[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_4937":4938,"_4939":62,"_4940":18,"_4941":18,"_4942":18,"_4943":62,"_4944":18,"_4945":18,"_4946":18,"_4947":18,"_4948":-5,"_4949":4950},"routes/s.$postId",{"_9":10,"_11":12,"_13":-7,"_14":-7,"_15":16,"_17":18,"_19":18,"_20":-5,"_21":22},"kind","post_with_profile","postWithProfile",{"_23":24,"_25":26},"messagingRoomId","referrer","imagegenOgImagePolicy","current_wide","preferIntrinsicAspectRatioForOgImage",false,"enforceRenderedOgImg","ogImageVariantOverride","defaultOgDescription","ChatGPT helps you get answers, find inspiration, and be more productive.","post",{"_45":46,"_47":48,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":54,"_55":56,"_38":57,"_58":59,"_60":18},"profile",{"_27":28,"_29":28,"_30":31,"_32":-5,"_33":-5,"_34":35,"_36":18,"_37":-5,"_38":-5,"_39":-5,"_40":18,"_41":-5,"_42":-5,"_43":-5,"_44":18},"user_id","anonymous","username","profile_picture_url","https://cdn.openai.com/sora/images/profile_placeholder_v4.png","profile_picture_id","is_default_profile_picture","follower_count",0,"is_following","display_name","permalink","can_cameo","verified","character_count","owner_profile","social_context","follows_you","id","cd_6a6ef09973e88191831f4189b4a969d1","posted_at",1785655449.452937,"text","og_title","og_description","og_image_variant","attachments",[68],"preview_image_url","https://ogimg.chatgpt.com/?postId=cd_6a6ef09973e88191831f4189b4a969d1","https://chatgpt.com/s/cd_6a6ef09973e88191831f4189b4a969d1","permissions",{"_61":62,"_63":18,"_64":18,"_65":62,"_66":67},"use_experimental_unfurl","can_read",true,"can_write","can_delete","can_remix","share_setting","public",{"_45":69,"_70":71,"_9":72,"_73":74,"_75":76,"_77":78,"_79":80,"_81":82,"_83":-5},"cd_6a6ef09973e88191831f4189b4a969d1-attachment-0","tags",[],"codex","task",{"_45":4897,"_123":4898,"_325":4899,"_4900":62,"_86":87,"_4901":18,"_4902":4903,"_288":18,"_4904":4905,"_4906":-5,"_4907":4908},"current_user_turn",{"_96":339,"_45":88,"_100":339,"_3163":4891,"_3165":4892,"_3167":3168,"_136":-5,"_123":3169},"current_assistant_turn",{"_96":97,"_45":87,"_98":-5,"_99":-5,"_100":97,"_101":4044,"_103":4045,"_105":106,"_107":-5,"_108":4046,"_110":4047,"_112":4048,"_114":4049,"_116":117,"_118":-5,"_119":120,"_121":4050,"_123":124,"_125":-5,"_126":127,"_128":4051,"_130":131,"_132":133,"_134":-5,"_135":-5,"_136":88,"_137":4052,"_139":4053,"_141":-5,"_142":18,"_143":144,"_145":-5},"current_diff_task_turn",{"_96":97,"_45":87,"_98":-5,"_99":-5,"_100":97,"_101":3197,"_103":3198,"_105":106,"_107":-5,"_108":3199,"_110":3200,"_112":3201,"_114":3202,"_116":117,"_118":-5,"_119":120,"_121":3203,"_123":124,"_125":-5,"_126":127,"_128":3204,"_130":131,"_132":133,"_134":-5,"_135":-5,"_136":88,"_137":3205,"_139":3206,"_141":-5,"_142":18,"_143":144,"_145":-5},"turns",{"_84":85,"_86":87},"example_task_info","turn_mapping",{"_88":89,"_87":90},"current_turn_id","task_e_6a6ef09768e08328b7d7a8b2098989c1~assttrn_e_6a6ef09884008328b813b0e7670030bc","task_e_6a6ef09768e08328b7d7a8b2098989c1~usertrn_e_6a6ef09862248328baa1c0b7bbe5f31e",{"_45":88,"_91":3161,"_93":3162,"_95":-5},{"_45":87,"_91":92,"_93":94,"_95":88},"turn",{"_96":97,"_45":87,"_98":-5,"_99":-5,"_100":97,"_101":102,"_103":104,"_105":106,"_107":-5,"_108":109,"_110":111,"_112":113,"_114":115,"_116":117,"_118":-5,"_119":120,"_121":122,"_123":124,"_125":-5,"_126":127,"_128":129,"_130":131,"_132":133,"_134":-5,"_135":-5,"_136":88,"_137":138,"_139":140,"_141":-5,"_142":18,"_143":144,"_145":-5},"children",[],"parent","type","assistant","sibling_turn_ids","attempt_placement","role","output_items",[1598,1599,1600],"child_turns",[],"conversation_id","None","error","latest_event",{"_1593":1594,"_49":1595,"_1596":1597},"worklog",{"_1567":1568},"app_server_events",{"_350":1566},"thread_events",{"_350":351},"turn_status","completed","cancellation_requested_at","pull_request_status","externally_created","pull_request_data",{"_317":318,"_308":319,"_320":321,"_322":62,"_323":18,"_324":18,"_325":326,"_327":328,"_329":280,"_330":131,"_331":332,"_333":334,"_335":336,"_337":-5,"_338":-5,"_339":340,"_341":342,"_343":344,"_345":346,"_347":348},"created_at",1785655448.515745,"internal_only_rollouts","environment_id","6a6e1c8baf688191ace7dc65106ab305","environment",{"_45":127,"_206":207,"_208":209,"_210":18,"_211":212,"_213":214,"_215":216,"_217":-5,"_218":219,"_220":18,"_221":222,"_223":212,"_224":212,"_225":226,"_227":228,"_229":230,"_231":-5,"_232":233,"_234":235,"_236":237,"_238":239,"_58":-5,"_123":240,"_241":242,"_243":244,"_245":246,"_247":18,"_248":18},"branch","feat/386-canary","base_commit_sha","91e206de6aeb3f76b2e0287d698cfbf390d6cad1","branch_name","direct_push_pushed_commit_sha","previous_turn_id","logs",{"_137":186},"proxy_events",[146,147,148,149,150,151,152,153,154,155],"debug_metadata","discarded","model_version","gpt-5.6-sol","languages",{"_156":184,"_158":159,"_160":161,"_162":163,"_164":185,"_166":167,"_168":35,"_169":-5},{"_156":183,"_158":159,"_160":161,"_162":163,"_164":180,"_166":167,"_168":35,"_169":-5},{"_156":181,"_158":159,"_160":161,"_162":163,"_164":182,"_166":167,"_168":35,"_169":-5},{"_156":179,"_158":159,"_160":161,"_162":163,"_164":180,"_166":167,"_168":35,"_169":-5},{"_156":178,"_158":174,"_160":175,"_162":163,"_164":177,"_166":167,"_168":35,"_169":-5},{"_156":173,"_158":174,"_160":175,"_162":176,"_164":177,"_166":167,"_168":35,"_169":-5},{"_156":172,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":171,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":170,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":157,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},"timestamp","2026-08-02T07:27:29.265801","decision","block","reason","internet is disabled","method","CONNECT","domain","registry.npmjs.org:443","protocol","HTTP/1.1","size","path","2026-08-02T07:27:29.264468","2026-08-02T07:27:29.263330","2026-08-02T07:27:28.767868","2026-08-02T07:24:24.136721","allow","checks passed","GET","chatgpt.com:18080","2026-08-02T07:24:24.056072","2026-08-02T07:24:20.002186","chatgpt.com:443","2026-08-02T07:24:19.892281","api.github.com:443","2026-08-02T07:24:19.834825","2026-08-02T07:24:19.684734","github.com:443",[187,188,189],{"_190":202,"_192":203},{"_190":198,"_192":199},{"_190":191,"_192":193},"key",{"_194":195,"_96":196,"_123":197},"value","file_00000000db4081f793e9cfaff143b6aa","name","setup_autodetect","UserSetupScript","2026-08-02T05:08:00.570534",{"_194":200,"_96":196,"_123":201},"file_00000000b7c881f788ee9de5d7716883","auto_setup","2026-08-02T05:08:27.050963",{"_194":204,"_96":196,"_123":205},"file_00000000b0c481f7a20ab9ad2cabc9f1","warm_up_git_repo_1785655453","2026-08-02T07:24:13.712467","machine_id","wham-public/wham-universal","label","mforce/cluckwork","is_pinned","description","","workspace_dir","/workspace","agent_network_access",{"_310":311,"_312":-5,"_313":-5,"_314":-5,"_315":-5,"_316":-5},"codex_github_direct","github_connector_id","connector_76869538009648d5b282a4bb21c3d157","enable_gitlab_webhooks","repos",[270],"setup","maintenance_setup","repo_map",{"_270":271},"env_vars",{"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265,"_266":267,"_268":269},"secrets",{},"secrets_with_domains","task_count",82,"creator_id","user-VHrW1UUowIx0Xlc12knvUuzF","share_settings","workspace","share_targets",[],1785601164.145096,"auto_setup_settings",{"_251":62},"cache_settings",{"_249":62,"_250":212},"etag","\"6700a095-0000-0200-0000-6a6ef0970000\"","enable_authtranslator","enable_docker_in_docker","post_setup_cache_enabled","cache_invalidation_key","use_auto_setup","CODEX_ENV_PYTHON_VERSION","3.12","CODEX_ENV_NODE_VERSION","20","CODEX_ENV_RUBY_VERSION","3.4.4","CODEX_ENV_RUST_VERSION","1.89.0","CODEX_ENV_GO_VERSION","1.24.3","CODEX_ENV_BUN_VERSION","1.2.14","CODEX_ENV_PHP_VERSION","8.4","CODEX_ENV_JAVA_VERSION","21","CODEX_ENV_SWIFT_VERSION","6.1","github-1301193065",{"_45":272,"_194":273,"_274":275,"_276":209,"_277":278,"_279":280,"_281":282,"_283":284,"_285":286,"_287":67,"_288":18,"_289":-5,"_290":-5,"_291":-5,"_292":-5,"_293":-5,"_294":-5,"_168":295,"_296":-5,"_58":297},"1301193065","cluckwork","owner",{"_302":303,"_45":304,"_96":305,"_306":307,"_308":309},"repository_full_name","clone_url","https://github.com/mforce/cluckwork.git","default_branch","main","git_commits_url","https://api.github.com/repos/mforce/cluckwork/git/commits{/sha}","git_refs_url","https://api.github.com/repos/mforce/cluckwork/git/refs{/sha}","git_url","git://github.com/mforce/cluckwork.git","visibility","archived","allow_auto_merge","allow_merge_commit","allow_rebase_merge","allow_squash_merge","allow_update_branch","language",4894,"master_branch",{"_298":18,"_299":18,"_300":18,"_301":18},"admin","maintain","push","pull","login","mforce",3101827,"User","avatar_url","https://avatars.githubusercontent.com/u/3101827?v=4","url","https://api.github.com/users/mforce","mode","off","preset_allowlist","allowlist_domains","allowlist_rules","denylist_domains","safe_methods_only","number",391,"https://github.com/mforce/cluckwork/pull/391","state","closed","merged","mergeable","draft","title","feat(sim): canary-under-load UX probe recording Core Web Vitals alongside the k6 baseline","body","Closes #386. **Stacked on #390** (the smoke slice) — review that first; this branch contains only the canary commit on top of it.\n\n## What this adds\n\nOne or two real browsers walking the SPA and recording Core Web Vitals, either on a quiet system or **while k6 saturates the same backend** — the thing #243 structurally cannot see, since it has no browser.\n\n```bash\nbash tools/simulation/ui/run-canary.sh # quiet baseline\nbash tools/simulation/ui/run-canary.sh --with-load # concurrent with the pinned k6\n```\n\n`run-canary.sh` owns both processes rather than leaving them to two terminals: it starts k6, waits out warmup, then runs the browsers, and reaps k6 on any exit path (including Ctrl-C) so a stray load generator cannot poison later runs. It asserts the **same pinned k6 version** as `run-baseline.sh`, for the reason in `k6/shell.nix`'s header.\n\n**`CANARY_BROWSERS` is 1 or 2, and the config refuses anything higher** — past two this stops being a canary and becomes load, perturbing the number it exists to record. k6 stays the crowd.\n\n## What it asserts vs. what it records\n\n**Asserts (as strictly under load as off it):** no error region, and no *empty state* on a populated fixture. That second one is the failure worth catching — a saturated backend must degrade by being slow, never by telling a farm it has no stock. \"No stock recorded yet\" reads as a fact about the farm, not about the server.\n\n**Records, without thresholds:** TTFB, FCP, LCP, an upper bound on CLS, an upper bound on interaction latency, and \"usable in\" — wall clock to the screen's own data being on the glass, which is the gap that actually widens under load and the one a farmer would call slow.\n\nNo latency thresholds, deliberately. The sim stack is uncapped and co-located (the findings doc says so at length), and under load these numbers are *supposed* to move; a canary that reddens when the backend is busy tells you nothing and trains people to re-run until green.\n\n## The metrics are named honestly\n\n`src/vitals.ts` uses `PerformanceObserver` directly, no `web-vitals` dependency, and names what that costs:\n\n- **LCP, FCP, TTFB** — exact.\n- **`clsUpperBound`** — the *sum* of non-input layout shifts, not the largest session window. Can only over-report.\n- **`longestInteractionMs`** — the longest single interaction, **not INP** (which is roughly a 98th percentile over grouped interactions). Also an upper bound.\n\nCalled by their real names in the code, the JSON, and the findings table. A number labelled INP that is not INP gets compared against the 200ms threshold by somebody, eventually.\n\nTwo further honesty details: `longestInteractionMs` is **`null`, never `0`**, when nothing was interacted with — `0` reads as \"instantaneous\" when it means \"never measured\" — and the interactions **click the control before changing it**, because `fill()`/`selectOption()` alone emit no Event Timing entry (measured: the metric stayed null while the spec looked like it had interacted). Clicking first is also what a user actually does. The dashboard has no control worth pressing, so it reports `null` rather than an invented interaction.\n\n## Where the numbers land — both places, per the owner's call\n\n- **`playwright-report-canary/`** with `trace: \"on\"` — unlike the smoke suite, a *passing* canary run is itself the artifact, since the timings are the deliverable.\n- **The #243 findings doc**, via a new `{{BROWSER_VITALS_TABLE}}` section rendered by `run-baseline.sh` from `out/canary-vitals.json`, so browser experience and server percentiles from the same window share one page. That adjacency is the entire reason to run them concurrently.\n\nThe section is optional by design: a baseline taken without a canary renders a note saying how to populate it, rather than a broken table.\n\n**Verified end to end** with `run-baseline.sh --render-only` against an existing run tree — the table renders with real numbers and the upper-bound caveat beneath it.\n\n## Verification\n\nCanary green (4/4) on a quiet system; typecheck clean. The `--with-load` path's k6 orchestration has **not** been exercised against a full multi-rep baseline in this session — noted in the session report as the next step rather than claimed.