[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12},"actionData","errors","root",{"_228":-5,"_231":232,"_233":234},"routes/shell",{"_41":42,"_227":-5,"_228":-5,"_229":230},"routes/repo",{"_34":-7,"_35":36,"_37":38,"_39":40,"_41":42,"_43":32,"_44":32,"_45":32,"_46":32,"_47":32,"_48":32,"_49":50,"_51":50,"_52":32,"_53":-7,"_54":-7,"_55":56,"_57":58,"_59":60,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69},"routes/repo.blob",{"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":-5,"_26":27,"_28":29,"_29":30,"_31":32,"_33":14},"ref","main","path","apps/server/src/mcp/hosted.test.ts","oid","56baf339b166ce7cd92625eb78f673addc24d889","size",57602,"commit","2182c95de44a8f63fd86af1c5874ae0ca298f807","mounts",[],"source","plain",{"_13":14,"_15":16},"kind","text","import { describe, expect, it } from \"bun:test\";\n\nimport { ulid } from \"@chopin/dialect\";\n\nimport { Sessions } from \"../auth/session\";\nimport { Admission } from \"../auth/admission\";\nimport { GitHubError } from \"../github/client\";\nimport { handler } from \"../mcp\";\nimport * as Room from \"../plan/room\";\nimport * as Service from \"../plan/service\";\nimport * as Rooms from \"../rooms\";\nimport { MemoryStorage } from \"../storage/memory/adapter\";\nimport { implementationGraphs } from \"../tasks/plan-graphs\";\nimport { hosted } from \"./hosted\";\n\nimport type { Server } from \"bun\";\nimport type { HostedAuth } from \"../auth/routes\";\nimport type {\n\tGitHub,\n\tGitHubTokenGrant,\n\tGitHubUser,\n\tInstallationPage,\n\tRepository,\n\tRepositoryPage,\n} from \"../github/client\";\nimport type { CreateDocumentInput } from \"../mcp\";\nimport type { Socket, SocketData } from \"../wire\";\nimport type { PlannerInvocation } from \"./hosted\";\n\nlet creation: CreateDocumentInput = {\n\tidempotencyKey: \"create-plan-1\",\n\tfingerprint: \"request-1\",\n\trepository: \"octo-org/score\",\n\tbaseBranch: \"main\",\n\tbaseCommit: \"0123456789abcdef0123456789abcdef01234567\",\n\ttitle: \"Created plan\",\n\tbrief: {\n\t\tgoal: \"Create a collaborative plan.\",\n\t\tconstraints: [\"Keep the source canonical.\"],\n\t\tsettledDecisions: [\"Use hosted storage.\"],\n\t\topenQuestions: [\"Who reviews the rollout?\"],\n\t\trepositoryFindings: [\"The repository uses Bun.\"],\n\t},\n\tplan: \"# Created\\n\",\n};\n\nlet claimTask = {\n\tid: \"claim\",\n\ttitle: \"Claim the graph\",\n\tcontext: \"The graph and run share one durable sidecar.\",\n\tgoal: \"Lock approved work for one external session.\",\n\tacceptance: [\"The graph locks.\", \"The run is durable.\"],\n\tdependsOn: [],\n};\n\nfunction createdDocument(id: string) {\n\treturn {\n\t\tid,\n\t\ttitle: creation.title,\n\t\tbrief: creation.brief,\n\t\tsource: creation.plan,\n\t\trevision: 0,\n\t};\n}\n\nclass GitHubBoundary implements GitHub {\n\treadonly userTokens: string[] = [];\n\treadonly repositoryCalls: Array<{ token: string; owner: string; name: string }> = [];\n\taccessible = true;\n\trepositoryValue: Repository = {\n\t\tid: \"R_score\",\n\t\towner: \"octo-org\",\n\t\tname: \"score\",\n\t\tfullName: \"octo-org/score\",\n\t\tprivate: true,\n\t\turl: \"https://github.test/octo-org/score\",\n\t\tdefaultBranch: \"main\",\n\t\tpermissions: { pull: true, push: false, admin: false },\n\t};\n\n\tauthorize(): string {\n\t\treturn \"\";\n\t}\n\n\tasync exchange(): Promise {\n\t\treturn grant(\"access-token\");\n\t}\n\n\tasync refresh(): Promise {\n\t\treturn grant(\"refreshed-access-token\");\n\t}\n\n\tasync user(token: string): Promise {\n\t\tthis.userTokens.push(token);\n\t\tif (token === \"denied\") throw new GitHubError(\"bad credentials\", 401);\n\t\treturn { id: `U_${token}`, login: token, avatarUrl: \"https://github.test/avatar\" };\n\t}\n\n\tasync organizationMembership() {\n\t\treturn undefined;\n\t}\n\n\tasync repositories(): Promise {\n\t\treturn { repositories: [], nextPage: undefined };\n\t}\n\n\tasync installations(): Promise {\n\t\treturn { installations: [], nextPage: undefined };\n\t}\n\n\tasync installationRepositories(): Promise {\n\t\treturn this.repositories();\n\t}\n\n\tasync repository(token: string, owner: string, name: string): Promise {\n\t\tthis.repositoryCalls.push({ token, owner, name });\n\t\tif (!this.accessible) throw new GitHubError(\"repository not found\", 404);\n\t\treturn this.value(owner, name);\n\t}\n\n\tasync repositoryAccess(): Promise {\n\t\tthrow new Error(\"installation-gated access must not be used by MCP\");\n\t}\n\n\tinvalidate(): void {}\n\n\tprivate value(owner: string, name: string): Repository {\n\t\treturn {\n\t\t\t...this.repositoryValue,\n\t\t\towner,\n\t\t\tname,\n\t\t\tfullName: `${owner}/${name}`,\n\t\t\turl: `https://github.test/${owner}/${name}`,\n\t\t};\n\t}\n}\n\nfunction grant(accessToken: string): GitHubTokenGrant {\n\treturn {\n\t\taccessToken,\n\t\taccessExpiresIn: 28_800,\n\t\trefreshToken: \"refresh-token\",\n\t\trefreshExpiresIn: 15_897_600,\n\t};\n}\n\nfunction setup() {\n\tlet now = new Date(\"2026-08-17T12:00:00.000Z\");\n\tlet storage = new MemoryStorage();\n\tlet github = new GitHubBoundary();\n\tlet key = new Uint8Array(32).fill(3);\n\tlet config = {\n\t\torigin: \"https://chopin.test\",\n\t\tappSlug: \"chopin-test\",\n\t\tclientId: \"client-id\",\n\t\tclientSecret: \"client-secret\",\n\t\tencryptionKey: key,\n\t};\n\tlet auth: HostedAuth = {\n\t\tconfig,\n\t\tstorage,\n\t\tgithub,\n\t\tadmission: new Admission(config, github, () => now.getTime()),\n\t\tsessions: new Sessions(storage, true, () => now),\n\t\tclock: () => now,\n\t};\n\treturn { auth, github, now, storage };\n}\n\nfunction request(authorization?: string | Headers): Request {\n\tlet headers = authorization instanceof Headers\n\t\t? authorization\n\t\t: authorization\n\t\t? new Headers({ authorization })\n\t\t: undefined;\n\treturn new Request(\"https://chopin.test/mcp\", { headers });\n}\n\nasync function plan(context: ReturnType) {\n\tawait context.storage.users.put({\n\t\tid: \"U_allowed\",\n\t\tlogin: \"allowed\",\n\t\tavatarUrl: \"\",\n\t\tnow: context.now,\n\t});\n\tlet channel = await context.storage.channels.create({\n\t\tid: crypto.randomUUID(),\n\t\trepositoryId: \"R_score\",\n\t\trepositoryOwner: \"octo-org\",\n\t\trepositoryName: \"score\",\n\t\ttitle: \"Release readiness\",\n\t\tcreatedBy: \"U_allowed\",\n\t\tnow: context.now,\n\t});\n\tlet lease = await context.storage.leases.acquire(\"writer\", \"mcp-test\", 60_000);\n\tif (!lease) throw new Error(\"could not acquire test lease\");\n\tlet server = { publish() {} } as unknown as Server;\n\tlet backend: Service.Backend = {\n\t\tstorage: context.storage,\n\t\tlease: () => lease,\n\t\tfatal: err => {\n\t\t\tthrow err;\n\t\t},\n\t};\n\treturn { channel, lease, server, plan: await Service.open(channel.id, backend, server) };\n}\n\ndescribe(\"the hosted MCP adapter\", () => {\n\tit(\"offers invoke_planner in hosted and local configuration, passing the caller and any live login\", async () => {\n\t\tfor (let local of [false, true]) {\n\t\t\tlet context = setup();\n\t\t\tif (local) {\n\t\t\t\tcontext.auth.config.local = {\n\t\t\t\t\tinstallation: \"local\",\n\t\t\t\t\tcredentialsDir: \"/tmp/unused\",\n\t\t\t\t\tport: 8795,\n\t\t\t\t};\n\t\t\t}\n\t\t\tcontext.github.repositoryValue.permissions.push = true;\n\t\t\tlet opened = await plan(context);\n\t\t\tlet started: PlannerInvocation[] = [];\n\t\t\tlet refusal: \"planner-owner-unavailable\" | undefined;\n\t\t\tlet adapter = hosted(context.auth, undefined, {\n\t\t\t\tasync invokePlanner(input) {\n\t\t\t\t\tstarted.push(input);\n\t\t\t\t\treturn refusal;\n\t\t\t\t},\n\t\t\t});\n\t\t\tlet caller = (await adapter.caller(request(\"Bearer allowed\")))!;\n\t\t\tlet input = { id: opened.channel.id, instruction: \" Review this.