2026-10-16T16:42:22.352Z Diffinery runner: job e2e (End-to-end (security)) for codician/diffinery@7230a07327da 2026-10-16T16:42:22.365Z Runner: image diffinery-runner:dfb768929ca5ce308febdab6, in lhr09, WEUR, container 28fdc17937db23d1e7467572822b9e4f7b68dacb87e27535a75a8f3b1b9a71ce 2026-10-16T16:42:22.365Z Runner size: large (4 vCPU, 12 GiB of memory, 20 GB of disk), this job uses what a smaller runner doesn't have; runs-on: diffinery-large (or -medium, -small, -tiny) sets a size 2026-10-16T16:42:22.365Z Host: AMD EPYC (family 25, model 1), 4 vCPUs, 2000 MHz 2026-10-16T16:42:22.366Z Workspace: /workspace/diffinery 2026-10-16T16:42:22.513Z ##[group]Run actions/checkout@v4 2026-10-16T16:42:22.513Z ##[endgroup] 2026-10-16T16:42:22.517Z Syncing repository: codician/diffinery 2026-10-16T16:42:22.634Z Fetching the repository (depth 1) 2026-10-16T16:42:23.404Z remote: Enumerating objects: 671, done. 2026-10-16T16:42:23.635Z Receiving objects: 0% (1/671) Receiving objects: 1% (7/671) Receiving objects: 2% (14/671) Receiving objects: 3% (21/671) Receiving objects: 4% (27/671) Receiving objects: 5% (34/671) Receiving objects: 6% (41/671) Receiving objects: 7% (47/671) Receiving objects: 8% (54/671) Receiving objects: 9% (61/671) Receiving objects: 10% (68/671) Receiving objects: 11% (74/671) Receiving objects: 12% (81/671) Receiving objects: 13% (88/671) Receiving objects: 14% (94/671) Receiving objects: 15% (101/671) Receiving objects: 16% (108/671) Receiving objects: 17% (115/671) Receiving objects: 18% (121/671) Receiving objects: 19% (128/671) Receiving objects: 20% (135/671) Receiving objects: 21% (141/671) Receiving objects: 22% (148/671) Receiving objects: 23% (155/671) Receiving objects: 24% (162/671) Receiving objects: 25% (168/671) Receiving objects: 26% (175/671) Receiving objects: 27% (182/671) Receiving objects: 28% (188/671) Receiving objects: 29% (195/671) Receiving objects: 30% (202/671) Receiving objects: 31% (209/671) Receiving objects: 32% (215/671) Receiving objects: 33% (222/671) Receiving objects: 34% (229/671) Receiving objects: 35% (235/671) Receiving objects: 36% (242/671) Receiving objects: 37% (249/671) Receiving objects: 38% (255/671) Receiving objects: 39% (262/671) Receiving objects: 40% (269/671) Receiving objects: 41% (276/671) Receiving objects: 42% (282/671) Receiving objects: 43% (289/671) Receiving objects: 44% (296/671) Receiving objects: 45% (302/671) Receiving objects: 46% (309/671) Receiving objects: 47% (316/671) Receiving objects: 48% (323/671) Receiving objects: 49% (329/671) Receiving objects: 50% (336/671) Receiving objects: 51% (343/671) Receiving objects: 52% (349/671) Receiving objects: 53% (356/671) Receiving objects: 54% (363/671) Receiving objects: 55% (370/671) Receiving objects: 56% (376/671) Receiving objects: 57% (383/671) Receiving objects: 58% (390/671) Receiving objects: 59% (396/671) Receiving objects: 60% (403/671) Receiving objects: 61% (410/671) Receiving objects: 62% (417/671) Receiving objects: 63% (423/671) Receiving objects: 64% (430/671) Receiving objects: 65% (437/671) Receiving objects: 66% (443/671) Receiving objects: 67% (450/671) Receiving objects: 68% (457/671) Receiving objects: 69% (463/671) Receiving objects: 70% (470/671) Receiving objects: 71% (477/671) Receiving objects: 72% (484/671) Receiving objects: 73% (490/671) Receiving objects: 74% (497/671) Receiving objects: 75% (504/671) Receiving objects: 76% (510/671) Receiving objects: 77% (517/671) Receiving objects: 78% (524/671) Receiving objects: 79% (531/671) Receiving objects: 80% (537/671) Receiving