\n","base","head","base_sha","9d342430cf57d12fac35df117097b4bc378f21fb","head_sha","d6358198b31782e49885c8089fadc1bc8982773f","merge_commit_sha","b11451163988f78a8521c0763434b37ddd1c2f5d","comments","diff","user",{"_302":303,"_194":303,"_349":-5,"_306":307,"_45":304},"commits",27,"changed_files",8,"additions",816,"deletions",1,"email","events",[352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482],{"_162":1539,"_484":1540},{"_162":501,"_484":1534},{"_162":1529,"_484":1530},{"_162":505,"_484":1521},{"_162":505,"_484":1515},{"_162":505,"_484":1508},{"_162":505,"_484":1500},{"_162":505,"_484":1495},{"_162":523,"_484":1484},{"_162":523,"_484":1479},{"_162":505,"_484":1471},{"_162":505,"_484":1466},{"_162":505,"_484":1456},{"_162":523,"_484":1445},{"_162":523,"_484":1440},{"_162":505,"_484":1432},{"_162":505,"_484":1427},{"_162":523,"_484":1418},{"_162":505,"_484":1409},{"_162":523,"_484":1404},{"_162":505,"_484":1398},{"_162":505,"_484":1393},{"_162":523,"_484":1373},{"_162":505,"_484":1364},{"_162":523,"_484":1359},{"_162":505,"_484":1349},{"_162":505,"_484":1344},{"_162":505,"_484":1335},{"_162":523,"_484":1312},{"_162":523,"_484":1307},{"_162":505,"_484":1295},{"_162":523,"_484":1290},{"_162":505,"_484":1282},{"_162":505,"_484":1277},{"_162":523,"_484":1257},{"_162":505,"_484":1249},{"_162":523,"_484":1244},{"_162":505,"_484":1234},{"_162":505,"_484":1229},{"_162":523,"_484":1220},{"_162":505,"_484":1211},{"_162":523,"_484":1206},{"_162":505,"_484":1198},{"_162":505,"_484":1193},{"_162":523,"_484":1176},{"_162":505,"_484":1167},{"_162":523,"_484":1162},{"_162":505,"_484":1154},{"_162":505,"_484":1149},{"_162":505,"_484":1140},{"_162":523,"_484":1135},{"_162":505,"_484":1129},{"_162":505,"_484":1124},{"_162":505,"_484":1116},{"_162":523,"_484":1111},{"_162":505,"_484":1103},{"_162":505,"_484":1098},{"_162":505,"_484":1089},{"_162":505,"_484":1085},{"_162":505,"_484":1077},{"_162":523,"_484":1072},{"_162":505,"_484":1066},{"_162":505,"_484":1061},{"_162":505,"_484":1052},{"_162":523,"_484":1041},{"_162":523,"_484":1036},{"_162":505,"_484":1028},{"_162":505,"_484":1023},{"_162":505,"_484":1014},{"_162":505,"_484":1010},{"_162":505,"_484":1000},{"_162":505,"_484":995},{"_162":505,"_484":985},{"_162":523,"_484":974},{"_162":523,"_484":963},{"_162":523,"_484":958},{"_162":505,"_484":950},{"_162":505,"_484":945},{"_162":505,"_484":936},{"_162":505,"_484":931},{"_162":505,"_484":922},{"_162":523,"_484":910},{"_162":523,"_484":905},{"_162":505,"_484":897},{"_162":505,"_484":892},{"_162":505,"_484":883},{"_162":505,"_484":878},{"_162":505,"_484":869},{"_162":523,"_484":858},{"_162":523,"_484":853},{"_162":505,"_484":845},{"_162":505,"_484":840},{"_162":505,"_484":831},{"_162":523,"_484":820},{"_162":523,"_484":815},{"_162":505,"_484":807},{"_162":505,"_484":802},{"_162":505,"_484":792},{"_162":505,"_484":787},{"_162":505,"_484":778},{"_162":523,"_484":766},{"_162":523,"_484":761},{"_162":505,"_484":753},{"_162":505,"_484":748},{"_162":505,"_484":738},{"_162":505,"_484":733},{"_162":505,"_484":724},{"_162":523,"_484":711},{"_162":523,"_484":706},{"_162":505,"_484":698},{"_162":505,"_484":693},{"_162":505,"_484":683},{"_162":523,"_484":678},{"_162":505,"_484":670},{"_162":505,"_484":665},{"_162":505,"_484":655},{"_162":523,"_484":644},{"_162":523,"_484":639},{"_162":505,"_484":631},{"_162":505,"_484":626},{"_162":523,"_484":602},{"_162":505,"_484":592},{"_162":523,"_484":587},{"_162":505,"_484":575},{"_162":505,"_484":566},{"_162":505,"_484":551},{"_162":523,"_484":529},{"_162":523,"_484":524},{"_162":505,"_484":506},{"_162":501,"_484":502},{"_162":483,"_484":485},"turn/completed","params",{"_486":487,"_91":488},"threadId","019fc15c-00cc-7433-a5a7-91e54bb77478",{"_489":490,"_491":492,"_107":-5,"_45":493,"_494":495,"_496":497,"_498":499,"_500":117},"completedAt",1785655723,"durationMs",262701,"019fc15c-01c1-75a2-afc5-bc9eac51e29f","items",[],"itemsView","notLoaded","startedAt",1785655460,"status","thread/status/changed",{"_500":503,"_486":487},{"_96":504},"idle","rawResponseItem/completed",{"_507":508,"_486":487,"_509":493},"item",{"_510":511,"_512":-5,"_45":513,"_514":515,"_516":517,"_100":97,"_96":518},"turnId","content",[520],"end_turn","msg_0f68152e58c069a5016a6ef19a73248196ad0ae7213b1b85a2","internal_chat_message_metadata_passthrough",{"_519":493},"phase","final_answer","message","turn_id",{"_49":521,"_96":522},"### Summary\n\n* Prevented an older in-flight refresh from overwriting a newer explicit login’s refresh cookie by aborting the refresh before starting login. 【F:web/src/api/client.ts†L163-L179】\n* Added a focused client regression test proving login aborts the obsolete refresh while retaining the new access token. 【F:web/src/api/client.test.ts†L988-L1011】\n* Strengthened the session-race E2E coverage:\n * Disabled logout’s abort optimization so the held refresh must actually settle and exercise the generation guard. 【F:tools/simulation/ui/specs/session-races.spec.ts†L38-L50】\n * Reloaded after the competing login to verify the durable refresh cookie still restores the Sales session rather than Owner. 【F:tools/simulation/ui/specs/session-races.spec.ts†L158-L170】\n* Excluded initial seven-day report requests from maximum-range timings, ensuring the assertion requires a refetch caused by the changed date controls. 【F:tools/simulation/ui/specs/reports-range.spec.ts†L62-L70】【F:tools/simulation/ui/specs/reports-range.spec.ts†L96-L104】\n* Made language persistence non-vacuous by requiring successful `PUT /me/language` responses and reloading before verifying the selected language. 【F:tools/simulation/ui/specs/i18n.spec.ts†L85-L101】【F:tools/simulation/ui/specs/i18n.spec.ts†L120-L126】\n* Committed the changes as `016954a` and created the follow-up PR metadata with title **“fix(e2e): make the remaining smoke guarantees non-vacuous.”**\n\n**Testing**\n\n* ✅ `PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm test -- --run src/api/client.test.ts` — 75 tests passed.\n* ✅ `PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck` — web TypeScript build passed.\n* ✅ `git diff --check`\n* ⚠️ `PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm ci && PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck` — simulation UI dependency installation was blocked by the environment’s npm policy with HTTP 403 for `playwright-core-1.62.1.tgz`.\n* ⚠️ `npm test -- --run src/api/client.test.ts` under the default Node 20 runtime — this Vitest release passes `--no-experimental-webstorage`, which the installed Node 20 binary does not support; the same test command passed under the installed Node 24 runtime.\n* ❌ `npm run lint -- src/api/client.ts src/api/client.test.ts` — no `lint` script is defined in the web package.","output_text","item/completed",{"_525":526,"_507":527,"_486":487,"_509":493},"completedAtMs",1785655722964,{"_45":513,"_516":517,"_49":521,"_96":528},"agentMessage",{"_525":530,"_507":531,"_486":487,"_509":493},1785655705518,{"_532":533,"_534":535,"_536":537,"_538":539,"_491":540,"_541":35,"_45":542,"_543":544,"_545":546,"_500":117,"_96":547},"aggregatedOutput"," 80\t await signIn(i18nPersona());\n 81\t\n 82\t // Start from a known language rather than whatever this account was last\n 83\t // left in — the persona is reserved, but a previous failed run is still a\n 84\t // possible starting state.\n 85\t await page.goto(\"/account\");\n 86\t const selector = languageSelect(page);\n 87\t const resetPersisted = page.waitForResponse((response) =>\n 88\t response.url().includes(\"/api/v1/me/language\")\n 89\t && response.request().method() === \"PUT\"\n 90\t && response.status() === 204);\n 91\t await selector.selectOption(\"en\");\n 92\t await resetPersisted;\n 93\t await expect(page.getByRole(\"link\", { name: tEn(\"nav:reports\"), exact: true })).toBeVisible();\n 94\t\n 95\t // The switch, made the way a user makes it.\n 96\t const languagePersisted = page.waitForResponse((response) =>\n 97\t response.url().includes(\"/api/v1/me/language\")\n 98\t && response.request().method() === \"PUT\"\n 99\t && response.status() === 204);\n 100\t await selector.selectOption(lang);\n 101\t await languagePersisted;\n 102\t\n 103\t // THE ASSERTION: the destination the user reads in the sidebar is now in\n 104\t // the new language. The sidebar is the right place to look because it is\n 105\t // rendered by a different component tree than the screen that owns the\n 106\t // selector — a switch that only repainted the current screen would pass a\n 107\t // narrower check and still be broken everywhere else.\n 108\t await expect(\n 109\t page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }),\n 110\t `the sidebar did not switch to ${lang}`,\n 111\t ).toBeVisible();\n 112\t await expect(page.getByRole(\"link\", { name: tEn(\"nav:reports\"), exact: true })).toBeHidden();\n 113\t\n 114\t // follows. This is a real accessibility guarantee, not\n 115\t // decoration: it is what tells a screen reader which voice to use, and\n 116\t // index.html ships a static \"en\" that a broken listener would leave in\n 117\t // place while the visible text changed underneath it.\n 118\t await expect(page.locator(\"html\")).toHaveAttribute(\"lang\", lang);\n 119\t\n 120\t // Prove the preference survived outside optimistic local i18n state. A\n 121\t // missing PUT can still repaint this tab; only a reload bootstrapping from\n 122\t // /me demonstrates that the user's durable preference changed.\n 123\t await page.reload();\n 124\t await expect(page.locator(\"html\")).toHaveAttribute(\"lang\", lang);\n 125\t await expect(page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }))\n 126\t .toBeVisible();\n 127\t\n 128\t // And the screens still WORK in that language — the point of #277's \"not\n 129\t // broken\", as opposed to \"translated\". A populated data screen renders its\n 130\t // table, not an error.\n 131\t await page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }).click();\n 132\t await expect(page.getByRole(\"heading\", { name: t(lang, \"reports:title\") })).toBeVisible();\n 133\t await expect(page.getByRole(\"alert\")).toBeHidden();\n 134\t await expect(\n 135\t page\n","command","/bin/bash -lc \"git status --short --branch; nl -ba web/src/api/client.ts | sed -n '158,185p'; nl -ba web/src/api/client.test.ts | sed -n '960,1025p'; nl -ba tools/simulation/ui/specs/session-races.spec.ts | sed -n '30,180p'; nl -ba tools/simulation/ui/specs/reports-range.spec.ts | sed -n '55,112p'; nl -ba tools/simulation/ui/specs/i18n.spec.ts | sed -n '80,135p'\"","commandActions",[548],"cwd","/workspace/cluckwork",110,"exitCode","exec-3b222be5-ace0-4ee6-99cc-0098297478f8","processId","43051","source","unifiedExecStartup","commandExecution",{"_534":549,"_96":550},"git status --short --branch; nl -ba web/src/api/client.ts | sed -n '158,185p'; nl -ba web/src/api/client.test.ts | sed -n '960,1025p'; nl -ba tools/simulation/ui/specs/session-races.spec.ts | sed -n '30,180p'; nl -ba tools/simulation/ui/specs/reports-range.spec.ts | sed -n '55,112p'; nl -ba tools/simulation/ui/specs/i18n.spec.ts | sed -n '80,135p'","unknown",{"_507":552,"_486":487,"_509":493},{"_553":554,"_45":-5,"_514":555,"_194":-5,"_556":557,"_96":558},"call_id","call_nIugUUf67mipCFyYo2N53FMP",{"_519":493},"output",{"_327":559,"_560":-5},"custom_tool_call_output",[561,562],"success",{"_49":565,"_96":564},{"_49":563,"_96":564},"## work\n 158\t // never surface it to the caller whose result was already discarded.\n 159\t console.error(\"discarded response: revoking its refresh cookie failed\", err);\n 160\t }\n 161\t}\n 162\t\n 163\texport async function login(body: LoginRequest): Promise {\n 164\t // #310 — bump first: login is a NEWER session than anything already in\n 165\t // flight (a bootstrap refresh, say), so its resolution must be the one that\n 166\t // wins, and any earlier flight must see its captured generation go stale.\n 167\t const generation = ++sessionGeneration;\n 168\t // A refresh response can carry Set-Cookie after this login's response and\n 169\t // silently replace the newer session's cookie even though the generation\n 170\t // guard correctly rejects its JavaScript result. Cancel it before starting\n 171\t // the newer login; unlike logout, the login below will immediately install a\n 172\t // fresh cookie, so there is no useful reason to let the old rotation land.\n 173\t abortInFlightRefresh?.();\n 174\t // The server sets the HttpOnly refresh cookie; the body returns only the\n 175\t // access token, which lives in memory for this tab's lifetime.\n 176\t const res = await raw(\"/auth/login\", {\n 177\t method: \"POST\",\n 178\t body: JSON.stringify(body),\n 179\t });\n 180\t // Superseded while in flight (e.g. a logout landed before this resolved) —\n 181\t // do not resurrect a session the user already ended. The response already\n 182\t // set a refresh cookie, so revoke it too, not just the in-memory token.\n 183\t if (sessionGeneration !== generation) {\n 184\t await revokeSupersededCookie();\n 185\t throw new StaleSessionError();\n 960\t\n 961\t expect(getAccessToken()).toBe(\"loggedInToken\");\n 962\t expect(onTokens).toHaveBeenCalledTimes(1);\n 963\t });\n 964\t\n 965\t it(\"does not let a late bootstrap refresh overwrite a newer explicit login\", async () => {\n 966\t clearAccessToken();\n 967\t const refreshGate = deferred();\n 968\t fetchMock.mockImplementation((url: string) => {\n 969\t if (url.endsWith(\"/auth/refresh\")) return refreshGate.promise;\n 970\t if (url.endsWith(\"/auth/login\")) return Promise.resolve(accessResponse(\"newLoginToken\"));\n 971\t throw new Error(`unexpected fetch: ${url}`);\n 972\t });\n 973\t\n 974\t const restoring = restoreSession(); // older bootstrap refresh in flight\n 975\t await drain();\n 976\t\n 977\t await login({ email: \"a@b.co\", password: \"pw\" }); // a newer, explicit login completes first\n 978\t expect(getAccessToken()).toBe(\"newLoginToken\");\n 979\t expect(onTokens).toHaveBeenCalledTimes(1);\n 980\t\n 981\t refreshGate.resolve(accessResponse(\"staleBootstrapToken\")); // the old refresh answers late\n 982\t await expect(restoring).resolves.toBe(false); // discarded, not adopted\n 983\t\n 984\t expect(getAccessToken()).toBe(\"newLoginToken\"); // untouched by the stale refresh\n 985\t expect(onTokens).toHaveBeenCalledTimes(1); // still just the login's single notification\n 986\t });\n 987\t\n 988\t it(\"aborts an older refresh before login so its late Set-Cookie cannot replace the login cookie\", async () => {\n 989\t clearAccessToken();\n 990\t let refreshWasAborted = false;\n 991\t fetchMock.mockImplementation((url: string, init?: RequestInit) => {\n 992\t if (url.endsWith(\"/auth/refresh\")) {\n 993\t return new Promise((_resolve, reject) => {\n 994\t init?.signal?.addEventListener(\"abort\", () => {\n 995\t refreshWasAborted = true;\n 996\t reject(new DOMException(\"superseded by login\", \"AbortError\"));\n 997\t });\n 998\t });\n 999\t }\n 1000\t if (url.endsWith(\"/auth/login\")) return Promise.resolve(accessResponse(\"newLoginToken\"));\n 1001\t throw new Error(`unexpected fetch: ${url}`);\n 1002\t });\n 1003\t\n 1004\t const restoring = restoreSession();\n 1005\t await drain();\n 1006\t await login({ email: \"a@b.co\", password: \"pw\" });\n 1007\t\n 1008\t expect(refreshWasAborted).toBe(true);\n 1009\t await expect(restoring).resolves.toBe(false);\n 1010\t expect(getAccessToken()).toBe(\"newLoginToken\");\n 1011\t });\n 1012\t\n 1013\t it(\"a late-FAILING obsolete refresh does not clear or corrupt a newer session\", async () => {\n 1014\t // Distinct from the success case above: here the stale refresh's own network\n 1015\t // call fails (refresh token revoked) — the failure path must be gated too, or\n 1016\t // it would clearAccessToken()/onUnauthenticated() and boot the fresh login.\n 1017\t clearAccessToken();\n 1018\t const refreshGate = deferred();\n 1019\t fetchMock.mockImplementation((url: string) => {\n 1020\t if (url.endsWith(\"/auth/refresh\")) return refreshGate.promise;\n 1021\t if (url.endsWith(\"/auth/login\")) return Promise.resolve(accessResponse(\"freshLoginToken\"));\n 1022\t if (url.endsWith(\"/stock\")) return Promise.resolve(jsonResponse({ ok: true }));\n 1023\t throw new Error(`unexpected fetch: ${url}`);\n 1024\t });\n 1025\t\n 30\tconst HOLD_MS = 3_000;\n 31\t\n 32\ttest.describe(\"#310 session races\", () => {\n 33\t test(\"a logout during an in-flight refresh cannot be resurrected by the late response\", async ({\n 34\t page,\n 35\t signIn,\n 36\t nav,\n 37\t }) => {\n 38\t await signIn(owner());\n 39\t\n 40\t // Exercise correctness without logout's abort optimisation. If this is\n 41\t // removed, the held request is cancelled and the test can pass without the\n 42\t // session-generation guard ever rejecting a late successful response.\n 43\t await page.evaluate(() => {\n 44\t AbortController.prototype.abort = () => undefined;\n 45\t });\n 46\t\n 47\t // Hold every refresh open for HOLD_MS.\n 48\t await page.route(\"**/api/v1/auth/refresh\", async (route) => {\n 49\t await new Promise((r) => setTimeout(r, HOLD_MS));\n 50\t await route.continue();\n 51\t });\n 52\t\n 53\t // Provoke a refresh by injecting one 401 (same one-shot technique as\n 54\t // session-refresh.spec.ts). The refresh it triggers is now held open.