@wacando/agent 2.0.0-rc.1 → 2.0.2

package/docs/evidence/issue-8/check.txt

@@ -1,465 +0,0 @@
-$ npm run check
-
-> wacando-agent@2.0.0 check
-> node scripts/check-deps.mjs && npm run check:notices && npm test
-
-Verified 3 pinned Wacando archives from https://github.com/lbframe/wacando @ 5f0f0a1f0ccc20c47383fed6f8e072aca5302486
-
-> wacando-agent@2.0.0 check:notices
-> node scripts/notices.mjs --check
-
-Verified notices and provenance for 83 runtime packages
-
-> wacando-agent@2.0.0 test
-> node --test tests/*.test.mjs
-
-TAP version 13
-# Subtest: the ciphertext goes to the other agent and both owners, never to an unrelated party
-ok 1 - the ciphertext goes to the other agent and both owners, never to an unrelated party
-  ---
-  duration_ms: 1.136318
-  type: 'test'
-  ...
-# Subtest: a deleted side is not an encryption target and a stranger cannot view
-ok 2 - a deleted side is not an encryption target and a stranger cannot view
-  ---
-  duration_ms: 0.380513
-  type: 'test'
-  ...
-# Subtest: only an activated conversation counts as accepted, including after STOP
-ok 3 - only an activated conversation counts as accepted, including after STOP
-  ---
-  duration_ms: 0.173921
-  type: 'test'
-  ...
-# Subtest: the public summary never exposes owner identifiers
-ok 4 - the public summary never exposes owner identifiers
-  ---
-  duration_ms: 0.264772
-  type: 'test'
-  ...
-# Subtest: API refusals become explicit, content-free messages
-ok 5 - API refusals become explicit, content-free messages
-  ---
-  duration_ms: 0.239232
-  type: 'test'
-  ...
-# Subtest: recipient discovery returns both agents and every owner installation
-ok 6 - recipient discovery returns both agents and every owner installation
-  ---
-  duration_ms: 0.228682
-  type: 'test'
-  ...
-# Subtest: malformed or foreign recipient discovery fails closed
-ok 7 - malformed or foreign recipient discovery fails closed
-  ---
-  duration_ms: 0.269012
-  type: 'test'
-  ...
-# Subtest: cursor checker requires an affirmative parsed payload even when the wrapper says success
-ok 8 - cursor checker requires an affirmative parsed payload even when the wrapper says success
-  ---
-  duration_ms: 3.107283
-  type: 'test'
-  ...
-# Subtest: cursor checker distinguishes clear revocation from a crash, lock error or false connection
-ok 9 - cursor checker distinguishes clear revocation from a crash, lock error or false connection
-  ---
-  duration_ms: 1.587432
-  type: 'test'
-  ...
-# Subtest: codex checker requires an affirmative parsed payload even when the wrapper says success
-ok 10 - codex checker requires an affirmative parsed payload even when the wrapper says success
-  ---
-  duration_ms: 0.452933
-  type: 'test'
-  ...
-# Subtest: codex checker distinguishes clear revocation from a crash, lock error or false connection
-ok 11 - codex checker distinguishes clear revocation from a crash, lock error or false connection
-  ---
-  duration_ms: 0.371953
-  type: 'test'
-  ...
-# Subtest: checker requires verified:true for installation readiness
-ok 12 - checker requires verified:true for installation readiness
-  ---
-  duration_ms: 0.422983
-  type: 'test'
-  ...
-# Subtest: malformed viewer request targets return 400 without losing MCP events
-ok 13 - malformed viewer request targets return 400 without losing MCP events
-  ---
-  duration_ms: 244.735896
-  type: 'test'
-  ...
-# Subtest: MCP shutdown on EOF closes SSE and unfinished HTTP headers
-ok 14 - MCP shutdown on EOF closes SSE and unfinished HTTP headers
-  ---
-  duration_ms: 453.17005
-  type: 'test'
-  ...
-# Subtest: MCP shutdown on SIGTERM closes SSE and unfinished HTTP headers
-ok 15 - MCP shutdown on SIGTERM closes SSE and unfinished HTTP headers
-  ---
-  duration_ms: 397.135599
-  type: 'test'
-  ...
-# Subtest: HTTP and SSE snapshots use bounded pages and preserve large Unicode events
-ok 16 - HTTP and SSE snapshots use bounded pages and preserve large Unicode events
-  ---
-  duration_ms: 62.279017
-  type: 'test'
-  ...
-# Subtest: SSE client and queue limits isolate slow readers
-ok 17 - SSE client and queue limits isolate slow readers
-  ---
-  duration_ms: 12.629645
-  type: 'test'
-  ...
-# Subtest: legacy negotiation requires valid initialization and the initialized notification
-ok 18 - legacy negotiation requires valid initialization and the initialized notification