\\n\" };\n\t\t\ttry {\n\t\t\t\texpect(hosted(context.auth).invoke).toBeUndefined();\n\t\t\t\tlet listed = await handler(adapter)(\n\t\t\t\t\tnew Request(\"https://chopin.test/mcp\", {\n\t\t\t\t\t\tmethod: \"POST\",\n\t\t\t\t\t\theaders: { authorization: \"Bearer allowed\" },\n\t\t\t\t\t\tbody: JSON.stringify({ jsonrpc: \"2.0\", id: 1, method: \"tools/list\" }),\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t\texpect((await listed.json()).result.tools.map((tool: { name: string }) => tool.name))\n\t\t\t\t\t.toContain(\"invoke_planner\");\n\t\t\t\tawait context.storage.users.put({\n\t\t\t\t\tid: \"U_other\",\n\t\t\t\t\tlogin: \"other\",\n\t\t\t\t\tavatarUrl: \"\",\n\t\t\t\t\tnow: context.now,\n\t\t\t\t});\n\t\t\t\tawait context.auth.sessions.issue(\"U_other\", grant(\"another-browser\"));\n\t\t\t\texpect(await adapter.invoke!.invoke(caller, input)).toEqual({\n\t\t\t\t\tkind: \"invoked\",\n\t\t\t\t\tdocument: {\n\t\t\t\t\t\tid: opened.channel.id,\n\t\t\t\t\t\ttitle: opened.channel.title,\n\t\t\t\t\t\turl: \"https://chopin.test/documents/octo-org/score/release-readiness\",\n\t\t\t\t\t},\n\t\t\t\t});\n\t\t\t\texpect(started[0]).toMatchObject({\n\t\t\t\t\tinstruction: input.instruction,\n\t\t\t\t\tuser: { id: caller.user.id, login: caller.user.login },\n\t\t\t\t\tchannel: { id: opened.channel.id },\n\t\t\t\t});\n\t\t\t\texpect(started[0]!.session).toBeUndefined();\n\t\t\t\texpect(Object.hasOwn(started[0]!, \"checkout\")).toBe(false);\n\t\t\t\tlet session = await context.auth.sessions.issue(caller.user.id, grant(\"browser-token\"));\n\t\t\t\trefusal = \"planner-owner-unavailable\";\n\t\t\t\texpect(await adapter.invoke!.invoke(caller, input)).toEqual({\n\t\t\t\t\tkind: \"refused\",\n\t\t\t\t\tcode: \"planner-owner-unavailable\",\n\t\t\t\t});\n\t\t\t\texpect(started[1]).toMatchObject({\n\t\t\t\t\tsession: { session: { id: session.id }, user: { id: caller.user.id } },\n\t\t\t\t});\n\t\t\t} finally {\n\t\t\t\tawait Service.close(opened.plan);\n\t\t\t}\n\t\t}\n\t});\n\n\tit(\"passes a URL invocation's checkout through unverified for the harness to judge\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue.permissions.admin = true;\n\t\tlet opened = await plan(context);\n\t\tlet started: PlannerInvocation[] = [];\n\t\tlet adapter = hosted(context.auth, undefined, {\n\t\t\tasync invokePlanner(input) {\n\t\t\t\tstarted.push(input);\n\t\t\t\treturn undefined;\n\t\t\t},\n\t\t});\n\t\ttry {\n\t\t\tlet caller = (await adapter.caller(request(\"Bearer allowed\")))!;\n\t\t\tlet input = {\n\t\t\t\tid: \"https://chopin.test/documents/octo-org/score/release-readiness\",\n\t\t\t\tinstruction: \"Review\",\n\t\t\t\tcheckout: \"/does-not-exist\",\n\t\t\t};\n\t\t\texpect(await adapter.invoke!.invoke(caller, input)).toMatchObject({\n\t\t\t\tkind: \"invoked\",\n\t\t\t\tdocument: { id: opened.channel.id, url: input.id },\n\t\t\t});\n\t\t\texpect(started).toHaveLength(1);\n\t\t\texpect(started[0]).toMatchObject({\n\t\t\t\tcheckout: \"/does-not-exist\",\n\t\t\t\tinstruction: input.instruction,\n\t\t\t\trepository: { id: \"R_score\", owner: \"octo-org\", name: \"score\" },\n\t\t\t});\n\t\t} finally {\n\t\t\tawait Service.close(opened.plan);\n\t\t}\n\t});\n\n\tit(\"refuses unavailable, forbidden, archived and deleting documents before starting a Planner\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tlet calls = 0;\n\t\tlet deleting = false;\n\t\tlet callbacks = {\n\t\t\tasync invokePlanner() {\n\t\t\t\tcalls++;\n\t\t\t\treturn undefined;\n\t\t\t},\n\t\t\tisChannelDeleting: () => deleting,\n\t\t};\n\t\tlet adapter = hosted(context.auth, undefined, callbacks);\n\t\tlet caller = (await adapter.caller(request(\"Bearer allowed\")))!;\n\t\tlet invoke = (id = opened.channel.id) =>\n\t\t\tadapter.invoke!.invoke(caller, { id, instruction: \"Review\" });\n\t\ttry {\n\t\t\texpect(await invoke(crypto.randomUUID())).toEqual({\n\t\t\t\tkind: \"refused\",\n\t\t\t\tcode: \"document-unavailable\",\n\t\t\t});\n\t\t\texpect(await invoke()).toEqual({ kind: \"refused\", code: \"repository-forbidden\" });\n\t\t\tcontext.github.repositoryValue.permissions.push = true;\n\t\t\tcontext.github.repositoryValue.permissions.pull = false;\n\t\t\texpect(await invoke()).toEqual({ kind: \"refused\", code: \"repository-forbidden\" });\n\t\t\tcontext.github.repositoryValue.permissions.pull = true;\n\t\t\tdeleting = true;\n\t\t\texpect(await invoke()).toEqual({ kind: \"refused\", code: \"document-unavailable\" });\n\t\t\tdeleting = false;\n\t\t\tawait context.storage.channels.archive({ id: opened.channel.id, now: context.now });\n\t\t\texpect(await invoke()).toEqual({ kind: \"refused\", code: \"document-archived\" });\n\t\t\texpect(calls).toBe(0);\n\t\t} finally {\n\t\t\tawait Service.close(opened.plan);\n\t\t}\n\t});\n\n\tit(\"accepts exactly one bearer token and validates its GitHub identity per request\", async () => {\n\t\tlet { auth, github } = setup();\n\t\tlet adapter = hosted(auth);\n\t\tlet duplicate = new Headers();\n\t\tduplicate.append(\"authorization\", \"Bearer first\");\n\t\tduplicate.append(\"authorization\", \"Bearer second\");\n\n\t\texpect(await adapter.caller(request())).toBeUndefined();\n\t\texpect(await adapter.caller(request(\"Basic token\"))).toBeUndefined();\n\t\texpect(await adapter.caller(request(duplicate))).toBeUndefined();\n\t\texpect(await adapter.caller(request(\"Bearer denied\"))).toBeUndefined();\n\t\texpect(await adapter.caller(request(\"Bearer allowed\"))).toEqual({\n\t\t\toauthToken: \"allowed\",\n\t\t\tuser: {\n\t\t\t\tid: \"U_allowed\",\n\t\t\t\tlogin: \"allowed\",\n\t\t\t\tavatarUrl: \"https://github.test/avatar\",\n\t\t\t},\n\t\t});\n\t\texpect(await adapter.caller(request(\"bearer allowed\"))).toBeDefined();\n\t\texpect(await adapter.caller(request(\"Bearer token+/==\"))).toBeDefined();\n\t\texpect(github.userTokens).toEqual([\"denied\", \"allowed\", \"token+/==\"]);\n\t});\n\n\tit(\"lists every channel under the currently readable repository node id\", async () => {\n\t\tlet { auth, github, now, storage } = setup();\n\t\tlet adapter = hosted(auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\n\t\texpect(await adapter.documents.list(caller, \"octo-org/score\")).toEqual([]);\n\t\tawait storage.users.put({ id: \"U_allowed\", login: \"allowed\", avatarUrl: \"\", now });\n\t\tfor (let index = 0; index < 101; index++) {\n\t\t\tawait storage.channels.create({\n\t\t\t\tid: crypto.randomUUID(),\n\t\t\t\trepositoryId: \"R_score\",\n\t\t\t\trepositoryOwner: \"octo-org\",\n\t\t\t\trepositoryName: \"score\",\n\t\t\t\ttitle: `Plan ${String(index).padStart(3, \"0\")}`,\n\t\t\t\tcreatedBy: \"U_allowed\",\n\t\t\t\tnow,\n\t\t\t});\n\t\t}\n\t\tawait storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_foreign\",\n\t\t\trepositoryOwner: \"elsewhere\",\n\t\t\trepositoryName: \"private\",\n\t\t\ttitle: \"Foreign title\",\n\t\t\tcreatedBy: \"U_allowed\",\n\t\t\tnow,\n\t\t});\n\t\tlet listed = await adapter.documents.list(caller, \"octo-org/score\");\n\t\tif (listed === \"forbidden\") throw new Error(\"readable repository was forbidden\");\n\t\texpect(listed).toHaveLength(101);\n\t\texpect(listed.map(document => document.title)).not.toContain(\"Foreign title\");\n\t\texpect(github.repositoryCalls).toContainEqual({\n\t\t\ttoken: \"allowed\",\n\t\t\towner: \"octo-org\",\n\t\t\tname: \"score\",\n\t\t});\n\n\t\tgithub.repositoryValue = {\n\t\t\t...github.repositoryValue,\n\t\t\tpermissions: { pull: false, push: true, admin: false },\n\t\t};\n\t\texpect(await adapter.documents.list(caller, \"octo-org/score\")).toBe(\"forbidden\");\n\t\tgithub.accessible = false;\n\t\texpect(await adapter.documents.list(caller, \"octo-org/score\")).toBe(\"forbidden\");\n\t});\n\n\tit(\"archives, lists, reads, and restores documents through storage fallback\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet opened = await plan(context);\n\t\tawait Service.close(opened.plan);\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller || !adapter.archive || !adapter.restore) {\n\t\t\tthrow new Error(\"hosted archive adapter is unavailable\");\n\t\t}\n\t\tlet locator = \"/documents/octo-org/score/release-readiness\";\n\n\t\tlet archived = await adapter.archive.archive(caller, locator);\n\t\texpect(archived).toMatchObject({\n\t\t\tkind: \"archived\",\n\t\t\tdocument: { id: opened.channel.id, title: \"Release readiness\" },\n\t\t});\n\t\tif (archived.kind !