\n 55\t let injected = false;\n 56\t await page.route(\"**/api/v1/**\", async (route) => {\n 57\t const url = route.request().url();\n 58\t if (injected || url.includes(\"/auth/\")) {\n 59\t await route.fallback();\n 60\t return;\n 61\t }\n 62\t injected = true;\n 63\t await route.fulfill({\n 64\t status: 401,\n 65\t contentType: \"application/problem+json\",\n 66\t body: JSON.stringify({ title: \"Unauthorized\", status: 401 }),\n 67\t });\n 68\t });\n 69\t\n 70\t await nav.link(\"nav:reports\").click();\n 71\t // Do NOT await the refresh here — the whole point is to act while it is\n 72\t // still outstanding.\n 73\t await page.waitForRequest((r) => r.url().includes(\"/api/v1/auth/refresh\"));\n 74\t\n 75\t // The user signs out mid-flight.\n 76\t await nav.signOut.click();\n 77\t await expect(page).toHaveURL(/\\/login/);\n 78\t\n 79\t // Now let the held refresh land, and then some.\n 80\t await page.waitForTimeout(HOLD_MS + 2_000);\n 81\t\n 82\t // THE GUARANTEE, in three independent forms — because \"we are on /login\" on\n 83\t // its own would be satisfied by a router that moved while the session\n 84\t // quietly survived underneath it.\n 85\t //\n 86\t // 1. Still on the login screen, not swept back into the app.\n 87\t await expect(page).toHaveURL(/\\/login/);\n 88\t await expect(page.getByRole(\"navigation\", { name: tEn(\"nav:primaryNavAriaLabel\") }))\n 89\t .toBeHidden();\n 90\t\n 91\t // 2. The credential itself is gone. If the late refresh had committed, its\n 92\t // rotated cookie would be sitting here ready to restore the session.\n 93\t const cookies = await page.context().cookies();\n 94\t const refreshCookie = cookies.find((c) => c.name === \"cluckwork_rt\" && c.value !== \"\");\n 95\t expect(\n 96\t refreshCookie,\n 97\t \"a live refresh cookie survived the logout — the late response resurrected the session\",\n 98\t ).toBeUndefined();\n 99\t\n 100\t // 3. The strongest form: ask for a protected screen and be refused. This is\n 101\t // what an attacker with the abandoned tab would actually try.\n 102\t await page.goto(\"/\");\n 103\t await expect(\n 104\t page,\n 105\t \"a protected route was served after logout — the session outlived the sign-out\",\n 106\t ).toHaveURL(/\\/login/);\n 107\t });\n 108\t\n 109\t test(\"an explicit login beats a pending bootstrap refresh, and the newer login wins\", async ({\n 110\t page,\n 111\t signIn,\n 112\t nav,\n 113\t }) => {\n 114\t // Establish a real Owner session first, so the browser is holding a VALID\n 115\t // refresh cookie — the bootstrap refresh this race needs must be one that\n 116\t // would genuinely succeed. A race against a doomed request proves nothing.\n 117\t await signIn(owner());\n 118\t\n 119\t await page.route(\"**/api/v1/auth/refresh\", async (route) => {\n 120\t await new Promise((r) => setTimeout(r, HOLD_MS));\n 121\t await route.continue();\n 122\t });\n 123\t\n 124\t // Land on /login with that cookie present: AuthContext's bootstrap fires\n 125\t // `restoreSession()` immediately, and it is now held open. /login is outside\n 126\t // ProtectedRoute, so the form is interactive while that is pending.\n 127\t await page.goto(\"/login\");\n 128\t await page.waitForRequest((r) => r.url().includes(\"/api/v1/auth/refresh\"));\n 129\t\n 130\t // A DIFFERENT person signs in on the same browser while the old session's\n 131\t // refresh is still outstanding. Different persona on purpose: the two\n 132\t // sessions are then distinguishable on screen, so the assertion can name\n 133\t // which one won instead of inferring it.\n 134\t const sales = castMember(\"Sales\");\n 135\t await page.getByLabel(tEn(\"auth:email\")).fill(sales.email);\n 136\t await page.getByLabel(tEn(\"auth:password\")).fill(sales.password);\n 137\t await page.getByRole(\"button\", { name: tEn(\"auth:signIn\") }).click();\n 138\t\n 139\t await expect(page.getByRole(\"navigation\", { name: tEn(\"nav:primaryNavAriaLabel\") }))\n 140\t .toBeVisible();\n 141\t\n 142\t // Give the superseded bootstrap refresh enough time either to be aborted by\n 143\t // the newer login or (if cancellation loses the race) to settle stale.\n 144\t await page.waitForTimeout(HOLD_MS + 2_000);\n 145\t\n 146\t // THE GUARANTEE: this is the Sales session, and the Owner's has not been\n 147\t // restored underneath it. Asserted through the nav's role gates, which\n 148\t // differ between the two personas — Sales is not an admin, so the Setup\n 149\t // group is absent, and Sales cannot produce, so the Production group is too.\n 150\t await expect(\n 151\t nav.link(\"nav:audit\"),\n 152\t \"an admin destination appeared — the late Owner refresh overwrote the Sales login\",\n 153\t ).toBeHidden();\n 154\t await expect(nav.link(\"nav:users\")).toBeHidden();\n 155\t await expect(nav.link(\"nav:expenses\")).toBeHidden();\n 156\t await expect(nav.link(\"nav:dailyEntry\")).toBeHidden();\n 157\t\n 158\t // Control: the Sales-shaped destinations ARE there, so the assertions above\n 159\t // are proving \"the Sales session won\" rather than \"the sidebar is empty\".\n 160\t await expect(nav.link(\"nav:sales\")).toBeVisible();\n 161\t await expect(nav.link(\"nav:customers\")).toBeVisible();\n 162\t\n 163\t // The in-memory token is only half the session. A stale refresh response\n 164\t // also carries Set-Cookie, which the browser applies before client code can\n 165\t // reject the response. Reload forces bootstrap to prove the durable cookie\n 166\t // still belongs to Sales rather than the superseded Owner.\n 167\t await page.reload();\n 168\t await expect(nav.link(\"nav:sales\")).toBeVisible();\n 169\t await expect(nav.link(\"nav:audit\")).toBeHidden();\n 170\t await expect(nav.link(\"nav:users\")).toBeHidden();\n 171\t });\n 172\t});\n 55\t timings.push({\n 56\t path: new URL(res.url()).pathname,\n 57\t status: res.status(),\n 58\t ms: Math.round(t.responseEnd),\n 59\t });\n 60\t });\n 61\t\n 62\t await page.goto(\"/reports\");\n 63\t await expect(page.getByRole(\"heading\", { name: tEn(\"reports:title\") })).toBeVisible();\n 64\t await page.waitForLoadState(\"networkidle\");\n 65\t\n 66\t // The initial seven-day fan-out is not evidence that changing the date\n 67\t // controls refetched anything. Start the measurement window only after the\n 68\t // initial screen has settled, so deleting refetch-on-change leaves this\n 69\t // collection empty and fails below.\n 70\t timings.length = 0;\n 71\t\n 72\t // Widen to the maximum. `to` first: `from`'s own `max` attribute is `to`, so\n 73\t // setting `from` to a far-past date while `to` is still the default would be\n 74\t // clamped by the browser and the spec would quietly test a 7-day window.\n 75\t //\n 76\t // `exact: true` on both: the labels are the single words \"From\" and \"To\",\n 77\t // and getByLabel substring-matches accessible names — so a bare \"To\" also\n 78\t // resolves the theme toggle (\"Switch to night mode\"). Two elements, strict\n 79\t // mode violation, and the failure names the toggle rather than the ambiguity.\n 80\t const startedAt = Date.now();\n 81\t await page.getByLabel(tEn(\"reports:toLabel\"), { exact: true }).fill(to);\n 82\t await page.getByLabel(tEn(\"reports:fromLabel\"), { exact: true }).fill(from);\n 83\t\n 84\t // THE GUARANTEE: the screen renders the report, rather than the bound\n 85\t // refusing it. `role=\"alert\"` is ReportsPage's error region.\n 86\t const production = page\n 87\t .getByRole(\"table\")\n 88\t .filter({ has: page.getByRole(\"columnheader\", { name: tEn(\"reports:dateHeader\") }) });\n 89\t await expect(production).toBeVisible();\n 90\t await expect(\n 91\t page.getByRole(\"alert\"),\n 92\t `a ${LARGEST_ACCEPTED_SPAN}-day range was refused, but MaxRangeDays=${MAX_RANGE_DAYS} should accept it`,\n 93\t ).toBeHidden();\n 94\t const renderedInMs = Date.now() - startedAt;\n 95\t\n 96\t // The date fields really do hold the wide range — proof the browser did not\n 97\t // clamp what was typed, which would make every assertion above describe a\n 98\t // narrower request than the one this spec claims to have made.\n 99\t await expect(page.getByLabel(tEn(\"reports:fromLabel\"), { exact: true })).toHaveValue(from);\n 100\t await expect(page.getByLabel(tEn(\"reports:toLabel\"), { exact: true })).toHaveValue(to);\n 101\t\n 102\t const atMaxRange = timings.filter((t) => t.status === 200);\n 103\t expect(atMaxRange.length, \"no report endpoint refetched after the maximum range was applied\")\n 104\t .toBeGreaterThan(0);\n 105\t\n 106\t // Recorded, not asserted. A latency THRESHOLD here would be a flaky test\n 107\t // dressed as a performance gate — the number depends on the host, and under\n 108\t // the canary (#386) it is supposed to degrade. #311's acceptance item asks\n 109\t // for the figure to be captured; the canary is where it gets compared.\n 110\t const slowest = Math.max(...atMaxRange.map((t) => t.ms));\n 111\t const summary = [\n 112\t `range: ${from} .. ${to} (${LARGEST_ACCEPTED_SPAN} days, the documented maximum)`,\n 80\t await signIn(i18nPersona());\n 81\t\n 82\t // Start from a known language rather than whatever this account was last\n 83\t // left in — the persona is reserved, but a previous failed run is still a\n 84\t // possible starting state.\n 85\t await page.goto(\"/account\");\n 86\t const selector = languageSelect(page);\n 87\t const resetPersisted = page.waitForResponse((response) =>\n 88\t response.url().includes(\"/api/v1/me/language\")\n 89\t && response.request().method() === \"PUT\"\n 90\t && response.status() === 204);\n 91\t await selector.selectOption(\"en\");\n 92\t await resetPersisted;\n 93\t await expect(page.getByRole(\"link\", { name: tEn(\"nav:reports\"), exact: true })).toBeVisible();\n 94\t\n 95\t // The switch, made the way a user makes it.\n 96\t const languagePersisted = page.waitForResponse((response) =>\n 97\t response.url().includes(\"/api/v1/me/language\")\n 98\t && response.request().method() === \"PUT\"\n 99\t && response.status() === 204);\n 100\t await selector.selectOption(lang);\n 101\t await languagePersisted;\n 102\t\n 103\t // THE ASSERTION: the destination the user reads in the sidebar is now in\n 104\t // the new language. The sidebar is the right place to look because it is\n 105\t // rendered by a different component tree than the screen that owns the\n 106\t // selector — a switch that only repainted the current screen would pass a\n 107\t // narrower check and still be broken everywhere else.\n 108\t await expect(\n 109\t page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }),\n 110\t `the sidebar did not switch to ${lang}`,\n 111\t ).toBeVisible();\n 112\t await expect(page.getByRole(\"link\", { name: tEn(\"nav:reports\"), exact: true })).toBeHidden();\n 113\t\n 114\t // follows. This is a real accessibility guarantee, not\n 115\t // decoration: it is what tells a screen reader which voice to use, and\n 116\t // index.html ships a static \"en\" that a broken listener would leave in\n 117\t // place while the visible text changed underneath it.\n 118\t await expect(page.locator(\"html\")).toHaveAttribute(\"lang\", lang);\n 119\t\n 120\t // Prove the preference survived outside optimistic local i18n state. A\n 121\t // missing PUT can still repaint this tab; only a reload bootstrapping from\n 122\t // /me demonstrates that the user's durable preference changed.\n 123\t await page.reload();\n 124\t await expect(page.locator(\"html\")).toHaveAttribute(\"lang\", lang);\n 125\t await expect(page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }))\n 126\t .toBeVisible();\n 127\t\n 128\t // And the screens still WORK in that language — the point of #277's \"not\n 129\t // broken\", as opposed to \"translated\". A populated data screen renders its\n 130\t // table, not an error.\n 131\t await page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }).click();\n 132\t await expect(page.getByRole(\"heading\", { name: t(lang, \"reports:title\") })).toBeVisible();\n 133\t await expect(page.getByRole(\"alert\")).toBeHidden();\n 134\t await expect(\n 135\t page\n","input_text","Script completed\nWall time 0.3 seconds\nOutput:\n",{"_507":567,"_486":487,"_509":493},{"_553":554,"_45":568,"_569":570,"_514":571,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef196ab00819687cf6b0be1e2a8e3","input","const r = await tools.exec_command({cmd:\"git status --short --branch; nl -ba web/src/api/client.ts | sed -n '158,185p'; nl -ba web/src/api/client.test.ts | sed -n '960,1025p'; nl -ba tools/simulation/ui/specs/session-races.spec.ts | sed -n '30,180p'; nl -ba tools/simulation/ui/specs/reports-range.spec.ts | sed -n '55,112p'; nl -ba tools/simulation/ui/specs/i18n.spec.ts | sed -n '80,135p'\",\"workdir\":\"/workspace/cluckwork\",\"yield_time_ms\":10000,\"max_output_tokens\":20000}); text(r.output)\n",{"_519":493},"exec","namespace","custom_tool_call",{"_507":576,"_486":487,"_509":493},{"_510":-5,"_577":578,"_45":579,"_514":580,"_581":582,"_96":583},"encrypted_content","gAAAAABqbvGW8hd9XNFovwa_5Xi9MxznQj7twDWe3KkTc2oS--LzJT_FHwSIdcSqXnA845hz-TtAq3VPPtBmPZPXzCxX8Kq9aWTu-LDBngcz5Xn9fZaQ936nkatr4mQeLOltRTRwthHC_tBioZp2tLTylLphbRV4K4o2sMDFq_jCsgcYxDprl2TuFFdJWRB6L6vY3fGOnvb_1NU3QMHUE7EreizLYiI6viGEvvGqZG0vpHtNhqgfiRYBQV3MKZMs-WM9n4FMRw9cknN64N3JlyoBtRuPAaGlgX_9IsujSHSrG0rLmUnmBKQXLyxc_siiiTeVZeuFQkMrWL0j9uqn3Tq0HEXQDUapQm7S5dFpNUwajseZqL7eol0jlmJU-4o1A5ST6pfbiwyjiKA1KmbGS47GfWuHrYGiHOobo8UJCQzausiRoSRTHGJdvngRMoZakDYhIGv92chbcKGN9-8KD-AMRHefAWi-h0meqcFMa0zp6if4KvM9-meki3AMpFvEozLA5iKbFswPAuJJ45LLn6XxwhIeacGJQGxVpmQh4BXJ05TP-9l7xpmmxJStLtoPV4jKIDkyTM9ZBF_FFIGCLYM2EeZrj8HdePmEvm6kl26zvaUrZdpG0DbONbOsD5g95X3JWfkKumFSbnldcG5qeSGvYqmBZT3AG92aRxaDz6F5fEpriYcREhPHoeXfyLi88AzAOY-2pi-CsVmWdoaqjfZqkfdxWCIWK16i87JGK2UPPTOmXQdzcluud8nIFs4ha9cWwGyrrCNjr30x5EHY_q3i8YK9pBnQRwlOnHx8jlz3NKiGyyX86EqLywhFFnEuDE629sHVbnjvrJg_Am1feuvAW1Bhq1zs2PqZPvqugkLDgZM4s74xnIouZCqkpiKL9_ZfP1FtHN8Bm1QsLoLz1zEPHXlZd8YgirjpxrwvIIgfcSX_mTNf8Tk4P-AZ08ZlvMYuVJ7sj8VSWeq-OWouArBVUwtSkjNuyg==","rs_0f68152e58c069a5016a6ef1960a0c819689d547610a3ac7b7",{"_519":493},"summary",[584],"reasoning",{"_49":585,"_96":586},"**Adding citation line numbers**","summary_text",{"_525":588,"_507":589,"_486":487,"_509":493},1785655702588,{"_510":590,"_45":579,"_581":591,"_96":583},[],[585],{"_507":593,"_486":487,"_509":493},{"_553":594,"_45":-5,"_514":595,"_194":-5,"_556":596,"_96":558},"call_AkcfDJbxfNbNomWkDLev3M7u",{"_519":493},{"_327":597,"_560":-5},[598,599],{"_49":601,"_96":564},{"_49":600,"_96":564},"{\n \"title\": \"fix(e2e): make the remaining smoke guarantees non-vacuous\",\n \"body\": \"## Summary\\n\\nFollow-up to the round-1 review of the stacked simulation smoke/canary work.\\n\\n- force the logout race to let the held refresh settle, so cancellation alone cannot satisfy the session-generation assertion\\n- abort an obsolete refresh when an explicit login starts, preventing its late `Set-Cookie` from replacing the newer login cookie; cover the behavior with a focused client test and reload the browser in the E2E assertion\\n- isolate maximum-range report timings from the initial seven-day fan-out\\n- require the language preference PUT to succeed and reload from the durable `/me` preference before accepting translated UI state\\n\\n## Testing\\n\\n- `PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm test -- --run src/api/client.test.ts` (75 passed)\\n- `PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck` in `web/`\\n- `git diff --check`\\n\\n## Environment notes\\n\\n- The simulation UI typecheck could not be run from a clean install because npm returned HTTP 403 for `playwright-core-1.62.1.tgz` under the environment's package policy.