ssh command [0.12ms] (pass) parseTarget > refuses what cannot name a host [0.05ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.48ms] (pass) parseSshConfig > recognises config text [0.07ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.13ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.08ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.13ms] (pass) only a completed canonical host identity becomes terminal authority [0.15ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.11ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.06ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.07ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.03ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.03ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.03ms] (pass) install diagnostics name the failed step and public host error [0.09ms] (pass) missing payload tells the operator the architecture and expected server path [0.08ms] (pass) an already added host says so and offers opening its existing terminal [0.33ms] (pass) release payload verification names the architecture step and plain reason [0.04ms] (pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.13ms] (pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.09ms] (pass) early terminal publication selects only its canonical host-bound shim session [0.14ms] src/canvas/addhost/already-added-breakit.test.ts: (pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.11ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.64ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.47ms] (pass) ready CA begins the requested installation mode without another prompt [0.16ms] (pass) closing during CA confirmation never starts an SSH attempt [0.39ms] (pass) a typed root login requires explicit consent before any installation [0.18ms] src/canvas/views/body.test.ts: (pass) a clean terminal exit keeps the window while host setup can still fail [0.07ms] (pass) clean exits still close ordinary windows, and failed exits stay visible [0.02ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.76ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.72ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.38ms] (pass) a chunk that both sides use stays critical [0.20ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.22ms] (pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.15ms] (pass) automatic canonical painting loads after the first canvas draw [0.22ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [3.88ms] (pass) compiled recovery UI mode preview obeys its URL boundary [3.32ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [3.49ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [20.57ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [20.45ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [11.27ms] (pass) abandoned word acknowledgement uploads nothing [4.42ms] (pass) settled acknowledgement cannot upload later (dismissed) [4.71ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [3.67ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [4.35ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [2.12ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [2.08ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [2.36ms] (pass) malformed or excessive remaining wait -1 is denied [1.72ms] (pass) malformed or excessive remaining wait 0.5 is denied [1.73ms] (pass) malformed or excessive remaining wait 172801 is denied [1.28ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [1.47ms] (pass) malformed or excessive remaining wait 90000 is denied [1.59ms] test/link-doubt.test.ts: (pass) a link doubt shows the indicator and keeps live replies and typing flowing [1.50ms] (pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.40ms] (pass) a notice type from a newer server is ignored, not a protocol failure [0.13ms] (pass) the viewer announces the link-doubt capability in its Hello [2.20ms] test/close-reasons.test.ts: (pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.28ms] src/close-reasons.test.ts: (pass) a missed connection response keeps a plain and stable reason [0.05ms] (pass) server and host close reasons identify why a terminal reconnects, in plain words [0.25ms] (pass) routine detach and connection rotation reasons stay neutral [0.02ms] (pass) a stream close that reattaches never says the terminal ended [0.10ms] (pass) a recovering server link names its cause as routine status, never as a failure [0.04ms] (pass) unknown close text is discarded instead of reaching the person or console [0.07ms] (pass) a storm of closes prints one line per minute and counts the rest [0.38ms] (pass) counted closes are reported when their window ends, without another close [0.07ms] src/review-close-log.test.ts: (pass) a reconnect the server refuses with a named Close frame still prints its console line [1.71ms] (pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.13ms] src/onboarding-load.test.ts: (pass) a failed load says so in the error line, offers Try again, and mounts nothing [5.66ms] (pass) the Try again button reloads the page: a failed import stays failed in the module map [5.55ms] (pass) the online event retries by itself [5.45ms] 356 pass 0 fail 21671 expect() calls Ran 356 tests across 60 files. [36.50s] bun test v1.4.2 (744846f84) src/connection-correlation-review.