@zerwiz/ymir 0.1.4 → 0.1.5

package/.agents/tests/fm-bearings-board-render.test.sh

@@ -0,0 +1,135 @@
+#!/usr/bin/env bash
+# Behavior tests for the shipped bearings board renderer
+# (.agents/skills/bearings/assets/board-template.html), exercised through a real
+# `fm-bearings-board.sh build` and then executed under the minimal DOM shim in
+# tests/assets/board-render-harness.mjs. The assertions are on what the page
+# renders - row badges, the stat strip, the empty state - never on the
+# template's source text.
+set -u
+
+# shellcheck source=tests/lib.sh
+# shellcheck disable=SC1091
+. "$(dirname "${BASH_SOURCE[0]}")/lib.sh"
+
+BOARD="$ROOT/bin/fm-bearings-board.sh"
+HARNESS="$ROOT/tests/assets/board-render-harness.mjs"
+TMP_ROOT=$(fm_test_tmproot fm-bearings-board-render)
+
+command -v jq >/dev/null 2>&1 || { echo "skip: jq not found"; exit 0; }
+command -v node >/dev/null 2>&1 || { echo "skip: node not found"; exit 0; }
+
+make_home() {  # <name>
+  local home="$TMP_ROOT/$1" fakebin
+  mkdir -p "$home/state" "$home/data"
+  fakebin=$(fm_fakebin "$home")
+  fm_fake_exit0 "$fakebin" lavish-axi
+  printf '%s\n' "$home"
+}
+
+# Build the board from <charted-json> and return what the renderer produced.
+render() {  # <home> <charted-json> [charted_more] [charted_warning_more]
+  local home=$1 charted=$2 more=${3:-0} warning_more=${4:-0} data="$1/payload.json"
+  jq -n --argjson charted "$charted" --argjson more "$more" --argjson warning_more "$warning_more" '{
+    schema:"fm-bearings-board.v1", home:"render-home", generated:"2026-08-26T00:00Z",
+    prs_live:false, captains_call:[], underway:[], landed:[],
+    charted:$charted, charted_more:$more, charted_warning_more:$warning_more}' > "$data"
+  PATH="$home/fakebin:$PATH" FM_HOME="$home" \
+    FM_STATE_OVERRIDE="$home/state" FM_DATA_OVERRIDE="$home/data" \
+    FM_PROCEVENT_CLAIM_ROOT="$home/procevent-claims" \
+    "$BOARD" build "$data" >/dev/null || fail "the board did not build"
+  node "$HARNESS" "$home/.lavish/bearings-board.html" \
+    || fail "the built board could not be rendered"
+}
+
+charted_next_count() {  # <render-json>
+  printf '%s' "$1" | jq -r '.stats[] | select(.label == "charted next") | .n'
+}
+
+test_a_warning_row_reads_as_a_repair_not_as_queued_work() {
+  local home out
+  home=$(make_home warning-badge)
+  out=$(render "$home" '[
+    {"id":"real-queued","repo":"sample","title":"Queued work","reason":"queued behind the cutover","dispatchable":true},
+    {"id":"main-inventory","repo":"sample","title":"Main inventory integrity","reason":"main inventory","dispatchable":false,"kind":"warning"}
+  ]')
+  printf '%s' "$out" | jq -e '.error == ""' >/dev/null \
+    || fail "the board rendered its fail-closed error instead of the fleet: $out"
+  printf '%s' "$out" | jq -e '
+    (.charted | length) == 2
+      and (.charted[0] | .title == "Queued work"
+        and [.badges[] | .text] == ["waiting"] and .pickable == true)
+      and (.charted[1] | .title == "Main inventory integrity"
+        and [.badges[] | .text] == ["needs repair"]
+        and [.badges[] | .tone] == ["danger"]
+        and .pickable == false)
+  ' >/dev/null || fail "a warning row did not read differently from queued work: $out"
+  pass "a warning row badges needs repair while queued work keeps waiting"
+}
+
+test_warnings_are_excluded_from_the_charted_next_count() {
+  local home out
+  home=$(make_home warning-count)
+  out=$(render "$home" '[
+    {"id":"queued-one","repo":"sample","title":"One","reason":"gated","dispatchable":true},