\\n- The default Node 20 runtime cannot run this Vitest version (`--no-experimental-webstorage`); verification used the installed Node 24 runtime.\"\n}","Script completed\nWall time 0.1 seconds\nOutput:\n",{"_525":603,"_507":604,"_486":487,"_509":493},1785655700177,{"_605":-5,"_606":607,"_491":608,"_107":-5,"_45":609,"_610":-5,"_611":-5,"_612":-5,"_613":614,"_615":616,"_500":117,"_617":616,"_96":618},"appContext","arguments",{"_325":623,"_327":624},19,"exec-95215387-5ac9-44ca-b46a-88a43dedaab9","mcpAppResourceUri","pluginId","readOnlyHint","result",{"_619":-5,"_510":620,"_621":622},"server","make_pr","tool","mcpToolCall","_meta",[625],"structuredContent",{"_325":623,"_327":624},"fix(e2e): make the remaining smoke guarantees non-vacuous","## Summary\n\nFollow-up to the round-1 review of the stacked simulation smoke/canary work.\n\n- force the logout race to let the held refresh settle, so cancellation alone cannot satisfy the session-generation assertion\n- abort an obsolete refresh when an explicit login starts, preventing its late `Set-Cookie` from replacing the newer login cookie; cover the behavior with a focused client test and reload the browser in the E2E assertion\n- isolate maximum-range report timings from the initial seven-day fan-out\n- require the language preference PUT to succeed and reload from the durable `/me` preference before accepting translated UI state\n\n## Testing\n\n- `PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm test -- --run src/api/client.test.ts` (75 passed)\n- `PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck` in `web/`\n- `git diff --check`\n\n## Environment notes\n\n- The simulation UI typecheck could not be run from a clean install because npm returned HTTP 403 for `playwright-core-1.62.1.tgz` under the environment's package policy.\n- The default Node 20 runtime cannot run this Vitest version (`--no-experimental-webstorage`); verification used the installed Node 24 runtime.",{"_96":49,"_49":600},{"_507":627,"_486":487,"_509":493},{"_553":594,"_45":628,"_569":629,"_514":630,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef18c27f881969f1b112e9764dfa3","const result = await tools.mcp__make_pr__make_pr({title:\"fix(e2e): make the remaining smoke guarantees non-vacuous\",body:\"## Summary\\n\\nFollow-up to the round-1 review of the stacked simulation smoke/canary work.\\n\\n- force the logout race to let the held refresh settle, so cancellation alone cannot satisfy the session-generation assertion\\n- abort an obsolete refresh when an explicit login starts, preventing its late `Set-Cookie` from replacing the newer login cookie; cover the behavior with a focused client test and reload the browser in the E2E assertion\\n- isolate maximum-range report timings from the initial seven-day fan-out\\n- require the language preference PUT to succeed and reload from the durable `/me` preference before accepting translated UI state\\n\\n## Testing\\n\\n- `PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm test -- --run src/api/client.test.ts` (75 passed)\\n- `PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck` in `web/`\\n- `git diff --check`\\n\\n## Environment notes\\n\\n- The simulation UI typecheck could not be run from a clean install because npm returned HTTP 403 for `playwright-core-1.62.1.tgz` under the environment's package policy.\\n- The default Node 20 runtime cannot run this Vitest version (`--no-experimental-webstorage`); verification used the installed Node 24 runtime.\"}); for (const c of (result?.content ?? [])) { if (c.type === \"text\") text(c.text); }\n",{"_519":493},{"_507":632,"_486":487,"_509":493},{"_510":-5,"_577":633,"_45":634,"_514":635,"_581":636,"_96":583},"gAAAAABqbvGMaXMioxA7lpsStkb74C-uFrOPwK_FoY49pARiDZYHGILCQbUfTtNTgkCuk4rQFQ0WUqFi_2B0WecoDAosHGp7EUWM8u9eePWQFo3nL6OPNUe8mBv5xoCl1QOHAykHYT2iq-vZh3Qz8uuaVvZRHvoS4t9Lnex7S3fI9IOymqfY31QGtidu_cv4HyfsqYCXZmY_xhBsRuFHIf6AOD9CnsBxk2_l2naDoNkBSv8ByonHcpmShMljWsLfSU_w5ZDfgRMqATKJ0duSZL7MBbLboS0MiMKMrmchhK38oTpYBv33yX7ES-kde-kqAd59TKHV8kc3sEE-S_VECkGjcdhkYWVNDjzKOrcgNktRqywEMaH9q4Nh-qWCh0GQuY16QR3BT0jPRVr7Mjr-WYP2NZgsJnMml-LON3mgk12Hok2ZPUHALnm7VEp-jtijXuFsfKKNPPtD8NZXsTxJPANvZfmUjlcQy9KQGOyGLbU-bNGGWNCJbiCLKfosUdmTf-GwGFhegxqjt427e9tsEEj2K77tVwwcUIOGr8SINgYpf2RG7GllWkq2IXN5UQbsuPNposYYNVY1DHIuYlMiXjVNgX_2rU2kixYI2-GBhjlTlfSkFwHJhVfAoZg4vcQACDtaftz34n-av-rzkO0qz7zHN8Qw94PGEV2I2e1ckIgGuqo-5tdSGA0AT7g3FcILTVyTAEb36lcuzJ2nTzsoY5E0E8lbelTdE91W1kCWrhjZEIq8w4lO_T_ZXv5kUXiz_PX7jVTPSH8lUvnn5ZAVScLT6gDLyHM-Kj6k3UBEa9itkdOyPu_cm5WXg4ycuvPOy4jV3Baztc22M381poYODK6C_Pja8GTtyRwj3iIXTIR8hRQNQeFGTiyS2GB0FrVPi7AIpRbBSaYb8UMRjoAcVYGY7YkaGKSOEB3BHMUxGWpr5eA3frcEaCEQgvZXRJ-pqH40I3gOqpgzSwfedp8d2kIF7vpN06u5OQ==","rs_0f68152e58c069a5016a6ef18b9b108196a46de3e4977a5bba",{"_519":493},[637],{"_49":638,"_96":586},"**Preparing unit discrepancy fix**",{"_525":640,"_507":641,"_486":487,"_509":493},1785655692077,{"_510":642,"_45":634,"_581":643,"_96":583},[],[638],{"_525":645,"_507":646,"_486":487,"_509":493},1785655688776,{"_532":647,"_534":648,"_536":649,"_538":539,"_491":650,"_541":35,"_45":651,"_543":652,"_545":546,"_500":117,"_96":547},"[work 016954a] fix(e2e): close remaining vacuous race assertions\n 5 files changed, 76 insertions(+), 2 deletions(-)\n","/bin/bash -lc 'git status --short; git diff --check; git add web/src/api/client.ts web/src/api/client.test.ts tools/simulation/ui/specs/session-races.spec.ts tools/simulation/ui/specs/reports-range.spec.ts tools/simulation/ui/specs/i18n.spec.ts && git commit -m \"fix(e2e): close remaining vacuous race assertions\"'",[653],135,"exec-b86b01e7-fb12-47b9-817b-753d399efc45","8576",{"_534":654,"_96":550},"git status --short; git diff --check; git add web/src/api/client.ts web/src/api/client.test.ts tools/simulation/ui/specs/session-races.spec.ts tools/simulation/ui/specs/reports-range.spec.ts tools/simulation/ui/specs/i18n.spec.ts && git commit -m \"fix(e2e): close remaining vacuous race assertions\"",{"_507":656,"_486":487,"_509":493},{"_553":657,"_45":-5,"_514":658,"_194":-5,"_556":659,"_96":558},"call_IcjTkeqbCs7KzrQfuSFIgm5U",{"_519":493},{"_327":660,"_560":-5},[661,662],{"_49":664,"_96":564},{"_49":663,"_96":564},"{\"chunk_id\":\"bb35c9\",\"wall_time_seconds\":0.034316948,\"exit_code\":0,\"original_token_count\":79,\"output\":\" M tools/simulation/ui/specs/i18n.spec.ts\\n M tools/simulation/ui/specs/reports-range.spec.ts\\n M tools/simulation/ui/specs/session-races.spec.ts\\n M web/src/api/client.test.ts\\n M web/src/api/client.ts\\n[work 016954a] fix(e2e): close remaining vacuous race assertions\\n 5 files changed, 76 insertions(+), 2 deletions(-)\\n\"}","Script completed\nWall time 0.2 seconds\nOutput:\n",{"_507":666,"_486":487,"_509":493},{"_553":657,"_45":667,"_569":668,"_514":669,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef186b6488196bd0245f20b67ffba","const r = await tools.exec_command({cmd:\"git status --short; git diff --check; git add web/src/api/client.ts web/src/api/client.test.ts tools/simulation/ui/specs/session-races.spec.ts tools/simulation/ui/specs/reports-range.spec.ts tools/simulation/ui/specs/i18n.spec.ts && git commit -m \\\"fix(e2e): close remaining vacuous race assertions\\\"\",\"workdir\":\"/workspace/cluckwork\",\"yield_time_ms\":1000,\"max_output_tokens\":20000}); text(JSON.stringify(r))\n",{"_519":493},{"_507":671,"_486":487,"_509":493},{"_510":-5,"_577":672,"_45":673,"_514":674,"_581":675,"_96":583},"gAAAAABqbvGGisTpNNVOZYLYzJbaSpyk8W0aPphuDyupTaNqG5fdkhHEEveIEXVVwDFTesIAY6KTXwPn05AQZVrNvYh888Ej9lc2HWoxxe8tHd4NxXNNuIuBmgT9M3hOwwH_ujZPE_3vBDlvepszcaiFzDMnezpXuTyETLzOJ7QPRgj7-iCxyGzW6a7jeGOpYHrUogOi5bvghsljao7L3K52snUIXwrqGKyvxeR9cZmcQwN87IfyFEoqjR_t6TaIcg18UbJzMHI5B9QNogUT9C5F_-8sqRDqPUsQ2m2ntrX5ctc7PORlyo6iDSxO9T3gHCeHJZHxQfalONv856sryRGaBJw04ZhLNL1ljpeNzierUq4qOwuqgbLIWy5RUOi8AeDpDFA9VbEX7WeS8BX8-KP1dQY5k7V4uhF4DYL75u_ueMo9Ho-hBO8_vvL0appjbtJJ61RffoorC8hZPa2E_SttL5UZDdqKDY3SamvxrcoOHpQVDHbtlZzouXEoa7sZylW-waf3eDFoNxcwfAR5TJJ0n2z3ouo5J0DXFFG8Jkz6l56m_o4cVoO1PnM5iQwlJnyhKeWQic4fX7lUrw6RDiy3bIho9qbSlWniA09dTTzXtAsxdLtnaLpUYJtnSi2CGI98xt-o70vspiDE55NGkt-ck4u43LmaSoK-A92NbgGxfchI0FstPdCqXKKgMHTHt3YuYtlnVLAyFSvUReO4QZkDt-MmandyfR59Ke5S-RgE28OE3iefQm8D6mBC_uz4ABlDNyDZtQjFk1fpsZjcRnazu0DGDvPiQmMuvESSi7nE4UcNj_dxhKfw2dHi2Rj0FHIN0oopyAeNB2x7qmZDWQJh8CX8hYIPhQ8B7QW1zAOQWQWE4rxxthA_05sUQSzhjD9Sg2Avl_nXqxINpggaJpypi-H_SUmAYHXmE9Oh-yv2SwsBoclQT_MFr29TYgJKKceiD5oayaa7T_ONlRyxHHeY5BsCP9IpYkPueGtJavZJRUUa_MSmCdc=","rs_0f68152e58c069a5016a6ef185f5588196a7ea493eb6d55547",{"_519":493},[676],{"_49":677,"_96":586},"**Planning full web testing**",{"_525":679,"_507":680,"_486":487,"_509":493},1785655686632,{"_510":681,"_45":673,"_581":682,"_96":583},[],[677],{"_507":684,"_486":487,"_509":493},{"_553":685,"_45":-5,"_514":686,"_194":-5,"_556":687,"_96":558},"call_OdpxTcvSXLDWFQglEclajF7Q",{"_519":493},{"_327":688,"_560":-5},[689,690],{"_49":692,"_96":564},{"_49":691,"_96":564},"[{\"name\":\"mcp__make_pr__make_pr\",\"description\":\"Simple MCP server providing a make_pr tool for preparing pull request metadata.\\n\\nRecord a pull request title and body.\\ntitle: Title of the pull request\\nbody: Body message of the pull request\\n\\nexec tool declaration:\\n```ts\\ndeclare const tools: { mcp__make_pr__make_pr(args: { body: string; title: string; }): Promise>; };\\n```\"}]","Script completed\nWall time 0.0 seconds\nOutput:\n",{"_507":694,"_486":487,"_509":493},{"_553":685,"_45":695,"_569":696,"_514":697,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef1832d8081969f6d7ff039f475a5","const matches = ALL_TOOLS.filter(x => x.name.includes(\"make_pr\"));\ntext(matches);\n",{"_519":493},{"_507":699,"_486":487,"_509":493},{"_510":-5,"_577":700,"_45":701,"_514":702,"_581":703,"_96":583},"gAAAAABqbvGDm8E5LpnTnjioBM72jZnnBPEvRw0ClCcRaQpPbmuFKdBnmCo-JYYRNmkUpHUbjMWxsgmSXjO8uthDXUNsG0zm2OEcVAJmPNeNMUQLOzg-99AE_wWXm0K97I67OZ8BtTZGbSYIdrGrF98-_856P6I9fQESuettgy1XNJH9PkkkIs9tsGj3h11iNH8uOfU6eyyoqEaCM15A_bO6ndunAtFkqnkR5-1gwhtqzWmpgDrRnsiSLtZsO8sVxyGnuHqMwNfeCxyDGh4qh7k9xcWokyJXRk1eBEU0EiHofUf4YKae804Ib0X9Cpkusnn37ctXxEPDSfK34H-aMm7tB5eJookkn2Gdj2KvanyzsFY2GKqq2V6h-dF0y3URZzpELPK3ZiXcYk8GWnvgEnphqa4YX5jW9dnAk1vmY5u6Fpf2GaItNHCVpHcJY9ZPTm7Rp9MXv-7GrSuhWx1A6dp21PRcEp3SvMo5yM5SRBrZnt8xQEq5AjGC_-Ts0AQ6Y3LJZJWKnnRWD82cm6By3IhmwLl0Vfh0l7lbzF5VIUhIL6RmN68HzhMrqCRpwiutNJ6splmq7UpMFA1G0WzhVSKqiAjmaw6pKab7WBnrgnMxOadSEbfksnyIDEOrw689cdnKotpV-lsHmB_Cs7u-vHe3hjSbjxK72Kfbpch7hVIIuLtnZpzDYL_SXPsjeeQZsFIcAq8jiURb3HQ7maNqHDeHGZyKRWBx3Ypf0v_hh8lyb_Bd-xF_IFGDsU1RLbAferzhNeqgGExj0YrDbSs5YPwpp19xPnr_mWZ3_JBRrxzshOm9Bsq5HpVa4qp5gYVrxe0z9FlI9dVMGIojMbG2LBac_ZeBxEb_ZwXpu7t9Urw7uz7AFVkNiHzA03GOd_R-Pv0Urnm2MAJj5zA6E7VsYxpGM67yN77cTOC771ZudZxriIxNj_7v766Br40R0ninM37n3cFxYTE1rU_9Mnfh7rwDEiiib76zCIDmV_kReuIS6KavTbAmnL7CrM9XzUvBteU7oK09pFUwHhbPJh0jslwwCE2HTOjt1x4ZpUo36mKWdR7MaWFyxeeiOF3q1qPS5vVnAW6g00XS","rs_0f68152e58c069a5016a6ef181ddb48196b6ad7960f223f61d",{"_519":493},[704],{"_49":705,"_96":586},"**Preparing commit and pull request**",{"_525":707,"_507":708,"_486":487,"_509":493},1785655683100,{"_510":709,"_45":701,"_581":710,"_96":583},[],[705],{"_525":712,"_507":713,"_486":487,"_509":493},1785655679013,{"_532":714,"_534":715,"_536":716,"_538":717,"_491":718,"_541":348,"_45":719,"_543":720,"_545":546,"_500":721,"_96":547},"npm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\nnpm error Missing script: \"lint\"\nnpm error\nnpm error Did you mean this?\nnpm error npm link # Symlink a package folder\nnpm error\nnpm error To see a list of scripts, run:\nnpm error npm run\nnpm error A complete log of this run can be found in: /root/.npm/_logs/2026-08-02T07_27_58_227Z-debug-0.log\n","/bin/bash -lc 'git diff --check && PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run lint -- src/api/client.ts src/api/client.test.ts'",[722],"/workspace/cluckwork/web",3948,"exec-0d440624-b217-415b-9f97-8d3380c7b242","12212","failed",{"_534":723,"_96":550},"git diff --check && PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run lint -- src/api/client.ts src/api/client.test.ts",{"_507":725,"_486":487,"_509":493},{"_553":726,"_45":-5,"_514":727,"_194":-5,"_556":728,"_96":558},"call_O0O2agQaxTVZONeU0HKH2RkU",{"_519":493},{"_327":729,"_560":-5},[730,731],{"_49":732,"_96":564},{"_49":714,"_96":564},"Script completed\nWall time 0.4 seconds\nOutput:\n",{"_507":734,"_486":487,"_509":493},{"_553":726,"_45":735,"_569":736,"_514":737,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef17ddb7881969353272b45d92b7a","const r = await tools.write_stdin({session_id:12212,chars:\"\",yield_time_ms:1000,max_output_tokens:12000}); text(r.output)\n",{"_519":493},{"_507":739,"_486":487,"_509":493},{"_553":740,"_45":-5,"_514":741,"_194":-5,"_556":742,"_96":558},"call_Z4GswFVkidS5RoZUKrtcl7ko",{"_519":493},{"_327":743,"_560":-5},[744,745],{"_49":747,"_96":564},{"_49":746,"_96":564},"{\"chunk_id\":\"52ecaf\",\"wall_time_seconds\":1.002674104,\"session_id\":12212,\"original_token_count\":0,\"output\":\"\"}","Script completed\nWall time 1.2 seconds\nOutput:\n",{"_507":749,"_486":487,"_509":493},{"_553":740,"_45":750,"_569":751,"_514":752,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef179f37481968f443a7dac15393b","const r = await tools.exec_command({cmd:\"git diff --check && PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run lint -- src/api/client.ts src/api/client.test.ts\",\"workdir\":\"/workspace/cluckwork/web\",\"yield_time_ms\":1000,\"max_output_tokens\":12000}); text(JSON.stringify(r))\n",{"_519":493},{"_507":754,"_486":487,"_509":493},{"_510":-5,"_577":755,"_45":756,"_514":757,"_581":758,"_96":583},"gAAAAABqbvF5l_25SH6qlyOjh-vbYMW8Exzfz5XS2KXU9oZqitQurAPRSuLmhHRhFYRUPpaNSS3W1HUJ4tprE5aI_nYyLIglfzGFeowOwRWIVNTO5D2bOqzQgVBdTwUQa4VPGJJlT74robFtdwHMuHtAMAvsO_6sEFjCOCEqsMLIQ1LIw4KMS-coXHxT_RXeQ27H2mjp94cGjk-fnddGOqmVakYQK9eGASj-xicWoFRkK4g3EOpJzcTDEMQjvy9zMJ6nEO4XuOdyFGNX_sk0DFd7DUIqm2WfjuRPU2iE84a2GvpJz_XZoq0Qm0YqtZVAaUYbmKfqHsXY0qHYZDK4SV35QXD7KiyUBWtD9ipk96s4rSX9gLZw-e-FxVTQMTloFH2bYYSlpmZg7cSjJOLtpEnmK-uHaIGXphms6wXfMw6jhBYz33l0mAuvJhBLxOaWnnf2lqJWGYqOUyeQKROjz-ROsDFhms1Fa7ruRBihcQhB2VmSQ3n0ZNLbZRKE2pdY_Ocu02J-YSimjBqwvScdYxP5rJKYSVIHnD3A_SM-vfg2xAP6YgFGOvhgV0TMDWaxGb9TMX-BuTz4x3htn5sdBeCDRapFJAtG3ECETGae0tpo41r77fA_0WvjeyyG2OBm50IM0BXTE5Qm3zciZtnx_24FvoU32OEg0R9QQlzuXGW_YQaS3zRacJ4ZEO6KoxINwEazx-tGWQHd_kgbTRT1Rw835MJr0OG4-Mc7cYl0JbP68m9_B2L75gFUqkZqgJfs61an8psPeUcQXInKCs4HTxVsMYcUGEVAVgEQyNBpPOetMEquamK2wOyTnUEBGYdhWenSL7jXof40IGwRbjTYE7niMZus24PlHigwy7YK93L7J5SocPwNpQEHRQCK7AgjZdgP9q2ACbjTqKyArBz6HnytGdt3WhFYYgDwClpW47jHE13ztQRAY5zJyNE6eXyNBfmy7UY1nDJuwi4MIiiO65-4XkIbm1jM-3GHMr1kv1jM-oSAoiyOPykki9gUwXFmzumFNYekrZnpbjKjdg2KLpsN66s-mJlkWyuz9-ztXWK2NU3xLYOcvIRXh9vRbJF7cVL1-wpLZCAQlmHioO0IHUEXtLpWkPFUgJkL0TduXgjOPitztBwRU-6hMtjCs0qoaEfR5XzUVfoogx_lp_GkTppma3djrWeN2hQ3rhwp1kkBG74M1klD7EIREk_PajT7oEgJ3cDDc3CyvjgNpApDxUL_MnGzC3DHTLVKtQojaX4n9cvbreEy1Y-APmPWZ9lFTfD0oe9vwSSPfHYH2ZRp0-3rI9B5rkYJ8g==","rs_0f68152e58c069a5016a6ef17801b8819694852f47ee655650",{"_519":493},[759],{"_49":760,"_96":586},"**Inspecting node_modules symlink and planning linting**",{"_525":762,"_507":763,"_486":487,"_509":493},1785655673871,{"_510":764,"_45":756,"_581":765,"_96":583},[],[760],{"_525":767,"_507":768,"_486":487,"_509":493},1785655668954,{"_532":769,"_534":770,"_536":771,"_538":772,"_491":773,"_541":35,"_45":774,"_543":775,"_545":546,"_500":117,"_96":547},"npm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\n\n> cluckwork-sim-ui@0.0.0 typecheck\n> tsc --noEmit\n\nplaywright.canary.config.ts(13,39): error TS2307: Cannot find module '@playwright/test' or its corresponding type declarations.