objects: 81% (544/671) Receiving objects: 82% (551/671) Receiving objects: 83% (557/671) Receiving objects: 84% (564/671) Receiving objects: 85% (571/671) Receiving objects: 86% (578/671) Receiving objects: 87% (584/671) Receiving objects: 88% (591/671) Receiving objects: 89% (598/671) Receiving objects: 90% (604/671) Receiving objects: 91% (611/671) Receiving objects: 92% (618/671) Receiving objects: 93% (625/671) Receiving objects: 94% (631/671) Receiving objects: 95% (638/671) Receiving objects: 96% (645/671) Receiving objects: 97% (651/671) remote: Total 671 (delta 0), reused 671 (delta 0) 2026-10-16T16:42:23.639Z Receiving objects: 98% (658/671) Receiving objects: 99% (665/671) Receiving objects: 100% (671/671) Receiving objects: 100% (671/671), 2.98 MiB | 13.26 MiB/s, done. 2026-10-16T16:42:23.665Z From https://diffinery.com/codician/diffinery 2026-10-16T16:42:23.665Z * [new ref] 7230a07327da967e1050ddd9db1bd5aeb8bc9f65 -> origin/diffinery-checkout 2026-10-16T16:42:23.863Z Note: switching to '7230a07327da967e1050ddd9db1bd5aeb8bc9f65'. 2026-10-16T16:42:23.863Z 2026-10-16T16:42:23.863Z You are in 'detached HEAD' state. You can look around, make experimental 2026-10-16T16:42:23.863Z changes and commit them, and you can discard any commits you make in this 2026-10-16T16:42:23.863Z state without impacting any branches by switching back to a branch. 2026-10-16T16:42:23.863Z 2026-10-16T16:42:23.863Z If you want to create a new branch to retain commits you create, you may 2026-10-16T16:42:23.863Z do so (now or later) by using -c with the switch command. Example: 2026-10-16T16:42:23.863Z 2026-10-16T16:42:23.863Z git switch -c 2026-10-16T16:42:23.863Z 2026-10-16T16:42:23.863Z Or undo this operation with: 2026-10-16T16:42:23.863Z 2026-10-16T16:42:23.863Z git switch - 2026-10-16T16:42:23.863Z 2026-10-16T16:42:23.863Z Turn off this advice by setting config variable advice.detachedHead to false 2026-10-16T16:42:23.863Z 2026-10-16T16:42:23.863Z HEAD is now at 7230a07 Merge d04b473ee018ae871068cbf24a3908ddc65a7476 into 7ceb5139d7846eabcc61cd294b6adeecfd234b2f 2026-10-16T16:42:23.872Z HEAD is now at 7230a07327da967e1050ddd9db1bd5aeb8bc9f65 2026-10-16T16:42:24.760Z Download action repository 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1' 2026-10-16T16:42:25.280Z ##[group]Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 2026-10-16T16:42:25.280Z with: 2026-10-16T16:42:25.280Z dest: ~/setup-pnpm 2026-10-16T16:42:25.280Z run_install: null 2026-10-16T16:42:25.280Z cache: false 2026-10-16T16:42:25.280Z cache_dependency_path: pnpm-lock.yaml 2026-10-16T16:42:25.280Z package_json_file: package.json 2026-10-16T16:42:25.280Z standalone: false 2026-10-16T16:42:25.280Z ##[endgroup] 2026-10-16T16:42:25.684Z ##[group]Running self-installer... 2026-10-16T16:42:27.514Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-16T16:42:27.533Z Packages: +1 2026-10-16T16:42:27.533Z + 2026-10-16T16:42:28.651Z Progress: resolved 1, reused 0, downloaded 1, added 0 2026-10-16T16:42:28.808Z Progress: resolved 1, reused 0, downloaded 1, added 1, done 2026-10-16T16:42:28.885Z 2026-10-16T16:42:28.885Z dependencies: 2026-10-16T16:42:28.885Z + pnpm 10.28.0 (12.14.0 is available) 2026-10-16T16:42:28.885Z 2026-10-16T16:42:28.891Z Done in 2.6s 2026-10-16T16:42:28.929Z ##[endgroup] 2026-10-16T16:42:28.929Z Installation Completed! 