== \"archived\") throw new Error(\"test document was not archived\");\n\t\texpect(archived.document.archivedAt).toBeString();\n\t\texpect(await adapter.archive.archive(caller, opened.channel.id)).toEqual({\n\t\t\tkind: \"unchanged\",\n\t\t\tdocument: archived.document,\n\t\t});\n\t\texpect(await adapter.documents.list(caller, \"octo-org/score\")).toEqual([]);\n\t\texpect(await adapter.documents.list(caller, \"octo-org/score\", true)).toEqual([\n\t\t\tarchived.document,\n\t\t]);\n\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toMatchObject({\n\t\t\tid: opened.channel.id,\n\t\t\tarchivedAt: archived.document.archivedAt,\n\t\t});\n\n\t\tlet restored = await adapter.restore.restore(caller, locator);\n\t\texpect(restored).toEqual({\n\t\t\tkind: \"restored\",\n\t\t\tdocument: { id: opened.channel.id, title: \"Release readiness\" },\n\t\t});\n\t\texpect(await adapter.restore.restore(caller, opened.channel.id)).toEqual({\n\t\t\tkind: \"unchanged\",\n\t\t\tdocument: { id: opened.channel.id, title: \"Release readiness\" },\n\t\t});\n\t});\n\n\tit(\"coordinates archive callbacks after direct GitHub authorization\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tawait Service.close(opened.plan);\n\t\tlet deleting = false;\n\t\tlet transitions: string[] = [];\n\t\tlet adapter = hosted(context.auth, undefined, {\n\t\t\tarchiveChannel: async (channelId, now) => {\n\t\t\t\ttransitions.push(`archive:${channelId}`);\n\t\t\t\treturn context.storage.channels.archive({ id: channelId, now });\n\t\t\t},\n\t\t\tisChannelDeleting: channelId => deleting && channelId === opened.channel.id,\n\t\t\trestoreChannel: async (channelId, now) => {\n\t\t\t\ttransitions.push(`restore:${channelId}`);\n\t\t\t\treturn context.storage.channels.restore({ id: channelId, now });\n\t\t\t},\n\t\t});\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller || !adapter.archive || !adapter.rename || !adapter.restore) {\n\t\t\tthrow new Error(\"hosted archive adapter is unavailable\");\n\t\t}\n\n\t\texpect(await adapter.archive.archive(caller, opened.channel.id)).toEqual({\n\t\t\tkind: \"forbidden\",\n\t\t});\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: false, push: true, admin: false },\n\t\t};\n\t\texpect(await adapter.archive.archive(caller, opened.channel.id)).toEqual({\n\t\t\tkind: \"unavailable\",\n\t\t});\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\texpect(await adapter.archive.archive(caller, crypto.randomUUID())).toEqual({\n\t\t\tkind: \"unavailable\",\n\t\t});\n\t\tdeleting = true;\n\t\texpect(await adapter.archive.archive(caller, opened.channel.id)).toEqual({\n\t\t\tkind: \"unavailable\",\n\t\t});\n\t\texpect(\n\t\t\tawait adapter.rename.rename(caller, {\n\t\t\t\tid: opened.channel.id,\n\t\t\t\ttitle: \"Unavailable rename\",\n\t\t\t}),\n\t\t).toEqual({ kind: \"unavailable\" });\n\t\tdeleting = false;\n\t\texpect(await adapter.archive.archive(caller, opened.channel.id)).toMatchObject({\n\t\t\tkind: \"archived\",\n\t\t});\n\t\texpect(await adapter.restore.restore(caller, opened.channel.id)).toMatchObject({\n\t\t\tkind: \"restored\",\n\t\t});\n\t\texpect(transitions).toEqual([\n\t\t\t`archive:${opened.channel.id}`,\n\t\t\t`restore:${opened.channel.id}`,\n\t\t]);\n\t});\n\n\tit(\"creates a durable repository channel for a caller with write access\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\t\tif (!adapter.create) throw new Error(\"hosted creation adapter is unavailable\");\n\n\t\tlet result = await adapter.create.create(caller, creation);\n\t\texpect(result.kind).toBe(\"created\");\n\t\tif (result.kind !== \"created\") return;\n\t\texpect(result.document.id[14]).toBe(\"5\");\n\t\tlet expected = {\n\t\t\t...createdDocument(result.document.id),\n\t\t\turl: \"/documents/octo-org/score/created-plan\",\n\t\t};\n\t\texpect(result.document).toEqual(expected);\n\t\tlet stored = await context.storage.collaboration.load(result.document.id, context.now);\n\t\tif (!stored) throw new Error(\"created channel was not stored\");\n\t\texpect(await Service.readStored(stored)).toMatchObject({\n\t\t\tcreation: {\n\t\t\t\tbrief: creation.brief,\n\t\t\t\torigin: expect.objectContaining({\n\t\t\t\t\tidempotencyKey: creation.idempotencyKey,\n\t\t\t\t\tfingerprint: creation.fingerprint,\n\t\t\t\t}),\n\t\t\t},\n\t\t});\n\t\texpect(await adapter.documents.read(caller, result.document.id)).toEqual(expected);\n\t\texpect(await adapter.documents.read(caller, result.document.url)).toEqual(expected);\n\t\texpect(await adapter.documents.read(caller, `/channels/${result.document.id}`))\n\t\t\t.toEqual(expected);\n\t\texpect(\n\t\t\tawait adapter.documents.read(caller, `https://chopin.test/channels/${result.document.id}`),\n\t\t).toEqual(expected);\n\n\t\tif (!adapter.rename) throw new Error(\"hosted rename adapter is unavailable\");\n\t\tawait adapter.rename.rename(caller, { id: result.document.id, title: \"Launch plan\" });\n\t\texpect(await adapter.documents.read(caller, result.document.url)).toEqual({\n\t\t\t...expected,\n\t\t\ttitle: \"Launch plan\",\n\t\t\turl: \"/documents/octo-org/score/launch-plan\",\n\t\t});\n\t});\n\n\tit(\"renames document metadata with current write access and announces real changes\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tawait context.storage.users.put({\n\t\t\tid: \"U_allowed\",\n\t\t\tlogin: \"allowed\",\n\t\t\tavatarUrl: \"\",\n\t\t\tnow: context.now,\n\t\t});\n\t\tlet channel = await context.storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Release plan\",\n\t\t\tcreatedBy: \"U_allowed\",\n\t\t\tnow: context.now,\n\t\t});\n\t\tlet announcements: string[] = [];\n\t\tlet adapter = hosted(context.auth, undefined, {\n\t\t\tonChannelRenamed: renamed => announcements.push(renamed.title),\n\t\t});\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller || !adapter.rename) throw new Error(\"hosted rename adapter is unavailable\");\n\n\t\tlet renamed = await adapter.rename.rename(caller, { id: channel.id, title: \"Launch plan\" });\n\t\texpect(renamed).toEqual({\n\t\t\tkind: \"renamed\",\n\t\t\tdocument: { id: channel.id, title: \"Launch plan\" },\n\t\t});\n\t\texpect((await context.storage.channels.get(channel.id))!.revision).toBe(channel.revision);\n\t\texpect(announcements).toEqual([\"Launch plan\"]);\n\n\t\tlet repeated = await adapter.rename.rename(caller, { id: channel.id, title: \"Launch plan\" });\n\t\texpect(repeated.kind).toBe(\"unchanged\");\n\t\texpect(announcements).toEqual([\"Launch plan\"]);\n\n\t\tawait context.storage.channels.archive({ id: channel.id, now: context.now });\n\t\texpect(await adapter.rename.rename(caller, { id: channel.id, title: \"Archived plan\" }))\n\t\t\t.toEqual({ kind: \"archived\" });\n\t\texpect(announcements).toEqual([\"Launch plan\"]);\n\t});\n\n\tit(\"refuses MCP renames without write access or a unique repository title\", async () => {\n\t\tlet context = setup();\n\t\tawait context.storage.users.put({\n\t\t\tid: \"U_allowed\",\n\t\t\tlogin: \"allowed\",\n\t\t\tavatarUrl: \"\",\n\t\t\tnow: context.now,\n\t\t});\n\t\tlet first = await context.storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Release plan\",\n\t\t\tcreatedBy: \"U_allowed\",\n\t\t\tnow: context.now,\n\t\t});\n\t\tawait context.storage.channels.create({\n\t\t\t...first,\n\t\t\tid: crypto.randomUUID(),\n\t\t\ttitle: \"Launch plan\",\n\t\t\tnow: context.now,\n\t\t});\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller || !adapter.rename) throw new Error(\"hosted rename adapter is unavailable\");\n\n\t\texpect(await adapter.rename.rename(caller, { id: first.id, title: \"Blocked\" })).toEqual({\n\t\t\tkind: \"forbidden\",\n\t\t});\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\texpect(await adapter.rename.rename(caller, { id: first.id, title: \"launch PLAN\" })).toEqual({\n\t\t\tkind: \"conflict\",\n\t\t});\n\t\tcontext.github.accessible = false;\n\t\texpect(await adapter.rename.rename(caller, { id: first.id, title: \"Hidden\" })).toEqual({\n\t\t\tkind: \"unavailable\",\n\t\t});\n\t});\n\n\tit(\"requires repository write access before creating a channel\", async () => {\n\t\tlet context = setup();\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\t\tif (!adapter.create) throw new Error(\"hosted creation adapter is unavailable\");\n\n\t\texpect(await adapter.create.create(caller, creation)).toEqual({ kind: \"forbidden\" });\n\t\texpect((await context.storage.channels.scan(\"R_score\", 10)).channels).toEqual([]);\n\t});\n\n\tit(\"replays an accepted idempotent creation request\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\t\tif (!adapter.create) throw new Error(\"hosted creation adapter is unavailable\");\n\n\t\tlet first = await adapter.create.create(caller, creation);\n\t\texpect(first.kind).toBe(\"created\");\n\t\tif (first.kind !