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [10.15ms] src/connection-idle.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 1 [5.20ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 1 [2.81ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 150 [1.25ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 150 [1.45ms] (pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [6.00ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 1 [1.26ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 1 [1.15ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 1 [1.37ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 1 [1.23ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 30 [0.90ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 30 [1.03ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 30 [0.94ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 30 [1.20ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 150 [0.83ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 150 [0.77ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 150 [0.80ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 150 [1.05ms] (pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [3.29ms] (pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [4.90ms] (pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [2.26ms] (pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [1.70ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [1.83ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [1.89ms] (pass) a healthy browser route survives 150ms scheduler delay across 1 streams [2.19ms] (pass) a healthy browser route survives 150ms scheduler delay across 28 streams [2.22ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [2.07ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) browser jitter allowance decays after a stable link returns [15.10ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [2.13ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [1.84ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [1.76ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [2.32ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [2.13ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [2.47ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer without a reply counts subsequent responsive silence [1.93ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) an outstanding probe gets responsive observation after a renderer stall [4.17ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) retirement gives a queued mismatched pong one task turn [2.14ms] (pass) retirement gives a queued correlated pong one task turn [1.76ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead typing route eventually retires when browser tasks run every 75ms [2.04ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 1000ms [1.44ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 60000ms [1.28ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [1.91ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [1.85ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [1.85ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) correlated queued replies replenish stall grace across successive healthy stalls [2.16ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) duplicate replies cannot replenish consumed stall grace [1.95ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) wrong timestamp replies cannot replenish consumed stall grace [1.83ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) unknown nonce replies cannot replenish consumed stall grace [1.70ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [2.33ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1 (pass) a replacement route receives its own one-shot local stall grace [2.86ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) continuous typing cannot cancel every silent-route confirmation turn [2.68ms] (pass) a pending confirmation is reset by reconnect [2.70ms] Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0 (pass) a pending confirmation is reset by close [4.05ms] (pass) a pending confirmation is reset by dispose [1.95ms] (pass) a stale confirmation from before reconnect cannot close the replacement route [2.96ms] (pass) a hidden page resumes its lease after 5000ms without retiring queued replies [3.26ms] (pass) a hidden page resumes its lease after 30000ms without retiring queued replies [2.46ms] (pass) a socket lost while hidden waits for visibility before reconnecting [1.84ms] (pass) mobile jitter and one retransmission keep a foreground browser lease [73.21ms] (pass) visibility notices require both peers to support them: false [0.60ms] (pass) visibility notices require both peers to support them: true [0.28ms] (pass) hiding a page cancels a retry scheduled while it was visible [1.33ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [2.48ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [2.15ms] (pass) a layout subscription starts the connection before any terminal exists [0.64ms] (pass) resync replaces one subscription ID and disposal prevents later resyncs [1.40ms] (pass) resync reopens a feature subscription with the same server ID [0.70ms] src/connection-layout-removal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [14.05ms] src/connection-liveness.