\nplaywright.config.ts(7,39): error TS2307: Cannot find module '@playwright/test' or its corresponding type declarations.\nspecs-canary/canary.spec.ts(133,7): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs-canary/canary.spec.ts(134,7): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs-canary/canary.spec.ts(135,7): error TS7031: Binding element 'farm' implicitly has an 'any' type.\nspecs-canary/canary.spec.ts(136,8): error TS7006: Parameter 'testInfo' implicitly has an 'any' type.\nspecs/i18n.spec.ts(52,27): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/i18n.spec.ts(69,82): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/i18n.spec.ts(69,88): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/i18n.spec.ts(87,52): error TS7006: Parameter 'response' implicitly has an 'any' type.\nspecs/i18n.spec.ts(96,55): error TS7006: Parameter 'response' implicitly has an 'any' type.\nspecs/i18n.spec.ts(143,5): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/i18n.spec.ts(144,5): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/manager.spec.ts(35,5): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/manager.spec.ts(36,5): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/manager.spec.ts(37,5): error TS7031: Binding element 'farm' implicitly has an 'any' type.\nspecs/manager.spec.ts(134,69): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/manager.spec.ts(134,77): error TS7031: Binding element 'nav' implicitly has an 'any' type.\nspecs/owner.spec.ts(19,28): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/owner.spec.ts(23,74): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/owner.spec.ts(78,5): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/owner.spec.ts(79,5): error TS7031: Binding element 'nav' implicitly has an 'any' type.\nspecs/owner.spec.ts(105,74): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/owner.spec.ts(105,80): error TS7031: Binding element 'nav' implicitly has an 'any' type.\nspecs/owner.spec.ts(133,49): error TS7006: Parameter 'a' implicitly has an 'any' type.\nspecs/owner.spec.ts(163,30): error TS7006: Parameter 'a' implicitly has an 'any' type.\nspecs/owner.spec.ts(168,49): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/owner.spec.ts(168,55): error TS7031: Binding element 'nav' implicitly has an 'any' type.\nspecs/pwa.spec.ts(47,78): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/pwa.spec.ts(47,84): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/pwa.spec.ts(76,68): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/pwa.spec.ts(76,74): error TS7031: Binding element 'context' implicitly has an 'any' type.\nspecs/pwa.spec.ts(76,83): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/pwa.spec.ts(116,5): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/pwa.spec.ts(117,5): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/readonly.spec.ts(26,28): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/readonly.spec.ts(30,70): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/readonly.spec.ts(30,76): error TS7031: Binding element 'nav' implicitly has an 'any' type.\nspecs/readonly.spec.ts(56,66): error TS7031: Binding element 'nav' implicitly has an 'any' type.\nspecs/readonly.spec.ts(74,74): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/readonly.spec.ts(81,28): error TS7006: Parameter 'res' implicitly has an 'any' type.\nspecs/reports-range.spec.ts(39,5): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/reports-range.spec.ts(40,5): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/reports-range.spec.ts(41,5): error TS7031: Binding element 'farm' implicitly has an 'any' type.\nspecs/reports-range.spec.ts(42,6): error TS7006: Parameter 'testInfo' implicitly has an 'any' type.\nspecs/reports-range.spec.ts(52,26): error TS7006: Parameter 'res' implicitly has an 'any' type.\nspecs/reports-range.spec.ts(124,64): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/reports-range.spec.ts(124,70): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/reports-range.spec.ts(124,78): error TS7031: Binding element 'farm' implicitly has an 'any' type.\nspecs/sales.spec.ts(46,5): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/sales.spec.ts(47,5): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/sales.spec.ts(48,5): error TS7031: Binding element 'farm' implicitly has an 'any' type.\nspecs/session-races.spec.ts(34,5): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/session-races.spec.ts(35,5): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/session-races.spec.ts(36,5): error TS7031: Binding element 'nav' implicitly has an 'any' type.\nspecs/session-races.spec.ts(48,55): error TS7006: Parameter 'route' implicitly has an 'any' type.\nspecs/session-races.spec.ts(56,45): error TS7006: Parameter 'route' implicitly has an 'any' type.\nspecs/session-races.spec.ts(73,32): error TS7006: Parameter 'r' implicitly has an 'any' type.\nspecs/session-races.spec.ts(94,41): error TS7006: Parameter 'c' implicitly has an 'any' type.\nspecs/session-races.spec.ts(110,5): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/session-races.spec.ts(111,5): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/session-races.spec.ts(112,5): error TS7031: Binding element 'nav' implicitly has an 'any' type.\nspecs/session-races.spec.ts(119,55): error TS7006: Parameter 'route' implicitly has an 'any' type.\nspecs/session-races.spec.ts(128,32): error TS7006: Parameter 'r' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(47,80): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(47,86): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(73,80): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(73,86): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(82,35): error TS7006: Parameter 'c' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(91,5): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(92,5): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(93,5): error TS7031: Binding element 'nav' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(103,45): error TS7006: Parameter 'route' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(118,8): error TS7006: Parameter 'r' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(136,57): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(136,63): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(136,71): error TS7031: Binding element 'nav' implicitly has an 'any' type.\nspecs/session-refresh.spec.ts(152,8): error TS7006: Parameter 'r' implicitly has an 'any' type.\nspecs/worker.spec.ts(49,72): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/worker.spec.ts(49,78): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/worker.spec.ts(49,86): error TS7031: Binding element 'farm' implicitly has an 'any' type.\nspecs/worker.spec.ts(76,5): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/worker.spec.ts(77,5): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/worker.spec.ts(78,5): error TS7031: Binding element 'farm' implicitly has an 'any' type.\nspecs/worker.spec.ts(107,5): error TS7031: Binding element 'page' implicitly has an 'any' type.\nspecs/worker.spec.ts(108,5): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/worker.spec.ts(109,5): error TS7031: Binding element 'farm' implicitly has an 'any' type.\nspecs/worker.spec.ts(127,64): error TS7031: Binding element 'signIn' implicitly has an 'any' type.\nspecs/worker.spec.ts(127,72): error TS7031: Binding element 'nav' implicitly has an 'any' type.\nsrc/dom.ts(3,38): error TS2307: Cannot find module '@playwright/test' or its corresponding type declarations.\nsrc/fixtures.ts(22,63): error TS2307: Cannot find module '@playwright/test' or its corresponding type declarations.\nsrc/fixtures.ts(55,14): error TS7031: Binding element 'page' implicitly has an 'any' type.\nsrc/fixtures.ts(55,22): error TS7006: Parameter 'use' implicitly has an 'any' type.\nsrc/fixtures.ts(69,20): error TS7006: Parameter 'use' implicitly has an 'any' type.\nsrc/fixtures.ts(73,20): error TS7031: Binding element 'page' implicitly has an 'any' type.\nsrc/fixtures.ts(73,28): error TS7006: Parameter 'use' implicitly has an 'any' type.\nsrc/fixtures.ts(101,17): error TS7031: Binding element 'page' implicitly has an 'any' type.\nsrc/fixtures.ts(101,25): error TS7006: Parameter 'use' implicitly has an 'any' type.\nsrc/mutants.ts(59,27): error TS2307: Cannot find module '@playwright/test' or its corresponding type declarations.\nsrc/mutants.ts(73,36): error TS7006: Parameter 'route' implicitly has an 'any' type.\nsrc/mutants.ts(122,58): error TS7006: Parameter 'route' implicitly has an 'any' type.\nsrc/mutants.ts(146,55): error TS7006: Parameter 'route' implicitly has an 'any' type.\nsrc/mutants.ts(200,53): error TS7006: Parameter 'route' implicitly has an 'any' type.\nsrc/mutants.ts(225,54): error TS7006: Parameter 'route' implicitly has an 'any' type.\nsrc/mutants.ts(248,56): error TS7006: Parameter 'route' implicitly has an 'any' type.\nsrc/preflight.ts(33,33): error TS2307: Cannot find module '@playwright/test' or its corresponding type declarations.\nsrc/vitals.ts(39,27): error TS2307: Cannot find module '@playwright/test' or its corresponding type declarations.\n","/bin/bash -lc 'ln -s ../../../web/node_modules node_modules; PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck; rm node_modules'",[776],"/workspace/cluckwork/tools/simulation/ui",4680,"exec-7302ae16-6bdd-49be-bc92-eef939635904","5699",{"_534":777,"_96":550},"ln -s ../../../web/node_modules node_modules; PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck; rm node_modules",{"_507":779,"_486":487,"_509":493},{"_553":780,"_45":-5,"_514":781,"_194":-5,"_556":782,"_96":558},"call_Q7m8BpcO519XELOBuxOl2Lnp",{"_519":493},{"_327":783,"_560":-5},[784,785],{"_49":786,"_96":564},{"_49":769,"_96":564},"Script completed\nWall time 1.7 seconds\nOutput:\n",{"_507":788,"_486":487,"_509":493},{"_553":780,"_45":789,"_569":790,"_514":791,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef17292908196b111afce06a1a3ab","const r = await tools.write_stdin({session_id:5699,chars:\"\",yield_time_ms:1000,max_output_tokens:12000}); text(r.output)\n",{"_519":493},{"_507":793,"_486":487,"_509":493},{"_553":794,"_45":-5,"_514":795,"_194":-5,"_556":796,"_96":558},"call_7uiu5Pt7WZsTFnZpTr9Dhxwr",{"_519":493},{"_327":797,"_560":-5},[798,799],{"_49":801,"_96":564},{"_49":800,"_96":564},"{\"chunk_id\":\"4af998\",\"wall_time_seconds\":1.002553809,\"session_id\":5699,\"original_token_count\":0,\"output\":\"\"}","Script completed\nWall time 1.3 seconds\nOutput:\n",{"_507":803,"_486":487,"_509":493},{"_553":794,"_45":804,"_569":805,"_514":806,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef16fb9408196b2157b5661ad7a47","const r = await tools.exec_command({cmd:\"ln -s ../../../web/node_modules node_modules; PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck; rm node_modules\",\"workdir\":\"/workspace/cluckwork/tools/simulation/ui\",\"yield_time_ms\":1000,\"max_output_tokens\":12000}); text(JSON.stringify(r))\n",{"_519":493},{"_507":808,"_486":487,"_509":493},{"_510":-5,"_577":809,"_45":810,"_514":811,"_581":812,"_96":583},"gAAAAABqbvFvn7TKSZ2ifulA09YWLakWyx8zc-pY9PLgc8OczdOsnv31MPGMIP-gdUt71SBFHiKkRAPIXv5CSUhHs3AAVoje7otwuY3c-LBHAyvBQbDKVhZC6L5N5z4NDaDw7YOYERbBzgg77chEEoHnrNomst6uiVyvqzeiY0GfTJDSFl0IofTQmYFEJixS41lnPWgZ_hHpOOFd1mncNjWEQrN2kHDdRl3d_BZjU_ugAjS2R8tUAolnuP9jg_h2BvU2yPNlwPWGZicK1q96uDqx3xzJaYXIkG2qjYPVJxOp2SjdKLdtkHzE1Q6BPZGvU_dG-oMyoHZAVCoN9ft-zWwfctVijH6-UuG2EObiNIOo6NmrEuHLsuijC_7cEzZs5d9JuEhI4MuBoh1W0ED25hpFwb7FcHzy2rLkmWTMezJyw8QoSN0fBIYwyNlC_aFFCScASi0p-XmHbaxlouJbR4KGlVwwZYmA3tmCk4ymkoCd_f-gRpqYgs4G6P8PU9_Jl_7jBGYoWRr6K8Ze3mVDVGzKDtJX-FYpAy-QTl62x2_Bz3mPPKqhUZQjFD2oXM4T1DffNbyetosdZDOFPuAW-XuG6CSwY5MB4z1FRvxN7uiHLGxJ571myJtSZCvA0U1ZRQa1wjkxUWAWCkGooPDYpA47g8WNn9asS03FKUbE3byMXErLNVIU5EMy4_kqZymTHxwMwxVhAo7r82nHSo3h0qpgfGCJhMNT8jmvvWaghMmSxy5cBAUWj_n4lVwUvVve-laTUfD-fGkQyxmIkjVoTJom9J3DIsQC9M79VfKM_V1HSWyc4ZXlV7zVtzUqTXr-8pExO317H2t-aEitCVE8Y2yxST_HW3oVte-VA9bOio-Z_NXEA1C9kf51eU4Q8Jfi05GojiBdupnO6-Spupsa5P9qBQoPDdwAO_MQrdsaYn1Iv9NTnXkNQYz9GD4KBS0x2TmTiwktVuKEkCLBK2DNWDtqrIhi20nXKjA8X5xssnnMa0sHVVJsxKvmoE4yVvm3LQ-zhDZ3M512353l6Apx353jtg7IG73iHq4bqDc0-fgjsS8-2DqwbE4=","rs_0f68152e58c069a5016a6ef16e08f48196ac358a35ae05a27c",{"_519":493},[813],{"_49":814,"_96":586},"**Planning temporary node_modules symlink**",{"_525":816,"_507":817,"_486":487,"_509":493},1785655663648,{"_510":818,"_45":810,"_581":819,"_96":583},[],[814],{"_525":821,"_507":822,"_486":487,"_509":493},1785655659970,{"_532":823,"_534":824,"_536":825,"_538":772,"_491":826,"_541":35,"_45":827,"_543":828,"_545":546,"_500":117,"_96":547},"web-node-types\n M specs/i18n.spec.ts\n M specs/reports-range.spec.ts\n M specs/session-races.spec.ts\n M ../../../web/src/api/client.test.ts\n M ../../../web/src/api/client.ts\n","/bin/bash -lc \"find node_modules -maxdepth 1 -mindepth 1 -printf '%f\\\\n' 2>/dev/null | head; test -d /workspace/cluckwork/web/node_modules/@types/node && echo web-node-types; test -d /workspace/cluckwork/web/node_modules/@playwright/test && echo web-pw; git status --short\"",[829],2970,"exec-8668aca6-b229-423c-b9dd-8f06b8285487","74226",{"_534":830,"_96":550},"find node_modules -maxdepth 1 -mindepth 1 -printf '%f\\n' 2>/dev/null | head; test -d /workspace/cluckwork/web/node_modules/@types/node && echo web-node-types; test -d /workspace/cluckwork/web/node_modules/@playwright/test && echo web-pw; git status --short",{"_507":832,"_486":487,"_509":493},{"_553":833,"_45":-5,"_514":834,"_194":-5,"_556":835,"_96":558},"call_UpdqymdqUA6yKWGoLx7Y23Wi",{"_519":493},{"_327":836,"_560":-5},[837,838],{"_49":839,"_96":564},{"_49":823,"_96":564},"Script completed\nWall time 3.1 seconds\nOutput:\n",{"_507":841,"_486":487,"_509":493},{"_553":833,"_45":842,"_569":843,"_514":844,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef166cb3481969e959354bcb25e6b","const r = await tools.exec_command({cmd:\"find node_modules -maxdepth 1 -mindepth 1 -printf '%f\\\\n' 2>/dev/null | head; test -d /workspace/cluckwork/web/node_modules/@types/node && echo web-node-types; test -d /workspace/cluckwork/web/node_modules/@playwright/test && echo web-pw; git status --short\",\"workdir\":\"/workspace/cluckwork/tools/simulation/ui\",\"yield_time_ms\":10000,\"max_output_tokens\":2000}); text(r.output)\n",{"_519":493},{"_507":846,"_486":487,"_509":493},{"_510":-5,"_577":847,"_45":848,"_514":849,"_581":850,"_96":583},"gAAAAABqbvFmWeSvGMoe6e1oSkwgV1YzPQZyAQ2DPfPxm9hKMVviTGLwKFTu9mghAZmmqczgItLsExBqzWEFN2Posb60KqKyjGVuTElHai-2DqpNSoV2kW07T6d77VLp-K6LOlfSmLiBnkwPaKLnMqH6I4QSNA5jIjFIOE00iJJ1g88MASp8mYkp19ryHd0WA57fILSKeJvSusoCsxS6BPUf0rwyprAPIFEGQD6j8NeweQLhMgAvKpzrlF0zojRQR4ykoGvU2LVycfjQJXOqs6OvJTLlsf3ng2nvngDLCL3y9uugRTjYKxqRTkCiqT0ceRib0qo8WFn0QAJ6ZMZFaLHRgh20sDMmhLaKlUgiYNxWpSACRfeantVXQ8yvd1gCJKi4Hpi4j3jHhxLT1Sp5uI3OwALEtMjhJ6XuWea7ncMny4K9TugS6ExaK-Ow19ryH3r_caoLP6Q6NUo315YS8t3ch30P6cYuwSwYENmP8eZdYNSBNirpwiQN4DKAGXv85qH8KllnF5IrjUsxNv84i1b6TEQWBvIzyMrmy9AJ6D2PzkW6pUGyjfbVVH9n9nbxfWhJE5nhmiXaol3cU8AhSE9kUN_7oSA8BpOJUUVLeKWTPsjfZLIrKhOnSvOsavOFytCtrXSLOpK40MBqZxNOWO_93qMS1pwzQNiB7qcw577F3N9kxHdrPuhVt4tUA6Y2-wkglNs49nBEYV3dPiSK1Eu2LtNF33lokjLqVqjj1_x8Wen2MzlRd7UMciO8yCKue4kZy75HsgQBXu5nDorQuh4ZIbxPyz4arebRarssqDPsQCKXNUP8qvBmDhcX8UOk36zFPz4CqwvCkfNFvmXYvxU8cnrF0jyc58eGCdB5ghBKXq7Gpc_3-lVuC49lm7ps8vaQkumLDLgIzoqbxtwDmPVi_QhvSwoDF7uhf4TzTsOLAGRf36Q0f31cWlKfYBQrsvDOz2OYn3f7iOLFVGpigucGBnNWbIwyaBVNOPLDcuIyVBUbg7DquAuKms6KabT52J59k9_VMm_CAtYBKtSUzwJ1iDDyatsT4B2zP6oCI0QJ9lYKd56hQpxFzFApYl_KaLgzYxl0SZb1luufAOJCfmPxXAPB8hzxhxGL4WsCkgnpXVbvcXd804-LCc0iacJ-pCZ-ucfSC1ex","rs_0f68152e58c069a5016a6ef16495c081969d84e539bb503d87",{"_519":493},[851],{"_49":852,"_96":586},"**Investigating node_modules type linking**",{"_525":854,"_507":855,"_486":487,"_509":493},1785655654713,{"_510":856,"_45":848,"_581":857,"_96":583},[],[852],{"_525":859,"_507":860,"_486":487,"_509":493},1785655650134,{"_532":861,"_534":862,"_536":863,"_538":772,"_491":864,"_541":348,"_45":865,"_543":866,"_545":546,"_500":721,"_96":547},"npm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\nnpm error code E403\nnpm error 403 403 Forbidden - GET https://registry.npmjs.org/playwright-core/-/playwright-core-1.62.1.tgz\nnpm error 403 In most cases, you or one of your dependencies are requesting\nnpm error 403 a package version that is forbidden by your security policy, or\nnpm error 403 on a server you do not have access to.