== \"created\") return;\n\t\tlet archived = await context.storage.channels.archive({\n\t\t\tid: first.document.id,\n\t\t\tnow: context.now,\n\t\t});\n\t\texpect(await adapter.create.create(caller, creation)).toEqual({\n\t\t\tkind: \"replayed\",\n\t\t\tdocument: {\n\t\t\t\t...createdDocument(first.document.id),\n\t\t\t\tarchivedAt: archived.channel.archivedAt?.toISOString(),\n\t\t\t\turl: \"/documents/octo-org/score/created-plan\",\n\t\t\t},\n\t\t});\n\t\texpect((await context.storage.channels.get(first.document.id))?.archivedAt)\n\t\t\t.toEqual(archived.channel.archivedAt);\n\t});\n\n\tit(\"rejects changed content under an accepted idempotency key\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\t\tif (!adapter.create) throw new Error(\"hosted creation adapter is unavailable\");\n\t\tawait adapter.create.create(caller, creation);\n\n\t\texpect(\n\t\t\tawait adapter.create.create(caller, {\n\t\t\t\t...creation,\n\t\t\t\tfingerprint: \"changed-request\",\n\t\t\t\ttitle: \"Changed title\",\n\t\t\t}),\n\t\t).toEqual({ kind: \"conflict\" });\n\t});\n\n\tit(\"reports a title the repository already uses as title-taken, not an idempotency conflict\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\t\tif (!adapter.create) throw new Error(\"hosted creation adapter is unavailable\");\n\t\tawait adapter.create.create(caller, creation);\n\n\t\texpect(\n\t\t\tawait adapter.create.create(caller, {\n\t\t\t\t...creation,\n\t\t\t\tidempotencyKey: \"another-request\",\n\t\t\t\tfingerprint: \"another-request\",\n\t\t\t\ttitle: creation.title.toUpperCase(),\n\t\t\t}),\n\t\t).toEqual({ kind: \"title-taken\" });\n\t});\n\n\tit(\"reconstructs a stored checkpoint and journal with the validated plan revision\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tlet mutation = Room.insertDecision(opened.plan.document, {\n\t\t\tid: ulid(),\n\t\t\tquote: \"Ship the release\",\n\t\t\tby: \"allowed\",\n\t\t\tat: \"2026-08-17T12:00:00.000Z\",\n\t\t\tnotes: [{ by: \"allowed\", text: \"The checks are green\" }],\n\t\t});\n\t\tif (!mutation) throw new Error(\"test mutation was empty\");\n\t\tawait Service.publish(opened.plan, opened.server, opened.channel.id, mutation);\n\t\tlet stored = await context.storage.collaboration.load(opened.channel.id, context.now);\n\t\texpect(stored?.updates).toHaveLength(1);\n\t\tlet expectedSource = Service.source(opened.plan);\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\n\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toEqual({\n\t\t\tid: opened.channel.id,\n\t\t\ttitle: \"Release readiness\",\n\t\t\tsource: expectedSource,\n\t\t\trevision: 1,\n\t\t\turl: \"/documents/octo-org/score/release-readiness\",\n\t\t});\n\t\tawait Service.close(opened.plan);\n\t});\n\n\tit(\"reads a child document by its nested canonical URL and refuses a mismatched parent\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tlet child = await context.storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Rollback research\",\n\t\t\tcreatedBy: \"U_allowed\",\n\t\t\tparentChannelId: opened.channel.id,\n\t\t\tnow: context.now,\n\t\t});\n\t\tlet other = await context.storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Unrelated plan\",\n\t\t\tcreatedBy: \"U_allowed\",\n\t\t\tnow: context.now,\n\t\t});\n\t\tlet childPlan = await Service.open(child.id, {\n\t\t\tstorage: context.storage,\n\t\t\tlease: () => opened.lease,\n\t\t\tfatal: err => {\n\t\t\t\tthrow err;\n\t\t\t},\n\t\t}, opened.server);\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\t\tlet url = \"/documents/octo-org/score/release-readiness/children/rollback-research\";\n\n\t\ttry {\n\t\t\texpect(await adapter.documents.read(caller, child.id)).toMatchObject({ id: child.id, url });\n\t\t\texpect(await adapter.documents.read(caller, url)).toMatchObject({ id: child.id, url });\n\t\t\texpect(await adapter.documents.read(caller, `https://chopin.test${url}`))\n\t\t\t\t.toMatchObject({ id: child.id, url });\n\t\t\texpect(\n\t\t\t\tawait adapter.documents.read(\n\t\t\t\t\tcaller,\n\t\t\t\t\t`/documents/octo-org/score/${other.slug}/children/rollback-research`,\n\t\t\t\t),\n\t\t\t).toBeUndefined();\n\t\t} finally {\n\t\t\tawait Service.close(childPlan);\n\t\t\tawait Service.close(opened.plan);\n\t\t}\n\t});\n\n\tit(\"reads an open plan from its authoritative live document\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tlet mutation = Room.insertDecision(opened.plan.document, {\n\t\t\tid: ulid(),\n\t\t\tquote: \"Live and not checkpointed\",\n\t\t\tby: \"allowed\",\n\t\t\tat: \"2026-08-17T12:00:00.000Z\",\n\t\t\tnotes: [{ by: \"allowed\", text: \"Read the live document\" }],\n\t\t});\n\t\tif (!mutation) throw new Error(\"test mutation was empty\");\n\t\topened.plan.revision = 9;\n\t\tlet socket = {\n\t\t\tdata: { room: opened.channel.id, client: \"mcp-test\" },\n\t\t} as unknown as Socket;\n\t\tlet live = Rooms.join(socket);\n\t\tlive.plan = opened.plan;\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\n\t\ttry {\n\t\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toEqual({\n\t\t\t\tid: opened.channel.id,\n\t\t\t\ttitle: \"Release readiness\",\n\t\t\t\tsource: Service.source(opened.plan),\n\t\t\t\trevision: 9,\n\t\t\t\turl: \"/documents/octo-org/score/release-readiness\",\n\t\t\t});\n\t\t} finally {\n\t\t\tRooms.forget(live);\n\t\t\tawait Service.close(opened.plan);\n\t\t}\n\t});\n\n\tit(\"reads a live created plan with its public brief but not provenance\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\t\tif (!adapter.create) throw new Error(\"hosted creation adapter is unavailable\");\n\t\tlet result = await adapter.create.create(caller, creation);\n\t\tif (result.kind !== \"created\") throw new Error(\"test plan was not created\");\n\t\tlet lease = await context.storage.leases.acquire(\"writer\", \"mcp-test\", 60_000);\n\t\tif (!lease) throw new Error(\"could not acquire test lease\");\n\t\tlet server = { publish() {} } as unknown as Server;\n\t\tlet opened = await Service.open(result.document.id, {\n\t\t\tstorage: context.storage,\n\t\t\tlease: () => lease,\n\t\t\tfatal: error => {\n\t\t\t\tthrow error;\n\t\t\t},\n\t\t}, server);\n\t\tlet socket = {\n\t\t\tdata: { room: result.document.id, client: \"mcp-test\" },\n\t\t} as unknown as Socket;\n\t\tlet live = Rooms.join(socket);\n\t\tlive.plan = opened;\n\n\t\ttry {\n\t\t\texpect(await adapter.documents.read(caller, result.document.id)).toEqual({\n\t\t\t\t...createdDocument(result.document.id),\n\t\t\t\turl: \"/documents/octo-org/score/created-plan\",\n\t\t\t});\n\t\t} finally {\n\t\t\tRooms.forget(live);\n\t\t\tawait Service.close(opened);\n\t\t}\n\t});\n\n\tit(\"reports implemented and delivered lifecycle history for a live hosted plan\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet opened = await plan(context);\n\t\topened.plan.creation = {\n\t\t\tbrief: creation.brief,\n\t\t\torigin: {\n\t\t\t\tidempotencyKey: creation.idempotencyKey,\n\t\t\t\tfingerprint: creation.fingerprint,\n\t\t\t\trepository: creation.repository,\n\t\t\t\tbaseBranch: creation.baseBranch,\n\t\t\t\tbaseCommit: creation.baseCommit,\n\t\t\t\ttitle: creation.title,\n\t\t\t},\n\t\t};\n\t\texpect(\n\t\t\t(await implementationGraphs().revise(opened.plan, {\n\t\t\t\tplanRevision: 0,\n\t\t\t\tgraphRevision: 0,\n\t\t\t\toperations: [{ op: \"add\", task: claimTask }],\n\t\t\t})).ok,\n\t\t).toBe(true);\n\t\texpect((await implementationGraphs().approve(opened.plan)).ok).toBe(true);\n\t\tlet socket = {\n\t\t\tdata: { room: opened.channel.id, client: \"mcp-test\" },\n\t\t} as unknown as Socket;\n\t\tlet live = Rooms.join(socket);\n\t\tlive.plan = opened.plan;\n\t\tlet serialized: string[] = [];\n\t\tlet adapter = hosted(context.auth, { lease: () => opened.lease }, {\n\t\t\tserializeDocument: async (channelId, action) => {\n\t\t\t\tserialized.push(channelId);\n\t\t\t\treturn action();\n\t\t\t},\n\t\t});\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller || !adapter.implementations) throw new Error(\"implementation adapter unavailable\");\n\n\t\ttry {\n\t\t\tlet claimed = await adapter.implementations.startImplementation(caller, {\n\t\t\t\tid: opened.channel.id,\n\t\t\t\tplanRevision: 0,\n\t\t\t\tgraphVersion: 1,\n\t\t\t\tgraphRevision: 1,\n\t\t\t\trepository: \"octo-org/score\",\n\t\t\t\tbranch: \"tq/017\",\n\t\t\t\tcommit: \"deadbeef\",\n\t\t\t\tclient: { name: \"Codex\", version: \"1.2.3\", session: \"session-1\" },\n\t\t\t});\n\t\t\texpect(claimed).toMatchObject({ kind: \"started\" });\n\t\t\tif (claimed.kind !