2026-10-25T19:47:41.721Z Diffinery runner: job e2e (End-to-end (security)) for codician/diffinery@292d8e66dde1
2026-10-25T19:47:41.798Z Runner: image diffinery-runner:4d3bf17f06575e64ab4155b3, in lhr19, WEUR, container 6e183d941b96b9c6293eade1b012ee13242b7e2c47382b87cc63f48c9d1cc373
2026-10-25T19:47:41.798Z Runner size: large (4 vCPU, 12 GiB of memory, 20 GB of disk), this job uses what a smaller runner doesn't have; runs-on: diffinery-large (or -medium, -small, -tiny) sets a size
2026-10-25T19:47:41.798Z Host: AMD EPYC (family 25, model 17), 4 vCPUs, 2550 MHz
2026-10-25T19:47:41.799Z Workspace: /workspace/diffinery
2026-10-25T19:47:41.860Z ##[group]Run actions/checkout@v4
2026-10-25T19:47:41.860Z ##[endgroup]
2026-10-25T19:47:41.861Z Syncing repository: codician/diffinery
2026-10-25T19:47:41.910Z Fetching the repository (depth 1)
2026-10-25T19:47:42.478Z remote: Enumerating objects: 883, done.        
2026-10-25T19:47:42.633Z Receiving objects:   0% (1/883)
Receiving objects:   1% (9/883)
Receiving objects:   2% (18/883)
Receiving objects:   3% (27/883)
Receiving objects:   4% (36/883)
Receiving objects:   5% (45/883)
Receiving objects:   6% (53/883)
Receiving objects:   7% (62/883)
Receiving objects:   8% (71/883)
Receiving objects:   9% (80/883)
Receiving objects:  10% (89/883)
Receiving objects:  11% (98/883)
Receiving objects:  12% (106/883)
Receiving objects:  13% (115/883)
Receiving objects:  14% (124/883)
Receiving objects:  15% (133/883)
Receiving objects:  16% (142/883)
Receiving objects:  17% (151/883)
Receiving objects:  18% (159/883)
Receiving objects:  19% (168/883)
Receiving objects:  20% (177/883)
Receiving objects:  21% (186/883)
Receiving objects:  22% (195/883)
Receiving objects:  23% (204/883)
Receiving objects:  24% (212/883)
Receiving objects:  25% (221/883)
Receiving objects:  26% (230/883)
Receiving objects:  27% (239/883)
Receiving objects:  28% (248/883)
Receiving objects:  29% (257/883)
Receiving objects:  30% (265/883)
Receiving objects:  31% (274/883)
Receiving objects:  32% (283/883)
Receiving objects:  33% (292/883)
Receiving objects:  34% (301/883)
Receiving objects:  35% (310/883)
Receiving objects:  36% (318/883)
Receiving objects:  37% (327/883)
Receiving objects:  38% (336/883)
Receiving objects:  39% (345/883)
Receiving objects:  40% (354/883)
Receiving objects:  41% (363/883)
Receiving objects:  42% (371/883)
Receiving objects:  43% (380/883)
Receiving objects:  44% (389/883)
Receiving objects:  45% (398/883)
Receiving objects:  46% (407/883)
Receiving objects:  47% (416/883)
Receiving objects:  48% (424/883)
Receiving objects:  49% (433/883)
Receiving objects:  50% (442/883)
Receiving objects:  51% (451/883)
Receiving objects:  52% (460/883)
Receiving objects:  53% (468/883)
Receiving objects:  54% (477/883)
Receiving objects:  55% (486/883)
Receiving objects:  56% (495/883)
Receiving objects:  57% (504/883)
Receiving objects:  58% (513/883)
Receiving objects:  59% (521/883)
