2026-10-16T13:14:16.118Z Diffinery runner: job e2e (End-to-end (security)) for codician/diffinery@9677dd5353f8 2026-10-16T13:14:16.126Z Runner: image diffinery-runner:2a3052eff7a82a483a7fde51, in man04, WEUR, container 61443fdc4f10eb1641bcb68fc8cc92ef59a3818011eadb24551e770b286f7a88 2026-10-16T13:14:16.126Z Workspace: /workspace/diffinery 2026-10-16T13:14:16.168Z ##[group]Run actions/checkout@v4 2026-10-16T13:14:16.168Z ##[endgroup] 2026-10-16T13:14:16.169Z Syncing repository: codician/diffinery 2026-10-16T13:14:16.207Z Fetching the repository (depth 1) 2026-10-16T13:14:16.874Z remote: Enumerating objects: 609, done. 2026-10-16T13:14:17.370Z Receiving objects: 0% (1/609) Receiving objects: 1% (7/609) Receiving objects: 2% (13/609) Receiving objects: 3% (19/609) Receiving objects: 4% (25/609) Receiving objects: 5% (31/609) Receiving objects: 6% (37/609) Receiving objects: 7% (43/609) Receiving objects: 8% (49/609) Receiving objects: 9% (55/609) Receiving objects: 10% (61/609) Receiving objects: 11% (67/609) Receiving objects: 12% (74/609) Receiving objects: 13% (80/609) Receiving objects: 14% (86/609) Receiving objects: 15% (92/609) Receiving objects: 16% (98/609) Receiving objects: 17% (104/609) Receiving objects: 18% (110/609) Receiving objects: 19% (116/609) Receiving objects: 20% (122/609) Receiving objects: 21% (128/609) Receiving objects: 22% (134/609) Receiving objects: 23% (141/609) Receiving objects: 24% (147/609) Receiving objects: 25% (153/609) Receiving objects: 26% (159/609) Receiving objects: 27% (165/609) Receiving objects: 28% (171/609) Receiving objects: 29% (177/609) Receiving objects: 30% (183/609) Receiving objects: 31% (189/609) Receiving objects: 32% (195/609) Receiving objects: 33% (201/609) Receiving objects: 34% (208/609) Receiving objects: 35% (214/609) Receiving objects: 36% (220/609) Receiving objects: 37% (226/609) Receiving objects: 38% (232/609) Receiving objects: 39% (238/609) Receiving objects: 40% (244/609) Receiving objects: 41% (250/609) Receiving objects: 42% (256/609) Receiving objects: 43% (262/609) Receiving objects: 44% (268/609) Receiving objects: 45% (275/609) Receiving objects: 46% (281/609) Receiving objects: 47% (287/609) Receiving objects: 48% (293/609) Receiving objects: 49% (299/609) Receiving objects: 50% (305/609) Receiving objects: 51% (311/609) Receiving objects: 52% (317/609) Receiving objects: 53% (323/609) Receiving objects: 54% (329/609) Receiving objects: 55% (335/609) Receiving objects: 56% (342/609) Receiving objects: 57% (348/609) Receiving objects: 58% (354/609) Receiving objects: 59% (360/609) Receiving objects: 60% (366/609) Receiving objects: 61% (372/609) Receiving objects: 62% (378/609) Receiving objects: 63% (384/609) Receiving objects: 64% (390/609) Receiving objects: 65% (396/609) Receiving objects: 66% (402/609) Receiving objects: 67% (409/609) Receiving objects: 68% (415/609) Receiving objects: 69% (421/609) Receiving objects: 70% (427/609) Receiving objects: 71% (433/609) Receiving objects: 72% (439/609) Receiving objects: 73% (445/609) Receiving objects: 74% (451/609) Receiving objects: 75% (457/609) Receiving objects: 76% (463/609) Receiving objects: 77% (469/609) Receiving objects: 78% (476/609) Receiving objects: 79% (482/609) Receiving objects: 80% (488/609) Receiving objects: 81% (494/609) Receiving objects: 82% (500/609) Receiving objects: 83% (506/609) Receiving objects: 84% (512/609) Receiving objects: 85% (518/609) Receiving objects: 86% (524/609) Receiving objects: 87% (530/609) Receiving objects: 88% (536/609) Receiving objects: 89% (543/609) Receiving objects: 90% (549/609) Receiving objects: 91% (555/609) Receiving objects: 92% (561/609) Receiving objects: 93% (567/609) Receiving objects: 94% (573/609) Receiving objects: 95% (579/609) Receiving objects: 96% (585/609) remote: Total 609 (delta 0), reused 609 (delta 0) 2026-10-16T13:14:17.371Z Receiving objects: 97% (591/609) Receiving objects: 98% (597/609) Receiving objects: 99% (603/609) Receiving objects: 100% (609/609) Receiving objects: 100% (609/609), 2.48 MiB | 5.02 MiB/s, done. 2026-10-16T13:14:17.380Z From https://diffinery.com/codician/diffinery 2026-10-16T13:14:17.380Z * [new ref] 9677dd5353f8a2199c0c9aff3156e587a726501b -> origin/diffinery-checkout 2026-10-16T13:14:17.445Z Note: switching to '9677dd5353f8a2199c0c9aff3156e587a726501b'. 