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [2.69ms] src/connection-pool.test.ts: (pass) terminals fill the first socket, then open another, and a released slot is reused first [0.94ms] (pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [0.67ms] src/connection-probe-scheduling-review.test.ts: (pass) a fully answered browser route survives a delayed next probe before a terminal attaches [1.70ms] (pass) a fully answered browser route survives a delayed next probe with an attachment [0.55ms] src/connection-query-capabilities.test.ts: (pass) query replies negotiate independently with Hello caps 0 [0.13ms] (pass) query replies negotiate independently with Hello caps 4 [0.01ms] (pass) query replies negotiate independently with Hello caps 8 (pass) query replies negotiate independently with Hello caps 12 src/connection-query-refusal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [10.48ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [3.07ms] src/connection-restart.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1 (pass) an overnight connection retains its writer and pending input when the server restarts [0.88ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a second quick server close leaves the fast path and backs off [0.50ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a failed first recovery handshake exits the one quick retry [0.44ms] Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0 (pass) a server close reason survives socket retirement and the next retry [0.45ms] Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0 (pass) a clean server socket close keeps its fallback reason through the next retry [0.44ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [10.92ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) online and foreground events cancel delays and preserve handshakes in progress [1.84ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [0.76ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.27ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.21ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.18ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.15ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [0.12ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.26ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.25ms] src/connection-review-refusal-input.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [2.14ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [0.87ms] src/connection-review-retained-lifetime.test.ts: (pass) review: saved typing can be declined without closing the live shell [0.78ms] (pass) review: new typing reaches the fresh shell while saved typing stays pending [0.19ms] (pass) review: retained input and consent are local to their terminal window [0.21ms] (pass) review: selecting a different session removes saved typing and its action [0.14ms] (pass) review: another refused writer retains pending and unacknowledged fresh typing [0.22ms] (pass) review: window disposal clears held input and rejects a stale resend action [0.41ms] src/connection-startup-review.test.ts: (pass) a healthy startup route can learn an RTT above the initial estimate [2.53ms] src/connection-unattached-close.test.ts: (pass) disposing a window before its welcome microtask sends no unbound Close [1.03ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [0.71ms] 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [341.00ms] bun test v1.4.2 (744846f84) src/terminal-queries.test.ts: (pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.56ms] (pass) all requested query families have identities [0.12ms] (pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [1.40ms] (pass) oversized OSC retains BEL termination before a later query [0.11ms] src/terminal-query-property.test.ts: [ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2 (pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [249.56ms] src/terminal-query-renderer-review.test.ts: (pass) review: DECID gives every real renderer response an identity [1.04ms] (pass) review: zero-padded CPR gives every real renderer response an identity [1.21ms] (pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.23ms] (pass) review: three adjacent requests keep distinct identities across different viewer chunking [6.51ms] src/terminal-write-slices.test.ts: (pass) every slice split preserves cells, cursor and all renderer answers [39.11ms] (pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [2.41ms] (pass) escaped writers cannot access released input and callback failure releases the scope [0.66ms] (pass) nested writes and memory growth cannot replace borrowed input [0.52ms] (pass) allocation refusal never writes or frees unowned memory [2.28ms] (pass) empty scopes accept no input and reject later writer use [0.29ms] (pass) input views of native memory survive allocation-driven memory growth [0.35ms] (pass) throwing callbacks release exactly their owned input allocation [0.32ms] 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [333.00ms] $ bun run build.ts built chunk-bpwcsapc.js, chunk-qbb2e8b9.js, chunk-mybev37s.js, chunk-v54dey49.js, chunk-790c27me.js, chunk-79j5ah7y.js, chunk-kbvrkzq1.js, chunk-rkhswyqm.js, chunk-g5r2bypb.js, chunk-6jfv98vb.js, chunk-yvq3ah6x.js, chunk-vb52mqs5.js, chunk-gxvqf3b8.js, chunk-x90k904w.js, chunk-nn2dffvt.js, chunk-x8dtqyz6.js, chunk-80vngjpw.js, chunk-8gqdshxw.js, chunk-n2ga1wk8.js, main.js, chunk-3zrccmtw.js, chunk-fxmz3y8j.js, chunk-wk9n9jj8.js, chunk-vgjq68cy.js, chunk-6n6ggpfc.js, chunk-ej8jagvh.js, chunk-4tc0fn3g.js, chunk-nmprrnaq.js, chunk-5yk4q6v9.js, chunk-8khh7fgx.js, chunk-5tj6gke2.js, chunk-5hrbp5az.js, chunk-c76h7v56.js, chunk-w3g0tqz4.js, chunk-pk1m193e.js, chunk-r33grk7w.js, chunk-0ppc5rhe.js, chunk-axbkkqp1.js, chunk-4nyfg4h3.js, chunk-06vkzx1x.js, chunk-zs1d5mk0.js, chunk-qhbq8tqn.js, chunk-efvp39px.js, chunk-hgx4sjjk.js, chunk-pf8vrp7e.js, chunk-p4npgmsh.js, chunk-vcwa9ccx.js, chunk-qmx5f3qe.js, chunk-he4csrpw.js, chunk-z48tcwe1.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-1k506s33.js, chunk-e9t3w684.js, chunk-pmgxewne.js, chunk-q5wz2jzh.js, chunk-3m9zj9sz.js, chunk-r04kg5zm.js, chunk-xgywewyx.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-wjy5jnes.js, chunk-fsf2ghcj.js, chunk-g602dptg.js, chunk-ff3nvh2r.js onDemand chunk-q5wz2jzh.js: identity=6744 gzip=3167 brotli=2880 bytes onDemand chunk-vcwa9ccx.js: identity=11562 gzip=4696 brotli=4279 bytes critical chunk-r04kg5zm.js: identity=199 gzip=158 brotli=136 bytes deferred chunk-5tj6gke2.js: identity=1560 gzip=802 brotli=732 bytes onDemand chunk-hgx4sjjk.js: identity=1170 gzip=709 brotli=632 bytes critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes onDemand chunk-fsf2ghcj.js: identity=9158 gzip=3338 brotli=2890 bytes critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes deferred chunk-5hrbp5az.js: identity=110049 gzip=37193 brotli=32770 bytes onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes onDemand chunk-kbvrkzq1.js: identity=3891 gzip=1735 brotli=1518 bytes critical chunk-rkhswyqm.js: identity=5890 gzip=2461 brotli=2137 bytes onDemand chunk-qhbq8tqn.js: identity=33394 gzip=12822 brotli=11528 bytes onDemand chunk-he4csrpw.js: identity=4696 gzip=1956 brotli=1727 bytes onDemand chunk-4nyfg4h3.js: identity=10904 gzip=4422 brotli=4027 bytes onDemand chunk-r33grk7w.js: identity=11126 gzip=4258 brotli=3885 bytes critical chunk-8gqdshxw.js: identity=386 gzip=236 brotli=195 bytes onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes onDemand chunk-qmx5f3qe.js: identity=5359 gzip=2580 brotli=2304 bytes critical chunk-xgywewyx.js: identity=42945 gzip=14687 brotli=13161 bytes onDemand chunk-mybev37s.js: identity=191 gzip=167 brotli=130 bytes critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=480 bytes critical backdrop.worker.js: identity=243 gzip=210 brotli=158 bytes deferred chunk-79j5ah7y.js: identity=38155 gzip=13872 brotli=12386 bytes critical chunk-3zrccmtw.js: identity=5448 gzip=2606 brotli=2377 bytes critical chunk-ej8jagvh.js: identity=2161 gzip=1060 brotli=904 bytes onDemand chunk-w3g0tqz4.js: identity=7662 gzip=3398 brotli=2968 bytes onDemand chunk-1k506s33.js: identity=49320 gzip=15455 brotli=13784 bytes deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes onDemand chunk-efvp39px.js: identity=2522 gzip=1133 brotli=960 bytes onDemand chunk-p4npgmsh.js: identity=540 gzip=354 brotli=319 bytes onDemand chunk-3m9zj9sz.js: identity=1063 gzip=653 brotli=523 bytes critical chunk-nn2dffvt.js: identity=6075 gzip=2536 brotli=2233 bytes onDemand chunk-x90k904w.js: identity=2557 gzip=1180 brotli=1009 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes critical chunk-wk9n9jj8.js: identity=8377 gzip=3575 brotli=3184 bytes onDemand chunk-yvq3ah6x.js: identity=2108 gzip=1038 brotli=870 bytes critical chunk-x8dtqyz6.js: identity=17631 gzip=6251 brotli=5569 bytes critical chunk-bpwcsapc.js: identity=34427 gzip=9985 brotli=8967 bytes critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes onDemand chunk-e9t3w684.js: identity=6983 gzip=3107 brotli=2810 bytes onDemand chunk-pf8vrp7e.js: identity=1649 gzip=776 brotli=676 bytes critical chunk-80vngjpw.js: identity=11739 gzip=4630 brotli=4120 bytes critical chunk-6n6ggpfc.js: identity=1776 gzip=855 brotli=694 bytes onDemand chunk-qbb2e8b9.js: identity=228 gzip=178 brotli=158 bytes onDemand chunk-6jfv98vb.js: identity=6265 gzip=2101 brotli=1862 bytes onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes critical chunk-n2ga1wk8.js: identity=2529 gzip=1018 brotli=890 bytes onDemand chunk-pk1m193e.js: identity=14598 gzip=5447 brotli=4891 bytes deferred chunk-vgjq68cy.js: identity=14644 gzip=4802 brotli=4431 bytes onDemand chunk-g5r2bypb.js: identity=2420 gzip=1194 brotli=1069 bytes critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes onDemand chunk-5yk4q6v9.js: identity=4561 gzip=2003 brotli=1772 bytes deferred chunk-wjy5jnes.js: identity=545 gzip=315 brotli=272 bytes onDemand chunk-zs1d5mk0.js: identity=6148 gzip=2780 brotli=2507 bytes onDemand chunk-8khh7fgx.js: identity=1974 gzip=987 brotli=843 bytes critical chunk-vb52mqs5.js: identity=707 gzip=362 brotli=309 bytes critical chunk-pmgxewne.js: identity=162 gzip=150 brotli=119 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes critical main.js: identity=104155 gzip=38354 brotli=33076 bytes onDemand chunk-790c27me.js: identity=5812 gzip=2382 brotli=2151 bytes onDemand chunk-v54dey49.js: identity=6493 gzip=2402 brotli=2140 bytes onDemand chunk-0ppc5rhe.js: identity=1026 gzip=624 brotli=499 bytes critical chunk-06vkzx1x.js: identity=729050 gzip=210327 brotli=170874 bytes onDemand chunk-nmprrnaq.js: identity=2791 gzip=1373 brotli=1181 bytes onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes critical chunk-g602dptg.js: identity=9907 gzip=4060 brotli=3499 bytes critical chunk-4tc0fn3g.js: identity=1188 gzip=691 brotli=582 bytes critical chunk-fxmz3y8j.js: identity=1106 gzip=663 brotli=600 bytes onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes JavaScript transfer, critical: identity=987711 gzip=305926/307200 brotli=254709/256000 bytes JavaScript transfer, deferred: identity=166293 gzip=57666/61440 brotli=51182/55296 bytes JavaScript transfer, onDemand: identity=231812 gzip=91878/20480 brotli=81918/18432 bytes JavaScript transfer, onDemand largest chunk chunk-1k506s33.js: gzip=15455/20480 brotli=13784/18432 bytes (class total gzip=91878 brotli=81918, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.80ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.62ms] (pass) subscription not found ends delivery before a late refresh rejection [1.21ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.24ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.20ms] (pass) synchronous subscription refusal releases the transport exactly once [0.26ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [11.62ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.27ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.76ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.19ms] (pass) split mux header preserves trailing Close [0.19ms] (pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.70ms] (pass) empty marked input reports the stable invalid-body decoder failure [0.13ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.79ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.00ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.76ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.62ms] (pass) superseded failure preserves a newer pending refresh [2.81ms] src/stream.test.ts: stream differential: 141 streams, 11988 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [2597.41ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [10.07ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [3.78ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [4.65ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.22ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.29ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.73ms] (pass) review continuation stops after forbidden [1.32ms] (pass) review continuation stops after superseded [1.31ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.39ms] (pass) a changed revision discards earlier pages before assembling its restart [0.24ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.30ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms] (pass) watch never publishes a partial page; withdrawn=false [1.68ms] (pass) watch never publishes a partial page; withdrawn=true [1.33ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.71ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.35ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.72ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [2.17ms] (pass) shared Mesh event vectors drive the typed watch adapter [6.12ms] 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [2.69s] ```
kayg commented 2026-10-29 20:30:05 +00:00
Author
Owner
Copy link

Merged to dev in 63773bb3e after round-2 review merge (0 findings). scripts/verify fast passed on 9f7a0c977. Goes into release 9.5.

Merged to dev in `63773bb3e` after round-2 review **merge** (0 findings). `scripts/verify fast` passed on 9f7a0c977. Goes into release 9.5.
kayg commented 2026-10-29 20:30:21 +00:00
Author
Owner
Copy link

Merged to dev in 07c5da77b after the round-2 review returned merge (0 findings). scripts/verify fast passed on 9f7a0c977; since then dev has only gained DECISIONS.md (D311). Goes into release 9.5 tonight.

