[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12},"actionData","errors","root",{"_228":-5,"_231":232,"_233":234},"routes/shell",{"_40":41,"_227":-5,"_228":-5,"_229":230},"routes/repo",{"_33":-7,"_34":35,"_36":37,"_38":39,"_40":41,"_42":31,"_43":31,"_44":31,"_45":31,"_46":31,"_47":31,"_48":49,"_50":49,"_51":31,"_52":-7,"_53":-7,"_54":55,"_56":57,"_58":59,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68},"routes/repo.blob",{"_13":14,"_15":16,"_17":18,"_19":20,"_21":14,"_22":23,"_24":-5,"_25":26,"_27":28,"_28":29,"_30":31,"_32":14},"ref","030d06718d6f5632d4efc51d93d5a34a7fbe00a2","path","apps/server/src/research/routes.test.ts","oid","dc2cc8aa635dc3e0f8f8fd09968336ca468e72ef","size",24012,"commit","mounts",[],"source","plain",{"_13":14,"_15":16},"kind","text","import { createHash } from \"node:crypto\";\nimport { describe, expect, it } from \"bun:test\";\n\nimport { Admission } from \"../auth/admission\";\nimport { Sessions } from \"../auth/session\";\nimport { JobRegistry } from \"../jobs/registry\";\nimport { researchAnswerDefinition, researchEvidenceDefinition } from \"../jobs/research-workspace\";\nimport { JobService } from \"../jobs/service\";\nimport { Router } from \"../http/router\";\nimport { MemoryStorage } from \"../storage/memory/adapter\";\nimport { registerResearchWorkspaceRoutes } from \"./routes\";\nimport { ResearchWorkspaceService } from \"./service\";\nimport {\n\tcompleteChildEvidence,\n\tcreateChild,\n\tcreateChildEvidence,\n\tcreateLegacyChildDraft,\n\tcreateLegacyChildRequest,\n} from \"./test-support\";\n\nimport type { HostedAuth } from \"../auth/routes\";\nimport type { GitHub, GitHubTokenGrant, Repository } from \"../github/client\";\n\nconst SOURCE = \"# Release plan\\n\\nShip safely.\\n\";\nconst SOURCE_HASH = `sha256:${createHash(\"sha256\").update(SOURCE).digest(\"hex\")}`;\nconst USER_ID = \"MDQ6VXNlcjU0MjcwODM=\";\nconst REPOSITORY_ID = \"MDEwOlJlcG9zaXRvcnkxMjM=\";\nconst OTHER_REPOSITORY_ID = \"MDEwOlJlcG9zaXRvcnk0NTY=\";\n\nfunction requestId(value: number): string {\n\treturn `10000000-0000-4000-8000-${value.toString(16).padStart(12, \"0\")}`;\n}\n\nfunction grant(accessToken: string): GitHubTokenGrant {\n\treturn {\n\t\taccessToken,\n\t\taccessExpiresIn: 28_800,\n\t\trefreshToken: \"ghr_user\",\n\t\trefreshExpiresIn: 15_897_600,\n\t};\n}\n\nfunction pair(cookie: string): string {\n\treturn cookie.split(\";\", 1)[0]!;\n}\n\nclass RepositoryAccess {\n\taffiliated = true;\n\trepository: Repository = {\n\t\tid: REPOSITORY_ID,\n\t\towner: \"octo-org\",\n\t\townerAvatarUrl: \"https://avatars.test/octo-org.png\",\n\t\tname: \"score\",\n\t\tfullName: \"octo-org/score\",\n\t\tprivate: true,\n\t\turl: \"https://github.test/octo-org/score\",\n\t\tdefaultBranch: \"main\",\n\t\tpermissions: { pull: true, push: true, admin: false },\n\t};\n\n\tasync repositoryAccess(\n\t\t_token: string,\n\t\towner: string,\n\t\tname: string,\n\t): Promise {\n\t\treturn this.affiliated\n\t\t\t? { ...this.repository, owner, name, fullName: `${owner}/${name}` }\n\t\t\t: undefined;\n\t}\n}\n\nasync function setup() {\n\tlet now = new Date(\"2026-08-23T12:00:00.000Z\");\n\tlet storage = new MemoryStorage();\n\tawait storage.users.put({ id: USER_ID, login: \"octocat\", avatarUrl: \"avatar\", now });\n\tlet channel = await storage.channels.create({\n\t\tid: crypto.randomUUID(),\n\t\trepositoryId: REPOSITORY_ID,\n\t\trepositoryOwner: \"octo-org\",\n\t\trepositoryName: \"score\",\n\t\ttitle: \"Release plan\",\n\t\tcreatedBy: USER_ID,\n\t\tnow,\n\t});\n\tlet lease = await storage.leases.acquire(\"chopin:writer\", \"route-writer\", 60_000);\n\tif (!lease) throw new Error(\"writer lease unavailable\");\n\tlet access = new RepositoryAccess();\n\tlet github = access as unknown as GitHub;\n\tlet config = {\n\t\torigin: \"https://chopin.test\",\n\t\tappSlug: \"chopin-test\",\n\t\tclientId: \"client-id\",\n\t\tclientSecret: \"client-secret\",\n\t\tencryptionKey: new