2026-10-16T16:42:29.695Z ##[group]Run actions/setup-node@v4 2026-10-16T16:42:29.695Z with: 2026-10-16T16:42:29.695Z node-version: 22 2026-10-16T16:42:29.695Z cache: pnpm 2026-10-16T16:42:29.695Z ##[endgroup] 2026-10-16T16:42:29.710Z Found in cache @ 22.22.0 (pre-installed node satisfies '22') 2026-10-16T16:42:30.923Z pnpm cache is not found 2026-10-16T16:42:31.577Z ##[group]Run pnpm install --frozen-lockfile 2026-10-16T16:42:31.577Z ##[endgroup] 2026-10-16T16:42:32.340Z Scope: all 8 workspace projects 2026-10-16T16:42:32.485Z Lockfile is up to date, resolution step is skipped 2026-10-16T16:42:32.574Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-16T16:42:32.657Z Packages: +250 2026-10-16T16:42:32.657Z ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2026-10-16T16:42:33.590Z Progress: resolved 250, reused 0, downloaded 15, added 3 2026-10-16T16:42:34.598Z Progress: resolved 250, reused 0, downloaded 51, added 16 2026-10-16T16:42:35.599Z Progress: resolved 250, reused 0, downloaded 142, added 59 2026-10-16T16:42:36.600Z Progress: resolved 250, reused 0, downloaded 156, added 64 2026-10-16T16:42:37.611Z Progress: resolved 250, reused 0, downloaded 165, added 67 2026-10-16T16:42:38.614Z Progress: resolved 250, reused 0, downloaded 189, added 76 2026-10-16T16:42:39.627Z Progress: resolved 250, reused 0, downloaded 219, added 87 2026-10-16T16:42:40.631Z Progress: resolved 250, reused 0, downloaded 235, added 92 2026-10-16T16:42:41.632Z Progress: resolved 250, reused 0, downloaded 241, added 95 2026-10-16T16:42:42.633Z Progress: resolved 250, reused 0, downloaded 244, added 249 2026-10-16T16:42:42.678Z Progress: resolved 250, reused 0, downloaded 244, added 250, done 2026-10-16T16:42:42.911Z .../esbuild@0.25.11/node_modules/esbuild postinstall$ node install.js 2026-10-16T16:42:42.913Z .../esbuild@0.25.12/node_modules/esbuild postinstall$ node install.js 2026-10-16T16:42:42.915Z .../esbuild@0.28.1/node_modules/esbuild postinstall$ node install.js 2026-10-16T16:42:42.926Z .../node_modules/workerd postinstall$ node install.js 2026-10-16T16:42:43.054Z .../node_modules/workerd postinstall$ node install.js 2026-10-16T16:42:43.105Z .../esbuild@0.25.11/node_modules/esbuild postinstall: Done 2026-10-16T16:42:43.105Z .../esbuild@0.25.12/node_modules/esbuild postinstall: Done 2026-10-16T16:42:43.115Z .../esbuild@0.28.2/node_modules/esbuild postinstall$ node install.js 2026-10-16T16:42:47.488Z .../node_modules/workerd postinstall: Done 2026-10-16T16:42:47.607Z .../esbuild@0.28.1/node_modules/esbuild postinstall: Done 2026-10-16T16:42:48.057Z .../node_modules/workerd postinstall: Done 2026-10-16T16:42:51.227Z .../esbuild@0.28.2/node_modules/esbuild postinstall: Done 2026-10-16T16:42:52.362Z 2026-10-16T16:42:52.362Z devDependencies: 2026-10-16T16:42:52.362Z + turbo 2.11.7 2026-10-16T16:42:52.362Z + typescript 5.9.3 2026-10-16T16:42:52.362Z 2026-10-16T16:42:53.077Z Done in 21.3s using pnpm v10.28.0 2026-10-16T16:42:53.356Z ##[group]Run pnpm -r --if-present build 2026-10-16T16:42:53.356Z ##[endgroup] 2026-10-16T16:42:53.992Z Scope: 7 of 8 workspace projects 2026-10-16T16:42:54.000Z apps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env node 2026-10-16T16:42:54.000Z import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-16T16:42:54.002Z apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjs 2026-10-16T16:42:54.003Z containers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-16T16:42:54.151Z apps/cli build: dist/diffinery.mjs 446.1kb 2026-10-16T16:42:54.151Z apps/cli build: ⚡ Done in 105ms 2026-10-16T16:42:54.158Z apps/cli build: Done 2026-10-16T16:42:54.188Z containers/runner build: dist/agent.mjs 674.1kb 2026-10-16T16:42:54.189Z containers/runner build: ⚡ Done in 147ms 2026-10-16T16:42:54.196Z containers/runner build: Done 2026-10-16T16:42:55.803Z apps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KB 2026-10-16T16:42:56.507Z apps/diffinery build: docs: 71 pages (+2 generated at runtime), 6 images, CLI 0.1.0 (235 KiB), editor extension 0.1.0 (20 KiB) 2026-10-16T16:42:56.522Z apps/diffinery build: Done 2026-10-16T16:42:57.823Z ##[group]Run # Shards of similar length; a new test file runs in "rest" unless it's added to another. 