2026-10-16T13:14:17.445Z 2026-10-16T13:14:17.445Z You are in 'detached HEAD' state. You can look around, make experimental 2026-10-16T13:14:17.445Z changes and commit them, and you can discard any commits you make in this 2026-10-16T13:14:17.445Z state without impacting any branches by switching back to a branch. 2026-10-16T13:14:17.445Z 2026-10-16T13:14:17.445Z If you want to create a new branch to retain commits you create, you may 2026-10-16T13:14:17.445Z do so (now or later) by using -c with the switch command. Example: 2026-10-16T13:14:17.445Z 2026-10-16T13:14:17.445Z git switch -c 2026-10-16T13:14:17.445Z 2026-10-16T13:14:17.445Z Or undo this operation with: 2026-10-16T13:14:17.445Z 2026-10-16T13:14:17.445Z git switch - 2026-10-16T13:14:17.445Z 2026-10-16T13:14:17.445Z Turn off this advice by setting config variable advice.detachedHead to false 2026-10-16T13:14:17.445Z 2026-10-16T13:14:17.445Z HEAD is now at 9677dd5 Merge 4f3a2e2a36638b10f70c171e3db3751be20972dd into 2e055f17cde26e5be9756aaa0de2120e4a87b4af 2026-10-16T13:14:17.449Z HEAD is now at 9677dd5353f8a2199c0c9aff3156e587a726501b 2026-10-16T13:14:17.766Z Download action repository 'pnpm/action-setup@v4' 2026-10-16T13:14:18.096Z ##[group]Run pnpm/action-setup@v4 2026-10-16T13:14:18.096Z with: 2026-10-16T13:14:18.096Z dest: ~/setup-pnpm 2026-10-16T13:14:18.096Z run_install: null 2026-10-16T13:14:18.096Z cache: false 2026-10-16T13:14:18.096Z cache_dependency_path: pnpm-lock.yaml 2026-10-16T13:14:18.096Z package_json_file: package.json 2026-10-16T13:14:18.096Z standalone: false 2026-10-16T13:14:18.096Z ##[endgroup] 2026-10-16T13:14:18.264Z ##[group]Running self-installer... 2026-10-16T13:14:18.875Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-16T13:14:18.884Z Packages: +1 2026-10-16T13:14:18.884Z + 2026-10-16T13:14:19.368Z Progress: resolved 1, reused 0, downloaded 1, added 1, done 2026-10-16T13:14:19.388Z 2026-10-16T13:14:19.388Z dependencies: 2026-10-16T13:14:19.388Z + pnpm 10.28.0 (12.14.0 is available) 2026-10-16T13:14:19.388Z 2026-10-16T13:14:19.391Z Done in 920ms 2026-10-16T13:14:19.412Z ##[endgroup] 2026-10-16T13:14:19.412Z Installation Completed! 2026-10-16T13:14:19.498Z ##[group]Run actions/setup-node@v4 2026-10-16T13:14:19.498Z with: 2026-10-16T13:14:19.498Z node-version: 22 2026-10-16T13:14:19.498Z cache: pnpm 2026-10-16T13:14:19.498Z ##[endgroup] 2026-10-16T13:14:19.505Z Found in cache @ 22.22.0 (pre-installed node satisfies '22') 2026-10-16T13:14:22.075Z Cache Size: ~215 MB (225870423 B) 2026-10-16T13:14:25.015Z Cache restored from key: node-cache-Linux-x64-pnpm-4b94436b86798d88b931ea24b5b847697aebf45520d6ef384cb382ce6c1f1e08 2026-10-16T13:14:25.113Z ##[group]Run pnpm install --frozen-lockfile 2026-10-16T13:14:25.113Z ##[endgroup] 2026-10-16T13:14:25.452Z Scope: all 7 workspace projects 2026-10-16T13:14:25.518Z Lockfile is up to date, resolution step is skipped 2026-10-16T13:14:25.551Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-16T13:14:25.585Z Packages: +248 2026-10-16T13:14:25.585Z ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2026-10-16T13:14:26.465Z Progress: resolved 248, reused 242, downloaded 0, added 248, done 2026-10-16T13:14:36.576Z 2026-10-16T13:14:36.576Z devDependencies: 2026-10-16T13:14:36.576Z + turbo 