Uint8Array(32).fill(4),\n\t};\n\tlet sessions = new Sessions(storage, true, () => now);\n\tlet issued = await sessions.issue(USER_ID, grant(\"ghu_user\"));\n\tlet auth: HostedAuth = {\n\t\tconfig,\n\t\tstorage,\n\t\tgithub,\n\t\tadmission: new Admission(config, github, () => now.getTime()),\n\t\tsessions,\n\t\tclock: () => now,\n\t};\n\tlet registry = new JobRegistry([\n\t\tresearchEvidenceDefinition({\n\t\t\tconfig: { agent: true, model: \"research-model\" },\n\t\t\tengine: async () => ({ findings: [], sources: [] }),\n\t\t}),\n\t\tresearchAnswerDefinition({\n\t\t\tconfig: { agent: true, model: \"research-model\" },\n\t\t\tengines: {\n\t\t\t\tprivate: async () => ({ findings: [] }),\n\t\t\t\tsynthesize: async () => ({\n\t\t\t\t\ttitle: \"Report\",\n\t\t\t\t\tsummary: \"Summary\",\n\t\t\t\t\tfindings: [],\n\t\t\t\t\tcaveats: [],\n\t\t\t\t}),\n\t\t\t\tanswer: async () => ({ text: \"Answer\", sourceUrls: [] }),\n\t\t\t},\n\t\t}),\n\t]);\n\tlet jobSequence = 0;\n\tlet jobs = new JobService({\n\t\tstorage,\n\t\tregistry,\n\t\tlease: () => lease,\n\t\tnow: () => now,\n\t\tid: () => `route-job-${++jobSequence}`,\n\t});\n\tlet entitySequence = 0;\n\tlet service = new ResearchWorkspaceService({\n\t\tstorage,\n\t\tjobs,\n\t\tlease: () => lease,\n\t\tclock: () => now,\n\t\tid: () => `route-entity-${++entitySequence}`,\n\t\tcurrent: async channelId => ({\n\t\t\tchannelId,\n\t\t\trevision: 1,\n\t\t\tsource: SOURCE,\n\t\t\tsourceHash: SOURCE_HASH,\n\t\t}),\n\t\tpublish: () => {},\n\t});\n\tlet owners: string[] = [];\n\tlet router = new Router();\n\tregisterResearchWorkspaceRoutes(router, auth, {\n\t\tservice,\n\t\tensureOwner: async ensured => {\n\t\t\towners.push(ensured.id);\n\t\t},\n\t});\n\treturn {\n\t\tstorage,\n\t\tservice,\n\t\tjobs,\n\t\trouter,\n\t\taccess,\n\t\tchannel,\n\t\tcookie: pair(issued.cookie),\n\t\towners,\n\t\tnow,\n\t\tlease,\n\t};\n}\n\nfunction request(path: string, cookie?: string, init: RequestInit = {}): Request {\n\tlet headers = new Headers(init.headers);\n\tif (cookie) headers.set(\"cookie\", cookie);\n\treturn new Request(`https://chopin.test${path}`, { ...init, headers });\n}\n\nfunction mutation(body: unknown, origin = \"https://chopin.test\"): RequestInit {\n\treturn {\n\t\tmethod: \"POST\",\n\t\theaders: { \"content-type\": \"application/json\", origin },\n\t\tbody: JSON.stringify(body),\n\t};\n}\n\nasync function create(context: Awaited>) {\n\tlet response = await context.router.handle(request(\n\t\t`/api/channels/${context.channel.id}/research-workspaces`,\n\t\tcontext.cookie,\n\t\tmutation({ question: \"What changed?\", requestId: requestId(1) }),\n\t));\n\tif (!response) throw new Error(\"research create route was not registered\");\n\treturn { response, body: await response.json() };\n}\n\nasync function createInline(context: Awaited>) {\n\tlet response = await context.router.handle(request(\n\t\t`/api/channels/${context.channel.id}/research-requests`,\n\t\tcontext.cookie,\n\t\tmutation({ question: \"What changed?\", requestId: requestId(11) }),\n\t));\n\tif (!response) throw new Error(\"inline research create route was not registered\");\n\treturn { response, body: await response.json() };\n}\n\nasync function failInitial(context: Awaited>) {\n\tlet [claimed] = await context.storage.jobs.claim({\n\t\tchannelId: context.channel.id,\n\t\tclaimOwner: \"route-failing-worker\",\n\t\tcount: 1,\n\t\tttlMs: 30_000,\n\t\tnow: new Date(context.now.getTime() + 1),\n\t\tlease: context.lease,\n\t});\n\tif (!claimed) throw new Error(\"route evidence job was not claimable\");\n\tawait context.storage.jobs.fail({\n\t\tchannelId: context.channel.id,\n\t\tjobId: claimed.id,\n\t\tclaimOwner: \"route-failing-worker\",\n\t\tclaimGeneration: claimed.claimGeneration,\n\t\treason: \"private failure\",\n\t\tnow: new Date(context.now.getTime() + 2),\n\t\tlease: context.lease,\n\t});\n}\n\nfunction childFixture(context: Awaited>) {\n\treturn {\n\t\tjobs: context.jobs,\n\t\tlease: context.lease,\n\t\tnow: () => context.now,\n\t\tparent: context.channel,\n\t\tstorage: context.storage,\n\t};\n}\n\nasync function completedChildEvidence(context: Awaited>) {\n\tlet fixture = childFixture(context);\n\tlet child = await createChild(fixture);\n\tlet legacy = await createLegacyChildRequest(fixture, child, requestId(1));\n\tawait createChildEvidence(fixture, child, legacy);\n\tlet completed = await completeChildEvidence(fixture, child);\n\treturn { child, legacy, completed };\n}\n\nfunction retryMutation(origin = \"https://chopin.test\"): RequestInit {\n\treturn { method: \"POST\", headers: { origin } };\n}\n\ndescribe(\"research workspace routes\", () => {\n\tit(\"reads completed legacy child evidence without reconciling new answer work\", async () => {\n\t\tlet context = await setup();\n\t\tlet { child, legacy } = await completedChildEvidence(context);\n\t\tlet response = await context.router.handle(request(\n\t\t\t`/api/channels/${child.id}/research-workspaces/${legacy.workspace.id}`,\n\t\t\tcontext.cookie,\n\t\t));\n\t\tif (!response) throw new Error(\"research workspace route was not registered\");\n\n\t\texpect(response.status).toBe(200);\n\t\texpect(await response.json()).toMatchObject({ workspace: { id: legacy.workspace.id } });\n\t\texpect(await context.storage.research.get(child.id, legacy.workspace.id))\n\t\t\t.toMatchObject({ turns: [{ evidenceJobId: expect.any(String), answerJobId: undefined }] });\n\t\texpect((await context.jobs.list(child.id, 100))!.jobs).toHaveLength(1);\n\t});\n\n\tit(\"enforces authentication, exact origin, write access, and owner timing\", async () => {\n\t\tlet context = await setup();\n\t\tlet path = `/api/channels/${context.channel.id}/research-workspaces`;\n\t\tlet anonymous = await context.router.handle(request(\n\t\t\tpath,\n\t\t\tundefined,\n\t\t\tmutation({ question: \"What changed?\", requestId: requestId(1) }),\n\t\t));\n\t\texpect(anonymous?.status).toBe(401);\n\n\t\tlet badOrigin = await context.router.handle(request(\n\t\t\tpath,\n\t\t\tcontext.cookie,\n\t\t\tmutation({ question: \"What changed?\", requestId: requestId(1) }, \"https://evil.test\"),\n\t\t));\n\t\texpect(badOrigin?.status).toBe(403);\n\n\t\tcontext.access.repository = {\n\t\t\t...context.access.repository,\n\t\t\tpermissions: { pull: true, push: false, admin: false },\n\t\t};\n\t\tlet readOnly = await context.router.handle(request(\n\t\t\tpath,\n\t\t\tcontext.cookie,\n\t\t\tmutation({ question: \"What changed?\", requestId: requestId(1) }),\n\t\t));\n\t\texpect(readOnly?.status).toBe(403);\n\n\t\tcontext.access.repository = {\n\t\t\t...context.access.repository,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet created = await create(context);\n\t\texpect(created.response.status).toBe(201);\n\t\texpect(created.body.workspace.createdBy).toBe(USER_ID);\n\t\texpect(created.response.headers.get(\"location\")).toBeNull();\n\t\texpect(context.owners).toEqual([]);\n\n\t\tlet confirmed = await context.router.handle(request(\n\t\t\t`${path}/${created.body.workspace.id}/confirm`,\n\t\t\tcontext.cookie,\n\t\t\tmutation({ query: \"What changed?\", requestId: requestId(2) }),\n\t\t));\n\t\texpect(confirmed?.status).toBe(200);\n\t\texpect((await confirmed!.json()).workspace.confirmedBy).toBe(USER_ID);\n\t\texpect(context.owners).toEqual([context.channel.id]);\n\t\tlet replayed = await context.router.handle(request(\n\t\t\t`${path}/${created.body.workspace.id}/confirm`,\n\t\t\tcontext.cookie,\n\t\t\tmutation({ query: \"What changed?