-  ---
-  duration_ms: 235.436646
-  type: 'test'
-  ...
-# Subtest: JSON-RPC rejects invalid IDs and parameters without answering responses or notifications
-ok 19 - JSON-RPC rejects invalid IDs and parameters without answering responses or notifications
-  ---
-  duration_ms: 162.277287
-  type: 'test'
-  ...
-# Subtest: tools enforce schemas, preserve Unicode limits, and never claim observed visibility
-ok 20 - tools enforce schemas, preserve Unicode limits, and never claim observed visibility
-  ---
-  duration_ms: 163.832959
-  type: 'test'
-  ...
-# Subtest: event pages obey encoded byte limits and traverse without losing filtered records
-ok 21 - event pages obey encoded byte limits and traverse without losing filtered records
-  ---
-  duration_ms: 11.876959
-  type: 'test'
-  ...
-# Subtest: retention is bounded by bytes as well as event count and reports eviction
-ok 22 - retention is bounded by bytes as well as event count and reports eviction
-  ---
-  duration_ms: 1.823443
-  type: 'test'
-  ...
-# Subtest: stdio framing handles split UTF-8, CRLF and escaped newlines with strict byte bounds
-ok 23 - stdio framing handles split UTF-8, CRLF and escaped newlines with strict byte bounds
-  ---
-  duration_ms: 2.59395
-  type: 'test'
-  ...
-# Subtest: an oversized unfinished frame closes the MCP process promptly
-ok 24 - an oversized unfinished frame closes the MCP process promptly
-  ---
-  duration_ms: 151.433036
-  type: 'test'
-  ...
-# Subtest: SIGTERM exits within a deadline even when the host stops reading stdout
-ok 25 - SIGTERM exits within a deadline even when the host stops reading stdout
-  ---
-  duration_ms: 1210.075638
-  type: 'test'
-  ...
-# Subtest: stdio writes wait for readers and reject stalled or oversized output
-ok 26 - stdio writes wait for readers and reject stalled or oversized output
-  ---
-  duration_ms: 1004.345495
-  type: 'test'
-  ...
-# Subtest: rate limiting admits bursts, rejects excess calls and refills over time
-ok 27 - rate limiting admits bursts, rejects excess calls and refills over time
-  ---
-  duration_ms: 0.310063
-  type: 'test'
-  ...
-# Subtest: MCP tool floods receive actionable rate-limit errors
-ok 28 - MCP tool floods receive actionable rate-limit errors
-  ---
-  duration_ms: 164.126661
-  type: 'test'
-  ...
-# Subtest: live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 29 - live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation # SKIP
-  ---
-  duration_ms: 0.681806
-  type: 'test'
-  ...
-# Subtest: live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 30 - live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation # SKIP
-  ---
-  duration_ms: 0.10272
-  type: 'test'
-  ...
-# Subtest: live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 31 - live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation # SKIP
-  ---
-  duration_ms: 0.094751
-  type: 'test'
-  ...
-# cursor: delayed shutdown released session lock; OMEMO snapshot unchanged
-# Subtest: cursor shutdown waits for session cleanup and releases its own lock without changing keys
-ok 32 - cursor shutdown waits for session cleanup and releases its own lock without changing keys
-  ---
-  duration_ms: 1418.405871
-  type: 'test'
-  ...
-# codex: delayed shutdown released session lock; OMEMO snapshot unchanged
-# Subtest: codex shutdown waits for session cleanup and releases its own lock without changing keys
-ok 33 - codex shutdown waits for session cleanup and releases its own lock without changing keys
-  ---
-  duration_ms: 1348.202894
-  type: 'test'
-  ...
-# Subtest: MCP shutdown finishes saving an in-flight verification response before exiting
-ok 34 - MCP shutdown finishes saving an in-flight verification response before exiting
-  ---
-  duration_ms: 1400.553927
-  type: 'test'
-  ...
-# Subtest: enrollment saves durable credential before XMPP, publishes before callback, and resumes without redemption
-ok 35 - enrollment saves durable credential before XMPP, publishes before callback, and resumes without redemption
-  ---
-  duration_ms: 112.152342
-  type: 'test'
-  ...
-# Subtest: origins, host identities and installations cannot be substituted
-ok 36 - origins, host identities and installations cannot be substituted
-  ---
-  duration_ms: 43.608147
-  type: 'test'
-  ...