== \"started\") throw new Error(\"implementation was not claimed\");\n\t\t\tlet report = adapter.implementations.reportLifecycle;\n\t\t\tif (!report) throw new Error(\"lifecycle adapter unavailable\");\n\t\t\tfor (\n\t\t\t\tlet event of [\n\t\t\t\t\t{\n\t\t\t\t\t\tid: opened.channel.id,\n\t\t\t\t\t\tkind: \"start\" as const,\n\t\t\t\t\t\trunId: claimed.run.id,\n\t\t\t\t\t\ttaskId: \"claim\",\n\t\t\t\t\t\tidempotencyKey: \"live-start\",\n\t\t\t\t\t},\n\t\t\t\t\t{\n\t\t\t\t\t\tid: opened.channel.id,\n\t\t\t\t\t\tkind: \"report_pr\" as const,\n\t\t\t\t\t\trunId: claimed.run.id,\n\t\t\t\t\t\ttaskId: \"claim\",\n\t\t\t\t\t\turl: \"https://github.com/octo-org/score/pull/49\",\n\t\t\t\t\t\tstate: \"open\" as const,\n\t\t\t\t\t\tidempotencyKey: \"live-pr\",\n\t\t\t\t\t},\n\t\t\t\t\t{\n\t\t\t\t\t\tid: opened.channel.id,\n\t\t\t\t\t\tkind: \"complete\" as const,\n\t\t\t\t\t\trunId: claimed.run.id,\n\t\t\t\t\t\ttaskId: \"claim\",\n\t\t\t\t\t\tsummary: \"The live graph is durable.\",\n\t\t\t\t\t\tidempotencyKey: \"live-complete\",\n\t\t\t\t\t},\n\t\t\t\t\t{\n\t\t\t\t\t\tid: opened.channel.id,\n\t\t\t\t\t\tkind: \"report_verification\" as const,\n\t\t\t\t\t\trunId: claimed.run.id,\n\t\t\t\t\t\tpassed: true,\n\t\t\t\t\t\tsummary: \"The implementation passed review.\",\n\t\t\t\t\t\treviewerMethod: \"Ran the focused implementation suite.\",\n\t\t\t\t\t\tevidence: [{ taskId: \"claim\", evidence: [\"Focused suite passed.\"] }],\n\t\t\t\t\t\ttasksNeedingWork: [],\n\t\t\t\t\t\tidempotencyKey: \"live-verification\",\n\t\t\t\t\t},\n\t\t\t\t]\n\t\t\t) {\n\t\t\t\tlet result = await report(caller, event);\n\t\t\t\texpect(result).toMatchObject({ kind: \"accepted\" });\n\t\t\t\tif (event.kind === \"report_verification\") {\n\t\t\t\t\texpect(result).toMatchObject({\n\t\t\t\t\t\tlifecycle: {\n\t\t\t\t\t\t\texecution: { state: \"idle\" },\n\t\t\t\t\t\t\thistory: [{ outcome: { kind: \"implemented\" } }],\n\t\t\t\t\t\t},\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t\texpect(opened.plan.execution).toBeUndefined();\n\t\t\texpect(opened.plan.lifecycle.history[0]?.events.some(event => \"runId\" in event)).toBe(false);\n\t\t\texpect(\n\t\t\t\tawait report(caller, {\n\t\t\t\t\tid: opened.channel.id,\n\t\t\t\t\tkind: \"report_pr\",\n\t\t\t\t\trunId: claimed.run.id,\n\t\t\t\t\ttaskId: \"claim\",\n\t\t\t\t\turl: \"https://github.com/octo-org/score/pull/49\",\n\t\t\t\t\tstate: \"merged\",\n\t\t\t\t\tidempotencyKey: \"live-merge\",\n\t\t\t\t}),\n\t\t\t).toMatchObject({\n\t\t\t\tkind: \"accepted\",\n\t\t\t\tlifecycle: { history: [{ outcome: { kind: \"delivered\" } }] },\n\t\t\t});\n\t\t\texpect(await adapter.implementations.readImplementation(caller, opened.channel.id))\n\t\t\t\t.toMatchObject({\n\t\t\t\t\texecution: { state: \"idle\" },\n\t\t\t\t\thistory: [{ outcome: { kind: \"delivered\" } }],\n\t\t\t\t});\n\t\t\texpect(serialized).toEqual(Array.from({ length: 6 }, () => opened.channel.id));\n\t\t} finally {\n\t\t\tRooms.forget(live);\n\t\t\tawait Service.close(opened.plan);\n\t\t}\n\t});\n\n\tit(\"atomically stores one implementation claim for a closed hosted plan\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet opened = await plan(context);\n\t\topened.plan.creation = {\n\t\t\tbrief: creation.brief,\n\t\t\torigin: {\n\t\t\t\tidempotencyKey: creation.idempotencyKey,\n\t\t\t\tfingerprint: creation.fingerprint,\n\t\t\t\trepository: creation.repository,\n\t\t\t\tbaseBranch: creation.baseBranch,\n\t\t\t\tbaseCommit: creation.baseCommit,\n\t\t\t\ttitle: creation.title,\n\t\t\t},\n\t\t};\n\t\tlet graph = await implementationGraphs().revise(opened.plan, {\n\t\t\tplanRevision: 0,\n\t\t\tgraphRevision: 0,\n\t\t\toperations: [{ op: \"add\", task: claimTask }],\n\t\t});\n\t\texpect(graph.ok).toBe(true);\n\t\texpect((await implementationGraphs().approve(opened.plan)).ok).toBe(true);\n\t\tawait Service.close(opened.plan);\n\n\t\tlet adapter = hosted(context.auth, { lease: () => opened.lease });\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller || !adapter.implementations) throw new Error(\"implementation adapter unavailable\");\n\t\tlet input = {\n\t\t\tid: opened.channel.id,\n\t\t\tplanRevision: 0,\n\t\t\tgraphVersion: 1,\n\t\t\tgraphRevision: 1,\n\t\t\trepository: \"octo-org/score\",\n\t\t\tbranch: \"tq/017\",\n\t\t\tcommit: \"deadbeef\",\n\t\t\tclient: { name: \"Codex\", version: \"1.2.3\", session: \"session-1\" },\n\t\t};\n\t\texpect(\n\t\t\tawait adapter.implementations.startImplementation(caller, {\n\t\t\t\t...input,\n\t\t\t\tgraphVersion: 2,\n\t\t\t}),\n\t\t).toEqual({ kind: \"refused\", reason: \"run\" });\n\t\tlet claimed = await adapter.implementations.startImplementation(caller, input);\n\t\texpect(claimed).toMatchObject({\n\t\t\tkind: \"started\",\n\t\t\trun: {\n\t\t\t\tuser: \"allowed\",\n\t\t\t\tclient: { name: \"Codex\", version: \"1.2.3\" },\n\t\t\t\tsession: \"session-1\",\n\t\t\t},\n\t\t});\n\t\tif (claimed.kind !== \"started\") throw new Error(\"implementation was not claimed\");\n\n\t\tlet stored = await context.storage.collaboration.load(opened.channel.id, context.now);\n\t\tif (!stored) throw new Error(\"claimed plan was not stored\");\n\t\texpect(await Service.readStored(stored)).toMatchObject({\n\t\t\tgraph: { versions: [{ state: \"locked\" }] },\n\t\t\texecution: { branch: \"tq/017\", commit: \"deadbeef\" },\n\t\t});\n\t\texpect(await adapter.implementations.readImplementation(caller, opened.channel.id))\n\t\t\t.toMatchObject({\n\t\t\t\tgraph: { state: \"locked\" },\n\t\t\t\texecution: { state: \"active\", run: { session: \"session-1\" } },\n\t\t\t});\n\t\texpect(\n\t\t\tawait adapter.implementations.readImplementation(\n\t\t\t\tcaller,\n\t\t\t\t\"/documents/octo-org/score/release-readiness\",\n\t\t\t),\n\t\t).toMatchObject({\n\t\t\tgraph: { state: \"locked\" },\n\t\t\texecution: { state: \"active\", run: { session: \"session-1\" } },\n\t\t});\n\t\texpect(\n\t\t\tawait adapter.implementations.readImplementation(\n\t\t\t\tcaller,\n\t\t\t\t`/channels/${opened.channel.id}`,\n\t\t\t),\n\t\t).toMatchObject({ graph: { state: \"locked\" } });\n\t\texpect(await adapter.implementations.startImplementation(caller, input)).toMatchObject({\n\t\t\tkind: \"active\",\n\t\t\trun: { session: \"session-1\" },\n\t\t});\n\t\tlet archived = await context.storage.channels.archive({\n\t\t\tid: opened.channel.id,\n\t\t\tnow: context.now,\n\t\t});\n\t\texpect(await adapter.implementations.readImplementation(caller, opened.channel.id))\n\t\t\t.toMatchObject({\n\t\t\t\tdocument: { archivedAt: archived.channel.archivedAt?.toISOString() },\n\t\t\t\texecution: { state: \"active\" },\n\t\t\t});\n\t\texpect(await adapter.implementations.startImplementation(caller, input)).toEqual({\n\t\t\tkind: \"refused\",\n\t\t\treason: \"document-archived\",\n\t\t});\n\t\tlet report = adapter.implementations.reportLifecycle;\n\t\texpect(report).toBeTypeOf(\"function\");\n\t\tif (!report) return;\n\t\tlet start = {\n\t\t\tid: opened.channel.id,\n\t\t\tkind: \"start\" as const,\n\t\t\trunId: claimed.run.id,\n\t\t\ttaskId: \"claim\",\n\t\t\tidempotencyKey: \"start-claim\",\n\t\t};\n\t\texpect(await report(caller, start)).toMatchObject({\n\t\t\tkind: \"accepted\",\n\t\t\tlifecycle: {\n\t\t\t\tactivity: { tasks: [{ id: \"claim\", state: \"in_progress\" }] },\n\t\t\t},\n\t\t});\n\t\texpect(await report(caller, start)).toMatchObject({ kind: \"replayed\" });\n\t\tlet progressed = await context.storage.collaboration.load(opened.channel.id, context.now);\n\t\tif (!progressed) throw new Error(\"lifecycle progress was not stored\");\n\t\texpect((await Service.readStored(progressed)).lifecycle).toMatchObject({\n\t\t\tevents: [{ kind: \"start\", taskId: \"claim\", idempotencyKey: \"start-claim\" }],\n\t\t});\n\t\texpect(\n\t\t\tawait report(caller, {\n\t\t\t\tid: opened.channel.id,\n\t\t\t\tkind: \"request_revision\",\n\t\t\t\trunId: claimed.run.id,\n\t\t\t\treason: \"The graph needs another delivery step.