+    {"id":"warn-one","repo":"sample","title":"Home unreadable","reason":"current home state unavailable","dispatchable":false,"kind":"warning"},
+    {"id":"warn-two","repo":"sample","title":"Inventory mismatch","reason":"main inventory","dispatchable":false,"kind":"warning"}
+  ]')
+  [ "$(charted_next_count "$out")" = 1 ] \
+    || fail "the charted next tally counted alarms as queued work: $out"
+  printf '%s' "$out" | jq -e '(.charted | length) == 3' >/dev/null \
+    || fail "excluding warnings from the count also dropped their rows: $out"
+  pass "the charted next count counts queued work only, and still renders warnings"
+}
+
+test_a_board_of_only_warnings_still_reports_nothing_queued() {
+  local home out
+  home=$(make_home warning-only)
+  out=$(render "$home" '[
+    {"id":"warn-only","repo":"sample","title":"Home unreadable","reason":"current home state unavailable","dispatchable":false,"kind":"warning"}
+  ]')
+  [ "$(charted_next_count "$out")" = 0 ] \
+    || fail "a warning-only board claimed queued work: $out"
+  printf '%s' "$out" | jq -e '
+    (.empty | length) == 1 and (.empty[0] | test("Nothing is queued"))
+      and (.charted | length) == 1
+  ' >/dev/null || fail "a warning-only board hid the warning or the empty state: $out"
+  pass "a warning-only board reports nothing queued and still shows the warning"
+}
+
+test_omitted_warnings_never_count_as_more_queued() {
+  local home out
+  home=$(make_home warning-more)
+  out=$(render "$home" '[
+    {"id":"warn-visible","repo":"sample","title":"Home unreadable","reason":"current home state unavailable","dispatchable":false,"kind":"warning"}
+  ]' 0 1)
+  [ "$(charted_next_count "$out")" = 0 ] \
+    || fail "an omitted warning was counted as queued work: $out"
+  printf '%s' "$out" | jq -e '
+    (.empty | length) == 1 and (.empty[0] | test("Nothing is queued"))
+      and (.more == ["+1 more repair warning - ask firstmate for the full chart"])
+      and ([.more[] | select(test("more queued"))] | length) == 0
+  ' >/dev/null || fail "an omitted warning was labeled as more queued: $out"
+  pass "omitted warnings remain separate from omitted queued work"
+}
+
+test_an_omitted_kind_keeps_the_existing_queued_rendering() {
+  local home out
+  home=$(make_home default-kind)
+  out=$(render "$home" '[
+    {"id":"with-reason","repo":"sample","title":"With reason","reason":"blocked on prep","dispatchable":true},
+    {"id":"no-reason","repo":"sample","title":"No reason","reason":"","dispatchable":true}
+  ]' 2)
+  [ "$(charted_next_count "$out")" = 4 ] \
+    || fail "an omitted kind changed the charted next tally: $out"
+  printf '%s' "$out" | jq -e '
+    ([.charted[0].badges[] | .text] == ["waiting"])
+      and (.charted[1].badges == [])
+  ' >/dev/null || fail "an omitted kind changed the existing queued badges: $out"
+  pass "an omitted kind renders exactly as queued work always did"
+}
+
+test_a_warning_row_reads_as_a_repair_not_as_queued_work
+test_warnings_are_excluded_from_the_charted_next_count
+test_a_board_of_only_warnings_still_reports_nothing_queued
+test_omitted_warnings_never_count_as_more_queued
+test_an_omitted_kind_keeps_the_existing_queued_rendering

package/.agents/tests/fm-bearings-board.test.sh

@@ -0,0 +1,414 @@
+#!/usr/bin/env bash
+# Behavior tests for bin/fm-bearings-board.sh: fail-closed payload validation,
+# slot-injection round-trip through the built page, bind-before-arm, and
+# idempotent re-arm of the stable board source.