-# Subtest: expiration, replay, wrong installation and revocation return safe actions
-ok 37 - expiration, replay, wrong installation and revocation return safe actions
-  ---
-  duration_ms: 151.621228
-  type: 'test'
-  ...
-# Subtest: background heartbeats preserve the stream and retry outages with bounded backoff and safe diagnostics
-ok 38 - background heartbeats preserve the stream and retry outages with bounded backoff and safe diagnostics
-  ---
-  duration_ms: 164.378704
-  type: 'test'
-  ...
-# Subtest: failed initial connection recovers in background without another redemption and close cancels retries
-ok 39 - failed initial connection recovers in background without another redemption and close cancels retries
-  ---
-  duration_ms: 299.179305
-  type: 'test'
-  ...
-# Subtest: failed XMPP ping closes only the broken stream and obtains a fresh grant on automatic retry
-ok 40 - failed XMPP ping closes only the broken stream and obtains a fresh grant on automatic retry
-  ---
-  duration_ms: 99.331076
-  type: 'test'
-  ...
-# Subtest: shutdown waits for a background grant request and prevents a new session after closing
-ok 41 - shutdown waits for a background grant request and prevents a new session after closing
-  ---
-  duration_ms: 128.487294
-  type: 'test'
-  ...
-# Subtest: failed OMEMO registration preserves credential, suppresses connected callback, and resumes
-ok 42 - failed OMEMO registration preserves credential, suppresses connected callback, and resumes
-  ---
-  duration_ms: 156.627335
-  type: 'test'
-  ...
-# Subtest: lost redemption and failed persistence never claim success
-ok 43 - lost redemption and failed persistence never claim success
-  ---
-  duration_ms: 31.813949
-  type: 'test'
-  ...
-# Subtest: unsafe permissions, symlinks and concurrent writes fail closed
-ok 44 - unsafe permissions, symlinks and concurrent writes fail closed
-  ---
-  duration_ms: 2.212376
-  type: 'test'
-  ...
-# Subtest: HTTP policy rejects non-loopback cleartext, URL credentials and redirects
-ok 45 - HTTP policy rejects non-loopback cleartext, URL credentials and redirects
-  ---
-  duration_ms: 15.866179
-  type: 'test'
-  ...
-# Subtest: existing native OMEMO identity survives reload; corrupt state is never regenerated
-ok 46 - existing native OMEMO identity survives reload; corrupt state is never regenerated
-  ---
-  duration_ms: 34.571539
-  type: 'test'
-  ...
-# Subtest: unsafe native OMEMO state permissions fail closed
-ok 47 - unsafe native OMEMO state permissions fail closed
-  ---
-  duration_ms: 5.659882
-  type: 'test'
-  ...
-# Subtest: a 1.x classic OMEMO identity is refused with re-enrollment guidance and left untouched
-ok 48 - a 1.x classic OMEMO identity is refused with re-enrollment guidance and left untouched
-  ---
-  duration_ms: 0.932707
-  type: 'test'
-  ...
-# Subtest: installed MCP tools verify via HTTP and never expose response credentials
-ok 49 - installed MCP tools verify via HTTP and never expose response credentials
-  ---
-  duration_ms: 239.339785
-  type: 'test'
-  ...
-# Subtest: cursor packaged MCP rejects a locally revoked identity without crashing or reporting connection
-ok 50 - cursor packaged MCP rejects a locally revoked identity without crashing or reporting connection
-  ---
-  duration_ms: 211.265405
-  type: 'test'
-  ...
-# Subtest: codex packaged MCP rejects a locally revoked identity without crashing or reporting connection
-ok 51 - codex packaged MCP rejects a locally revoked identity without crashing or reporting connection
-  ---
-  duration_ms: 246.65472
-  type: 'test'
-  ...
-# Subtest: a session replaced by a newer login elsewhere is never reconnected automatically
-ok 52 - a session replaced by a newer login elsewhere is never reconnected automatically
-  ---
-  duration_ms: 61.40213
-  type: 'test'
-  ...
-# Subtest: release version matches all manifests
-ok 53 - release version matches all manifests
-  ---
-  duration_ms: 8.270462
-  type: 'test'
-  ...
-# Subtest: npm tarball installs the runtime with official libsignal and its thin plugins start it
-ok 54 - npm tarball installs the runtime with official libsignal and its thin plugins start it
-  ---
-  duration_ms: 3028.215999
-  type: 'test'
-  ...
-# Subtest: redeem and claim proofs match the API interoperability vectors byte for byte
-ok 55 - redeem and claim proofs match the API interoperability vectors byte for byte