\", requestId: requestId(2) }),\n\t\t));\n\t\texpect(replayed?.status).toBe(200);\n\t\texpect(context.owners).toEqual([context.channel.id]);\n\n\t\tcontext.access.repository = {\n\t\t\t...context.access.repository,\n\t\t\tpermissions: { pull: true, push: false, admin: false },\n\t\t};\n\t\tlet read = await context.router.handle(request(\n\t\t\t`${path}/${created.body.workspace.id}`,\n\t\t\tcontext.cookie,\n\t\t));\n\t\texpect(read?.status).toBe(200);\n\t});\n\n\tit(\"rejects child research before owner setup or durable work\", async () => {\n\t\tlet context = await setup();\n\t\tlet child = await createChild(childFixture(context));\n\t\tlet response = await context.router.handle(request(\n\t\t\t`/api/channels/${child.id}/research-requests`,\n\t\t\tcontext.cookie,\n\t\t\tmutation({ question: \"Create a grandchild\", requestId: requestId(1) }),\n\t\t));\n\t\tif (!response) throw new Error(\"research create route was not registered\");\n\t\tlet body = await response.json() as { error?: string };\n\t\tlet durable = await context.storage.research.list(child.id, 100);\n\t\tlet jobs = (await context.jobs.list(child.id, 100))?.jobs ?? [];\n\n\t\texpect({\n\t\t\tstatus: response.status,\n\t\t\terror: body.error,\n\t\t\towners: context.owners,\n\t\t\trequests: durable.length,\n\t\t\tjobs: jobs.length,\n\t\t}).toEqual({\n\t\t\tstatus: 400,\n\t\t\terror: \"invalid research workspace request\",\n\t\t\towners: [],\n\t\t\trequests: 0,\n\t\t\tjobs: 0,\n\t\t});\n\t});\n\n\tit(\"rejects legacy child research drafts before durable work\", async () => {\n\t\tlet context = await setup();\n\t\tlet child = await createChild(childFixture(context));\n\t\tlet response = await context.router.handle(request(\n\t\t\t`/api/channels/${child.id}/research-workspaces`,\n\t\t\tcontext.cookie,\n\t\t\tmutation({ question: \"Create a grandchild\", requestId: requestId(2) }),\n\t\t));\n\t\tif (!response) throw new Error(\"research create route was not registered\");\n\t\tlet body = await response.json() as { error?: string };\n\t\tlet durable = await context.storage.research.list(child.id, 100);\n\n\t\texpect({ status: response.status, error: body.error, requests: durable.length }).toEqual({\n\t\t\tstatus: 400,\n\t\t\terror: \"invalid research workspace request\",\n\t\t\trequests: 0,\n\t\t});\n\t});\n\n\tit(\"rejects confirmation of legacy child research before owner setup or jobs\", async () => {\n\t\tlet context = await setup();\n\t\tlet fixture = childFixture(context);\n\t\tlet child = await createChild(fixture);\n\t\tlet legacy = await createLegacyChildDraft(fixture, child);\n\t\tlet response = await context.router.handle(request(\n\t\t\t`/api/channels/${child.id}/research-workspaces/${legacy.workspace.id}/confirm`,\n\t\t\tcontext.cookie,\n\t\t\tmutation({ query: \"Create a grandchild\", requestId: requestId(3) }),\n\t\t));\n\t\tif (!response) throw new Error(\"research confirm route was not registered\");\n\t\tlet body = await response.json() as { error?: string };\n\t\tlet stored = await context.storage.research.get(child.id, legacy.workspace.id);\n\t\tlet jobs = (await context.jobs.list(child.id, 100))?.jobs ?? [];\n\n\t\texpect({\n\t\t\tstatus: response.status,\n\t\t\terror: body.error,\n\t\t\towners: context.owners,\n\t\t\tconfirmed: stored?.workspace.confirmedQuery,\n\t\t\tturns: stored?.turns.length,\n\t\t\tjobs: jobs.length,\n\t\t}).toEqual({\n\t\t\tstatus: 400,\n\t\t\terror: \"invalid research workspace request\",\n\t\t\towners: [],\n\t\t\tconfirmed: undefined,\n\t\t\tturns: 0,\n\t\t\tjobs: 0,\n\t\t});\n\t});\n\n\tit(\"rejects continuation of legacy child research before owner setup or jobs\", async () => {\n\t\tlet context = await setup();\n\t\tlet fixture = childFixture(context);\n\t\tlet child = await createChild(fixture);\n\t\tlet legacy = await createLegacyChildDraft(fixture, child);\n\t\tlet response = await context.router.handle(request(\n\t\t\t`/api/channels/${child.id}/research-workspaces/${legacy.workspace.id}/turns`,\n\t\t\tcontext.cookie,\n\t\t\tmutation({\n\t\t\t\tkind: \"follow-up\",\n\t\t\t\tquestion: \"Continue the research\",\n\t\t\t\trequestId: requestId(4),\n\t\t\t}),\n\t\t));\n\t\tif (!response) throw new Error(\"research turn route was not registered\");\n\t\tlet body = await response.json() as { error?: string };\n\t\tlet stored = await context.storage.research.get(child.id, legacy.workspace.id);\n\t\tlet