+set -u
+
+# shellcheck source=tests/lib.sh
+# shellcheck disable=SC1091
+. "$(dirname "${BASH_SOURCE[0]}")/lib.sh"
+
+BOARD="$ROOT/bin/fm-bearings-board.sh"
+TMP_ROOT=$(fm_test_tmproot fm-bearings-board)
+
+command -v jq >/dev/null 2>&1 || { echo "skip: jq not found"; exit 0; }
+
+make_home() {  # <name>
+  local home="$TMP_ROOT/$1" fakebin
+  mkdir -p "$home/state" "$home/data"
+  fakebin=$(fm_fakebin "$home")
+  fm_fake_exit0 "$fakebin" lavish-axi
+  printf '%s\n' "$home"
+}
+
+run_board() {  # <home> <args...>
+  local home=$1
+  shift
+  PATH="$home/fakebin:$PATH" FM_HOME="$home" \
+    FM_STATE_OVERRIDE="$home/state" FM_DATA_OVERRIDE="$home/data" \
+    FM_PROCEVENT_CLAIM_ROOT="$home/procevent-claims" \
+    "$BOARD" "$@"
+}
+
+run_procevent() {  # <home> <command args...>
+  local home=$1
+  shift
+  PATH="$home/fakebin:$PATH" FM_HOME="$home" \
+    FM_STATE_OVERRIDE="$home/state" FM_DATA_OVERRIDE="$home/data" \
+    FM_PROCEVENT_CLAIM_ROOT="$home/procevent-claims" \
+    "$ROOT/bin/fm-procevent.sh" "$@"
+}
+
+run_decisions() {  # <home> <command args...>
+  local home=$1
+  shift
+  PATH="$home/fakebin:$PATH" FM_HOME="$home" \
+    FM_STATE_OVERRIDE="$home/state" FM_DATA_OVERRIDE="$home/data" \
+    "$ROOT/bin/fm-decision-hold.sh" "$@"
+}
+
+# A realistic payload: a cross-origin full-identity decision key past the old
+# 64-char cap, a merge card, a dispatchable charted row, and a string that
+# tries to terminate the data block early.
+write_valid_payload() {  # <path>
+  cat > "$1" <<'EOF'
+{
+  "schema": "fm-bearings-board.v1",
+  "home": "test-home",
+  "generated": "2026-08-19T00:00Z",
+  "prs_live": false,
+  "captains_call": [
+    {
+      "key": "sample-instruction-layer-refinement-review-decision-perishable-first-admission-choice",
+      "type": "decision",
+      "repo": "sample",
+      "title": "Perishable-first admission",
+      "about": "A payload string that tries to break out: </script><b>x</b>",
+      "decide": "Adopt it?",
+      "options": [
+        { "value": "yes", "label": "Adopt", "hint": "recommended" },
+        { "value": "no", "label": "Keep current" }
+      ],
+      "allow_freeform": true
+    },
+    {
+      "key": "merge.sample-task",
+      "type": "merge",
+      "repo": "sample",
+      "title": "Merge: sample change",
+      "detail": "validation green",
+      "task_id": "sample-task",
+      "pr_url": "https://github.com/example/sample/pull/1",
+      "checks": "green",
+      "risk": "low",
+      "options": [
+        { "value": "merge", "label": "Merge now" },
+        { "value": "hold", "label": "Not yet" }
+      ],
+      "allow_freeform": true
+    }
+  ],
+  "underway": [],
+  "landed": [],
+  "charted": [
+    { "id": "sample-queued", "repo": "sample", "title": "Queued work", "reason": "", "dispatchable": true }
+  ],
+  "charted_more": 0
+}
+EOF
+}
+
+# Extract the injected payload back out of a built board page.
+extract_payload() {  # <board-path>
+  sed -n '/<script id="bearings-data" type="application\/json">/,/<\/script>/p' "$1" \
+    | sed '1d;$d'
+}
+
+test_path_is_stable_and_home_scoped() {
+  local home
+  home=$(make_home path)
+  [ "$(run_board "$home" path)" = "$home/.lavish/bearings-board.html" ] \
+    || fail "the board path is not the stable home-scoped location"
+  pass "path prints the stable home-scoped board location"
+}
+
+test_build_refuses_malformed_payloads_before_touching_the_board() {
+  local home data board rc out
+  home=$(make_home refusal)
+  board="$home/.lavish/bearings-board.html"
+  data="$home/payload.json"
+
+  printf 'not json\n' > "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "a non-JSON payload was accepted"
+  assert_contains "$out" "not valid JSON" "the non-JSON refusal did not say why: $out"
+
+  printf '{"schema":"fm-bearings-board.v2"}\n' > "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "a wrong-schema payload was accepted"