-  ---
-  duration_ms: 2.315388
-  type: 'test'
-  ...
-# Subtest: runtime metadata is bounded display text without control characters
-ok 56 - runtime metadata is bounded display text without control characters
-  ---
-  duration_ms: 0.326473
-  type: 'test'
-  ...
-# Subtest: redeem refuses malformed codes before any request and persists the key before redeeming
-ok 57 - redeem refuses malformed codes before any request and persists the key before redeeming
-  ---
-  duration_ms: 2.742371
-  type: 'test'
-  ...
-# Subtest: claim polls every 5 s while pending, honours Retry-After, and ends at the local deadline
-ok 58 - claim polls every 5 s while pending, honours Retry-After, and ends at the local deadline
-  ---
-  duration_ms: 2.207037
-  type: 'test'
-  ...
-# Subtest: a confirmed pairing saves the credential locally and returns no secret
-ok 59 - a confirmed pairing saves the credential locally and returns no secret
-  ---
-  duration_ms: 129.909655
-  type: 'test'
-  ...
-# Subtest: a refused code or an unconfirmed pairing leaves no partial identity
-ok 60 - a refused code or an unconfirmed pairing leaves no partial identity
-  ---
-  duration_ms: 168.624755
-  type: 'test'
-  ...
-# Subtest: a pairing interrupted after redeem resumes with the same key and poll secret
-ok 61 - a pairing interrupted after redeem resumes with the same key and poll secret
-  ---
-  duration_ms: 166.251487
-  type: 'test'
-  ...
-# Subtest: codex plugin is a thin wrapper that starts this runtime and records its own provider
-ok 62 - codex plugin is a thin wrapper that starts this runtime and records its own provider
-  ---
-  duration_ms: 300.733626
-  type: 'test'
-  ...
-# Subtest: cursor plugin is a thin wrapper that starts this runtime and records its own provider
-ok 63 - cursor plugin is a thin wrapper that starts this runtime and records its own provider
-  ---
-  duration_ms: 211.864679
-  type: 'test'
-  ...
-# Subtest: claude plugin is a thin wrapper that starts this runtime and records its own provider
-ok 64 - claude plugin is a thin wrapper that starts this runtime and records its own provider
-  ---
-  duration_ms: 246.100826
-  type: 'test'
-  ...
-# Subtest: Claude, Cursor and Codex MCP processes have independent stores and ports
-ok 65 - Claude, Cursor and Codex MCP processes have independent stores and ports
-  ---
-  duration_ms: 185.838794
-  type: 'test'
-  ...
-# Subtest: installer refuses to overwrite an existing installation
-ok 66 - installer refuses to overwrite an existing installation
-  ---
-  duration_ms: 63.97227
-  type: 'test'
-  ...
-# Subtest: store validates messages, orders events and bounds retention
-ok 67 - store validates messages, orders events and bounds retention
-  ---
-  duration_ms: 2.471668
-  type: 'test'
-  ...
-# Subtest: loopback viewer serves assets and blocks cross-origin writes and traversal
-ok 68 - loopback viewer serves assets and blocks cross-origin writes and traversal
-  ---
-  duration_ms: 54.258087
-  type: 'test'
-  ...
-# Subtest: SSE delivers snapshot and live message, reconnect recovers snapshot
-ok 69 - SSE delivers snapshot and live message, reconnect recovers snapshot
-  ---
-  duration_ms: 263.314726
-  type: 'test'
-  ...
-# Subtest: MCP starts HTTP, records events and shuts down on stdin EOF
-ok 70 - MCP starts HTTP, records events and shuts down on stdin EOF
-  ---
-  duration_ms: 185.760904
-  type: 'test'
-  ...
-# Subtest: late history pages cannot duplicate live events, resurrect evictions or replace a new connection
-ok 71 - late history pages cannot duplicate live events, resurrect evictions or replace a new connection
-  ---
-  duration_ms: 1.648573
-  type: 'test'
-  ...
-# Subtest: history loading pins the snapshot sequence, follows cursors and respects cancellation
-ok 72 - history loading pins the snapshot sequence, follows cursors and respects cancellation
-  ---
-  duration_ms: 1.172069
-  type: 'test'
-  ...
-# Subtest: rate-limited history loading resumes from the same page instead of restarting the stream
-ok 73 - rate-limited history loading resumes from the same page instead of restarting the stream
-  ---
-  duration_ms: 1002.250669
-  type: 'test'
-  ...
-1..73
-# tests 73
-# suites 0
-# pass 70
-# fail 0
-# cancelled 0
-# skipped 3
-# todo 0
-# duration_ms 4379.160963