2026-10-16T16:42:57.823Z core='/e2e\.test\.mjs$' 2026-10-16T16:42:57.823Z agents='/(agentic|review|tasks)\.test\.mjs$' 2026-10-16T16:42:57.823Z security='/(security|status)\.test\.mjs$' 2026-10-16T16:42:57.823Z # The core file's real histories and large pushes take minutes each (jquery's alone 2 to 3 on 2026-10-16T16:42:57.823Z # Diffinery's runners): two shards of their own, so no part of the file runs into node's 2026-10-16T16:42:57.823Z # per-file timeout, which is the --test-timeout here. 2026-10-16T16:42:57.823Z histories='^real histories:' 2026-10-16T16:42:57.823Z large='^(large files|large pushes):' 2026-10-16T16:42:57.823Z opts=(--test-timeout=600000) 2026-10-16T16:42:57.823Z case "security" in 2026-10-16T16:42:57.823Z core) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-skip-pattern="$histories" --test-skip-pattern="$large") ;; 2026-10-16T16:42:57.823Z histories) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts=(--test-timeout=900000 --test-name-pattern="$histories") ;; 2026-10-16T16:42:57.823Z large) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-name-pattern="$large") ;; 2026-10-16T16:42:57.823Z agents) files=$(ls test/e2e/*.test.mjs | grep -E "$agents") ;; 2026-10-16T16:42:57.823Z security) files=$(ls test/e2e/*.test.mjs | grep -E "$security") ;; 2026-10-16T16:42:57.823Z *) files=$(ls test/e2e/*.test.mjs | grep -vE "$core|$agents|$security") ;; 2026-10-16T16:42:57.823Z esac 2026-10-16T16:42:57.823Z echo "$files" 2026-10-16T16:42:57.823Z node --test --test-concurrency=1 "${opts[@]}" $files 2026-10-16T16:42:57.823Z ##[endgroup] 2026-10-16T16:42:57.845Z test/e2e/security.test.mjs 2026-10-16T16:42:57.845Z test/e2e/status.test.mjs 2026-10-16T16:42:57.926Z TAP version 13 2026-10-16T16:43:59.138Z # Subtest: security: search, required checks, environments, reviews, locks, archives, drafts and tree names 2026-10-16T16:43:59.140Z ok 1 - security: search, required checks, environments, reviews, locks, archives, drafts and tree names 2026-10-16T16:43:59.140Z --- 2026-10-16T16:43:59.140Z duration_ms: 61092.380944 2026-10-16T16:43:59.140Z type: 'test' 2026-10-16T16:43:59.140Z ... 2026-10-16T16:43:59.403Z # Subtest: security: organization admins can't hand out ownership 2026-10-16T16:43:59.403Z ok 2 - security: organization admins can't hand out ownership 2026-10-16T16:43:59.404Z --- 2026-10-16T16:43:59.404Z duration_ms: 264.991666 2026-10-16T16:43:59.404Z type: 'test' 2026-10-16T16:43:59.404Z ... 2026-10-16T16:44:02.728Z # Subtest: security: anonymous writes, token scopes, agent secrets, merge rules and drafts 2026-10-16T16:44:02.728Z ok 3 - security: anonymous writes, token scopes, agent secrets, merge rules and drafts 2026-10-16T16:44:02.728Z --- 2026-10-16T16:44:02.728Z duration_ms: 3323.144748 2026-10-16T16:44:02.728Z type: 'test' 2026-10-16T16:44:02.728Z ... 2026-10-16T16:44:03.513Z # Subtest: security: push protection covers commits made without git 2026-10-16T16:44:03.513Z ok 4 - security: push protection covers commits made without git 2026-10-16T16:44:03.513Z --- 2026-10-16T16:44:03.513Z duration_ms: 784.919877 2026-10-16T16:44:03.513Z type: 'test' 2026-10-16T16:44:03.513Z ...