@wacando/agent 2.0.0-rc.1 → 2.0.1

package/docs/evidence/npm-release/check.txt

@@ -1,484 +0,0 @@
-$ npm ci && npm run check
-added 83 packages in 1s
-
-> @wacando/agent@2.0.0-rc.1 check
-> node scripts/check-deps.mjs && npm run check:notices && npm test
-
-Verified @wacando/contracts@0.1.0-rc.1, @wacando/omemo@0.1.0-rc.1, @wacando/xmpp@0.1.0-rc.1 from registry.npmjs.org
-
-> @wacando/agent@2.0.0-rc.1 check:notices
-> node scripts/notices.mjs --check
-
-Verified notices and provenance for 83 runtime packages
-
-> @wacando/agent@2.0.0-rc.1 test
-> node --test tests/*.test.mjs
-
-TAP version 13
-# Subtest: the ciphertext goes to the other agent and both owners, never to an unrelated party
-ok 1 - the ciphertext goes to the other agent and both owners, never to an unrelated party
-  ---
-  duration_ms: 1.173999
-  type: 'test'
-  ...
-# Subtest: a deleted side is not an encryption target and a stranger cannot view
-ok 2 - a deleted side is not an encryption target and a stranger cannot view
-  ---
-  duration_ms: 0.371402
-  type: 'test'
-  ...
-# Subtest: only an activated conversation counts as accepted, including after STOP
-ok 3 - only an activated conversation counts as accepted, including after STOP
-  ---
-  duration_ms: 0.12366
-  type: 'test'
-  ...
-# Subtest: the public summary never exposes owner identifiers
-ok 4 - the public summary never exposes owner identifiers
-  ---
-  duration_ms: 0.298442
-  type: 'test'
-  ...
-# Subtest: API refusals become explicit, content-free messages
-ok 5 - API refusals become explicit, content-free messages
-  ---
-  duration_ms: 0.224042
-  type: 'test'
-  ...
-# Subtest: recipient discovery returns both agents and every owner installation
-ok 6 - recipient discovery returns both agents and every owner installation
-  ---
-  duration_ms: 0.252712
-  type: 'test'
-  ...
-# Subtest: malformed or foreign recipient discovery fails closed
-ok 7 - malformed or foreign recipient discovery fails closed
-  ---
-  duration_ms: 0.256092
-  type: 'test'
-  ...
-# Subtest: discovery missing an owner or naming another agent fails closed
-ok 8 - discovery missing an owner or naming another agent fails closed
-  ---
-  duration_ms: 0.172772
-  type: 'test'
-  ...
-# Subtest: a server without recipient discovery is refused: never a usr_ fallback
-ok 9 - a server without recipient discovery is refused: never a usr_ fallback
-  ---
-  duration_ms: 0.735785
-  type: 'test'
-  ...
-# Subtest: cursor checker requires an affirmative parsed payload even when the wrapper says success
-ok 10 - cursor checker requires an affirmative parsed payload even when the wrapper says success
-  ---
-  duration_ms: 2.66747
-  type: 'test'
-  ...
-# Subtest: cursor checker distinguishes clear revocation from a crash, lock error or false connection
-ok 11 - cursor checker distinguishes clear revocation from a crash, lock error or false connection
-  ---
-  duration_ms: 1.685932
-  type: 'test'
-  ...
-# Subtest: codex checker requires an affirmative parsed payload even when the wrapper says success
-ok 12 - codex checker requires an affirmative parsed payload even when the wrapper says success
-  ---
-  duration_ms: 0.420463
-  type: 'test'
-  ...
-# Subtest: codex checker distinguishes clear revocation from a crash, lock error or false connection
-ok 13 - codex checker distinguishes clear revocation from a crash, lock error or false connection
-  ---
-  duration_ms: 0.433853
-  type: 'test'
-  ...
-# Subtest: checker requires verified:true for installation readiness
-ok 14 - checker requires verified:true for installation readiness
-  ---
-  duration_ms: 0.412933
-  type: 'test'
-  ...
-# Subtest: malformed viewer request targets return 400 without losing MCP events
-ok 15 - malformed viewer request targets return 400 without losing MCP events
-  ---
-  duration_ms: 217.77038
-  type: 'test'
-  ...
-# Subtest: MCP shutdown on EOF closes SSE and unfinished HTTP headers
-ok 16 - MCP shutdown on EOF closes SSE and unfinished HTTP headers
-  ---
-  duration_ms: 429.233753
-  type: 'test'
-  ...