package/docs/evidence/issue-8/e2e-desktop-observer-human-devices.txt

@@ -1,30 +0,0 @@
-$ # stack: lbframe/wacando main f21f742 (incl. #105, #106 one session per agent) + PR #108 head f74e5e7 merged locally + PR #109; ejabberd reconfigured from that tree's infra/ejabberd/ci-up.sh; fresh DB wacando_agentside_int
-21eb297 Merge remote-tracking branch 'origin/fix/39-desktop-relay-attribution' into HEAD
-81ed6c9 local integration: main + #108
-f21f742 Merge pull request #106 from lbframe/feat/15-native-presence
-f74e5e7 fix(desktop): attribute policy relays in the observer (#39)
-$ WACANDO_CHECKOUT=<work>/wacando-int ... tsx scripts/e2e-desktop-observer.mts
-PASS 01 two owners signed up (5ce148a1-59b7-44c5-aad7-627763ac9c47, aed01f77-96d9-4898-ae01-a9612bc260c7)
-PASS 02 CLI `wacando-agent pair` -> @e2ea05d175d12c/bot (service), owner confirmed after checking the key fingerprint
-PASS 03 MCP tool `wacando_pair` -> @e2eb80bf6b6df6/codex (human), resumed by a second call without code
-PASS 04 contact invitation accepted by the recipient owner
-PASS 05 both runtimes connected (grant, native OMEMO device, presence echo) via the SDK
-PASS 06 propose -> request cnv_1c43d27b-d0ef-43db-8a40-5f290c4d69ce created; first message refused fail-closed (owners' desktop devices not published yet)
-PASS 07 recipient agent sees nothing of the request before acceptance (list empty, read/send refused)
-PASS 08 both owners' desktop ObserverHubs enrolled per-installation devices (dev_f155edc2bab924646b1d7720c0289504, dev_dcc50d451ef07f7cdf411723a950f55c), published official-libsignal bundles, were activated and observe the room
-PASS 09 first message held by the policy component (stanza om-ff20570e4c6a34e7), status visible to the agent
-PASS 10 requester owner approved the exact held ciphertext (locally recomputed digest) -> relayed
-PASS 11 recipient owner saw the request in the consent inbox and accepted it via the API
-PASS 12 recipient agent (human mode, room member) decrypted the approved first message from the archive
-PASS 13 human-mode reply sent without approval; service agent decrypted it from a policy delivery
-PASS 14 service-mode message held until its owner approved it, then delivered and decrypted
-PASS 15 alice's desktop ObserverHub (official libsignal) decrypted all 3 messages (3 entries)
-PASS 16 bob's desktop ObserverHub (official libsignal) decrypted all 3 messages (3 entries)
-PASS 17 after STOP by an owner both agents are refused explicitly; nothing is sent
-canary-scan: dumping mnesia via /home/ejabberd/bin/ejabberdctl
-canary-scan: scanning dump + logs + spool for canary
-canary-scan: total occurrences of canary: 0
-canary-scan: PASS — plaintext absent from server-side storage
-PASS 18 plaintext canary absent from ejabberd storage (MAM, offline, pubsub, logs), API/policy logs and runtime output
-E2E RESULT: PASS
-exit=0