jobs = (await context.jobs.list(child.id, 100))?.jobs ?? [];\n\n\t\texpect({\n\t\t\tstatus: response.status,\n\t\t\terror: body.error,\n\t\t\towners: context.owners,\n\t\t\tturns: stored?.turns.length,\n\t\t\tjobs: jobs.length,\n\t\t}).toEqual({\n\t\t\tstatus: 400,\n\t\t\terror: \"invalid research workspace request\",\n\t\t\towners: [],\n\t\t\tturns: 0,\n\t\t\tjobs: 0,\n\t\t});\n\t});\n\n\tit(\"rejects retrying legacy child research before owner setup or jobs\", async () => {\n\t\tlet context = await setup();\n\t\tlet fixture = childFixture(context);\n\t\tlet child = await createChild(fixture);\n\t\tlet legacy = await createLegacyChildRequest(fixture, child, requestId(1));\n\t\tlet response = await context.router.handle(request(\n\t\t\t`/api/channels/${child.id}/research-requests/${legacy.workspace.id}/retry`,\n\t\t\tcontext.cookie,\n\t\t\tretryMutation(),\n\t\t));\n\t\tif (!response) throw new Error(\"research retry route was not registered\");\n\t\tlet body = await response.json() as { error?: string };\n\t\tlet stored = await context.storage.research.get(child.id, legacy.workspace.id);\n\t\tlet jobs = (await context.jobs.list(child.id, 100))?.jobs ?? [];\n\n\t\texpect({\n\t\t\tstatus: response.status,\n\t\t\terror: body.error,\n\t\t\towners: context.owners,\n\t\t\tevidenceJobId: stored?.turns[0]?.evidenceJobId,\n\t\t\tjobs: jobs.length,\n\t\t}).toEqual({\n\t\t\tstatus: 400,\n\t\t\terror: \"invalid research workspace request\",\n\t\t\towners: [],\n\t\t\tevidenceJobId: undefined,\n\t\t\tjobs: 0,\n\t\t});\n\t});\n\n\tit(\"starts inline research without replacing private workspace creation\", async () => {\n\t\tlet context = await setup();\n\t\tlet draft = await create(context);\n\t\texpect(draft.body.workspace.origin).toBe(\"sidebar\");\n\t\texpect(context.owners).toEqual([]);\n\n\t\tlet inline = await createInline(context);\n\t\texpect(inline.response.status).toBe(201);\n\t\texpect(inline.body).toMatchObject({\n\t\t\trepeated: false,\n\t\t\trequest: { question: \"What changed?\", stage: \"queued\" },\n\t\t});\n\t\texpect(context.owners).toEqual([context.channel.id]);\n\t\texpect(await context.storage.research.list(context.channel.id, 100)).toHaveLength(2);\n\n\t\tlet path = `/api/channels/${context.channel.id}/research-requests/${inline.body.request.id}`;\n\t\tlet observed = await context.router.handle(request(path, context.cookie));\n\t\texpect(observed?.status).toBe(200);\n\t\texpect(await observed!.json()).toMatchObject({ id: inline.body.request.id });\n\n\t\tlet cancelled = await context.router.handle(request(\n\t\t\t`${path}/cancel`,\n\t\t\tcontext.cookie,\n\t\t\tmutation({}),\n\t\t));\n\t\texpect(cancelled?.status).toBe(200);\n\t\texpect(await cancelled!.json()).toMatchObject({ stage: \"cancelled\" });\n\t});\n\n\tit(\"retries a failed request without minting another workspace\", async () => {\n\t\tlet context = await setup();\n\t\tlet created = await createInline(context);\n\t\tawait failInitial(context);\n\t\tlet path =\n\t\t\t`/api/channels/${context.channel.id}/research-requests/${created.body.request.id}/retry`;\n\n\t\tlet retried = await context.router.handle(request(\n\t\t\tpath,\n\t\t\tcontext.cookie,\n\t\t\tretryMutation(),\n\t\t));\n\n\t\texpect(retried?.status).toBe(200);\n\t\texpect(await retried!.json()).toMatchObject({\n\t\t\tid: created.body.request.id,\n\t\t\tquestion: created.body.request.question,\n\t\t\tstage: \"queued\",\n\t\t});\n\t\texpect(await context.storage.research.list(context.channel.id, 100)).toHaveLength(1);\n\t\texpect(context.owners).toEqual([context.channel.id, context.channel.id]);\n\t\texpect(\n\t\t\t(await context.router.handle(request(\n\t\t\t\tpath,\n\t\t\t\tcontext.cookie,\n\t\t\t\tretryMutation(),\n\t\t\t)))?.status,\n\t\t).toBe(409);\n\t});\n\n\tit(\"exposes a durably cleared request as retryable after reload\", async () => {\n\t\tlet context = await setup();\n\t\tlet created = await createInline(context);\n\t\tawait