Receiving objects:  60% (530/883)
Receiving objects:  61% (539/883)
Receiving objects:  62% (548/883)
Receiving objects:  63% (557/883)
Receiving objects:  64% (566/883)
Receiving objects:  65% (574/883)
Receiving objects:  66% (583/883)
Receiving objects:  67% (592/883)
Receiving objects:  68% (601/883)
Receiving objects:  69% (610/883)
Receiving objects:  70% (619/883)
Receiving objects:  71% (627/883)
Receiving objects:  72% (636/883)
Receiving objects:  73% (645/883)
Receiving objects:  74% (654/883)
Receiving objects:  75% (663/883)
Receiving objects:  76% (672/883)
Receiving objects:  77% (680/883)
Receiving objects:  78% (689/883)
Receiving objects:  79% (698/883)
Receiving objects:  80% (707/883)
Receiving objects:  81% (716/883)
Receiving objects:  82% (725/883)
Receiving objects:  83% (733/883)
Receiving objects:  84% (742/883)
Receiving objects:  85% (751/883)
Receiving objects:  86% (760/883)
Receiving objects:  87% (769/883)
Receiving objects:  88% (778/883)
Receiving objects:  89% (786/883)
Receiving objects:  90% (795/883)
Receiving objects:  91% (804/883)
Receiving objects:  92% (813/883)
Receiving objects:  93% (822/883)
Receiving objects:  94% (831/883)
Receiving objects:  95% (839/883)
Receiving objects:  96% (848/883)
Receiving objects:  97% (857/883)
remote: Total 883 (delta 0), reused 883 (delta 0)        
2026-10-25T19:47:42.638Z Receiving objects:  98% (866/883)
Receiving objects:  99% (875/883)
Receiving objects: 100% (883/883)
Receiving objects: 100% (883/883), 4.17 MiB | 27.05 MiB/s, done.
2026-10-25T19:47:42.675Z From https://diffinery.com/codician/diffinery
2026-10-25T19:47:42.675Z  * [new ref]         292d8e66dde16ee374115fbc60d71f280908f444 -> origin/main
2026-10-25T19:47:42.808Z Switched to a new branch 'main'
2026-10-25T19:47:42.814Z HEAD is now at 292d8e66dde16ee374115fbc60d71f280908f444
2026-10-25T19:47:42.919Z Download action repository 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1'
2026-10-25T19:47:43.256Z ##[group]Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1
2026-10-25T19:47:43.256Z with:
2026-10-25T19:47:43.256Z   dest: ~/setup-pnpm
2026-10-25T19:47:43.256Z   run_install: null
2026-10-25T19:47:43.256Z   cache: false
2026-10-25T19:47:43.256Z   cache_dependency_path: pnpm-lock.yaml
2026-10-25T19:47:43.256Z   package_json_file: package.json
2026-10-25T19:47:43.256Z   standalone: false
2026-10-25T19:47:43.256Z ##[endgroup]
2026-10-25T19:47:43.477Z ##[group]Running self-installer...
2026-10-25T19:47:44.338Z Progress: resolved 1, reused 0, downloaded 0, added 0
2026-10-25T19:47:44.349Z Packages: +1
2026-10-25T19:47:44.349Z +
2026-10-25T19:47:44.968Z Progress: resolved 1, reused 0, downloaded 1, added 1, done
2026-10-25T19:47:45.002Z 
2026-10-25T19:47:45.002Z dependencies:
2026-10-25T19:47:45.002Z + pnpm 10.28.0 (12.15.0 is available)
2026-10-25T19:47:45.002Z 
2026-10-25T19:47:45.005Z Done in 1.2s
2026-10-25T19:47:45.030Z ##[endgroup]
2026-10-25T19:47:45.031Z Installation Completed!