+  assert_contains "$out" "fm-bearings-board.v1" "the schema refusal did not name the contract: $out"
+
+  write_valid_payload "$data"
+  jq '.captains_call[0].key = (reduce range(129) as $i (""; . + "x"))' "$data" > "$data.tmp" \
+    && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "a 129-char captains_call key was accepted"
+
+  write_valid_payload "$data"
+  jq 'del(.charted[0].dispatchable)' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "a charted row without a dispatchable boolean was accepted"
+
+  write_valid_payload "$data"
+  jq '.charted[0].kind = "alarm"' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "an unknown charted kind was accepted"
+
+  write_valid_payload "$data"
+  jq '.charted[0].kind = "warning"' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "a dispatchable warning row was accepted"
+
+  write_valid_payload "$data"
+  jq '.charted_warning_more = -1' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "a negative omitted-warning count was accepted"
+
+  write_valid_payload "$data"
+  jq '.captains_call[0].type = "verdict"' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "an unknown captains_call type was accepted"
+
+  write_valid_payload "$data"
+  jq 'del(.captains_call[0].options[0].value)' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "a captains_call option without an answer value was accepted"
+
+  write_valid_payload "$data"
+  jq '.captains_call[0].options[0].label = ""' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "a captains_call option with an empty label was accepted"
+
+  write_valid_payload "$data"
+  jq 'del(.charted[0].repo)' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "a fleet row without an explicit repo marker was accepted"
+
+  write_valid_payload "$data"
+  jq '.captains_call[0].allow_freeform = "yes"' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "a non-boolean renderer field was accepted"
+
+  write_valid_payload "$data"
+  jq '.captains_call[0].options = [] | .captains_call[0].allow_freeform = false' "$data" > "$data.tmp" \
+    && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "an unanswerable captains_call item was accepted"
+
+  write_valid_payload "$data"
+  jq '.captains_call[1].pr_url = "javascript:alert(1)"' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "a non-HTTPS Captain’s Call PR URL was accepted"
+
+  write_valid_payload "$data"
+  jq '.landed = [{
+    "id": "sample-landed",
+    "repo": "sample",
+    "what": "Landed work",
+    "owner": "firstmate",
+    "pr_url": "data:text/html,unsafe"
+  }]' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  set +e; out=$(run_board "$home" build "$data" 2>&1); rc=$?; set -e
+  [ "$rc" -ne 0 ] || fail "a non-HTTPS Landed PR URL was accepted"
+
+  assert_absent "$board" "a refused payload still produced a board"
+  pass "build refuses malformed payloads before touching the board"
+}
+
+test_build_injects_binds_then_arms() {
+  local home data board out sid
+  home=$(make_home build)
+  data="$home/payload.json"
+  board="$home/.lavish/bearings-board.html"
+  write_valid_payload "$data"
+
+  out=$(run_board "$home" build "$data") || fail "a valid payload did not build"
+  assert_contains "$out" "board: $board" "build did not report the board path: $out"
+  assert_contains "$out" "served: $board" "build did not establish the Lavish session: $out"
+  assert_contains "$out" "bound: " "build did not report the answer binding: $out"
+  assert_contains "$out" "armed: " "the first build did not arm the board source: $out"
+  assert_present "$board" "build reported success without a board"
+
+  # Round-trip: the payload extracted from the built page is byte-for-byte the
+  # same JSON document, and the escaped </script> string can no longer
+  # terminate the data block.