failInitial(context);\n\t\tlet detail = await context.storage.research.get(context.channel.id, created.body.request.id);\n\t\tlet initial = detail!.turns[0]!;\n\t\tawait context.storage.research.resetInitialAttempt({\n\t\t\tchannelId: context.channel.id,\n\t\t\tworkspaceId: created.body.request.id,\n\t\t\texpectedEvidenceJobId: initial.evidenceJobId,\n\t\t\texpectedAnswerJobId: initial.answerJobId,\n\t\t\tnow: new Date(context.now.getTime() + 3),\n\t\t\tlease: context.lease,\n\t\t});\n\t\tlet path = `/api/channels/${context.channel.id}/research-requests/${created.body.request.id}`;\n\n\t\tlet observed = await context.router.handle(request(path, context.cookie));\n\t\texpect(observed?.status).toBe(200);\n\t\texpect(await observed!.json()).toMatchObject({\n\t\t\tid: created.body.request.id,\n\t\t\tstate: \"failed\",\n\t\t\tstage: \"failed\",\n\t\t\terror: \"Research could not be completed.\",\n\t\t});\n\t\tlet retried = await context.router.handle(request(\n\t\t\t`${path}/retry`,\n\t\t\tcontext.cookie,\n\t\t\tretryMutation(),\n\t\t));\n\t\texpect(retried?.status).toBe(200);\n\t\texpect(await retried!.json()).toMatchObject({\n\t\t\tid: created.body.request.id,\n\t\t\tstage: \"queued\",\n\t\t});\n\t});\n\n\tit(\"enforces retry origin, authentication, write access, and archive state\", async () => {\n\t\tlet context = await setup();\n\t\tlet created = await createInline(context);\n\t\tawait failInitial(context);\n\t\tlet path =\n\t\t\t`/api/channels/${context.channel.id}/research-requests/${created.body.request.id}/retry`;\n\n\t\texpect((await context.router.handle(request(path, undefined, retryMutation())))?.status)\n\t\t\t.toBe(401);\n\t\texpect(\n\t\t\t(await context.router.handle(request(\n\t\t\t\tpath,\n\t\t\t\tcontext.cookie,\n\t\t\t\tretryMutation(\"https://evil.test\"),\n\t\t\t)))?.status,\n\t\t).toBe(403);\n\t\tcontext.access.repository = {\n\t\t\t...context.access.repository,\n\t\t\tpermissions: { pull: true, push: false, admin: false },\n\t\t};\n\t\texpect(\n\t\t\t(await context.router.handle(request(\n\t\t\t\tpath,\n\t\t\t\tcontext.cookie,\n\t\t\t\tretryMutation(),\n\t\t\t)))?.status,\n\t\t).toBe(403);\n\t\tcontext.access.repository = {\n\t\t\t...context.access.repository,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tawait context.storage.channels.archive({\n\t\t\tid: context.channel.id,\n\t\t\tnow: new Date(context.now.getTime() + 3),\n\t\t});\n\t\texpect(\n\t\t\t(await context.router.handle(request(\n\t\t\t\tpath,\n\t\t\t\tcontext.cookie,\n\t\t\t\tretryMutation(),\n\t\t\t)))?.status,\n\t\t).toBe(409);\n\t\texpect(context.owners).toEqual([context.channel.id]);\n\t});\n\n\tit(\"returns inaccessible and cross-channel children as not found\", async () => {\n\t\tlet context = await setup();\n\t\tlet created = await create(context);\n\t\tlet other = await context.storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: REPOSITORY_ID,\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Other plan\",\n\t\t\tcreatedBy: USER_ID,\n\t\t\tnow: context.now,\n\t\t});\n\t\tlet crossChannel = await context.router.handle(request(\n\t\t\t`/api/channels/${other.id}/research-workspaces/${created.body.workspace.id}`,\n\t\t\tcontext.cookie,\n\t\t));\n\t\texpect(crossChannel?.status).toBe(404);\n\n\t\tcontext.access.repository = {\n\t\t\t...context.access.repository,\n\t\t\tid: \"MDEwOlJlcG9zaXRvcnk3ODk=\",\n\t\t};\n\t\tlet recreated = await context.router.handle(request(\n\t\t\t`/api/channels/${context.channel.id}/research-workspaces/${created.body.workspace.id}`,\n\t\t\tcontext.cookie,\n\t\t));\n\t\texpect(recreated?.status).toBe(404);\n\n\t\tcontext.access.repository = {\n\t\t\t...context.access.repository,\n\t\t\tid: REPOSITORY_ID,\n\t\t\tpermissions: { pull: false, push: true, admin: false },\n\t\t};\n\t\tlet noPull = await context.router.handle(request(\n\t\t\t`/api/channels/${context.channel.id}/research-workspaces/${created.body.workspace.id}`,\n\t\t\tcontext.cookie,\n\t\t));\n\t\texpect(noPull?.status).toBe(404);\n\t});\n\n\tit(\"lists