Merged to dev in `07c5da77b` after the round-2 review returned **merge** (0 findings). `scripts/verify fast` passed on 9f7a0c977; since then dev has only gained DECISIONS.md (D311). Goes into release 9.5 tonight.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
j470b-server-mesh-rejoin
mesh-compat-382
j444b-d381-key-wins-flood
j461b-macos-utun-reader-thread
j475b-remove-host-motion
fix-reconnect-new-link
j481-d380
dev
j479-mesh-soak
fix/j476-host-facts
j475-motion-pill-split
j470-mac-node-join
root-upgrade-d376
j474-review-merge
latency-targets-120hz
nightly-suite-shards
gotatun-pin-j469
macos-utun-reader-thread
fix-flood-echo-stall
wip/j416
motion-fast-ease-out
mesh-addhost-j259
takeover-close-terminals-d368
kbd-instant-followups
fix-trust-key-double-click
nightly-suite-partial-report
appwin-icons-j207
rusqlite-slice1
swipe-content-first-d374
mesh-mtu-381
addhost-instant-open
glass-contrast-d365-mock
glass-contrast-d365
signout-followups-442
fix-startup-toast-red
research-gotatun-matrix-j317
themes-sync-j304
fix-load-flakes
fix-nix-zig-patch
fix-compute01-browser-baseline
ratchet-size-baseline-419
predict-auto-d130
revoke-coverage-d367
nightly-suite-queue-timeout
nightly-browser-suite
fix-rustsec-2026-0459
fonts-ioskeley-obel
log-retention-d375
fix-kbd-no-anim-427
fix-dev-red-specs-2
takeover-proof-305-j205
wip/j410-server-pump
ui-consistency-d372
fix-osc52-clipboard
libghostty-vt-1.0
forget-retired-host-d369
j404-merge-426
fix-setup-lock-race
fix-touch-select-426
revoke-access-report-ui
fix-predictive-echo-specs
fix-selinux-agent-exec
wip/j395-checkpoint2
wip/j395
j391-review-scratch
ui-consistency-j195-deferred-rebased
fix-rustc-paths-421
decisions-wording-341
fix-install-suite-red
fix-dev-rtt-specs
fix-pending-removal-align
fix-privileged-skip
fix-install-suite-404
review-j368
mesh-dns-j254
revoke-access-report-d356b
revoke-privilege-round5
fix-removal-confirm
review-j360
gotatun-rotation-367
deps-refresh-340
review-j354
review-J351
review-j350
addhost-takeover-d359
revoke-report-items-347
revoke-end-sessions-d362
review-j348
size-mesh-ssh-346
size-trim-337
revoke-access-diff-d356
j259-pre-rebase-b06c5a6
j305-ended-at-start-spec
addhost-sudo-consent
fix-layout-real-specs-411
fix-shell-open-411
fix-console-hosts-373
fix-shell-exit
fuzz-host-name-353
fix-host-details-410
macos-filter-j197
research-gotatun-tricks
revoke-p3-j216l
stale-state-pill
revoke-followups-j216k
revoke-progress-j216e
backup/macos01-20261106/lume/j197
backup/macos01-20261106/lume/appwin-icons-j207-stash0
backup/macos01-20261106/claude/stash-0
backup/macos01-20261106/claude/stash-1
backup/macos01-20261106/claude/J80-macos-s1
backup/macos01-20261106/claude/J80
backup/macos01-20261106/claude/J80-slice1-20261102
backup/macos01-20261106/claude/J16b-appwin-on-dev
backup/macos01-20261106/claude/appwin-launch-idle-146
backup/macos01-20261106/claude/J80-s1-run
wip/j259
trust-285-p3c
runtime-lock-j216f
mesh-ssh-p3-j175
tun-proof-p3b
trust-285-p3
terminal-polish-j271
tun-proof-p3
ssh-install-flakes-j216i
fuzz-fixes-j264
trust-285-a
trust-285-b
restart-oversized-fixture-j198
backup/macos01-20261106/lume/appwin-icons-j207
restart-bound-j216h
up-preflight-p3-j198
backup/macos01-20261106/lume/j251
up-preflight-j198
wip/up-preflight-j198-j245-p2
wip/up-preflight-j198-j245-p1
agent-fsync-offloop-j196