-# Subtest: MCP shutdown on SIGTERM closes SSE and unfinished HTTP headers
-ok 17 - MCP shutdown on SIGTERM closes SSE and unfinished HTTP headers
-  ---
-  duration_ms: 431.321348
-  type: 'test'
-  ...
-# Subtest: HTTP and SSE snapshots use bounded pages and preserve large Unicode events
-ok 18 - HTTP and SSE snapshots use bounded pages and preserve large Unicode events
-  ---
-  duration_ms: 66.934418
-  type: 'test'
-  ...
-# Subtest: SSE client and queue limits isolate slow readers
-ok 19 - SSE client and queue limits isolate slow readers
-  ---
-  duration_ms: 12.820056
-  type: 'test'
-  ...
-# Subtest: legacy negotiation requires valid initialization and the initialized notification
-ok 20 - legacy negotiation requires valid initialization and the initialized notification
-  ---
-  duration_ms: 252.74951
-  type: 'test'
-  ...
-# Subtest: JSON-RPC rejects invalid IDs and parameters without answering responses or notifications
-ok 21 - JSON-RPC rejects invalid IDs and parameters without answering responses or notifications
-  ---
-  duration_ms: 167.829968
-  type: 'test'
-  ...
-# Subtest: tools enforce schemas, preserve Unicode limits, and never claim observed visibility
-ok 22 - tools enforce schemas, preserve Unicode limits, and never claim observed visibility
-  ---
-  duration_ms: 190.028004
-  type: 'test'
-  ...
-# Subtest: event pages obey encoded byte limits and traverse without losing filtered records
-ok 23 - event pages obey encoded byte limits and traverse without losing filtered records
-  ---
-  duration_ms: 12.928036
-  type: 'test'
-  ...
-# Subtest: retention is bounded by bytes as well as event count and reports eviction
-ok 24 - retention is bounded by bytes as well as event count and reports eviction
-  ---
-  duration_ms: 2.285627
-  type: 'test'
-  ...
-# Subtest: stdio framing handles split UTF-8, CRLF and escaped newlines with strict byte bounds
-ok 25 - stdio framing handles split UTF-8, CRLF and escaped newlines with strict byte bounds
-  ---
-  duration_ms: 2.63758
-  type: 'test'
-  ...
-# Subtest: an oversized unfinished frame closes the MCP process promptly
-ok 26 - an oversized unfinished frame closes the MCP process promptly
-  ---
-  duration_ms: 169.623102
-  type: 'test'
-  ...
-# Subtest: SIGTERM exits within a deadline even when the host stops reading stdout
-ok 27 - SIGTERM exits within a deadline even when the host stops reading stdout
-  ---
-  duration_ms: 1244.380796
-  type: 'test'
-  ...
-# Subtest: stdio writes wait for readers and reject stalled or oversized output
-ok 28 - stdio writes wait for readers and reject stalled or oversized output
-  ---
-  duration_ms: 1004.22848
-  type: 'test'
-  ...
-# Subtest: rate limiting admits bursts, rejects excess calls and refills over time
-ok 29 - rate limiting admits bursts, rejects excess calls and refills over time
-  ---
-  duration_ms: 0.317932
-  type: 'test'
-  ...
-# Subtest: MCP tool floods receive actionable rate-limit errors
-ok 30 - MCP tool floods receive actionable rate-limit errors
-  ---
-  duration_ms: 151.348726
-  type: 'test'
-  ...
-# Subtest: live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 31 - live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation # SKIP
-  ---
-  duration_ms: 0.947027
-  type: 'test'
-  ...
-# Subtest: live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 32 - live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation # SKIP
-  ---
-  duration_ms: 0.149681
-  type: 'test'
-  ...
-# Subtest: live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 33 - live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation # SKIP
-  ---
-  duration_ms: 0.126511
-  type: 'test'
-  ...
-# cursor: delayed shutdown released session lock; OMEMO snapshot unchanged
-# Subtest: cursor shutdown waits for session cleanup and releases its own lock without changing keys
-ok 34 - cursor shutdown waits for session cleanup and releases its own lock without changing keys
-  ---
-  duration_ms: 1382.831037
-  type: 'test'
-  ...
-# codex: delayed shutdown released session lock; OMEMO snapshot unchanged
-# Subtest: codex shutdown waits for session cleanup and releases its own lock without changing keys
-ok 35 - codex shutdown waits for session cleanup and releases its own lock without changing keys
-  ---
-  duration_ms: 1358.055951
-  type: 'test'
-  ...