package/docs/evidence/issue-8/e2e-desktop-observer-main-without-109.txt

@@ -1,17 +0,0 @@
-$ WACANDO_CHECKOUT=<work>/wacando-main (main 50b9d26, desktop WITHOUT lbframe/wacando#109) ... tsx scripts/e2e-desktop-observer.mts
-PASS 01 two owners signed up (656f8a56-c419-40ff-8b92-f6fa606202a7, 64156b8c-73e8-457a-809a-613193ff5f21)
-PASS 02 CLI `wacando-agent pair` -> @e2ea659065e8fe/bot (service), owner confirmed after checking the key fingerprint
-PASS 03 MCP tool `wacando_pair` -> @e2ebd58690e393/codex (human), resumed by a second call without code
-PASS 04 contact invitation accepted by the recipient owner
-PASS 05 both runtimes connected (grant, native OMEMO device, presence echo) via the SDK
-PASS 06 propose -> request cnv_da62e01b-7cbe-459c-8880-4d2793b08a84 created; first message refused fail-closed (owners' desktop devices not published yet)
-PASS 07 recipient agent sees nothing of the request before acceptance (list empty, read/send refused)
-PASS 08 both owners' desktop ObserverHubs published official-libsignal devices and observe the room
-PASS 09 first message held by the policy component (stanza om-e7c23aaa70b855bd), status visible to the agent
-PASS 10 requester owner approved the exact held ciphertext (locally recomputed digest) -> relayed
-PASS 11 recipient owner saw the request in the consent inbox and accepted it via the API
-PASS 12 recipient agent (human mode, room member) decrypted the approved first message from the archive
-PASS 13 human-mode reply sent without approval; service agent decrypted it from a policy delivery
-PASS 14 service-mode message held until its owner approved it, then delivered and decrypted
-DIAG alice: status=observing entries=3 undecryptable=2 first=false reply=true second=false
-Error: timeout: alice's desktop decrypts the 3 messages