wip/up-preflight-j198-j245
settings-offscreen-j231
wip/up-preflight-j198-j226-inspection
wip/j103f
themes-j206
wip/up-preflight-j198-j226
flakes-j216c
backup/macos01-20261106/claude/j197
flakes-j216b
backup/macos01-20261106/claude/j197-red
wip/up-preflight-j198-review
flakes-j216
backup/macos01-20261106/claude/appwin-icons-j207
engineering-j208b
appwin-mock-j209
toast-stack-j165
engineering-j208
decisions-d351
decisions-d350
decisions-d349
appearance-presets-mock-j129
decisions-d348
docs-audit-spec
doc-coverage-baseline-raise
decisions-d347
decisions-d346b
decisions-d346
j88h-profile
ui-consistency-j195-deferred
ui-consistency-j195
engineering-practices-j194
preferred-login-ui-j166
signin-pools-263-j174
macos-node-265-s1
decisions-d345
decisions-d344
proxy-cgroup-j164
verify-quick-fuzz-329
proxy-start-io-j168
timing-flakes-j163
up-263-s1
mcp-events-j147
verify-quick-fuzz-j158
proxy-p3-j159
agent-resource-j157-detect
wip/j103d-final
remote-cancel-hang-j155
proxy-traefik-281-j62d
j149-verify-quick
proxy-traefik-281-j62b
j150-drop-unnamed
wip/j79d-red-r4
wip/j103d-d332
rootless-toast-j142
wip/j103d-head
wip/j103d
j125c-mcp
macos-build-j136
backup/macos01-20261106/claude/j136
wip/j79d-red-cli
wip/j79d-red-server
j121-link-liveness
j118c-tracer-failures
wip/j79c-head
release-desktop-j131
j124c-signed-macos
wip/j79c-red-p3
wip/j79c-red-p23
wip/j79c-red-p22
merge-j128-check
perf-deferred-j128
sidebar-toggle-260
j127-shortcut-changed-dot
j125-mcp
j118-tracer-failures
j126-account-summary
settings-sections-mock-j92
j120-pinch-lock
sidebar-292
backup/macos01-20261106/claude/j120
taste-2026-11-03
row-actions-242-215
backup/macos01-20261106/claude/stash-0-untracked
backup/macos01-20261106/claude/J80-265-s1-run
backup/macos01-20261106/claude/J80-macos-s1-20261102
j112-canvas-commands
ui-no-overshoot-scroll
fix-recovery-restart
backup/macos01-20261106/claude/stash-1-untracked
taste-2026-11-02
size-baseline-ratchet
machine-cards-structure-j108
j109-boot-copy-mockups
fix-dev-red
wip/up-263-s1
j95b-settings-rows
proxy-traefik-281
j95-option-rows
docs-human-j91
docs-keys-palette
fix-flood-1013-270-j38d
mesh-ssh-s1
mesh-ssh-s0
addhost-d291-tunnel
test-stability-load
mesh-relay-220
repro-296
shim-thp-off-24
mesh-pins-258-v2
mesh-dns
signin-d311-merged
docs-pages
ui-size-283
fix-ui-batch-specs
wip/j12b-edge-update
gate-on-arm
fix-rename-sync-293
trust-285-j60b
fix-focus-ring-clip
integ-ui-1101
edge-update-v2
signin-d311
taste-2026-11-01
layout-per-tab-250
ui-approved-splitopt-224
ui-approved-splitopt-224-on-dev
icon-text-centre-282
ui-approved-189-212-216
research-reverse-proxy
transfer-budget-320
review-mesh-pins-258-r2
sidebar-pill-259
review-mesh-relay-220
wip/j12-edge-update-v2
nix-package
status-crash-loop-237
fix-dev-test-failures
fix-fixture-socket-path
wip/mesh-relay-220-pre-dev-advance-rebase
fix-canvas-side-clip
research-head-to-head
frosted-real-256
review-mesh-pins-258
wip/mesh-relay-220-pre-final-rebase
review-layout-per-tab-250-r2
broad-suite-triage
nix-devshell
review-status-crash-loop-237-r3
wip/nix-devshell-pre-p3
taste-frosted-real
wip/code-serve-demo-2026-10-30
wip/code-serve-glass-2026-10-30
wip/code-serve-clusters-2026-10-30
wip/code-merge-release94-dev-2026-10-30
wip/rproxy-delta-scratch-2026-10-30
wip/stale-note-257-staged-2026-10-30
wip/d241-size-staged-2026-10-30