2.11.7 2026-10-16T13:14:36.576Z + typescript 5.9.3 2026-10-16T13:14:36.576Z 2026-10-16T13:14:36.824Z Done in 11.6s using pnpm v10.28.0 2026-10-16T13:14:36.987Z ##[group]Run pnpm -r --if-present build 2026-10-16T13:14:36.987Z ##[endgroup] 2026-10-16T13:14:37.340Z Scope: 6 of 7 workspace projects 2026-10-16T13:14:37.344Z apps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env node 2026-10-16T13:14:37.344Z import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-16T13:14:37.345Z apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjs 2026-10-16T13:14:37.345Z containers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-16T13:14:37.421Z apps/cli build: dist/diffinery.mjs 442.5kb 2026-10-16T13:14:37.421Z apps/cli build: ⚡ Done in 57ms 2026-10-16T13:14:37.424Z apps/cli build: Done 2026-10-16T13:14:37.426Z containers/runner build: dist/agent.mjs 657.3kb 2026-10-16T13:14:37.426Z containers/runner build: ⚡ Done in 62ms 2026-10-16T13:14:37.430Z containers/runner build: Done 2026-10-16T13:14:38.147Z apps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KB 2026-10-16T13:14:38.400Z apps/diffinery build: docs: 63 pages (+2 generated at runtime), CLI 0.1.0 (232 KiB) 2026-10-16T13:14:38.413Z apps/diffinery build: Done 2026-10-16T13:14:38.580Z ##[group]Run # Shards of similar length; a new test file runs in "rest" unless it's added to another. 2026-10-16T13:14:38.580Z core='/e2e\.test\.mjs$' 2026-10-16T13:14:38.580Z agents='/(agentic|review|tasks)\.test\.mjs$' 2026-10-16T13:14:38.580Z security='/(security|status)\.test\.mjs$' 2026-10-16T13:14:38.580Z # The core file's real histories and large pushes take minutes each (jquery's alone 2 to 3 on 2026-10-16T13:14:38.580Z # Diffinery's runners): two shards of their own, so no part of the file runs into node's 2026-10-16T13:14:38.580Z # per-file timeout, which is the --test-timeout here. 2026-10-16T13:14:38.580Z histories='^real histories:' 2026-10-16T13:14:38.580Z large='^(large files|large pushes):' 2026-10-16T13:14:38.580Z opts=(--test-timeout=600000) 2026-10-16T13:14:38.580Z case "security" in 2026-10-16T13:14:38.580Z core) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-skip-pattern="$histories" --test-skip-pattern="$large") ;; 2026-10-16T13:14:38.580Z histories) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts=(--test-timeout=900000 --test-name-pattern="$histories") ;; 2026-10-16T13:14:38.580Z large) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-name-pattern="$large") ;; 2026-10-16T13:14:38.580Z agents) files=$(ls test/e2e/*.test.mjs | grep -E "$agents") ;; 2026-10-16T13:14:38.580Z security) files=$(ls test/e2e/*.test.mjs | grep -E "$security") ;; 2026-10-16T13:14:38.580Z *) files=$(ls test/e2e/*.test.mjs | grep -vE "$core|$agents|$security") ;; 2026-10-16T13:14:38.580Z esac 2026-10-16T13:14:38.580Z echo "$files" 2026-10-16T13:14:38.580Z node --test --test-concurrency=1 "${opts[@]}" $files 2026-10-16T13:14:38.580Z ##[endgroup] 2026-10-16T13:14:38.591Z test/e2e/security.test.mjs 2026-10-16T13:14:38.591Z test/e2e/status.test.mjs 2026-10-16T13:14:38.631Z TAP version 13 2026-10-16T13:15:04.777Z # Subtest: security: search, required checks, environments, reviews, locks, archives, drafts and tree names 2026-10-16T13:15:04.777Z ok 1 - security: search, required checks, environments, reviews, locks, archives, drafts and tree names 2026-10-16T13:15:04.777Z --- 2026-10-16T13:15:04.777Z duration_ms: 26099.829676 2026-10-16T13:15:04.777Z type: 'test' 2026-10-16T13:15:04.777Z ... 2026-10-16T13:15:04.839Z # Subtest: security: organization admins can't hand out ownership 2026-10-16T13:15:04.840Z ok 2 - security: organization admins can't hand out ownership 2026-10-16T13:15:04.840Z --- 2026-10-16T13:15:04.840Z duration_ms: 62.795593 2026-10-16T13:15:04.840Z type: 'test' 2026-10-16T13:15:04.840Z ...