2026-10-25T19:47:45.143Z ##[group]Run actions/setup-node@v4
2026-10-25T19:47:45.143Z with:
2026-10-25T19:47:45.143Z   node-version: 22
2026-10-25T19:47:45.143Z   cache: pnpm
2026-10-25T19:47:45.143Z ##[endgroup]
2026-10-25T19:47:45.152Z Found in cache @ 22.22.0 (pre-installed node satisfies '22')
2026-10-25T19:47:45.999Z Cache Size: ~216 MB (226934503 B)
2026-10-25T19:47:50.705Z Cache restored from key: node-cache-Linux-x64-pnpm-42d02c0263a3b5f911ed6ae8e9210922b97166ca02e60b2c70c55dfa1f00371b
2026-10-25T19:47:51.740Z ##[group]Run pnpm install --frozen-lockfile
2026-10-25T19:47:51.740Z ##[endgroup]
2026-10-25T19:47:52.337Z Scope: all 8 workspace projects
2026-10-25T19:47:52.407Z Lockfile is up to date, resolution step is skipped
2026-10-25T19:47:52.471Z Progress: resolved 1, reused 0, downloaded 0, added 0
2026-10-25T19:47:52.519Z Packages: +251
2026-10-25T19:47:52.519Z ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
2026-10-25T19:47:53.474Z Progress: resolved 251, reused 245, downloaded 0, added 166
2026-10-25T19:47:54.157Z Progress: resolved 251, reused 245, downloaded 0, added 251, done
2026-10-25T19:47:54.312Z .../esbuild@0.25.12/node_modules/esbuild postinstall$ node install.js
2026-10-25T19:47:54.313Z .../esbuild@0.25.11/node_modules/esbuild postinstall$ node install.js
2026-10-25T19:47:54.314Z .../node_modules/workerd postinstall$ node install.js
2026-10-25T19:47:54.315Z .../esbuild@0.28.1/node_modules/esbuild postinstall$ node install.js
2026-10-25T19:47:54.339Z .../node_modules/workerd postinstall$ node install.js
2026-10-25T19:47:54.535Z .../node_modules/workerd postinstall: Done
2026-10-25T19:47:54.536Z .../esbuild@0.28.1/node_modules/esbuild postinstall: Done
2026-10-25T19:47:54.545Z .../esbuild@0.25.12/node_modules/esbuild postinstall: Done
2026-10-25T19:47:54.556Z .../esbuild@0.25.11/node_modules/esbuild postinstall: Done
2026-10-25T19:47:54.561Z .../esbuild@0.28.2/node_modules/esbuild postinstall$ node install.js
2026-10-25T19:47:54.679Z .../node_modules/workerd postinstall: Done
2026-10-25T19:47:54.700Z .../esbuild@0.28.2/node_modules/esbuild postinstall: Done
2026-10-25T19:47:55.227Z 
2026-10-25T19:47:55.227Z devDependencies:
2026-10-25T19:47:55.227Z + turbo 2.11.7
2026-10-25T19:47:55.227Z + typescript 5.9.3
2026-10-25T19:47:55.227Z 
2026-10-25T19:47:55.769Z Done in 3.8s using pnpm v10.28.0
2026-10-25T19:47:55.900Z ##[group]Run pnpm -r --if-present build
2026-10-25T19:47:55.900Z ##[endgroup]
2026-10-25T19:47:56.282Z Scope: 7 of 8 workspace projects
2026-10-25T19:47:56.285Z apps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env node
2026-10-25T19:47:56.285Z import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"
2026-10-25T19:47:56.286Z apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjs
2026-10-25T19:47:56.287Z containers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"
2026-10-25T19:47:56.369Z apps/cli build:   dist/diffinery.mjs  468.9kb
2026-10-25T19:47:56.369Z apps/cli build: ⚡ Done in 65ms
2026-10-25T19:47:56.377Z apps/cli build: Done
2026-10-25T19:47:56.381Z containers/runner build:   dist/agent.mjs  684.1kb
2026-10-25T19:47:56.381Z containers/runner build: ⚡ Done in 72ms
2026-10-25T19:47:56.388Z containers/runner build: Done
2026-10-25T19:47:58.328Z apps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KB
2026-10-25T19:47:58.652Z apps/diffinery build: docs: 84 pages (+2 generated at runtime), 19 site pages, 11 images, CLI 0.1.0 (250 KiB), editor extension 0.1.1 (20 KiB), JetBrains plugin 0.1.0 (64 KiB), Claude Code plugins diffinery 0.1.3, diffinery-ci 0.2.3
2026-10-25T19:47:58.669Z apps/diffinery build: Done
2026-10-25T19:47:58.868Z ##[group]Run # Shards of similar length; a new test file runs in "rest" unless it's added to another.
