@mjasnikovs/pi-task 0.40.39 → 0.40.40

package/dist/task/deep-render-check.js

@@ -318,12 +318,18 @@ export function judgeDeepSession(f) {
         && lastHopJudgesTheClient(r)
         && (r.mimeType ?? '').startsWith('text/html'));
     if (swallowed) {
+        const landed = swallowed.finalPath ?? swallowed.path;
+        const hop = landed === swallowed.path ? '' : ` → \`${landed}\``;
+        const cause = swallowed.redirected ?
+            'The call was bounced to a page, so the session the client carried is not one this '
+                + 'server accepts and the answer is the SPA shell.'
+            : 'The route is not mounted and the catch-all answered instead, so the client sees a '
+                + '200 it cannot parse.';
         return {
             outcome: 'fail',
-            detail: `\`${swallowed.method} ${swallowed.path}\` → ${String(swallowed.status)} `
+            detail: `\`${swallowed.method} ${swallowed.path}\`${hop} → ${String(swallowed.status)} `
                 + `${swallowed.mimeType ?? ''}: an XHR asked this server for data and got the SPA `
-                + 'shell. The route is not mounted and the catch-all answered instead, so the client '
-                + 'sees a 200 it cannot parse. No status check can see this.'
+                + `shell. ${cause} No status check can see this.`
         };
     }
     const { method, path: p, status, failed, redirected: authRedirected } = f.authRequest;
@@ -695,6 +701,7 @@ export async function driveSession(cdp, { url, credentials, judge, quietMs }) {
         const existing = requests.get(id);
         if (p.redirectResponse !== undefined && existing) {
             existing.finalUrl = String(req?.url ?? existing.finalUrl);
+            existing.redirected = true;
         }
         else {
             requests.set(id, {
@@ -705,6 +712,7 @@ export async function driveSession(cdp, { url, credentials, judge, quietMs }) {
                 status: null,
                 mimeType: null,
                 failed: false,
+                redirected: false,
                 seq: nextSeq++
             });
         }
@@ -779,7 +787,7 @@ export async function driveSession(cdp, { url, credentials, judge, quietMs }) {
                 mimeType: r.mimeType,
                 failed: r.failed,
                 initiator: initiatorOf(r),
-                redirected: r.finalUrl !== r.url,
+                redirected: r.redirected,
                 phase: id === authId ? 'auth'
                     : r.seq >= postSeq ? 'post'
                         : 'pre'
@@ -840,12 +848,11 @@ export async function driveSession(cdp, { url, credentials, judge, quietMs }) {
         ?? firstRequest(r => r.seq >= fillSeq && sameOrigin(r) && r.method !== 'GET' && r.type === 'Document');
     // An SSO sign-in addresses this app and ends on the provider, so it is absent
     // from the same-origin log above and "no request to our own origin" would
-    // misname it. Document-only for the same reason the authId fallback is: a
-    // telemetry beacon the fill races that happens to end off-origin would otherwise
-    // name a bogus identity provider.
-    const offsiteSignIn = authId !== null ? null : (firstRequest(r => r.seq >= fillSeq
+    // misname it. The two windows are authId's, for the same reasons: anything the
+    // submit issued counts, and only a NAVIGATION counts back to the fill, where the
+    // background traffic it races would otherwise name a bogus identity provider.
+    const offsiteSignIn = authId !== null ? null : (firstRequest(r => (r.seq >= submitSeq || (r.seq >= fillSeq && r.type === 'Document'))
         && r.method !== 'GET'
-        && r.type === 'Document'
         && addressedOrigin(r)
         && !sameOrigin(r)
         && r.finalUrl.startsWith('http')));

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@mjasnikovs/pi-task",
-    "version": "0.40.39",
+    "version": "0.40.40",
     "description": "Deterministic task planning and spec-orchestration for local models — crash-safe /task pipelines with verify/enforce gates, a real-time remote web view, and web/docs/fetch/worker subagent tools.",
     "type": "module",
     "main": "./dist/index.js",