+  extract_payload "$board" | jq -S . > "$home/extracted.json" \
+    || fail "the built board does not carry parseable payload JSON"
+  jq -S . "$data" > "$home/expected.json"
+  diff -u "$home/expected.json" "$home/extracted.json" >/dev/null \
+    || fail "the injected payload does not round-trip to the input document"
+  grep -qF '</script><b>' "$board" \
+    && fail "a payload string embedded a live closing script tag in the page"
+  grep -qxF '__FM_BEARINGS_BOARD_DATA__' "$board" \
+    && fail "the data slot survived injection"
+
+  sid=$(run_lavish_source_id "$home" "$board")
+  assert_contains "$out" "bound: $sid" "the binding does not name the board source: $out"
+  [ "$(run_decisions "$home" binding "$sid")" = "(any)" ] \
+    || fail "the board source is not bound any-origin"
+  run_procevent "$home" list | awk 'NR > 1 { print $1 }' | grep -Fxq "$sid" \
+    || fail "the board source is not registered after build"
+  pass "build injects the payload, binds any-origin, then arms the source"
+}
+
+test_registration_cannot_consume_before_any_origin_binding() {
+  local home data runtime origin key hold board sid show
+  home=$(make_home order-proof)
+  data="$home/payload.json"
+  runtime="$home/runtime"
+  origin=order-proof-review
+  key=captain-choice
+  hold="$origin-decision-$key"
+  board="$home/.lavish/bearings-board.html"
+
+  cp "$ROOT/.tasks.toml" "$home/.tasks.toml"
+  cat > "$home/data/backlog.md" <<'EOF'
+## In flight
+
+## Queued
+
+## Done
+EOF
+  fm_write_meta "$home/state/$origin.meta" "project=$home/projects/sample" "kind=scout"
+  run_decisions "$home" hold "$origin" "$key" \
+    --title "Choose the order proof" --reason "captain choice pending" --repo sample >/dev/null \
+    || fail "could not create the order-proof captain hold"
+
+  write_valid_payload "$data"
+  jq --arg hold "$hold" '.captains_call[0].key = $hold' "$data" > "$data.tmp" \
+    && mv "$data.tmp" "$data"
+
+  mkdir -p "$runtime"
+  cp -R "$ROOT/bin" "$runtime/bin"
+  cat > "$runtime/bin/fm-procevent-lavish.sh" <<'SH'
+#!/usr/bin/env bash
+set -eu
+if [ "${1:-}" = arm ]; then
+  artifact=${2:-}
+  "$REAL_LAVISH_ADAPTER" arm "$artifact" >/dev/null
+  sid=$("$REAL_LAVISH_ADAPTER" source-id "$artifact")
+  "$REAL_PROCEVENT" start "$sid" >/dev/null
+  exit 0
+fi
+exec "$REAL_LAVISH_ADAPTER" "$@"
+SH
+  chmod +x "$runtime/bin/fm-procevent-lavish.sh"
+  cat > "$home/fakebin/lavish-axi" <<'SH'
+#!/usr/bin/env bash
+if [ "${1:-}" != poll ]; then
+  exit 0
+fi
+cat <<EOF
+session:
+  status: feedback
+  session_ended: false
+prompts[1]{uid,prompt,selector,tag,text}:
+  "2","Order proof: yes\\n\\nContext data:\\n{\\n  \\"question\\": \\"$ORDER_PROOF_HOLD\\",\\n  \\"answer\\": \\"yes\\"\\n}","form",choice,"Order proof: yes"
+EOF
+SH
+  chmod +x "$home/fakebin/lavish-axi"
+
+  PATH="$home/fakebin:$PATH" FM_ROOT_OVERRIDE="$runtime" FM_HOME="$home" \
+    FM_STATE_OVERRIDE="$home/state" FM_DATA_OVERRIDE="$home/data" \
+    FM_PROCEVENT_CLAIM_ROOT="$home/procevent-claims" \
+    FM_BEARINGS_BOARD_TEMPLATE="$ROOT/.agents/skills/bearings/assets/board-template.html" \
+    REAL_LAVISH_ADAPTER="$ROOT/bin/fm-procevent-lavish.sh" \
+    REAL_PROCEVENT="$ROOT/bin/fm-procevent.sh" ORDER_PROOF_HOLD="$hold" \
+    "$runtime/bin/fm-bearings-board.sh" build "$data" >/dev/null \
+    || fail "the order-proof board build failed"
+
+  show=$(cd "$home" && tasks-axi show "$hold" --full) \
+    || fail "the order-proof captain hold disappeared"
+  assert_contains "$show" "state: done" \
+    "registration consumed its answer before the any-origin binding existed"
+  assert_contains "$show" "Resolution mode: answered" \
+    "the answer was not closed through the real keyed-answer intake"
+  sid=$(run_lavish_source_id "$home" "$board")
+  [ "$(run_decisions "$home" binding "$sid")" = "(any)" ] \
+    || fail "the order-proof source did not retain its any-origin binding"
+  pass "registration can consume answers only after any-origin binding exists"
+}
+
+test_build_does_not_bind_or_arm_when_session_start_fails() {
+  local home data rc sid
+  home=$(make_home serve-failure)
+  data="$home/payload.json"
+  write_valid_payload "$data"
+  cat > "$home/fakebin/lavish-axi" <<'SH'
+#!/usr/bin/env bash
+exit 1
+SH
+  chmod +x "$home/fakebin/lavish-axi"
+
+  set +e
+  run_board "$home" build "$data" >/dev/null 2>&1
+  rc=$?