repository children in one bounded response without leaking another repository\", async () => {\n\t\tlet context = await setup();\n\t\tlet created = await create(context);\n\t\tlet other = await context.storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: OTHER_REPOSITORY_ID,\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"other\",\n\t\t\ttitle: \"Other repository plan\",\n\t\t\tcreatedBy: USER_ID,\n\t\t\tnow: context.now,\n\t\t});\n\t\tawait context.service.createDraft({\n\t\t\tchannelId: other.id,\n\t\t\tquestion: \"Private to the other repository\",\n\t\t\trequestId: requestId(9),\n\t\t\torigin: \"sidebar\",\n\t\t\tcreatedBy: USER_ID,\n\t\t});\n\n\t\tlet response = await context.router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/research-workspaces\",\n\t\t\tcontext.cookie,\n\t\t));\n\t\texpect(response?.status).toBe(200);\n\t\tlet body = await response!.json();\n\t\texpect(body.channels).toHaveLength(1);\n\t\texpect(body.channels[0]).toMatchObject({\n\t\t\tchannel: { id: context.channel.id },\n\t\t\tworkspaces: [{ id: created.body.workspace.id, channelId: context.channel.id }],\n\t\t});\n\t\texpect(JSON.stringify(body)).not.toContain(\"Private to the other repository\");\n\t\texpect(JSON.stringify(body)).not.toContain(\"idempotencyKey\");\n\t});\n\n\tit(\"lists only the current channel for authenticated pull readers\", async () => {\n\t\tlet context = await setup();\n\t\tlet created = await create(context);\n\t\tlet sibling = await context.storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: REPOSITORY_ID,\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Sibling plan\",\n\t\t\tcreatedBy: USER_ID,\n\t\t\tnow: context.now,\n\t\t});\n\t\tlet siblingWorkspace = await context.service.createDraft({\n\t\t\tchannelId: sibling.id,\n\t\t\tquestion: \"Sibling-only research\",\n\t\t\trequestId: requestId(10),\n\t\t\torigin: \"sidebar\",\n\t\t\tcreatedBy: USER_ID,\n\t\t});\n\t\tlet path = `/api/channels/${context.channel.id}/research-workspaces`;\n\t\tlet anonymous = await context.router.handle(request(path));\n\t\texpect(anonymous?.status).toBe(401);\n\n\t\tcontext.access.repository = {\n\t\t\t...context.access.repository,\n\t\t\tpermissions: { pull: true, push: false, admin: false },\n\t\t};\n\t\tlet response = await context.router.handle(request(path, context.cookie));\n\t\texpect(response?.status).toBe(200);\n\t\tlet body = await response!.json();\n\t\texpect(body).toMatchObject({\n\t\t\tworkspaces: [{ id: created.body.workspace.id, channelId: context.channel.id }],\n\t\t\ttruncated: false,\n\t\t});\n\t\tlet serialized = JSON.stringify(body);\n\t\texpect(serialized).not.toContain(siblingWorkspace.workspace.id);\n\t\texpect(serialized).not.toContain(\"Sibling-only research\");\n\t\texpect(serialized).not.toContain(\"idempotencyKey\");\n\t\texpect(serialized).not.toContain(\"fingerprint\");\n\n\t\tcontext.access.repository = {\n\t\t\t...context.access.repository,\n\t\t\tpermissions: { pull: false, push: true, admin: false },\n\t\t};\n\t\texpect((await context.router.handle(request(path, context.cookie)))?.status).toBe(404);\n\t});\n});\n","editable",false,"branch","documentNavigation","repo","githubnext/chopin","repoId","7d1a8ac3-35b0-4dea-85d4-06a980f3bada","ownerId","org:89615882","site","nexthub","private","admin","settings","maintainer","triage","starred","stars",0,"watchers","watching","pinned","notify","views",[183,184,185,186,187,188,189,190,191,192,193,194,195],"navigation",{"_54":55,"_139":140,"_141":142,"_143":144,"_145":146,"_147":148,"_149":150},"sources",[],"viewer","meta",{"_131":132,"_133":134,"_135":136,"_42":31,"_137":126,"_138":31,"_48":49,"_50":49},"branches",[73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130],"tags",[69,70,71,72],"cloneUrl","https://git.nexthub.sh/githubnext/chopin.git","color-controls-slice-1","color-controls-slice-2","color