review-broad-suite-207
wip/mesh-pins-258-pre-split
wip/mesh-relay-220-pre-rebase
mesh-measure-220
plan-211-update
review-edge-autoupdate-r3
perf24-reconnect
review-stale-note-r2
release-prod-live
d241-shell-marker
review-mesh-pins-server-258
review-revocation-r3
review-setup-token-r2
review-sync-journal-r3
wip/review-mesh-pins-258-prune-review-1995fee46
frosted-scroll-256
sync-journal-r3
revocation-per-account-wip
review-tokio-asyncfd-0386
review-sync-p3s
wip/stash-8by64-stash0-2026-10-30
mesh-drag-r2
setup-token-data-wip
release-9-4
auth-busy-1013
mesh-view-overlap
sync-p3s
review-auth-busy-wake
review-readd-r8-wip
mesh-drag-bounds
audit-auth-93
app-windows-stream-start
review-authority-cap-r3
app-windows-r7-measure
readd-minimal-r6
readd-minimal-r5
app-windows-r7-soak
readd-minimal-r4
app-windows-r7
app-windows-r6
readd-minimal-r3
readd-minimal-r2
readd-minimal
merge-release8-dev
review-busy-page-liveness-r2
review-busy-page-liveness
mesh-view-trim
review-authority-read-retry-r2
review-remove-uninstall-r2
release-retry-reattach
release-retry
review-remove-uninstall
review-authority-read-retry
app-windows-ship
mesh-autoswitch-p2
mesh-ssh
mesh-relay
mesh-macos-node
screen-and-control
session-labels
review-real-logins-r5
review-real-logins-r4
review-real-logins-r3
shim-memory-r2
review-real-logins-r2
shim-memory
shadow-addhost-instant
shadow-real-logins
shadow-same-session-flood
shadow-prod-perf-fix
hosts-from-server
app-windows-real
app-windows-transport
release-prod-6w
mesh-policy-verify
quiet-close-toast
dev-merge-r4
review-mesh-agent-transport
review-app-windows-transport
settings-roundtrip
review-release-pipeline-r4
mesh-agent-transport
ended-strip-fix
review-audit-ca-update-d244
settings-rows
phone-width
signout-clear
fix-restart-tests
dev-merge-rp
signer-hardening
review-audit-ca-update
terminal-fidelity
review-audit-ca-update-wip
mesh-integrate
review-mesh-agent-transport-515d3712
review-mesh-dataplane-feec1988
mesh-dataplane
signout
research-canvas-node
wip/review-renderer-cost
wip/review-terminal-fidelity
padlock-glyph
review-release-pipeline-2e95b689
phone-polish
sidebar-polish
inbox-generic
review-mesh-dataplane-378d4055
prod-batch
ui-inbox
ui-ca-unlock
ui-machine-sections
review-mesh-dataplane-a5f744fb
tls-session-prod
session-bounds-prod
fix-dead-session
session-bounds
tls-session
palette-polish
shortcuts-d222
research-appmeta
phone-gutter
ui-centre-button
wip/ui-centre-button
wip/tls-session
review-addhost-breakit
ui-platform
renderer-cost
remote-agents
mesh-api
ssh-bootstrap
prod-hotfix2
prod-fixes
review-remote-agents
review-mesh-dataplane
session-life
research-browser
review-mesh-api
research-capture
review-mesh-api-round3
review-mesh-api-round1
gate-stability
review-gate-stability
review-relay-direct
review-mesh-api-findings
proto-sessions
font-picker
proto-addhost
proto-windows
mesh-core
latency-gate
research-bsd
research-discovery
keytray-mods
mock-core
ui-tweaks
fix-motion-sel
fix-motion
integrate2
fix-robust
t-web
t-server
vt-ghostty
fix-snap-echo
t-web-auth
review-vt2
t-agent
lane-protocol
lane-shim
lane-auth
s1-base
s1-contracts
s1-workspace
No results found.
Labels
Clear labels   
launch-qa
Findings from launch QA.

No labels
launch-qa
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/infraternal#252
No description provided.