+  set -e
+  [ "$rc" -ne 0 ] || fail "build continued after Lavish session establishment failed"
+  sid=$(run_lavish_source_id "$home" "$home/.lavish/bearings-board.html")
+  ! run_decisions "$home" binding "$sid" >/dev/null 2>&1 \
+    || fail "build bound the board before its Lavish session existed"
+  ! run_procevent "$home" list | awk 'NR > 1 { print $1 }' | grep -Fxq "$sid" \
+    || fail "build armed the board before its Lavish session existed"
+  pass "build establishes the Lavish session before binding and arming"
+}
+
+run_lavish_source_id() {  # <home> <artifact>
+  local home=$1
+  PATH="$home/fakebin:$PATH" FM_HOME="$home" \
+    FM_STATE_OVERRIDE="$home/state" FM_DATA_OVERRIDE="$home/data" \
+    FM_PROCEVENT_CLAIM_ROOT="$home/procevent-claims" \
+    "$ROOT/bin/fm-procevent-lavish.sh" source-id "$2"
+}
+
+test_rebuild_is_idempotent_and_does_not_double_arm() {
+  local home data board out records
+  home=$(make_home rearm)
+  data="$home/payload.json"
+  board="$home/.lavish/bearings-board.html"
+  write_valid_payload "$data"
+  run_board "$home" build "$data" >/dev/null || fail "the first build failed"
+
+  jq '.generated = "2026-08-19T01:00Z"' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  out=$(run_board "$home" build "$data") || fail "the rebuild failed"
+  assert_contains "$out" "already-armed: " "the rebuild re-armed an already registered source: $out"
+  extract_payload "$board" | jq -e '.generated == "2026-08-19T01:00Z"' >/dev/null \
+    || fail "the rebuild did not refresh the board payload in place"
+  records=$(find "$home/state/procevent" -name '*.source' | wc -l | tr -d ' ')
+  [ "$records" = 1 ] || fail "rebuilding left $records source registrations instead of 1"
+  pass "rebuild refreshes the board in place without double-arming"
+}
+
+test_build_refuses_a_template_without_exactly_one_slot() {
+  local home data rc out
+  home=$(make_home badslot)
+  data="$home/payload.json"
+  write_valid_payload "$data"
+  printf '<html><body>no slot</body></html>\n' > "$home/broken-template.html"
+  set +e
+  out=$(FM_BEARINGS_BOARD_TEMPLATE="$home/broken-template.html" run_board "$home" build "$data" 2>&1)
+  rc=$?
+  set -e
+  [ "$rc" -ne 0 ] || fail "a template with no data slot was accepted"
+  assert_contains "$out" "data slot" "the slot refusal did not say why: $out"
+  assert_absent "$home/.lavish/bearings-board.html" "a refused template still produced a board"
+  pass "build refuses a template without exactly one data slot"
+}
+
+test_charted_kind_is_optional_and_accepts_both_values() {
+  local home data
+  home=$(make_home chartedkind)
+  data="$home/payload.json"
+  write_valid_payload "$data"
+  jq '.charted = [
+        {"id":"a","repo":"sample","title":"Queued","reason":"","dispatchable":true},
+        {"id":"b","repo":"sample","title":"Queued too","reason":"gated","dispatchable":true,"kind":"queued"},
+        {"id":"c","repo":"sample","title":"Integrity notice","reason":"main inventory","dispatchable":false,"kind":"warning"}
+      ] | .charted_warning_more = 2' "$data" > "$data.tmp" && mv "$data.tmp" "$data"
+  run_board "$home" build "$data" >/dev/null \
+    || fail "an omitted, queued, and warning charted kind was refused"
+  extract_payload "$home/.lavish/bearings-board.html" | jq -e '
+    ([.charted[] | .kind // "queued"]) == ["queued", "queued", "warning"]
+      and .charted_warning_more == 2
+  ' >/dev/null || fail "the built board did not carry the charted kinds and omitted-warning count it was given"
+  pass "charted kind is optional and accepts queued and warning"
+}
+
+test_path_is_stable_and_home_scoped
+test_build_refuses_malformed_payloads_before_touching_the_board
+test_charted_kind_is_optional_and_accepts_both_values
+test_build_injects_binds_then_arms
+test_registration_cannot_consume_before_any_origin_binding
+test_build_does_not_bind_or_arm_when_session_start_fails
+test_rebuild_is_idempotent_and_does_not_double_arm
+test_build_refuses_a_template_without_exactly_one_slot