2026-10-25T19:47:58.868Z core='/e2e\.test\.mjs$'
2026-10-25T19:47:58.868Z agents='/(agentic|review|tasks)\.test\.mjs$'
2026-10-25T19:47:58.868Z # security.test.mjs, security-*.test.mjs (security-txt's too) and status.test.mjs.
2026-10-25T19:47:58.868Z security='/(security(-[a-z-]+)?|status)\.test\.mjs$'
2026-10-25T19:47:58.868Z # The core file's real histories and large pushes take minutes each (jquery's alone 2 to 3 on
2026-10-25T19:47:58.868Z # Diffinery's runners): two shards of their own, so no part of the file runs into node's
2026-10-25T19:47:58.868Z # per-file timeout, which is the --test-timeout here.
2026-10-25T19:47:58.868Z histories='^real histories:'
2026-10-25T19:47:58.868Z large='^(large files|large pushes):'
2026-10-25T19:47:58.868Z opts=(--test-timeout=600000)
2026-10-25T19:47:58.868Z case "security" in
2026-10-25T19:47:58.868Z   core) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-skip-pattern="$histories" --test-skip-pattern="$large") ;;
2026-10-25T19:47:58.868Z   histories) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts=(--test-timeout=900000 --test-name-pattern="$histories") ;;
2026-10-25T19:47:58.868Z   large) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-name-pattern="$large") ;;
2026-10-25T19:47:58.868Z   agents) files=$(ls test/e2e/*.test.mjs | grep -E "$agents") ;;
2026-10-25T19:47:58.868Z   security) files=$(ls test/e2e/*.test.mjs | grep -E "$security") ;;
2026-10-25T19:47:58.868Z   *) files=$(ls test/e2e/*.test.mjs | grep -vE "$core|$agents|$security") ;;
2026-10-25T19:47:58.868Z esac
2026-10-25T19:47:58.868Z echo "$files"
2026-10-25T19:47:58.868Z # Two files at a time: each starts its own local server on its own port, database and
2026-10-25T19:47:58.868Z # directory, so they don't share state, and a file's server mostly keeps one core busy.
2026-10-25T19:47:58.868Z node --test --test-concurrency=2 "${opts[@]}" $files
2026-10-25T19:47:58.868Z ##[endgroup]
2026-10-25T19:47:58.890Z test/e2e/security-limits.test.mjs
2026-10-25T19:47:58.890Z test/e2e/security-txt.test.mjs
2026-10-25T19:47:58.890Z test/e2e/security.test.mjs
2026-10-25T19:47:58.890Z test/e2e/status.test.mjs
2026-10-25T19:47:58.940Z TAP version 13
2026-10-25T19:48:40.921Z # Subtest: security: environment reviewers hold a deploy job until a listed person approves, and nobody else can
2026-10-25T19:48:40.921Z ok 1 - security: environment reviewers hold a deploy job until a listed person approves, and nobody else can
2026-10-25T19:48:40.921Z   ---
2026-10-25T19:48:40.921Z   duration_ms: 41848.197386
2026-10-25T19:48:40.921Z   type: 'test'
2026-10-25T19:48:40.921Z   ...
2026-10-25T19:48:42.410Z # Subtest: security: adding someone by username sends an invitation, and they get access only once they accept
2026-10-25T19:48:42.410Z ok 2 - security: adding someone by username sends an invitation, and they get access only once they accept
2026-10-25T19:48:42.410Z   ---
2026-10-25T19:48:42.410Z   duration_ms: 1473.056662
2026-10-25T19:48:42.410Z   type: 'test'
2026-10-25T19:48:42.410Z   ...