-controls-slice-3","color-controls-slice-4","Krzysztof-Cieslak-patch-1","Krzysztof-Cieslak-patch-2","Maggie/app-preview-toolkit","Maggie/ci-playwright-install-timeout","Maggie/collaborative-visual-decision","Maggie/design-audit","Maggie/generic-visual-decision-runtime","Maggie/impeccable-chopin-metadata","Maggie/jev-chat-product","Maggie/jev-composed-assessment","Maggie/native-document-layouts","Maggie/openui-composition-product","Maggie/openui-composition-trial","Maggie/planner-visual-authoring","Maggie/planner-visual-requests","Maggie/visual-selection-eval","artifacts/pr-419-live-preview-20261009","automation/pr-maintenance-state","automation/use-effect/callout-disabled-picker-8cf9e49ba5c09471","automation/use-effect/collaboration-options-ref-4e3a5a08a879a5ae","automation/use-effect/room-workspace-effective-access-a57d40866c71bed0","chore/bun-1.4.2","color-controls","color-controls-plan","comments","design-pr-assets","design/archived-decisions-badge","design/channel-route-remount","design/chat-decision-entry","design/conversation-analysis-markers","design/decision-evidence","design/settled-line-icon","dev/integration","diagram-step-controls","feat/liveapp-frontend-pilot","feat/local-experiments","feat/local-launcher-tracer","fix/autolink-mdx-crash","github-pills/2-pills","github-pills/3-hover-card","maggie/app-preview-toolkit","maggie/ci-playwright-install-timeout","maggie/collaborative-visual-decision","maggie/design-audit","maggie/generic-visual-decision-runtime","maggie/impeccable-chopin-metadata","maggie/jev-composed-assessment","maggie/native-document-layouts","maggie/openui-composition-product","maggie/openui-composition-trial","maggie/planner-visual-authoring","maggie/planner-visual-requests","maggie/visual-selection-eval","main","plain-text-fence-chrome","tokens/09-copy","wireframes/2-renderer","wireframes/3-planner","description","Let's compose rich plans together","owner","githubnext","section","","head","empty","pins",[165,166,167],"documents",{"_160":161,"_162":163},"code",{"_156":157,"_158":159},"automations",{"_153":154,"_155":-5},"delivery",{"_151":49,"_152":-5},"tag","04zvKQ8QOrDUF8TO1Ovz0Zy8_TT","releases","applications","workflows",3,"deployments","commits",1000,"changes",13,"counts",{"_164":163},"total",11,"issue",{"_168":158,"_170":181,"_15":158,"_172":182,"_52":174,"_175":31,"_176":174,"_177":159},{"_168":178,"_170":179,"_15":178,"_172":180,"_52":174,"_175":31,"_176":174,"_177":49},{"_168":169,"_170":171,"_15":169,"_172":173,"_52":174,"_175":31,"_176":174,"_177":163},"id","issues","name","Issues","filters",{},true,"saved","pinnable","count","tasks","Tasks",{},"Changes",{},{"_168":158,"_170":181,"_15":158,"_172":226,"_52":174,"_175":31,"_176":174},{"_168":178,"_170":179,"_15":178,"_172":225,"_52":174,"_175":31,"_176":174},{"_168":169,"_170":171,"_15":169,"_172":224,"_52":174,"_175":31,"_176":174},{"_168":221,"_170":222,"_15":221,"_172":223,"_52":31,"_175":31,"_176":174},{"_168":218,"_170":219,"_15":218,"_172":220,"_52":31,"_175":31,"_176":174},{"_168":153,"_170":216,"_15":145,"_172":217,"_52":31,"_175":31,"_176":174},{"_168":155,"_170":213,"_15":214,"_172":215,"_52":31,"_175":31,"_176":174},{"_168":151,"_170":211,"_15":151,"_172":212,"_52":31,"_175":31,"_176":174},{"_168":207,"_170":208,"_15":209,"_172":210,"_52":31,"_175":31,"_176":174},{"_168":141,"_170":205,"_15":141,"_172":206,"_52":31,"_175":31,"_176":31},{"_168":202,"_170":203,"_15":202,"_172":204,"_52":31,"_175":31,"_176":31},{"_168":199,"_170":200,"_15":199,"_172":201,"_52":31,"_175":31,"_176":31},{"_168":196,"_170":197,"_15":196,"_172":198,"_52":31,"_175":31,"_176":31},"decisions","Decisions",{},"changelog","Changelog",{},"roadmap","Roadmap",{},"Documents",{},"activity","Activity","insights",{},"Releases",{},"Deployments","automations/deployments",{},"Workflows",{},"discussions","Discussions",{},"goals","Goals",{},{},{},{},"groups","user","agents",[],"now",1794510306998,"sidebar","expanded"]