package/docs/evidence/issue-8/e2e-desktop-observer.txt

@@ -1,26 +0,0 @@
-$ (wacando-relay = lbframe/wacando#109 head f74e5e7; API+policy = main 50b9d26)
-$ WACANDO_CHECKOUT=<work>/wacando-relay WACANDO_LIVE_TEST_ORIGIN=http://localhost:43001 WACANDO_XMPP_SERVICE=ws://localhost:45280/ws EJABBERD_CONTAINER=wacando-agentside-ejabberd WACANDO_SERVER_LOGS=<work>/api.log:<work>/policy.log tsx scripts/e2e-desktop-observer.mts
-PASS 01 two owners signed up (a2174112-2ac1-4498-b78b-52aa3ff289d7, dc6851ba-10eb-45f6-8fd6-07d4c94fc0cd)
-PASS 02 CLI `wacando-agent pair` -> @e2ea43673623f5/bot (service), owner confirmed after checking the key fingerprint
-PASS 03 MCP tool `wacando_pair` -> @e2ebc8f13ad47a/codex (human), resumed by a second call without code
-PASS 04 contact invitation accepted by the recipient owner
-PASS 05 both runtimes connected (grant, native OMEMO device, presence echo) via the SDK
-PASS 06 propose -> request cnv_99bd97cc-5fbf-4fc4-a299-ef9ca023cd73 created; first message refused fail-closed (owners' desktop devices not published yet)
-PASS 07 recipient agent sees nothing of the request before acceptance (list empty, read/send refused)
-PASS 08 both owners' desktop ObserverHubs published official-libsignal devices and observe the room
-PASS 09 first message held by the policy component (stanza om-8e76cd6fd1c71e55), status visible to the agent
-PASS 10 requester owner approved the exact held ciphertext (locally recomputed digest) -> relayed
-PASS 11 recipient owner saw the request in the consent inbox and accepted it via the API
-PASS 12 recipient agent (human mode, room member) decrypted the approved first message from the archive
-PASS 13 human-mode reply sent without approval; service agent decrypted it from a policy delivery
-PASS 14 service-mode message held until its owner approved it, then delivered and decrypted
-PASS 15 alice's desktop ObserverHub (official libsignal) decrypted all 3 messages (3 entries)
-PASS 16 bob's desktop ObserverHub (official libsignal) decrypted all 3 messages (3 entries)
-PASS 17 after STOP by an owner both agents are refused explicitly; nothing is sent
-canary-scan: dumping mnesia via /home/ejabberd/bin/ejabberdctl
-canary-scan: scanning dump + logs + spool for canary
-canary-scan: total occurrences of canary: 0
-canary-scan: PASS — plaintext absent from server-side storage
-PASS 18 plaintext canary absent from ejabberd storage (MAM, offline, pubsub, logs), API/policy logs and runtime output
-E2E RESULT: PASS
-exit=0

package/docs/evidence/issue-8/live-regression-human-devices.txt

@@ -1,24 +0,0 @@
-# stack: main f21f742 + #108 + #109 (see e2e-desktop-observer-human-devices.txt)
-$ WACANDO_LIVE_TEST_ORIGIN=http://localhost:43001 node --test tests/onboarding-live.test.mjs
-# Subtest: live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 1 - live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-# Subtest: live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 2 - live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-# Subtest: live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 3 - live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-# tests 3
-# suites 0
-# pass 3
-# fail 0
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 7445.725894
-$ WACANDO_LIVE_TEST_ORIGIN=http://localhost:43001 node scripts/check-daemon-live.mjs
-enrolled @daemon_72904bf9221a/bot for host "cli" (synthetic owner)
-status: [{"agentId":"agt_ccb280ca-9d76-426c-834c-43ad17b677cc","handle":"@daemon_72904bf9221a/bot","origin":"http://localhost:43001","mode":"human","revoked":false,"connection":"disconnected"}]
-daemon: connected (grant, native OMEMO publication, presence echo, API callback) and running
-second daemon on the same identity: refused by the identity lock
-daemon: SIGTERM -> clean exit 0, lock released
-daemon restarted on the same saved identity and keys: connected again
-exit=0

package/docs/evidence/issue-8/live-regression.txt

@@ -1,23 +0,0 @@
-$ WACANDO_LIVE_TEST_ORIGIN=http://localhost:43001 node --test tests/onboarding-live.test.mjs
-# Subtest: live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 1 - live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-# Subtest: live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 2 - live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-# Subtest: live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 3 - live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-# tests 3
-# suites 0
-# pass 3
-# fail 0
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 4407.393019
-$ WACANDO_LIVE_TEST_ORIGIN=http://localhost:43001 node scripts/check-daemon-live.mjs
-enrolled @daemon_097025fda819/bot for host "cli" (synthetic owner)
-status: [{"agentId":"agt_2497bb54-3c93-42e7-88a2-3d594bb9ce18","handle":"@daemon_097025fda819/bot","origin":"http://localhost:43001","mode":"human","revoked":false,"connection":"disconnected"}]
-daemon: connected (grant, native OMEMO publication, presence echo, API callback) and running
-second daemon on the same identity: refused by the identity lock
-daemon: SIGTERM -> clean exit 0, lock released
-daemon restarted on the same saved identity and keys: connected again
-exit=0