\",\n\t\t\t\tidempotencyKey: \"request-revision\",\n\t\t\t}),\n\t\t).toMatchObject({\n\t\t\tkind: \"accepted\",\n\t\t\tlifecycle: {\n\t\t\t\texecution: { state: \"idle\" },\n\t\t\t\thistory: [{ outcome: { kind: \"revision_requested\" } }],\n\t\t\t},\n\t\t});\n\t\tlet released = await context.storage.collaboration.load(opened.channel.id, context.now);\n\t\tif (!released) throw new Error(\"released lifecycle was not stored\");\n\t\tlet durable = await Service.readStored(released);\n\t\texpect(durable).toMatchObject({\n\t\t\tgraph: { versions: [{ state: \"approved\" }] },\n\t\t});\n\t\texpect(durable.lifecycle?.history[0]?.events.at(-1)).toMatchObject({\n\t\t\tkind: \"request_revision\",\n\t\t\treason: \"The graph needs another delivery step.\",\n\t\t});\n\t\texpect(durable.lifecycle?.history[0]).not.toHaveProperty(\"outcome\");\n\t\texpect(durable.execution).toBeUndefined();\n\t});\n\n\tit(\"reports deleting, missing, and inaccessible implementation documents as unavailable\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet opened = await plan(context);\n\t\tawait Service.close(opened.plan);\n\t\tlet deleting = true;\n\t\tlet adapter = hosted(context.auth, { lease: () => opened.lease }, {\n\t\t\tisChannelDeleting: channelId => deleting && channelId === opened.channel.id,\n\t\t});\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller || !adapter.implementations?.reportLifecycle) {\n\t\t\tthrow new Error(\"implementation adapter unavailable\");\n\t\t}\n\t\tlet input = {\n\t\t\tid: opened.channel.id,\n\t\t\tplanRevision: 0,\n\t\t\tgraphVersion: 1,\n\t\t\tgraphRevision: 1,\n\t\t\trepository: \"octo-org/score\",\n\t\t\tbranch: \"tq/017\",\n\t\t\tcommit: \"deadbeef\",\n\t\t\tclient: { name: \"Codex\", version: \"1.2.3\", session: \"session-1\" },\n\t\t};\n\t\tlet report = {\n\t\t\tid: opened.channel.id,\n\t\t\tkind: \"start\" as const,\n\t\t\trunId: \"run-1\",\n\t\t\ttaskId: \"claim\",\n\t\t\tidempotencyKey: \"start-claim\",\n\t\t};\n\n\t\texpect(await adapter.implementations.startImplementation(caller, input)).toEqual({\n\t\t\tkind: \"unavailable\",\n\t\t});\n\t\texpect(await adapter.implementations.reportLifecycle(caller, report)).toEqual({\n\t\t\tkind: \"unavailable\",\n\t\t});\n\t\tdeleting = false;\n\t\tlet missingId = crypto.randomUUID();\n\t\texpect(\n\t\t\tawait adapter.implementations.startImplementation(caller, { ...input, id: missingId }),\n\t\t).toEqual({ kind: \"unavailable\" });\n\t\texpect(\n\t\t\tawait adapter.implementations.reportLifecycle(caller, { ...report, id: missingId }),\n\t\t).toEqual({ kind: \"unavailable\" });\n\n\t\tcontext.github.accessible = false;\n\t\texpect(await adapter.implementations.startImplementation(caller, input)).toEqual({\n\t\t\tkind: \"unavailable\",\n\t\t});\n\t\texpect(await adapter.implementations.reportLifecycle(caller, report)).toEqual({\n\t\t\tkind: \"unavailable\",\n\t\t});\n\t});\n\n\tit(\"refuses a verified graph but claims a new version for a closed hosted plan\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet opened = await plan(context);\n\t\topened.plan.creation = {\n\t\t\tbrief: creation.brief,\n\t\t\torigin: {\n\t\t\t\tidempotencyKey: creation.idempotencyKey,\n\t\t\t\tfingerprint: creation.fingerprint,\n\t\t\t\trepository: creation.repository,\n\t\t\t\tbaseBranch: creation.baseBranch,\n\t\t\t\tbaseCommit: creation.baseCommit,\n\t\t\t\ttitle: creation.title,\n\t\t\t},\n\t\t};\n\t\texpect(\n\t\t\t(await implementationGraphs().revise(opened.plan, {\n\t\t\t\tplanRevision: 0,\n\t\t\t\tgraphRevision: 0,\n\t\t\t\toperations: [{ op: \"add\", task: claimTask }],\n\t\t\t})).ok,\n\t\t).toBe(true);\n\t\texpect((await implementationGraphs().approve(opened.plan)).ok).toBe(true);\n\t\tawait Service.close(opened.plan);\n\n\t\tlet adapter = hosted(context.auth, { lease: () => opened.lease });\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller || !adapter.implementations) throw new Error(\"implementation adapter unavailable\");\n\t\tlet input = {\n\t\t\tid: opened.channel.id,\n\t\t\tplanRevision: 0,\n\t\t\tgraphVersion: 1,\n\t\t\tgraphRevision: 1,\n\t\t\trepository: \"octo-org/score\",\n\t\t\tbranch: \"tq/017\",\n\t\t\tcommit: \"deadbeef\",\n\t\t\tclient: { name: \"Codex\", version: \"1.2.3\", session: \"session-1\" },\n\t\t};\n\t\tlet claimed = await adapter.implementations.startImplementation(caller, input);\n\t\texpect(claimed).toMatchObject({ kind: \"started\" });\n\t\tif (claimed.kind !== \"started\") throw new Error(\"implementation was not claimed\");\n\t\tlet report = adapter.implementations.reportLifecycle;\n\t\tif (!report) throw new Error(\"lifecycle adapter unavailable\");\n\t\tfor (\n\t\t\tlet event of [\n\t\t\t\t{\n\t\t\t\t\tid: opened.channel.id,\n\t\t\t\t\tkind: \"start\" as const,\n\t\t\t\t\trunId: claimed.run.id,\n\t\t\t\t\ttaskId: \"claim\",\n\t\t\t\t\tidempotencyKey: \"verified-start\",\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tid: opened.channel.id,\n\t\t\t\t\tkind: \"report_pr\" as const,\n\t\t\t\t\trunId: claimed.run.id,\n\t\t\t\t\ttaskId: \"claim\",\n\t\t\t\t\turl: \"https://github.com/octo-org/score/pull/49\",\n\t\t\t\t\tstate: \"open\" as const,\n\t\t\t\t\tidempotencyKey: \"verified-pr\",\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tid: opened.channel.id,\n\t\t\t\t\tkind: \"complete\" as const,\n\t\t\t\t\trunId: claimed.run.id,\n\t\t\t\t\ttaskId: \"claim\",\n\t\t\t\t\tsummary: \"The graph is durable.\",\n\t\t\t\t\tidempotencyKey: \"verified-complete\",\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tid: opened.channel.id,\n\t\t\t\t\tkind: \"report_verification\" as const,\n\t\t\t\t\trunId: claimed.run.id,\n\t\t\t\t\tpassed: true,\n\t\t\t\t\tsummary: \"The implementation passed review.\",\n\t\t\t\t\treviewerMethod: \"Ran the focused implementation suite.\",\n\t\t\t\t\tevidence: [{ taskId: \"claim\", evidence: [\"Focused suite passed.\"] }],\n\t\t\t\t\ttasksNeedingWork: [],\n\t\t\t\t\tidempotencyKey: \"verified-report\",\n\t\t\t\t},\n\t\t\t]\n\t\t) {\n\t\t\texpect(await report(caller, event)).toMatchObject({ kind: \"accepted\" });\n\t\t}\n\t\texpect(await adapter.implementations.readImplementation(caller, opened.channel.id))\n\t\t\t.toMatchObject({\n\t\t\t\texecution: { state: \"idle\" },\n\t\t\t\thistory: [{\n\t\t\t\t\toutcome: { kind: \"implemented\" },\n\t\t\t\t\tprogress: { verification: { passed: true } },\n\t\t\t\t}],\n\t\t\t});\n\t\tlet verifiedStored = await context.storage.collaboration.load(opened.channel.id, context.now);\n\t\tif (!verifiedStored) throw new Error(\"verified lifecycle was not stored\");\n\t\tlet verifiedDurable = await Service.readStored(verifiedStored);\n\t\texpect(verifiedDurable.execution).toBeUndefined();\n\t\texpect(verifiedDurable.lifecycle?.history[0]?.events.at(-1)).toMatchObject({\n\t\t\tkind: \"report_verification\",\n\t\t\tpassed: true,\n\t\t});\n\t\texpect(verifiedDurable.lifecycle?.history[0]?.events.some(event => \"runId\" in event)).toBe(\n\t\t\tfalse,\n\t\t);\n\n\t\texpect(\n\t\t\tawait adapter.implementations.startImplementation(caller, {\n\t\t\t\t...input,\n\t\t\t\tclient: { ...input.client, session: \"session-2\" },\n\t\t\t}),\n\t\t).toEqual({ kind: \"refused\", reason: \"already-verified\" });\n\n\t\tlet reopened = await Service.open(opened.channel.id, {\n\t\t\tstorage: context.storage,\n\t\t\tlease: () => opened.lease,\n\t\t\tfatal: error => {\n\t\t\t\tthrow error;\n\t\t\t},\n\t\t}, opened.server);\n\t\texpect(\n\t\t\t(await implementationGraphs().revise(reopened, {\n\t\t\t\tplanRevision: 0,\n\t\t\t\tgraphRevision: 1,\n\t\t\t\toperations: [{ op: \"replace\", id: \"claim\", task: claimTask }],\n\t\t\t})).ok,\n\t\t).toBe(true);\n\t\texpect((await implementationGraphs().approve(reopened)).ok).toBe(true);\n\t\tawait Service.close(reopened);\n\n\t\tlet newer = await adapter.implementations.startImplementation(caller, {\n\t\t\t...input,\n\t\t\tgraphVersion: 2,\n\t\t\tclient: { ...input.client, session: \"session-2\" },\n\t\t});\n\t\texpect(newer).toMatchObject({ kind: \"started\" });\n\t\tif (newer.kind !