-# Subtest: MCP shutdown finishes saving an in-flight verification response before exiting
-ok 36 - MCP shutdown finishes saving an in-flight verification response before exiting
-  ---
-  duration_ms: 1401.847208
-  type: 'test'
-  ...
-# Subtest: enrollment saves durable credential before XMPP, publishes before callback, and resumes without redemption
-ok 37 - enrollment saves durable credential before XMPP, publishes before callback, and resumes without redemption
-  ---
-  duration_ms: 139.736949
-  type: 'test'
-  ...
-# Subtest: origins, host identities and installations cannot be substituted
-ok 38 - origins, host identities and installations cannot be substituted
-  ---
-  duration_ms: 128.727867
-  type: 'test'
-  ...
-# Subtest: expiration, replay, wrong installation and revocation return safe actions
-ok 39 - expiration, replay, wrong installation and revocation return safe actions
-  ---
-  duration_ms: 82.315362
-  type: 'test'
-  ...
-# Subtest: background heartbeats preserve the stream and retry outages with bounded backoff and safe diagnostics
-ok 40 - background heartbeats preserve the stream and retry outages with bounded backoff and safe diagnostics
-  ---
-  duration_ms: 85.766479
-  type: 'test'
-  ...
-# Subtest: failed initial connection recovers in background without another redemption and close cancels retries
-ok 41 - failed initial connection recovers in background without another redemption and close cancels retries
-  ---
-  duration_ms: 72.277528
-  type: 'test'
-  ...
-# Subtest: failed XMPP ping closes only the broken stream and obtains a fresh grant on automatic retry
-ok 42 - failed XMPP ping closes only the broken stream and obtains a fresh grant on automatic retry
-  ---
-  duration_ms: 76.380908
-  type: 'test'
-  ...
-# Subtest: shutdown waits for a background grant request and prevents a new session after closing
-ok 43 - shutdown waits for a background grant request and prevents a new session after closing
-  ---
-  duration_ms: 59.947226
-  type: 'test'
-  ...
-# Subtest: failed OMEMO registration preserves credential, suppresses connected callback, and resumes
-ok 44 - failed OMEMO registration preserves credential, suppresses connected callback, and resumes
-  ---
-  duration_ms: 56.932743
-  type: 'test'
-  ...
-# Subtest: lost redemption and failed persistence never claim success
-ok 45 - lost redemption and failed persistence never claim success
-  ---
-  duration_ms: 20.965896
-  type: 'test'
-  ...
-# Subtest: unsafe permissions, symlinks and concurrent writes fail closed
-ok 46 - unsafe permissions, symlinks and concurrent writes fail closed
-  ---
-  duration_ms: 3.071003
-  type: 'test'
-  ...
-# Subtest: HTTP policy rejects non-loopback cleartext, URL credentials and redirects
-ok 47 - HTTP policy rejects non-loopback cleartext, URL credentials and redirects
-  ---
-  duration_ms: 18.170316
-  type: 'test'
-  ...
-# Subtest: existing native OMEMO identity survives reload; corrupt state is never regenerated
-ok 48 - existing native OMEMO identity survives reload; corrupt state is never regenerated
-  ---
-  duration_ms: 16.529123
-  type: 'test'
-  ...
-# Subtest: unsafe native OMEMO state permissions fail closed
-ok 49 - unsafe native OMEMO state permissions fail closed
-  ---
-  duration_ms: 5.080568
-  type: 'test'
-  ...
-# Subtest: a 1.x classic OMEMO identity is refused with re-enrollment guidance and left untouched
-ok 50 - a 1.x classic OMEMO identity is refused with re-enrollment guidance and left untouched
-  ---
-  duration_ms: 0.949147
-  type: 'test'
-  ...
-# Subtest: installed MCP tools verify via HTTP and never expose response credentials
-ok 51 - installed MCP tools verify via HTTP and never expose response credentials
-  ---
-  duration_ms: 191.170552
-  type: 'test'
-  ...
-# Subtest: cursor packaged MCP rejects a locally revoked identity without crashing or reporting connection
-ok 52 - cursor packaged MCP rejects a locally revoked identity without crashing or reporting connection
-  ---
-  duration_ms: 232.357188
-  type: 'test'
-  ...