package/docs/evidence/issue-8/review-fixes/README.md

@@ -1,30 +0,0 @@
-# #12 review fixes (independent review FAIL on 75eb582)
-
-| Finding | Fix | Proof |
-|---|---|---|
-| BLOCKER: a replaced session logs back in (heartbeat reopened a new session before the replaced check) | `<conflict/>` marks the identity `replaced` at once (`onReplaced`); `open()` refuses first, so heartbeats, retries and further connects in the process throw `SESSION_REPLACED`; the daemon exits 3 | unit: every fake connection has its own flag, both orders (stream error first / heartbeat only) open exactly one session (`check.txt`); live: `session-replacement-live.txt`: two copies of one identity, the newer wins, the older exits 3, the newer is still connected after 135 s with 3+ heartbeats, ejabberd logs exactly 1 "Replaced by new connection" for the whole run |
-| MEDIUM a: `usr_` fallback on a non-JSON 404 | removed: a server without discovery fails closed (`noDiscovery`) | unit test |
-| MEDIUM b: owner check always true | discovery must name exactly the conversation's two agents and observers of BOTH owners | unit tests |
-| MEDIUM c: daemon client stuck on the old session | `onSession` rebinds the conversation client to the new session (fresh origin tracker, rooms re-joined on demand, stanzas of the new session buffered until then); the old provider is dropped | code; E2E unchanged 18/18 |
-| MEDIUM d: `install:claude` needs `wacando-agent` on PATH | `scripts/install-claude.mjs` stages with `wacando-agent install --host claude` (absolute runtime path) before registering | code; in-repo use documented |
-| LOW: message text in argv | `-` reads it from stdin | `--help` |
-| LOW: unbounded sent-text cache | bounded to 1000 entries | code |
-
-Not changed (LOW, documented): `wacando_wait` has no cursor (read covers the gap);
-`pair()` drops the key when a redeem response is lost (code consumed, re-pair);
-the MCP surface keeps the viewer and v1 onboarding tools.
-
-Stack for the live runs: lbframe/wacando PR #108 head `6198d92` (includes main
-`f21f742`, #106) + PR #109 merged locally; ejabberd 26.07 from that tree's
-`infra/ejabberd/ci-up.sh`; fresh Postgres DB; API + policy from that tree.
-E2E `e2e-desktop-observer.txt`: **20/20 PASS** (per-installation `dev_` desktops).
-Steps 17–18 answer the #108 M5 requirement (several desktops per owner): owner A
-enrolls a second desktop; the next message of the human-mode agent carries a key
-for BOTH of A's `dev_` JIDs (read from the outgoing stanza) and both desktops
-decrypt it; A revokes the second desktop (`revocation: enforced`); the next
-message carries no key for the revoked JID, still one for the remaining desktop,
-which decrypts it. The recipient set comes from
-`GET /v1/conversations/:id/recipients` before every encryption
-(`ConversationClient.recipients`), never from room occupants or affiliations.
-`onboarding-live.txt`: 3/3. `check.txt`: 76 tests, 73 pass, 0 fail, 3 skipped.
-`check-mcp.txt`: Inspector 2.7.0, 3 hosts.

package/docs/evidence/issue-8/review-fixes/check-mcp.txt

@@ -1,9 +0,0 @@
-$ npm run check:mcp
-
-> wacando-agent@2.0.0 check:mcp
-> node scripts/check-mcp.mjs
-
-Official Inspector 2.7.0 passed: wacando
-Official Inspector 2.7.0 passed: wacando-cursor
-Official Inspector 2.7.0 passed: wacando-claude
-exit=0