== \"started\") throw new Error(\"new implementation was not claimed\");\n\t\tlet beforeMerge = await context.storage.collaboration.load(opened.channel.id, context.now);\n\t\tif (!beforeMerge) throw new Error(\"new implementation was not stored\");\n\t\tlet beforeMergeState = await Service.readStored(beforeMerge);\n\t\texpect(\n\t\t\tawait report(caller, {\n\t\t\t\tid: opened.channel.id,\n\t\t\t\tkind: \"report_pr\",\n\t\t\t\trunId: claimed.run.id,\n\t\t\t\ttaskId: \"claim\",\n\t\t\t\turl: \"https://github.com/octo-org/score/pull/49\",\n\t\t\t\tstate: \"merged\",\n\t\t\t\tidempotencyKey: \"verified-merge\",\n\t\t\t}),\n\t\t).toMatchObject({\n\t\t\tkind: \"accepted\",\n\t\t\tlifecycle: {\n\t\t\t\texecution: { state: \"active\" },\n\t\t\t\tactivity: { tasks: [{ id: \"claim\", state: \"queued\" }] },\n\t\t\t\thistory: [{ outcome: { kind: \"delivered\" } }],\n\t\t\t},\n\t\t});\n\t\tlet mergedStored = await context.storage.collaboration.load(opened.channel.id, context.now);\n\t\tif (!mergedStored) throw new Error(\"delivered lifecycle was not stored\");\n\t\tlet mergedState = await Service.readStored(mergedStored);\n\t\texpect(mergedState.execution).toEqual(beforeMergeState.execution);\n\t\texpect(mergedState.lifecycle?.events).toEqual(beforeMergeState.lifecycle?.events);\n\t\texpect(mergedState.lifecycle?.history[0]?.events.at(-1)).toMatchObject({\n\t\t\tkind: \"report_pr\",\n\t\t\tstate: \"merged\",\n\t\t});\n\t});\n\n\tit(\"makes an inaccessible channel indistinguishable from a missing channel\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tawait Service.close(opened.plan);\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\t\tlet missing = await adapter.documents.read(caller, crypto.randomUUID());\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tid: \"R_replaced\",\n\t\t\tpermissions: { pull: true, push: true, admin: true },\n\t\t};\n\n\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toBe(missing);\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tid: \"R_score\",\n\t\t\tpermissions: { pull: false, push: true, admin: true },\n\t\t};\n\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toBe(missing);\n\t\texpect(missing).toBeUndefined();\n\t});\n\n\tit(\"treats malformed durable state as an absent channel\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tawait Service.close(opened.plan);\n\t\tlet stored = await context.storage.collaboration.load(opened.channel.id, context.now);\n\t\tif (!stored?.snapshot) throw new Error(\"test channel has no checkpoint\");\n\t\tawait context.storage.collaboration.commit({\n\t\t\tchannelId: opened.channel.id,\n\t\t\tlease: opened.lease,\n\t\t\texpectedRevision: stored.channel.revision,\n\t\t\toperationId: crypto.randomUUID(),\n\t\t\tepoch: stored.snapshot.epoch,\n\t\t\tsidecar: { version: 1, revision: 40 },\n\t\t\tevents: [],\n\t\t\tnow: context.now,\n\t\t});\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\n\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toBeUndefined();\n\t});\n\n\tit(\"treats an invalid open questionnaire as absent durable state\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tawait Service.close(opened.plan);\n\t\tlet stored = await context.storage.collaboration.load(opened.channel.id, context.now);\n\t\tif (!stored?.snapshot) throw new Error(\"test channel has no checkpoint\");\n\t\tawait context.storage.collaboration.commit({\n\t\t\tchannelId: opened.channel.id,\n\t\t\tlease: opened.lease,\n\t\t\texpectedRevision: stored.channel.revision,\n\t\t\toperationId: crypto.randomUUID(),\n\t\t\tepoch: stored.snapshot.epoch,\n\t\t\tsidecar: {\n\t\t\t\tversion: 1,\n\t\t\t\trevision: 40,\n\t\t\t\tdocumentSeq: 0,\n\t\t\t\tquestions: [{ id: \"question-1\", status: \"open\", definition: {} }],\n\t\t\t\topenQuestions: [{\n\t\t\t\t\tid: \"question-1\",\n\t\t\t\t\tdefinition: {},\n\t\t\t\t\tmodel: [],\n\t\t\t\t\trevision: -1,\n\t\t\t\t}],\n\t\t\t\tthreads: [],\n\t\t\t\ttranscript: [],\n\t\t\t},\n\t\t\tevents: [],\n\t\t\tnow: context.now,\n\t\t});\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\n\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toBeUndefined();\n\t});\n\n\tit(\"rewrites a closed document, replays the original result, and conflicts on a changed key\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet opened = await plan(context);\n\t\tawait Service.close(opened.plan);\n\t\tlet adapter = hosted(context.auth, { lease: () => opened.lease });\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller || !adapter.update) throw new Error(\"hosted update adapter is unavailable\");\n\t\tlet client = { name: \"Codex\", version: \"1.2.3\" };\n\t\tlet input = {\n\t\t\tid: opened.channel.id,\n\t\t\trevision: 0,\n\t\t\tplan: \"# Revised\\n\\nUpdated prose.\\n\",\n\t\t\tidempotencyKey: \"update-1\",\n\t\t\tfingerprint: \"same-request\",\n\t\t};\n\n\t\tlet updated = await adapter.update.update(caller, input, client);\n\t\texpect(updated).toMatchObject({\n\t\t\tkind: \"updated\",\n\t\t\tdocument: {\n\t\t\t\tid: opened.channel.id,\n\t\t\t\tsource: \"# Revised\\n\\nUpdated prose.\\n\",\n\t\t\t\trevision: 1,\n\t\t\t\turl: \"/documents/octo-org/score/release-readiness\",\n\t\t\t},\n\t\t});\n\t\texpect(await adapter.update.update(caller, { ...input, fingerprint: \"changed\" }, client))\n\t\t\t.toEqual({ kind: \"conflict\" });\n\n\t\tlet later = await adapter.update.update(caller, {\n\t\t\tid: opened.channel.id,\n\t\t\trevision: 1,\n\t\t\tplan: \"# Later\\n\",\n\t\t\tidempotencyKey: \"update-2\",\n\t\t\tfingerprint: \"later-request\",\n\t\t}, client);\n\t\texpect(later).toMatchObject({\n\t\t\tkind: \"updated\",\n\t\t\tdocument: { revision: 2, source: \"# Later\\n\" },\n\t\t});\n\t\texpect(await adapter.update.update(caller, input, client)).toMatchObject({\n\t\t\tkind: \"replayed\",\n\t\t\tdocument: {\n\t\t\t\tsource: \"# Revised\\n\\nUpdated prose.\\n\",\n\t\t\t\trevision: 1,\n\t\t\t},\n\t\t});\n\t});\n\n\tit(\"refuses a stale rewrite, a pull-only caller, and a locked implementation\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet opened = await plan(context);\n\t\topened.plan.creation = {\n\t\t\tbrief: creation.brief,\n\t\t\torigin: {\n\t\t\t\tidempotencyKey: creation.idempotencyKey,\n\t\t\t\tfingerprint: creation.fingerprint,\n\t\t\t\trepository: creation.repository,\n\t\t\t\tbaseBranch: creation.baseBranch,\n\t\t\t\tbaseCommit: creation.baseCommit,\n\t\t\t\ttitle: creation.title,\n\t\t\t},\n\t\t};\n\t\texpect(\n\t\t\t(await implementationGraphs().revise(opened.plan, {\n\t\t\t\tplanRevision: 0,\n\t\t\t\tgraphRevision: 0,\n\t\t\t\toperations: [{ op: \"add\", task: claimTask }],\n\t\t\t})).ok,\n\t\t).toBe(true);\n\t\texpect((await implementationGraphs().approve(opened.plan)).ok).toBe(true);\n\t\tawait Service.close(opened.plan);\n\t\tlet adapter = hosted(context.auth, { lease: () => opened.lease });\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller || !adapter.update || !adapter.implementations) {\n\t\t\tthrow new Error(\"hosted update adapter is unavailable\");\n\t\t}\n\t\tlet client = { name: \"Codex\", version: \"1.2.3\" };\n\n\t\texpect(\n\t\t\tawait adapter.update.update(caller, {\n\t\t\t\tid: opened.channel.id,\n\t\t\t\trevision: 9,\n\t\t\t\tplan: \"# Stale\\n\",\n\t\t\t\tidempotencyKey: \"stale\",\n\t\t\t\tfingerprint: \"stale\",\n\t\t\t}, client),\n\t\t).toEqual({ kind: \"revision-conflict\", revision: 0 });\n\n\t\texpect(\n\t\t\tawait adapter.implementations.startImplementation(caller, {\n\t\t\t\tid: opened.channel.id,\n\t\t\t\tplanRevision: 0,\n\t\t\t\tgraphVersion: 1,\n\t\t\t\tgraphRevision: 1,\n\t\t\t\trepository: \"octo-org/score\",\n\t\t\t\tbranch: \"tq/017\",\n\t\t\t\tcommit: \"deadbeef\",\n\t\t\t\tclient: { name: \"Codex\", version: \"1.2.3\", session: \"session-1\" },\n\t\t\t}),\n\t\t).toMatchObject({ kind: \"started\" });\n\t\texpect(\n\t\t\tawait adapter.update.update(caller, {\n\t\t\t\tid: opened.channel.id,\n\t\t\t\trevision: 0,\n\t\t\t\tplan: \"# Locked\\n\",\n\t\t\t\tidempotencyKey: \"locked\",\n\t\t\t\tfingerprint: \"locked\",\n\t\t\t}, client),\n\t\t).toEqual({ kind: \"locked\" });\n\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: false, admin: false },\n\t\t};\n\t\texpect(\n\t\t\tawait adapter.update.update(caller, {\n\t\t\t\tid: opened.channel.id,\n\t\t\t\trevision: 0,\n\t\t\t\tplan: \"# Forbidden\\n\",\n\t\t\t\tidempotencyKey: \"forbidden\",\n\t\t\t\tfingerprint: \"forbidden\",\n\t\t\t}, client),\n\t\t).toEqual({ kind: \"forbidden\" });\n\t});\n\n\tit(\"broadcasts live change marks after a durable rewrite and not a planner cursor\", async () => {\n\t\tlet context = setup();\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet frames: Array<{ kind?: string }> = [];\n\t\tlet opened = await plan(context);\n\t\topened.server = {\n\t\t\tpublish(_topic: string, frame: string) {\n\t\t\t\tframes.push(JSON.parse(frame) as { kind?: string });\n\t\t\t},\n\t\t} as unknown as Server;\n\t\topened.plan.server = opened.server;\n\t\tlet socket = {\n\t\t\tdata: { room: opened.channel.id, client: \"mcp-test\" },\n\t\t} as unknown as Socket;\n\t\tlet live = Rooms.join(socket);\n\t\tlive.plan = opened.plan;\n\t\tlet adapter = hosted(context.auth, { lease: () => opened.lease });\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller || !adapter.update) throw new Error(\"hosted update adapter is unavailable\");\n\n\t\ttry {\n\t\t\tlet updated = await adapter.update.update(caller, {\n\t\t\t\tid: opened.channel.id,\n\t\t\t\trevision: 0,\n\t\t\t\tplan: \"# Live rewrite\\n\",\n\t\t\t\tidempotencyKey: \"live-update\",\n\t\t\t\tfingerprint: \"live-update\",\n\t\t\t}, { name: \"Codex\", version: \"1.2.3\" });\n\t\t\texpect(updated).toMatchObject({\n\t\t\t\tkind: \"updated\",\n\t\t\t\tdocument: { source: \"# Live rewrite\\n\", revision: 1 },\n\t\t\t});\n\t\t\texpect(frames.map(frame => frame.kind)).toEqual([\n\t\t\t\t\"plan:update\",\n\t\t\t\t\"plan:changes\",\n\t\t\t\t\"plan:anchors\",\n\t\t\t]);\n\t\t\texpect(frames.some(frame => frame.kind === \"plan:awareness\")).toBe(false);\n\t\t\texpect(frames.find(frame => frame.kind === \"plan:update\")).toMatchObject({ agent: true });\n\t\t\tlet marked = frames.find(frame => frame.kind === \"plan:changes\") as\n\t\t\t\t| { changes: Array<{ attribution?: unknown }> }\n\t\t\t\t| undefined;\n\t\t\texpect(marked?.changes[0]?.attribution).toMatchObject({\n\t\t\t\tclient: { name: \"Codex\", version: \"1.2.3\" },\n\t\t\t\tuser: caller.user.login,\n\t\t\t});\n\t\t\texpect(Service.source(opened.plan)).toBe(\"# Live rewrite\\n\");\n\t\t} finally {\n\t\t\tRooms.forget(live);\n\t\t\tawait Service.close(opened.plan);\n\t\t}\n\t});\n});\n","editable",false,"branch","documentNavigation","repo","githubnext/chopin","repoId","7d1a8ac3-35b0-4dea-85d4-06a980f3bada","ownerId","org:89615882","site","nexthub","private","admin","settings","maintainer","triage","starred","stars",0,"watchers","watching","pinned","notify","views",[183,184,185,186,187,188,189,190,191,192,193,194,195],"navigation",{"_55":56,"_139":140,"_141":142,"_143":144,"_145":146,"_147":148,"_149":150},"sources",[],"viewer","meta",{"_131":132,"_133":134,"_135":136,"_43":32,"_137":14,"_138":32,"_49":50,"_51":50},"branches",[74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,14,127,128,129,130],"tags",[70,71,72,73],"cloneUrl","https://git.nexthub.sh/githubnext/chopin.git","color-controls-slice-1","color-controls-slice-2","color-controls-slice-3","color-controls-slice-4","Krzysztof-Cieslak-patch-1","Krzysztof-Cieslak-patch-2","Maggie/app-preview-toolkit","Maggie/ci-playwright-install-timeout","Maggie/collaborative-visual-decision","Maggie/design-audit","Maggie/generic-visual-decision-runtime","Maggie/impeccable-chopin-metadata","Maggie/jev-chat-product","Maggie/jev-composed-assessment","Maggie/native-document-layouts","Maggie/openui-composition-product","Maggie/openui-composition-trial","Maggie/planner-visual-authoring","Maggie/planner-visual-requests","Maggie/visual-selection-eval","artifacts/pr-419-live-preview-20261009","automation/pr-maintenance-state","automation/use-effect/callout-disabled-picker-8cf9e49ba5c09471","automation/use-effect/collaboration-options-ref-4e3a5a08a879a5ae","automation/use-effect/room-workspace-effective-access-a57d40866c71bed0","chore/bun-1.4.2","color-controls","color-controls-plan","comments","design-pr-assets","design/archived-decisions-badge","design/channel-route-remount","design/chat-decision-entry","design/conversation-analysis-markers","design/decision-evidence","design/settled-line-icon","dev/integration","diagram-step-controls","feat/liveapp-frontend-pilot","feat/local-experiments","feat/local-launcher-tracer","fix/autolink-mdx-crash","github-pills/2-pills","github-pills/3-hover-card","maggie/app-preview-toolkit","maggie/ci-playwright-install-timeout","maggie/collaborative-visual-decision","maggie/design-audit","maggie/generic-visual-decision-runtime","maggie/impeccable-chopin-metadata","maggie/jev-composed-assessment","maggie/native-document-layouts","maggie/openui-composition-product","maggie/openui-composition-trial","maggie/planner-visual-authoring","maggie/planner-visual-requests","maggie/visual-selection-eval","plain-text-fence-chrome","tokens/09-copy","wireframes/2-renderer","wireframes/3-planner","description","Let's compose rich plans together","owner","githubnext","section","","head","empty","pins",[165,166,167],"documents",{"_160":161,"_162":163},"code",{"_156":157,"_158":159},"automations",{"_153":154,"_155":-5},"delivery",{"_151":50,"_152":-5},"tag","04zvKQ8QOrDUF8TO1Ovz0Zy8_TT","releases","applications","workflows",3,"deployments","commits",1000,"changes",13,"counts",{"_164":163},"total",11,"issue",{"_168":158,"_170":181,"_15":158,"_172":182,"_53":174,"_175":32,"_176":174,"_177":159},{"_168":178,"_170":179,"_15":178,"_172":180,"_53":174,"_175":32,"_176":174,"_177":50},{"_168":169,"_170":171,"_15":169,"_172":173,"_53":174,"_175":32,"_176":174,"_177":163},"id","issues","name","Issues","filters",{},true,"saved","pinnable","count","tasks","Tasks",{},"Changes",{},{"_168":158,"_170":181,"_15":158,"_172":226,"_53":174,"_175":32,"_176":174},{"_168":178,"_170":179,"_15":178,"_172":225,"_53":174,"_175":32,"_176":174},{"_168":169,"_170":171,"_15":169,"_172":224,"_53":174,"_175":32,"_176":174},{"_168":221,"_170":222,"_15":221,"_172":223,"_53":32,"_175":32,"_176":174},{"_168":218,"_170":219,"_15":218,"_172":220,"_53":32,"_175":32,"_176":174},{"_168":153,"_170":216,"_15":145,"_172":217,"_53":32,"_175":32,"_176":174},{"_168":155,"_170":213,"_15":214,"_172":215,"_53":32,"_175":32,"_176":174},{"_168":151,"_170":211,"_15":151,"_172":212,"_53":32,"_175":32,"_176":174},{"_168":207,"_170":208,"_15":209,"_172":210,"_53":32,"_175":32,"_176":174},{"_168":141,"_170":205,"_15":141,"_172":206,"_53":32,"_175":32,"_176":32},{"_168":202,"_170":203,"_15":202,"_172":204,"_53":32,"_175":32,"_176":32},{"_168":199,"_170":200,"_15":199,"_172":201,"_53":32,"_175":32,"_176":32},{"_168":196,"_170":197,"_15":196,"_172":198,"_53":32,"_175":32,"_176":32},"decisions","Decisions",{},"changelog","Changelog",{},"roadmap","Roadmap",{},"Documents",{},"activity","Activity","insights",{},"Releases",{},"Deployments","automations/deployments",{},"Workflows",{},"discussions","Discussions",{},"goals","Goals",{},{},{},{},"groups","user","agents",[],"now",1794436458824,"sidebar","expanded"]