\nnpm error A complete log of this run can be found in: /root/.npm/_logs/2026-08-02T07_27_26_937Z-debug-0.log\n","/bin/bash -lc 'PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm ci && PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck'",[867],6153,"exec-8ab4292c-d52b-4186-a94a-a87e841c6845","36017",{"_534":868,"_96":550},"PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm ci && PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck",{"_507":870,"_486":487,"_509":493},{"_553":871,"_45":-5,"_514":872,"_194":-5,"_556":873,"_96":558},"call_67flRne2jLTAmavwmNfw2vXz",{"_519":493},{"_327":874,"_560":-5},[875,876],{"_49":877,"_96":564},{"_49":861,"_96":564},"Script completed\nWall time 2.7 seconds\nOutput:\n",{"_507":879,"_486":487,"_509":493},{"_553":871,"_45":880,"_569":881,"_514":882,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef15eab8c81968ae9a7ae8481190d","const r = await tools.write_stdin({session_id:36017,chars:\"\",yield_time_ms:1000,max_output_tokens:12000}); text(r.output)\n",{"_519":493},{"_507":884,"_486":487,"_509":493},{"_553":885,"_45":-5,"_514":886,"_194":-5,"_556":887,"_96":558},"call_3WYdS7s8JKAPMquJJsduo1nE",{"_519":493},{"_327":888,"_560":-5},[889,890],{"_49":747,"_96":564},{"_49":891,"_96":564},"{\"chunk_id\":\"948bc9\",\"wall_time_seconds\":1.002298437,\"session_id\":36017,\"original_token_count\":0,\"output\":\"\"}",{"_507":893,"_486":487,"_509":493},{"_553":885,"_45":894,"_569":895,"_514":896,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef15a88e081968fbeb82232e2bd44","const r = await tools.exec_command({cmd:\"PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm ci && PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck\",\"workdir\":\"/workspace/cluckwork/tools/simulation/ui\",\"yield_time_ms\":1000,\"max_output_tokens\":12000}); text(JSON.stringify(r))\n",{"_519":493},{"_507":898,"_486":487,"_509":493},{"_510":-5,"_577":899,"_45":900,"_514":901,"_581":902,"_96":583},"gAAAAABqbvFaBZNRdEKrazdUEHen7Fj0Sxrlk0mxyZcGn2oTO-YTTRMPUVZMrrpzsWTySxnhZvhremkTLzgms5Mxg8T1rU2n2ue4nGm7dAjaN80cYjqQsz0svWaahAHChe4NOkDcZeb_OUZSiTybXtqCzKKHl2L49ho3fZjwyiHnhjfS3p_46usIe-R3Pw5xQRXlvlKeO8fXY24WYsB2LBOsJOGU-1V0GB08nsZkErAB4E6SxAlANwmm2q586kpyFhEadsbGQxk8rfbvTDe-VyFKS644yj1gymJ-KW2J30jZGCkqYBhH8rWE-4n1E_RXzZFdU-u-JJq2jTQ6DEJPkL8uEd0YFWJmJ0lTtvcq6_Sg0AGv_BqcXJlMj8XiE7UFBTEdOeNgIW-DvY4D1i8W1wuLfsSkATnXEjLG7oLMdRV0hI-MhwB6kVJWwJl53MxbrVRSEgAmG_SWXb7Ks8pL7ddOF2oGV834MmcnbtwHUoEIvF8Jd0eI-EP6u59NSuzv-lXh5lPivcObYsW006pmR_GSZNuH-DWxTrxKStSzyHZP-mc7mvneII-MRHMejMCo64UV3_lsvLsi9c3nQm9jOrZPLO4yGm-hzPfubr8-2HZCqXCe-UAs4VoVOwxZg-rXMGrkt_JauKSJMI-bPtXP4r3iFFKejUBluZogIok1vfF344qYBDOZb23_kz0vDZjhlJ9lDmmzEyTYPunN3g1XHTwJ5hJvU7hykiJfD3KYuPU2RqsjDKl5QLAZRxsq4PUXNwvsoHhEFg-YDCWOcqWQ3XXK4iquZ612xQkS6vnhpAhJi6GYnegb-tnyhQfgKB29kv4TwBxXhwct_5O1SCfat4OhajI_B0fRTPp-J_ukxDRqrCJfQjRiFCN60LsFoJVzNzCDlVVDEqfhbDk1oM9STQgj4zcKL0svBi6fefcw9Dt8aWnby_euHu-PnyjPv1BMyga2GSgh0KsoaLQo1M4y5PIhRYEkpEkfwH9JVWNJuC8KkTLrrXqcqzz2YMQdTztsETgz0qS34CyT","rs_0f68152e58c069a5016a6ef15981248196a9e6879763cd2306",{"_519":493},[903],{"_49":904,"_96":586},"**Checking node_modules presence**",{"_525":906,"_507":907,"_486":487,"_509":493},1785655642456,{"_510":908,"_45":900,"_581":909,"_96":583},[],[904],{"_525":911,"_507":912,"_486":487,"_509":493},1785655637661,{"_532":913,"_534":914,"_536":915,"_538":772,"_491":916,"_541":917,"_45":918,"_543":919,"_545":546,"_500":721,"_96":547},"npm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\n\n> cluckwork-sim-ui@0.0.0 typecheck\n> tsc --noEmit\n\nerror TS2688: Cannot find type definition file for 'node'.\n The file is in the program because:\n Entry point of type library 'node' specified in compilerOptions\n","/bin/bash -lc 'PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck'",[920],6311,2,"exec-939c0cf8-ef89-40d5-a328-7e61d4769bb0","55316",{"_534":921,"_96":550},"PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck",{"_507":923,"_486":487,"_509":493},{"_553":924,"_45":-5,"_514":925,"_194":-5,"_556":926,"_96":558},"call_5KIZSpm1MP8erjowWm7uj3c8",{"_519":493},{"_327":927,"_560":-5},[928,929],{"_49":930,"_96":564},{"_49":913,"_96":564},"Script completed\nWall time 1.1 seconds\nOutput:\n",{"_507":932,"_486":487,"_509":493},{"_553":924,"_45":933,"_569":934,"_514":935,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef153dcb88196add05defc2d5c881","const r = await tools.write_stdin({session_id:55316,chars:\"\",yield_time_ms:1000,max_output_tokens:12000}); text(r.output)\n",{"_519":493},{"_507":937,"_486":487,"_509":493},{"_553":938,"_45":-5,"_514":939,"_194":-5,"_556":940,"_96":558},"call_Vpck4v7Fu9scM3D54KPc7kZM",{"_519":493},{"_327":941,"_560":-5},[942,943],{"_49":801,"_96":564},{"_49":944,"_96":564},"{\"chunk_id\":\"4d4ffb\",\"wall_time_seconds\":1.001815806,\"session_id\":55316,\"original_token_count\":0,\"output\":\"\"}",{"_507":946,"_486":487,"_509":493},{"_553":938,"_45":947,"_569":948,"_514":949,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef14e11948196a313cd1cbe9a8620","const r = await tools.exec_command({cmd:\"PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck\",\"workdir\":\"/workspace/cluckwork/tools/simulation/ui\",\"yield_time_ms\":1000,\"max_output_tokens\":12000}); text(JSON.stringify(r))\n",{"_519":493},{"_507":951,"_486":487,"_509":493},{"_510":-5,"_577":952,"_45":953,"_514":954,"_581":955,"_96":583},"gAAAAABqbvFOjnu4i6uYI262YwKHKFeEGgqfBk771V26ihhTSbxwsWY8Zy4z2X5xhZKymWVCsSorynurdemDZ9ejpfQtMCmx_wGN_jH11lAE7COWHYS4y0W9-0wBvjANn_7s7D66TiildLRcBw636kbZ4YBQtc6Zdu3n-TbrKPmbMhvLTKH3sM8gbnJ0FxiPUUf-QGhavK1ZgOFEbzkcgsPKGGbXkxSOciyoJdM9gAk8P7ZCcj8TKrUqP6TsXfih4xU1ycEe6cLImTd2FkNqwt8BhdSV2DdWwO_PY4x1OFlV5xD7UDwO9T0dxx9S4YlYjVsuv7HFrjQTnvjkzlaFlUvzxxfe7QyF6iyqpFVskGQ2uEyTp6jR1ZcBZgR8IXXIGqWA6JLTWbelPjn4RHvfqQSJYYvXeT6w_CwO-9eDT7fQ6o-SscZEJCIjTKTpHXDoSi5_-BrYNytu0gBMQjR3pOAP5RxPm4uFz-SwIfeeGuqqBsxU8xddgKWPgYjx_YUWXReWZaO0DjpY76qP9SEGHcDj8kt39LtENsl3CoEIGRWP4uBESQ1syTJb-k-Fc1p-zoFnHDaGMXMaEa6OlplN7EAVqwBfJVqr1yuUX550ZQSs-tBVu3yWhZqB6ebj8oQ4epgWvvUzSG0TfNpCzcSSzQfqCkUvWufb9UfpxmlLlAzbjWwQxulM5Bjk_i38ggfnPHUhIGQqBENKydmawxCIfgUt1FcDzku945tliD9T5_a_3-qViVmAJcnrRVx7ZCZAtNJhLy1-fGoyPsX83TVOCCx35zq-9ddZ_3bGBNx8-JttyzH9Yv0Eno4WhanpDcF7zwmGcRSPe5Q-BKGku2Qgyp1HzNy3rxKNOhJL-gQk7wwfTWNfWAcB-IA34jThjPktIbXZ0q0t34Rea056CP5SliGe7WzSIiQBa0Np53JoaaOvSanoNRD5oMwj-xU6XStvQKV7rDUqC5Ah","rs_0f68152e58c069a5016a6ef14d8e988196b03efa4033afbf56",{"_519":493},[956],{"_49":957,"_96":586},"**Running simulation typecheck**",{"_525":959,"_507":960,"_486":487,"_509":493},1785655629989,{"_510":961,"_45":953,"_581":962,"_96":583},[],[957],{"_525":964,"_507":965,"_486":487,"_509":493},1785655629894,{"_532":966,"_534":967,"_536":968,"_538":717,"_491":969,"_541":348,"_45":970,"_543":971,"_545":546,"_500":721,"_96":547},"npm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\n\n> cluckwork-web@0.0.0 test\n> vitest run --run src/api/client.test.ts\n\n\n RUN v4.1.10 /workspace/cluckwork/web\n\n/root/.nvm/versions/node/v20.20.2/bin/node: bad option: --no-experimental-webstorage\n⎯⎯⎯⎯⎯⎯ Unhandled Errors ⎯⎯⎯⎯⎯⎯\n\nVitest caught 1 unhandled error during the test run.\nThis might cause false positive tests. Resolve unhandled errors to make sure your tests are not affected.\n\n⎯⎯⎯⎯⎯⎯ Unhandled Error ⎯⎯⎯⎯⎯⎯⎯\nError: [vitest-pool]: Worker forks emitted error.\n ❯ EventEmitter.onTaskError node_modules/vitest/dist/chunks/cli-api.BK8pd4xc.js:3459:21\n ❯ EventEmitter.emit node:events:524:28\n ❯ ChildProcess.emitUnexpectedExit node_modules/vitest/dist/chunks/cli-api.BK8pd4xc.js:3025:22\n ❯ ChildProcess.emit node:events:524:28\n ❯ Process.ChildProcess._handle.onexit node:internal/child_process:293:12\n\nCaused by: Error: Worker exited unexpectedly\n ❯ ChildProcess.emitUnexpectedExit node_modules/vitest/dist/chunks/cli-api.BK8pd4xc.js:3023:33\n ❯ ChildProcess.emit node:events:524:28\n ❯ Process.ChildProcess._handle.onexit node:internal/child_process:293:12\n\n⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯\n\n\n Test Files no tests\n Tests no tests\n Errors 1 error\n Start at 07:26:09\n Duration 74ms (transform 0ms, setup 0ms, import 0ms, tests 0ms, environment 0ms)\n\n","/bin/bash -lc 'npm test -- --run src/api/client.test.ts && npm run typecheck'",[972],65218,"exec-b45e08a8-bad9-4656-913d-4f36391d870c","98620",{"_534":973,"_96":550},"npm test -- --run src/api/client.test.ts && npm run typecheck",{"_525":975,"_507":976,"_486":487,"_509":493},1785655626173,{"_532":977,"_534":978,"_536":979,"_538":717,"_491":980,"_541":35,"_45":981,"_543":982,"_545":546,"_500":117,"_96":547},"npm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\n\n> cluckwork-web@0.0.0 test\n> vitest run --run src/api/client.test.ts\n\n\n RUN v4.1.10 /workspace/cluckwork/web\n\n\n Test Files 1 passed (1)\n Tests 75 passed (75)\n Start at 07:26:49\n Duration 4.22s (transform 1.07s, setup 1.33s, import 300ms, tests 218ms, environment 1.93s)\n\nnpm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\n\n> cluckwork-web@0.0.0 typecheck\n> tsc -b --noEmit\n\n","/bin/bash -lc 'PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm test -- --run src/api/client.test.ts && PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck'",[983],22137,"exec-9f50de66-1917-4d0f-b356-0ca64ce70f6f","9394",{"_534":984,"_96":550},"PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm test -- --run src/api/client.test.ts && PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck",{"_507":986,"_486":487,"_509":493},{"_553":987,"_45":-5,"_514":988,"_194":-5,"_556":989,"_96":558},"call_zBJopWjgTYRejejzMw9MbmIg",{"_519":493},{"_327":990,"_560":-5},[991,992],{"_49":994,"_96":564},{"_49":993,"_96":564},"\n Test Files 1 passed (1)\n Tests 75 passed (75)\n Start at 07:26:49\n Duration 4.22s (transform 1.07s, setup 1.33s, import 300ms, tests 218ms, environment 1.93s)\n\nnpm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\n\n> cluckwork-web@0.0.0 typecheck\n> tsc -b --noEmit\n\n","Script completed\nWall time 3.3 seconds\nOutput:\n",{"_507":996,"_486":487,"_509":493},{"_553":987,"_45":997,"_569":998,"_514":999,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef146180c81969d316ae9b6a3bccc","const r = await tools.write_stdin({session_id:9394,chars:\"\",yield_time_ms:1000,max_output_tokens:12000}); text(r.output)\n",{"_519":493},{"_507":1001,"_486":487,"_509":493},{"_553":1002,"_45":-5,"_514":1003,"_194":-5,"_556":1004,"_96":558},"call_ZIfLhPdrnEEelpJwZHri1FMF",{"_519":493},{"_327":1005,"_560":-5},[1006,1007],{"_49":1009,"_96":564},{"_49":1008,"_96":564},"npm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\n\n> cluckwork-web@0.0.0 test\n> vitest run --run src/api/client.test.ts\n\n\n RUN v4.1.10 /workspace/cluckwork/web\n\n","Script completed\nWall time 5.0 seconds\nOutput:\n",{"_507":1011,"_486":487,"_509":493},{"_553":1002,"_45":1012,"_569":998,"_514":1013,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef13770dc8196bee88f06427be871",{"_519":493},{"_507":1015,"_486":487,"_509":493},{"_553":1016,"_45":-5,"_514":1017,"_194":-5,"_556":1018,"_96":558},"call_fxXoJc0Ghb8hDWMkdETEgwDW",{"_519":493},{"_327":1019,"_560":-5},[1020,1021],{"_49":747,"_96":564},{"_49":1022,"_96":564},"{\"chunk_id\":\"0e9448\",\"wall_time_seconds\":1.003342734,\"session_id\":9394,\"original_token_count\":0,\"output\":\"\"}",{"_507":1024,"_486":487,"_509":493},{"_553":1016,"_45":1025,"_569":1026,"_514":1027,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef132e84c8196b4ea1415ef41f048","const r = await tools.exec_command({cmd:\"PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm test -- --run src/api/client.test.ts && PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck\",\"workdir\":\"/workspace/cluckwork/web\",\"yield_time_ms\":1000,\"max_output_tokens\":12000}); text(JSON.stringify(r))\n",{"_519":493},{"_507":1029,"_486":487,"_509":493},{"_510":-5,"_577":1030,"_45":1031,"_514":1032,"_581":1033,"_96":583},"gAAAAABqbvEynL70CEQFXBwkI0cd8mmlrwsjmFSFq7gIVLReZJzpgF8olLTGHpl-qOV2K9kBLxdKdx0RVhn21AmYuXfB4zI-0KgtrjjyQoP5v90yOnOcZtxUpsUstHrXY0Ey2Hp5PtHj5Pv8ROkvBpUS2XqzPDYolQxqLTicfP-NhWp_l-0BNhXP-3R5XcUpFVexwR2lsQKHXHk-z0dSSc61P5tBEXFlJ_UVrjzEyos0SvoGQ55fsAOrpsyJvcyjX0cX0t24t87_OVcP-jjViyhJlOhuz-gBnpgQYYksV92YlyVE9_Uay-8PYUuGXb3S8e2mRs8Pb_PtwB9vaDYbjkc_KOskh1Sb1RiZCG2u7A5iMc3LF2P9rqbpeMk1E3QlFm0IQ7KJS9LPNYiSqF95uReIQpMKlENxdfWL0MsGfiyb_QAgZSHHxWXUiy6iliyO_8RyJYEXe7LpQglQy0ol585SE3jmpBQamJ_LC4dO23rgg1X3eREpKY3C_2Hq4ZKxOP0TUoc8_HOC1VTGzvztsmqfsDnISBZCaVFqjjqckTftk9PEUPXcnrUr7FDBeeSzUDnWxQTKD-ww5C5h0wgz52_ATeKMKl5M5gsaCgp3qvGa-94V5DP__Fis7t8TLt9w9rP_EOojEbfKWMItCRU2BxffEqDNDqqkQisjF1-TbnKoXNVFq34tueMhqSpiif-ZWsrdhLo2_kTPmsftEQX466c4-zkCysGUTHW68OpULAo6sozok92EF6bPKMvsoD9ABCo4y915sMG0ECbgQa55s2lG25zX0pJYrYMPjxK49yO6jODAHOG9K_0Tvddw5xUn46WEi_lN5N9g9I_D9KQpEEpj9QJcPLftgaw_-JJhypp5GKMERkC_E6s4se1089jgBz2sXGgZAUlskFzGIJtIT024HQHVkvvrlVKy9C6quPcEQqIZqStpERoxEuhkxVVB5eOLo1XaOquW5IC5l2TYtTrK78pY6g0NeRgFwWDiD-oj51Mezd2P8LM=","rs_0f68152e58c069a5016a6ef130fa6081968f36746a228af350",{"_519":493},[1034],{"_49":1035,"_96":586},"**Running typecheck simulation**",{"_525":1037,"_507":1038,"_486":487,"_509":493},1785655602829,{"_510":1039,"_45":1031,"_581":1040,"_96":583},[],[1035],{"_525":1042,"_507":1043,"_486":487,"_509":493},1785655599841,{"_532":1044,"_534":1045,"_536":1046,"_538":717,"_491":1047,"_541":35,"_45":1048,"_543":1049,"_545":546,"_500":117,"_96":547},"/root/.nvm/versions/node/v20.20.2/bin/node\nv20.20.2\nv24.15.0\nv20.20.2\nv22.22.2\nv18.20.8\nnpm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\n\n> cluckwork-web@0.0.0 typecheck\n> tsc -b --noEmit\n\n","/bin/bash -lc \"cat .nvmrc 2>/dev/null || true; command -v node; node -v; find /root/.nvm/versions/node -maxdepth 1 -mindepth 1 -type d -printf '%f\\\\n'; npm run typecheck\"",[1050],18524,"exec-0032325c-e5ea-4cd0-84a9-4e8c1dfd07bc","27336",{"_534":1051,"_96":550},"cat .nvmrc 2>/dev/null || true; command -v node; node -v; find /root/.nvm/versions/node -maxdepth 1 -mindepth 1 -type d -printf '%f\\n'; npm run typecheck",{"_507":1053,"_486":487,"_509":493},{"_553":1054,"_45":-5,"_514":1055,"_194":-5,"_556":1056,"_96":558},"call_bscf6cwru9C4re2H8rUQSBRQ",{"_519":493},{"_327":1057,"_560":-5},[1058,1059],{"_49":1060,"_96":564},{"_49":212,"_96":564},"Script completed\nWall time 3.6 seconds\nOutput:\n",{"_507":1062,"_486":487,"_509":493},{"_553":1054,"_45":1063,"_569":1064,"_514":1065,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef12bd628819690186ea971aa13b2","const r = await tools.write_stdin({session_id:27336,chars:\"\",yield_time_ms:1000,max_output_tokens:12000}); text(r.output)\n",{"_519":493},{"_507":1067,"_486":487,"_509":493},{"_510":-5,"_577":1068,"_45":1069,"_514":1070,"_581":1071,"_96":583},"gAAAAABqbvErydujCbDzz0V8ubd7kWrc49hAxDEGuzdOCmCwHTv6kZ4mIX-Iep7OM9MUo09Cp_VfRSFbNzTLGqQp5uF2mrKLd1YEE0pzd7H16Jqq2j8n_rGlkgnX8IJOSkZgQFLVMbN9QR5HsfhESb-rD5Iwf1-5ghm0fiNh8W0g5RezQhcuCTmSAeVXl6bJYFnkV2qka7BA1_jDoc8nEvEBmYsBVcBW6OgCKIJKBfhfcfYSwp9TYSWxYzkwv9ErB3kifBdlDDp1iBSQkzhrC5QM4cfHR0WiSZEfV3vVBPTuz8IwUB3mF453QHe13NemkCwXTpk696K-43kBiOof8xCSjXmqT5UViobttVn2CL9kVsyfXHLSKBa5W0drZ8DJBdw3r-FKwzIA_Iu6SUcZXKdSn0pYzkKG995nd09DKFPql7jQK1u5h-m6m9YF_lzuPI_3xDq_8GrnXqO13QFD--dklYmMhm0UOEl2eDZgUdT1GW9t7QKoVEvEe99OGFYAtUjiqSLytWJrR4ZRhQk7I1Tl3NMOtMAr-GoWmQR-VqM9gpukMkqB_AgPciZvRvgVUh4vZRJ9rzZsfTJZA-y5Y1xtmWr9i_CKR03QVqEptKo72RBaYr-s5XDgOqXupmrcC8Qqjx3ax2PnG6ZwtWbAbrrSRHLH64FXkCUj_zleeE9SR6QUmeQsho7HvpKDVknIvCZKTIehj9fVvWUUZS1W3LEXvadjvimFXCcz-setRdGtJdrqx5MVA-gFN2fp6oDk4tVPcNGpoOsanHvEmJfBm3txYZHP8spdKsEVCiTYlDXz7KP0KtGJlMuP292sg4H02WTxUE-Qn4Ub2ecS8FDL9CBWOj4gevAG6AqU6F29WxoXAhqDeKaITS8OcEAqZ5N9ZR3oxWuYASo3BdbKkLFML_6HHIK5tCKImmQ3JL83QtUBxNEnzF_h8VpTUsux1E5wfB5fAD_5f65W","rs_0f68152e58c069a5016a6ef12b3d78819696b33a2e6fd81f38",{"_519":493},[],{"_525":1073,"_507":1074,"_486":487,"_509":493},1785655595762,{"_510":1075,"_45":1069,"_581":1076,"_96":583},[],[],{"_507":1078,"_486":487,"_509":493},{"_553":1079,"_45":-5,"_514":1080,"_194":-5,"_556":1081,"_96":558},"call_UkRdZM9bf8XynxoF2tbpGag7",{"_519":493},{"_327":1082,"_560":-5},[1083,1084],{"_49":1009,"_96":564},{"_49":1044,"_96":564},{"_507":1086,"_486":487,"_509":493},{"_553":1079,"_45":1087,"_569":1064,"_514":1088,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef121ddf08196a1b5d27d95f8afee",{"_519":493},{"_507":1090,"_486":487,"_509":493},{"_553":1091,"_45":-5,"_514":1092,"_194":-5,"_556":1093,"_96":558},"call_CAH8O4CotQwg25KHzBGAdt5E",{"_519":493},{"_327":1094,"_560":-5},[1095,1096],{"_49":747,"_96":564},{"_49":1097,"_96":564},"{\"chunk_id\":\"481359\",\"wall_time_seconds\":1.001506631,\"session_id\":27336,\"original_token_count\":0,\"output\":\"\"}",{"_507":1099,"_486":487,"_509":493},{"_553":1091,"_45":1100,"_569":1101,"_514":1102,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef11bd0a481969d31bcc677ba455c","const r = await tools.exec_command({cmd:\"cat .nvmrc 2>/dev/null || true; command -v node; node -v; find /root/.nvm/versions/node -maxdepth 1 -mindepth 1 -type d -printf '%f\\\\n'; npm run typecheck\",\"workdir\":\"/workspace/cluckwork/web\",\"yield_time_ms\":1000,\"max_output_tokens\":12000}); text(JSON.stringify(r))\n",{"_519":493},{"_507":1104,"_486":487,"_509":493},{"_510":-5,"_577":1105,"_45":1106,"_514":1107,"_581":1108,"_96":583},"gAAAAABqbvEbqTYzXhLulHVgYzdWoLqEcCjg1TjZ9K4ezcMRPIIrmIhmPDlF12_SkqOnQiB9cQV3MIa53-3DQ_2tuHYHQ7qmIrvmMuxn1m1ny6rrbbTgObjBNGz8Thanvshd-XtdN3G7DAS3Djbm9OCqLxwH-8zmttlEAmjAGeGNQcSOYa3Jsg31L20iJFJ6VvmK0jCYs3evqedLJHsBmvkOIajoDMMtsXUIq5w5MUst3F5iWElInRtlnrhCT8phEGkK6LDMPMdpSgmmvVR_Z63hnUyZoBvR622LeTBdU3F6ZR6B1Rz2LXsZWXv5B0nWnJGqAnf28AANavKbO3TThVuG97vxXrE9CK7BQrnK6U34WFABtC82GkZEBXRCwV_1q5MkTSpPVHzAEcvkYh-9eDqQTAeTtuhYENgJEEbSYpz5SlIR3vBsEIDfJPEA3kzvyPjPsk6X27KU8jpVGtG34oe9v7pwNX8GgrvPXHOta2fR1-GlphXPWUSYu7uHlPUT1dGYURaGM9KiQ_MaAmke0p8fRjnjUUX5TnraTYNgBojzdKwr61lmdjrtxA8xa7DEM9GPyC9sBkyunsYH8ezwGH-8DrfYdGhUX5iC0dvi-CRdo4Ln6Qr103UhYoQpmzjSKXnCV4QpKzlBx2OTqekwHOn7Fr4WwTdqnvUJI-LngMuGTKPji0QGrOb8u7OsTN68T5S6QodDZmvF9O-9_6NLT4VBXpKyk0wGLUaU0zP_70zae6-5XjABhgBwZOPy6EtTPOthnEGFsXAguki4xsi98nL_k9jAa4YN3aOjLDx426dUrtbfM2hmHnRjSuug8LXEBcgndVv0taAHLV-vBZi0ahDItAQhJfbT8n5AimOCVUGW6gH2NCUwt2nnSnxY5TYjfK9U06ApUrnf16bqxo_-j6RTMxlKnP_Mcz4GL_KDnMWKTWpvy4Bu21ZFXdNDnbaeDZaBNdxwY506lSTC0rnmwbRyWuz1vL86l3lISxstLL62NmS4bNKBxx69Pa_Xedysw7CWuwaxxf2Hcnhagm_BBtLPoG6iFnh0SuxGWM8xoYeb68OytgO0spF2X_InQDCgIpDhiEu8D21j","rs_0f68152e58c069a5016a6ef11a8b788196aa68f1751ccca8e3",{"_519":493},[1109],{"_49":1110,"_96":586},"**Assessing Node version compatibility**",{"_525":1112,"_507":1113,"_486":487,"_509":493},1785655579769,{"_510":1114,"_45":1106,"_581":1115,"_96":583},[],[1110],{"_507":1117,"_486":487,"_509":493},{"_553":1118,"_45":-5,"_514":1119,"_194":-5,"_556":1120,"_96":558},"call_qwWddg4d0x8T9c3jJly7FshI",{"_519":493},{"_327":1121,"_560":-5},[1122,1123],{"_49":1009,"_96":564},{"_49":966,"_96":564},{"_507":1125,"_486":487,"_509":493},{"_553":1118,"_45":1126,"_569":1127,"_514":1128,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef112238881968bcce382f8705d9f","const r = await tools.write_stdin({session_id:98620,chars:\"\",yield_time_ms:1000,max_output_tokens:12000}); text(r.output)\n",{"_519":493},{"_507":1130,"_486":487,"_509":493},{"_510":-5,"_577":1131,"_45":1132,"_514":1133,"_581":1134,"_96":583},"gAAAAABqbvESM8X4g43GIef3FLitNP9929iIX1RF7XnPQugl89UKKvK5xgBHmWxIE3S8RUVVh9lkbg0N4k43Hk-nleYTQUfNEyybd2BleiBLiTHq0q2M6Ecx337V7-2Ajz7ot4b8IyHmy7g_yg9axzKAYRsWPAKLLZ7H425bN7ZEMni4lv4JqC1kLFVGuK3D9x5VOk4O3sWFQSNBHhVF2TY-jV8XBMphMwqIYxT1zT25sD7hoHmgNLaZltsKQi92lkUh0jcMOIV-k7juG6cKWZzp9m8fS-wgcmKnrIqt7923BOx8HJ-oGP-r6J8iRZPWoWrEcSaxVAnhgLLEtE2Gh1rWH0GL1ddDnG2FZqe2ObLTxWmh3nyX1Vu7bE2-9WeEniMIIMQaVij9yCgzwZptzVbAl3t1M_c49qaTI0_rpS8LcmVcjEU2oHdp47eXRWKZOfIOlru2eYFfDSVXN4d9eo8GFxxzJo53Cs0tvuoaG_A7O5GaxYxS4143Jpuy9IMFDO33z5l2scQup7pVfQc_IAiT1OL8nOGWoyYmKm5qlLlTI1l2j-2xCsz3pWPRLCAGmtSVBn2P-m7WUWm_ydbffWq4LOlW2PPHXgub-raFMn_gNa-yWIz7tsnHx6uS-6Kl2RE30ol_rS38jjEmn5xVUC9Hb9EOhku0r25ZBlvb1crC8U6HB-V0uSS1gcmt4xnbE3H945lMouulMQyPZ_wlW6HocPGHRdSlaPwwLY_rgkqeH1gYv88rHVqOq9dUW3rk5sQYA6wHPEDk_1qoRXCy4oHPbaH3cspcDxxWQirtneMTcyR80Jl5PtEZh4zG84x317IjxVKeYPEl2pisnAytEGKzdqnbbeRagZPSPfi_ET7E-T3XAJgQgLvU_w19fnpzmOTB0GlwjcWfxh309CkQrqNwkI91Ff45_fB_K4O7JQ8d2ko5GZAw98I=","rs_0f68152e58c069a5016a6ef111b70c81968da1ae68c7beda66",{"_519":493},[],{"_525":1136,"_507":1137,"_486":487,"_509":493},1785655570061,{"_510":1138,"_45":1132,"_581":1139,"_96":583},[],[],{"_507":1141,"_486":487,"_509":493},{"_553":1142,"_45":-5,"_514":1143,"_194":-5,"_556":1144,"_96":558},"call_6D6bPc1d4JuDSzwy5LL0WTin",{"_519":493},{"_327":1145,"_560":-5},[1146,1147],{"_49":747,"_96":564},{"_49":1148,"_96":564},"{\"chunk_id\":\"d5ebd3\",\"wall_time_seconds\":1.002528078,\"session_id\":98620,\"original_token_count\":0,\"output\":\"\"}",{"_507":1150,"_486":487,"_509":493},{"_553":1142,"_45":1151,"_569":1152,"_514":1153,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef10be8d08196a8b41f09ffc03ad2","const r = await tools.exec_command({cmd:\"npm test -- --run src/api/client.test.ts && npm run typecheck\",\"workdir\":\"/workspace/cluckwork/web\",\"yield_time_ms\":1000,\"max_output_tokens\":12000}); text(JSON.stringify(r))\n",{"_519":493},{"_507":1155,"_486":487,"_509":493},{"_510":-5,"_577":1156,"_45":1157,"_514":1158,"_581":1159,"_96":583},"gAAAAABqbvELRsHMd9zlaiB5GwRJmuXGpl53WLFTUhjy4RTLf1W5t7KQqSLICuKZOKqa1kjz5q5DcwemCDczCyb-6HCnOohMFV1MCVzy9S9pKcwtjF3rwpNTiHjXhTftWbaF4nsF1v54Ey8uTQKLK-9GrB4hT5-MM27K0GZqrTITLuh5D4XWbmNoGeHh4WWvC1GVhknuFozi_P6hWJ-ezMhAOPt0CdmxZ4q5PT10O01i1CS5QrO9U1Yr_HER6Mr0r0usJcspWVgzgS7oWuhZezZfVQU7-M6dW0pCgkguOL8NVovuPpRy67VKx8Xq9cdHNhSDY0l3pycLtMAZDE_HEx5PrlhAWKRMDrRSyYTXTm7Rg-JhVUvIfXFA33iHZHZFH9rSQoV2Gx-ngewR6Ytv9_ZewDCxk5J8O9f9U_0w9ndCZH2X_GKvu3h6aa9iT2CjU_RVkHtPycubbzVF8rk03Kw-F4XcagfYMVbyaA8eOyFLLefbqI1f5Ktq-3MxybGN33sLAZduRPPBEZMyqKuOHud_jZVqiggqYN_N5ktYpjDRtucQ9UcAG-Z2xl_le-pUToCgFnCjP7NO-14QyPC7kvXwDJ4JhCQt5089TlGL0KtkvWQqzVDvAfz7T0OEIldawWUf4X0PYx9M7Gvk3dBYy-REprS4PJduw6FM39HskION3gvuGGBTf25NeN3OqWz_N5dEVKS3duM_JGpd6BBa6z6CpJDlPl1t0rwYPSlceeR0ouWrG8rbAQkblmzw81wTMJ1lXCydkevXHzQB71Fqv6pJ_S77DRub2TSlU6Jq5V_6eaCEyvQMDmwdR1ccTluObr-6dhZ7tLPScmnrhhO6PQgHgY26_f-6RCgci4yCBp5gAr2PnrFVWk9bnYG3LMI8OqJoEN20s7KKDr2kBqwOT-GYtvAXqogVwHXRkiwafcJ-s47eIUJBateR1V9PTaLPxXnq_enetnUz","rs_0f68152e58c069a5016a6ef10b0ffc8196b5483197fbc3faf7",{"_519":493},[1160],{"_49":1161,"_96":586},"**Running npm typecheck tests**",{"_525":1163,"_507":1164,"_486":487,"_509":493},1785655563831,{"_510":1165,"_45":1157,"_581":1166,"_96":583},[],[1161],{"_507":1168,"_486":487,"_509":493},{"_553":1169,"_45":-5,"_514":1170,"_194":-5,"_556":1171,"_96":558},"call_ZFdbV5yfRAx0VnucgBr0O8c6",{"_519":493},{"_327":1172,"_560":-5},[1173,1174],{"_49":601,"_96":564},{"_49":1175,"_96":564},"{}",{"_525":1177,"_507":1178,"_486":487,"_509":493},1785655560229,{"_1179":1180,"_45":1181,"_500":117,"_96":1182},"changes",[1183,1184],"exec-0432b804-f292-427c-9f7b-955dfc51ff55","fileChange",{"_338":1190,"_9":1191,"_169":1192},{"_338":1185,"_9":1186,"_169":1187},"@@ -987,2 +987,27 @@\n \n+ it(\"aborts an older refresh before login so its late Set-Cookie cannot replace the login cookie\", async () => {\n+ clearAccessToken();\n+ let refreshWasAborted = false;\n+ fetchMock.mockImplementation((url: string, init?: RequestInit) => {\n+ if (url.endsWith(\"/auth/refresh\")) {\n+ return new Promise((_resolve, reject) => {\n+ init?.signal?.addEventListener(\"abort\", () => {\n+ refreshWasAborted = true;\n+ reject(new DOMException(\"superseded by login\", \"AbortError\"));\n+ });\n+ });\n+ }\n+ if (url.endsWith(\"/auth/login\")) return Promise.resolve(accessResponse(\"newLoginToken\"));\n+ throw new Error(`unexpected fetch: ${url}`);\n+ });\n+\n+ const restoring = restoreSession();\n+ await drain();\n+ await login({ email: \"a@b.co\", password: \"pw\" });\n+\n+ expect(refreshWasAborted).toBe(true);\n+ await expect(restoring).resolves.toBe(false);\n+ expect(getAccessToken()).toBe(\"newLoginToken\");\n+ });\n+\n it(\"a late-FAILING obsolete refresh does not clear or corrupt a newer session\", async () => {\n",{"_1188":-5,"_96":1189},"/workspace/cluckwork/web/src/api/client.test.ts","move_path","update","@@ -63,2 +63,3 @@\n await expect(page.getByRole(\"heading\", { name: tEn(\"reports:title\") })).toBeVisible();\n+ await page.waitForLoadState(\"networkidle\");\n \n",{"_1188":-5,"_96":1189},"/workspace/cluckwork/tools/simulation/ui/specs/reports-range.spec.ts",{"_507":1194,"_486":487,"_509":493},{"_553":1169,"_45":1195,"_569":1196,"_514":1197,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef100d008819698b8821eabde3082","const patch = \"*** Begin Patch\\n*** Update File: /workspace/cluckwork/tools/simulation/ui/specs/reports-range.spec.ts\\n@@\\n await page.goto(\\\"/reports\\\");\\n await expect(page.getByRole(\\\"heading\\\", { name: tEn(\\\"reports:title\\\") })).toBeVisible();\\n+ await page.waitForLoadState(\\\"networkidle\\\");\\n*** Update File: /workspace/cluckwork/web/src/api/client.test.ts\\n@@\\n it(\\\"does not let a late bootstrap refresh overwrite a newer explicit login\\\", async () => {\\n@@\\n expect(onTokens).toHaveBeenCalledTimes(1); // still just the login's single notification\\n });\\n+\\n+ it(\\\"aborts an older refresh before login so its late Set-Cookie cannot replace the login cookie\\\", async () => {\\n+ clearAccessToken();\\n+ let refreshWasAborted = false;\\n+ fetchMock.mockImplementation((url: string, init?: RequestInit) => {\\n+ if (url.endsWith(\\\"/auth/refresh\\\")) {\\n+ return new Promise((_resolve, reject) => {\\n+ init?.signal?.addEventListener(\\\"abort\\\", () => {\\n+ refreshWasAborted = true;\\n+ reject(new DOMException(\\\"superseded by login\\\", \\\"AbortError\\\"));\\n+ });\\n+ });\\n+ }\\n+ if (url.endsWith(\\\"/auth/login\\\")) return Promise.resolve(accessResponse(\\\"newLoginToken\\\"));\\n+ throw new Error(`unexpected fetch: ${url}`);\\n+ });\\n+\\n+ const restoring = restoreSession();\\n+ await drain();\\n+ await login({ email: \\\"a@b.co\\\", password: \\\"pw\\\" });\\n+\\n+ expect(refreshWasAborted).toBe(true);\\n+ await expect(restoring).resolves.toBe(false);\\n+ expect(getAccessToken()).toBe(\\\"newLoginToken\\\");\\n+ });\\n*** End Patch\";\ntext(await tools.apply_patch(patch));\n",{"_519":493},{"_507":1199,"_486":487,"_509":493},{"_510":-5,"_577":1200,"_45":1201,"_514":1202,"_581":1203,"_96":583},"gAAAAABqbvEADdbQMoSl9zw8MgdU-ZD79LiO7ncUOAxigCxWm4MI2k7lHNdMEqRGrCFagR30yaZGdGVIrS2BMAl6B36G1ZFhvvIkCj4iSnHTQwAF_zECiqsMc6-lMyPnCQlYAKJgz2muWdngotzSBEVwc4OeZSkwPYllFRWaynMn-UMzuBU8T2UjK3zK_keLWsYTw_ct_TeRYb_4a78QCGa5zqU84TBDL29cHdforHO5TlmBFgtAC8SI4PPvdqyb-tLpG23bPxIUWunwZJYgcTV4K8129kA0mSRyIuqwThLMWW-qm5o4mobcBWnLNq1pUROSSWFHjH-M_heYwpErpTlV2An3HfyViF846s1FCTSchCHJ_CrBdyPujkEwLaCWRMblbF-HkS2NM4sYt2RwW-94GGQC_gHgvoEbi8IqiPneVagPSzok0C5sosTrwMVq3-K3a4-qoW2fjFYnWSBIPSyy4qpjyPZucG5mulY1-L7v4sWY27Tosi2w0vb9mJhzG23UcZ84l-JbHUMMBltt7ZYkECLMbY9jRQa5E17XifHgHeQbfvxPieqbgiUepuBor__OhreYtPFFjnJv_n3qVwckstvFixRTo5NebYoBIl1g_Zgv97HH7-gpKSKkwMZ0TX1kjb57qZ9xA_cQW9tuBOwV3M0jBMNLXs0ZAtvtASKup1MXhyYX8Y9GhfwCLjlTS1kWKgiU7DxlS-V64TCiZ0Nd-EZiRehiWRP2q96LHMx0tayv4IrPKpaRPjbsfFgeMkaDlgNITboVzAZtXtXsMffLaD3aGzoVqGs0QS9rVu17iHRNlVq0LIWt_UwX9WpIdBKbsgeoCxmcPGrxN2fC_7fVWcPvCUAv-8ZM9pNJKEq9xHexX98ZE1fxYbcfYepVFHkoEs6E7PXl89r8AaBqge73ivgUWJvypNSk6azp1duIWvskADjZc0EIt6dumbKztMxJKPqBRgLlTSoWcKU_HH4W-FGJDYiz_zkJJuZESgu8g4EYwGftil68C-xOHFNOs-t1-FPSRzmq9T99MONM7Ev6qjkdVVHQI2CK1xp8hTbRkDlbQ0s4ZlMZRkOjESf2xC2QqU291sUzJVENbMRjvUpOxh6qvHs9Ou_GioY96i2nTApYxzDr3nmq5m4sjXi_Hb5It_Yfy_leoeJYclc-ZgtoZYLAbGu1he6bXGJWis3LfbwqQCDVnabuxqujqCPAXbI_9D3nnkwAVC3QB9Aann3ZXHhH3fX8jGSt_wGJs36fkDz87otIRmrGHF-DF7cl9g1SoM21-u_3hGk4JbctgJYCTjYvZYo0e89BxDYFI4UdVPxvsypUvA9_HCJlXsSrHYxIcf_eWdhnwi8TMn5hoF2O_q9XMwWO1dbeuTiXcBAe6OP_Gb283eucgNznsRxtr0p1y45lQFGU","rs_0f68152e58c069a5016a6ef0fbf4f48196aa087f269845ad29",{"_519":493},[1204],{"_49":1205,"_96":586},"**Adding unit tests for abort handling**",{"_525":1207,"_507":1208,"_486":487,"_509":493},1785655552739,{"_510":1209,"_45":1201,"_581":1210,"_96":583},[],[1205],{"_507":1212,"_486":487,"_509":493},{"_553":1213,"_45":-5,"_514":1214,"_194":-5,"_556":1215,"_96":558},"call_oAaQhSlShadXa7whT44J8zRx",{"_519":493},{"_327":1216,"_560":-5},[1217,1218],{"_49":565,"_96":564},{"_49":1219,"_96":564},"\n expect(a).toEqual({ ok: true });\n expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(1);\n });\n\n it(\"clears the single-flight latch after a lock-guarded refresh FAILS, so a later refresh retries\", async () => {\n // Covers the lock-wrapped rejection path specifically (the existing latch test\n // runs in jsdom with no navigator.locks, i.e. only the fallback branch).\n vi.stubGlobal(\"navigator\", { locks: fakeLockManager() });\n fetchMock\n .mockResolvedValueOnce(jsonResponse({ title: \"boom\" }, 500)) // refresh 1 (under lock) fails\n .mockResolvedValueOnce(accessResponse(\"at2\")); // refresh 2 succeeds\n\n await expect(restoreSession()).resolves.toBe(false);\n await expect(restoreSession()).resolves.toBe(true);\n\n // A stuck latch would have refused the second refresh entirely.