-# Subtest: codex packaged MCP rejects a locally revoked identity without crashing or reporting connection
-ok 53 - codex packaged MCP rejects a locally revoked identity without crashing or reporting connection
-  ---
-  duration_ms: 203.10116
-  type: 'test'
-  ...
-# Subtest: a replaced session is terminal and never logs back in (the stream error arrives first)
-ok 54 - a replaced session is terminal and never logs back in (the stream error arrives first)
-  ---
-  duration_ms: 35.894257
-  type: 'test'
-  ...
-# Subtest: a replaced session is terminal and never logs back in (only the heartbeat notices it)
-ok 55 - a replaced session is terminal and never logs back in (only the heartbeat notices it)
-  ---
-  duration_ms: 120.929849
-  type: 'test'
-  ...
-# Subtest: release version matches all manifests
-ok 56 - release version matches all manifests
-  ---
-  duration_ms: 11.585486
-  type: 'test'
-  ...
-# Subtest: npm tarball installs globally with official libsignal from the public registry and its thin plugins start it
-ok 57 - npm tarball installs globally with official libsignal from the public registry and its thin plugins start it
-  ---
-  duration_ms: 2902.622201
-  type: 'test'
-  ...
-# Subtest: redeem and claim proofs match the API interoperability vectors byte for byte
-ok 58 - redeem and claim proofs match the API interoperability vectors byte for byte
-  ---
-  duration_ms: 2.196706
-  type: 'test'
-  ...
-# Subtest: runtime metadata is bounded display text without control characters
-ok 59 - runtime metadata is bounded display text without control characters
-  ---
-  duration_ms: 0.304213
-  type: 'test'
-  ...
-# Subtest: redeem refuses malformed codes before any request and persists the key before redeeming
-ok 60 - redeem refuses malformed codes before any request and persists the key before redeeming
-  ---
-  duration_ms: 2.222036
-  type: 'test'
-  ...
-# Subtest: claim polls every 5 s while pending, honours Retry-After, and ends at the local deadline
-ok 61 - claim polls every 5 s while pending, honours Retry-After, and ends at the local deadline
-  ---
-  duration_ms: 1.643492
-  type: 'test'
-  ...
-# Subtest: a confirmed pairing saves the credential locally and returns no secret
-ok 62 - a confirmed pairing saves the credential locally and returns no secret
-  ---
-  duration_ms: 251.226909
-  type: 'test'
-  ...
-# Subtest: a refused code or an unconfirmed pairing leaves no partial identity
-ok 63 - a refused code or an unconfirmed pairing leaves no partial identity
-  ---
-  duration_ms: 126.287599
-  type: 'test'
-  ...
-# Subtest: a pairing interrupted after redeem resumes with the same key and poll secret
-ok 64 - a pairing interrupted after redeem resumes with the same key and poll secret
-  ---
-  duration_ms: 95.829603
-  type: 'test'
-  ...
-# Subtest: codex plugin is a thin wrapper that starts this runtime and records its own provider
-ok 65 - codex plugin is a thin wrapper that starts this runtime and records its own provider
-  ---
-  duration_ms: 309.209571
-  type: 'test'
-  ...
-# Subtest: cursor plugin is a thin wrapper that starts this runtime and records its own provider
-ok 66 - cursor plugin is a thin wrapper that starts this runtime and records its own provider
-  ---
-  duration_ms: 215.515653
-  type: 'test'
-  ...
-# Subtest: claude plugin is a thin wrapper that starts this runtime and records its own provider
-ok 67 - claude plugin is a thin wrapper that starts this runtime and records its own provider
-  ---
-  duration_ms: 201.853091
-  type: 'test'
-  ...
-# Subtest: Claude, Cursor and Codex MCP processes have independent stores and ports
-ok 68 - Claude, Cursor and Codex MCP processes have independent stores and ports
-  ---
-  duration_ms: 195.504554
-  type: 'test'
-  ...
-# Subtest: installer refuses to overwrite an existing installation
-ok 69 - installer refuses to overwrite an existing installation
-  ---
-  duration_ms: 66.053371
-  type: 'test'
-  ...
-# Subtest: store validates messages, orders events and bounds retention
-ok 70 - store validates messages, orders events and bounds retention
-  ---
-  duration_ms: 2.850421
-  type: 'test'
-  ...
-# Subtest: loopback viewer serves assets and blocks cross-origin writes and traversal
-ok 71 - loopback viewer serves assets and blocks cross-origin writes and traversal
-  ---
-  duration_ms: 59.033969
-  type: 'test'
-  ...
-# Subtest: SSE delivers snapshot and live message, reconnect recovers snapshot
-ok 72 - SSE delivers snapshot and live message, reconnect recovers snapshot
-  ---
-  duration_ms: 278.556352
-  type: 'test'
-  ...
-# Subtest: MCP starts HTTP, records events and shuts down on stdin EOF
-ok 73 - MCP starts HTTP, records events and shuts down on stdin EOF
-  ---
-  duration_ms: 189.288098
-  type: 'test'
-  ...
-# Subtest: late history pages cannot duplicate live events, resurrect evictions or replace a new connection
-ok 74 - late history pages cannot duplicate live events, resurrect evictions or replace a new connection
-  ---
-  duration_ms: 1.616462
-  type: 'test'
-  ...
-# Subtest: history loading pins the snapshot sequence, follows cursors and respects cancellation
-ok 75 - history loading pins the snapshot sequence, follows cursors and respects cancellation
-  ---
-  duration_ms: 1.163188
-  type: 'test'
-  ...
-# Subtest: rate-limited history loading resumes from the same page instead of restarting the stream
-ok 76 - rate-limited history loading resumes from the same page instead of restarting the stream
-  ---
-  duration_ms: 1000.643564
-  type: 'test'
-  ...
-1..76
-# tests 76
-# suites 0
-# pass 73
-# fail 0
-# cancelled 0
-# skipped 3
-# todo 0
-# duration_ms 4406.76778

package/docs/evidence/npm-release/e2e-desktop-observer.txt

@@ -1,28 +0,0 @@
-# runtime on @wacando/*@0.1.0-rc.1 from registry.npmjs.org; stack: lbframe/wacando #108 + #109 (278968b)
-$ tsx scripts/e2e-desktop-observer.mts
-PASS 01 two owners signed up (58953cde-b5e7-4982-a05c-a48913ced2a3, 14c15e89-c0b4-483e-a941-157012c2e5f4)
-PASS 02 CLI `wacando-agent pair` -> @e2eaa8971de230/bot (service), owner confirmed after checking the key fingerprint
-PASS 03 MCP tool `wacando_pair` -> @e2ebc3a6b1fb79/codex (human), resumed by a second call without code
-PASS 04 contact invitation accepted by the recipient owner
-PASS 05 both runtimes connected (grant, native OMEMO device, presence echo) via the SDK
-PASS 06 propose -> request cnv_bf109131-b003-4096-b34b-1642605459aa created; first message refused fail-closed (owners' desktop devices not published yet)
-PASS 07 recipient agent sees nothing of the request before acceptance (list empty, read/send refused)
-PASS 08 both owners' desktop ObserverHubs enrolled per-installation devices (dev_0cf38dbae62d8464b768ce3453f3a236, dev_aa426e425bce03e72d654cfb2026f639), published official-libsignal bundles, were activated and observe the room
-PASS 09 first message held by the policy component (stanza om-30fe2993c62d0390), status visible to the agent
-PASS 10 requester owner approved the exact held ciphertext (locally recomputed digest) -> relayed
-PASS 11 recipient owner saw the request in the consent inbox and accepted it via the API
-PASS 12 recipient agent (human mode, room member) decrypted the approved first message from the archive
-PASS 13 human-mode reply sent without approval; service agent decrypted it from a policy delivery
-PASS 14 service-mode message held until its owner approved it, then delivered and decrypted
-PASS 15 alice's desktop ObserverHub (official libsignal) decrypted all 3 messages (3 entries)
-PASS 16 bob's desktop ObserverHub (official libsignal) decrypted all 3 messages (3 entries)
-PASS 17 owner A added a second desktop (dev_2be2c26e2a2de3d3de3dc634fe4a9852): the runtime discovered it before sending and both desktops decrypted the message
-PASS 18 owner A revoked that desktop: the next message carries no key for dev_2be2c26e2a2de3d3de3dc634fe4a9852, the remaining desktop still decrypts it
-PASS 19 after STOP by an owner both agents are refused explicitly; nothing is sent
-canary-scan: dumping mnesia via /home/ejabberd/bin/ejabberdctl
-canary-scan: scanning dump + logs + spool for canary
-canary-scan: total occurrences of canary: 0
-canary-scan: PASS — plaintext absent from server-side storage
-PASS 20 plaintext canary absent from ejabberd storage (MAM, offline, pubsub, logs), API/policy logs and runtime output
-E2E RESULT: PASS
-exit=0