\n expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(2);\n expect(getAccessToken()).toBe(\"at2\");\n });\n\n it(\"aborts and releases the lock if a refresh hangs past the timeout (no cross-tab starvation)\", async () => {\n vi.useFakeTimers();\n try {\n vi.stubGlobal(\"navigator\", { locks: fakeLockManager() });\n // A hung server: the fetch never resolves on its own — only the abort signal\n // (fired by our lock timeout) can settle it.\n fetchMock.mockImplementation(\n (_url: string, init: RequestInit) =>\n new Promise((_resolve, reject) =>\n init.signal?.addEventListener(\"abort\", () =>\n reject(new DOMException(\"timed out\", \"AbortError\")),\n ),\n ),\n );\n\n const restored = restoreSession(); // parks on the hung refresh\n await vi.advanceTimersByTimeAsync(20_000); // past REFRESH_TIMEOUT_MS\n\n // The timeout aborted the fetch and released the lock: the promise settles\n // (does not hang forever) — restoreSession catches the abort and reports no\n // session, but crucially the lock is freed for other tabs.\n await expect(restored).resolves.toBe(false);\n } finally {\n vi.useRealTimers();\n }\n });\n\n it(\"degrades gracefully when the Web Locks API is unavailable (older browsers)\", async () => {\n vi.stubGlobal(\"navigator\", {}); // no .locks — like jsdom / older Safari\n clearAccessToken();\n fetchMock.mockImplementation(async (url: string) =>\n url.endsWith(\"/auth/refresh\") ? accessResponse(\"at2\") : jsonResponse({ ok: true }),\n );\n\n const a = await apiGet<{ ok: boolean }>(\"/a\");\n\n expect(a).toEqual({ ok: true });\n expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(1); // still refreshes, just uncoordinated\n expect(getAccessToken()).toBe(\"at2\");\n });\n});\n\n// #310 — login, bootstrap refresh, explicit refresh, and logout are one browser\n// session state machine. A stale completion (one whose generation was superseded\n// by a later login or an earlier logout) may never commit tokens or state.\ndescribe(\"session generation (#310)\", () => {\n it(\"commits a bootstrap refresh normally when nothing else races it (control)\", async () => {\n clearAccessToken();\n fetchMock.mockResolvedValueOnce(accessResponse(\"bootedToken\"));\n\n await expect(restoreSession()).resolves.toBe(true);\n\n expect(getAccessToken()).toBe(\"bootedToken\");\n expect(onTokens).toHaveBeenCalledTimes(1);\n });\n\n it(\"discards a bootstrap refresh that resolves after logout — the session does not resurrect\", async () => {\n clearAccessToken();\n const refreshGate = deferred();\n fetchMock.mockImplementation((url: string) => {\n if (url.endsWith(\"/auth/refresh\")) return refreshGate.promise;\n if (url.endsWith(\"/auth/logout\")) return Promise.resolve(new Response(null, { status: 204 }));\n throw new Error(`unexpected fetch: ${url}`);\n });\n\n const restoring = restoreSession(); // bootstrap refresh in flight, held open\n await drain();\n expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(1);\n\n await logout(); // user logs out while the bootstrap refresh is still pending\n\n refreshGate.resolve(accessResponse(\"resurrected-token\")); // the stale refresh finally answers\n await expect(restoring).resolves.toBe(false); // discarded — never reports a restored session\n\n expect(getAccessToken()).toBeNull(); // must stay logged out\n expect(onTokens).not.toHaveBeenCalled(); // the stale completion must not fire tokensChanged\n // #310 review — clearing the in-memory token is only half of it. That\n // response carried a rotated refresh cookie, which the browser applied\n // before any of our code ran, so the server session must be revoked too:\n // one revoke for the logout itself, a second for the cookie the discarded\n // refresh issued. Without it a reload walks straight back in.\n expect(callsTo(fetchMock, \"/auth/logout\")).toHaveLength(2);\n });\n\n it(\"commits an explicit login normally when nothing else races it (control)\", async () => {\n clearAccessToken();\n fetchMock.mockResolvedValueOnce(accessResponse(\"loggedInToken\"));\n\n await login({ email: \"a@b.co\", password: \"pw\" });\n\n expect(getAccessToken()).toBe(\"loggedInToken\");\n expect(onTokens).toHaveBeenCalledTimes(1);\n });\n\n it(\"does not let a late bootstrap refresh overwrite a newer explicit login\", async () => {\n clearAccessToken();\n const refreshGate = deferred();\n fetchMock.mockImplementation((url: string) => {\n if (url.endsWith(\"/auth/refresh\")) return refreshGate.promise;\n if (url.endsWith(\"/auth/login\")) return Promise.resolve(accessResponse(\"newLoginToken\"));\n throw new Error(`unexpected fetch: ${url}`);\n });\n\n const restoring = restoreSession(); // older bootstrap refresh in flight\n await drain();\n\n await login({ email: \"a@b.co\", password: \"pw\" }); // a newer, explicit login completes first\n expect(getAccessToken()).toBe(\"newLoginToken\");\n expect(onTokens).toHaveBeenCalledTimes(1);\n\n refreshGate.resolve(accessResponse(\"staleBootstrapToken\")); // the old refresh answers late\n await expect(restoring).resolves.toBe(false); // discarded, not adopted\n\n expect(getAccessToken()).toBe(\"newLoginToken\"); // untouched by the stale refresh\n expect(onTokens).toHaveBeenCalledTimes(1); // still just the login's single notification\n });\n\n it(\"a late-FAILING obsolete refresh does not clear or corrupt a newer session\", async () => {\n // Distinct from the success case above: here the stale refresh's own network\n // call fails (refresh token revoked) — the failure path must be gated too, or\n // it would clearAccessToken()/onUnauthenticated() and boot the fresh login.\n clearAccessToken();\n const refreshGate = deferred();\n fetchMock.mockImplementation((url: string) => {\n if (url.endsWith(\"/auth/refresh\")) return refreshGate.promise;\n if (url.endsWith(\"/auth/login\")) return Promise.resolve(accessResponse(\"freshLoginToken\"));\n if (url.endsWith(\"/stock\")) return Promise.resolve(jsonResponse({ ok: true }));\n throw new Error(`unexpected fetch: ${url}`);\n });\n\n // apiGet with no in-memory token forces currentAccessToken() to park on a\n // silent refresh — the same refresh a bootstrap would trigger.\n const fetching = apiGet<{ ok: boolean }>(\"/stock\").catch((e: unknown) => e);\n await drain();\n\n await login({ email: \"a@b.co\", password: \"pw\" }); // supersedes the still-parked refresh\n expect(getAccessToken()).toBe(\"freshLoginToken\");\n\n refreshGate.resolve(jsonResponse({ title: \"refresh token revoked\" }, 401)); // stale refresh FAILS late\n const settled = await fetching;\n\n expect(getAccessToken()).toBe(\"freshLoginToken\"); // untouched by the stale failure\n expect(onUnauth).not.toHaveBeenCalled(); // must not tear down the fresh session\n // #310 review — the parked request itself must not surface the internal\n // discard marker. The login committed a valid token, so the request the\n // user is actually waiting on proceeds on it rather than failing with\n // \"Discarded: superseded by…\", which every screen would render verbatim.\n expect(settled).toEqual({ ok: true });\n });\n\n tools/simulation/ui/specs/i18n.spec.ts | 18 ++++++++++++++++++\n tools/simulation/ui/specs/reports-range.spec.ts | 9 ++++++++-\n tools/simulation/ui/specs/session-races.spec.ts | 19 ++++++++++++++++++-\n web/src/api/client.ts | 6 ++++++\n 4 files changed, 50 insertions(+), 2 deletions(-)\ndiff --git a/tools/simulation/ui/specs/i18n.spec.ts b/tools/simulation/ui/specs/i18n.spec.ts\nindex d175635..4b41fe0 100644\n--- a/tools/simulation/ui/specs/i18n.spec.ts\n+++ b/tools/simulation/ui/specs/i18n.spec.ts\n@@ -84,11 +84,21 @@ test.describe(\"i18n\", () => {\n // possible starting state.\n await page.goto(\"/account\");\n const selector = languageSelect(page);\n+ const resetPersisted = page.waitForResponse((response) =>\n+ response.url().includes(\"/api/v1/me/language\")\n+ && response.request().method() === \"PUT\"\n+ && response.status() === 204);\n await selector.selectOption(\"en\");\n+ await resetPersisted;\n await expect(page.getByRole(\"link\", { name: tEn(\"nav:reports\"), exact: true })).toBeVisible();\n \n // The switch, made the way a user makes it.\n+ const languagePersisted = page.waitForResponse((response) =>\n+ response.url().includes(\"/api/v1/me/language\")\n+ && response.request().method() === \"PUT\"\n+ && response.status() === 204);\n await selector.selectOption(lang);\n+ await languagePersisted;\n \n // THE ASSERTION: the destination the user reads in the sidebar is now in\n // the new language. The sidebar is the right place to look because it is\n@@ -107,6 +117,14 @@ test.describe(\"i18n\", () => {\n // place while the visible text changed underneath it.\n await expect(page.locator(\"html\")).toHaveAttribute(\"lang\", lang);\n \n+ // Prove the preference survived outside optimistic local i18n state. A\n+ // missing PUT can still repaint this tab; only a reload bootstrapping from\n+ // /me demonstrates that the user's durable preference changed.\n+ await page.reload();\n+ await expect(page.locator(\"html\")).toHaveAttribute(\"lang\", lang);\n+ await expect(page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }))\n+ .toBeVisible();\n+\n // And the screens still WORK in that language — the point of #277's \"not\n // broken\", as opposed to \"translated\". A populated data screen renders its\n // table, not an error.\ndiff --git a/tools/simulation/ui/specs/reports-range.spec.ts b/tools/simulation/ui/specs/reports-range.spec.ts\nindex ab4cf9d..63960ae 100644\n--- a/tools/simulation/ui/specs/reports-range.spec.ts\n+++ b/tools/simulation/ui/specs/reports-range.spec.ts\n@@ -62,6 +62,12 @@ test.describe(\"#311 report range\", () => {\n await page.goto(\"/reports\");\n await expect(page.getByRole(\"heading\", { name: tEn(\"reports:title\") })).toBeVisible();\n \n+ // The initial seven-day fan-out is not evidence that changing the date\n+ // controls refetched anything. Start the measurement window only after the\n+ // initial screen has settled, so deleting refetch-on-change leaves this\n+ // collection empty and fails below.\n+ timings.length = 0;\n+\n // Widen to the maximum. `to` first: `from`'s own `max` attribute is `to`, so\n // setting `from` to a far-past date while `to` is still the default would be\n // clamped by the browser and the spec would quietly test a 7-day window.\n@@ -93,7 +99,8 @@ test.describe(\"#311 report range\", () => {\n await expect(page.getByLabel(tEn(\"reports:toLabel\"), { exact: true })).toHaveValue(to);\n \n const atMaxRange = timings.filter((t) => t.status === 200);\n- expect(atMaxRange.length, \"no report endpoint responded at the maximum range\").toBeGreaterThan(0);\n+ expect(atMaxRange.length, \"no report endpoint refetched after the maximum range was applied\")\n+ .toBeGreaterThan(0);\n \n // Recorded, not asserted. A latency THRESHOLD here would be a flaky test\n // dressed as a performance gate — the number depends on the host, and under\ndiff --git a/tools/simulation/ui/specs/session-races.spec.ts b/tools/simulation/ui/specs/session-races.spec.ts\nindex 5486831..db6c9ae 100644\n--- a/tools/simulation/ui/specs/session-races.spec.ts\n+++ b/tools/simulation/ui/specs/session-races.spec.ts\n@@ -37,6 +37,13 @@ test.describe(\"#310 session races\", () => {\n }) => {\n await signIn(owner());\n \n+ // Exercise correctness without logout's abort optimisation. If this is\n+ // removed, the held request is cancelled and the test can pass without the\n+ // session-generation guard ever rejecting a late successful response.\n+ await page.evaluate(() => {\n+ AbortController.prototype.abort = () => undefined;\n+ });\n+\n // Hold every refresh open for HOLD_MS.\n await page.route(\"**/api/v1/auth/refresh\", async (route) => {\n await new Promise((r) => setTimeout(r, HOLD_MS));\n@@ -132,7 +139,8 @@ test.describe(\"#310 session races\", () => {\n await expect(page.getByRole(\"navigation\", { name: tEn(\"nav:primaryNavAriaLabel\") }))\n .toBeVisible();\n \n- // Let the superseded bootstrap refresh land on top of the new session.\n+ // Give the superseded bootstrap refresh enough time either to be aborted by\n+ // the newer login or (if cancellation loses the race) to settle stale.\n await page.waitForTimeout(HOLD_MS + 2_000);\n \n // THE GUARANTEE: this is the Sales session, and the Owner's has not been\n@@ -151,5 +159,14 @@ test.describe(\"#310 session races\", () => {\n // are proving \"the Sales session won\" rather than \"the sidebar is empty\".\n await expect(nav.link(\"nav:sales\")).toBeVisible();\n await expect(nav.link(\"nav:customers\")).toBeVisible();\n+\n+ // The in-memory token is only half the session. A stale refresh response\n+ // also carries Set-Cookie, which the browser applies before client code can\n+ // reject the response. Reload forces bootstrap to prove the durable cookie\n+ // still belongs to Sales rather than the superseded Owner.\n+ await page.reload();\n+ await expect(nav.link(\"nav:sales\")).toBeVisible();\n+ await expect(nav.link(\"nav:audit\")).toBeHidden();\n+ await expect(nav.link(\"nav:users\")).toBeHidden();\n });\n });\ndiff --git a/web/src/api/client.ts b/web/src/api/client.ts\nindex 15ca0f8..3b0c22e 100644\n--- a/web/src/api/client.ts\n+++ b/web/src/api/client.ts\n@@ -165,6 +165,12 @@ export async function login(body: LoginRequest): Promise {\n // flight (a bootstrap refresh, say), so its resolution must be the one that\n // wins, and any earlier flight must see its captured generation go stale.\n const generation = ++sessionGeneration;\n+ // A refresh response can carry Set-Cookie after this login's response and\n+ // silently replace the newer session's cookie even though the generation\n+ // guard correctly rejects its JavaScript result. Cancel it before starting\n+ // the newer login; unlike logout, the login below will immediately install a\n+ // fresh cookie, so there is no useful reason to let the old rotation land.\n+ abortInFlightRefresh?.();\n // The server sets the HttpOnly refresh cookie; the body returns only the\n // access token, which lives in memory for this tab's lifetime.\n const res = await raw(\"/auth/login\", {\n",{"_525":1221,"_507":1222,"_486":487,"_509":493},1785655544464,{"_532":1219,"_534":1223,"_536":1224,"_538":539,"_491":35,"_541":35,"_45":1225,"_543":1226,"_545":546,"_500":117,"_96":547},"/bin/bash -lc \"sed -n '850,1020p' web/src/api/client.test.ts; git diff --check; git diff --stat; git diff\"",[1227],"exec-b1222df8-45cd-4b38-a849-e6eb8da8df20","14233",{"_534":1228,"_96":550},"sed -n '850,1020p' web/src/api/client.test.ts; git diff --check; git diff --stat; git diff",{"_507":1230,"_486":487,"_509":493},{"_553":1213,"_45":1231,"_569":1232,"_514":1233,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef0f770648196a3e46975ad96dcc9","const r = await tools.exec_command({cmd:\"sed -n '850,1020p' web/src/api/client.test.ts; git diff --check; git diff --stat; git diff\",\"workdir\":\"/workspace/cluckwork\",\"yield_time_ms\":10000,\"max_output_tokens\":30000}); text(r.output)\n",{"_519":493},{"_507":1235,"_486":487,"_509":493},{"_510":-5,"_577":1236,"_45":1237,"_514":1238,"_581":1239,"_96":583},"gAAAAABqbvD3pNSlg_6tqZApe5-nRBFbl07AGWC4jHrQxYSSZcaRDH_VwTyIeAHn48NQFosAU4HXDiGsMZajNqJ1xeQKn8x-KbieGl7o05kjHf26ta753WifBLxZTQ9_rBdvfBji4I1F_JAcE2pwlV_S6MyEDOBZL4PATzLTmFmy2LXx6S8mBIml9usM4_59rPVQKpaLzQRU6TjW2sGAQtjDgtqyO4XPGCzhw9Oi7HAhOSEBFPvuKlGxArk97msH6uudz1J0gfCsJxOkIWwQ1QZC5vckW2T-xG6V3iTLBDFSxu6U4sUpgnjkMYM98xknA_qU_78JENYeTqHrn_L3znJv0GEgb1kgmuddGDQYqUODZvPHlBY5MFLsCmq9vZC8JEM-oeVGyGQrfUPhvmvPGY2yma6c_R0OolC6Dbnqss4HAnuu0EkfmnhnwqjgNeXcDCt2hY08nzUXyFy3KBG47jndZ2KoIvOg1mcWyxM9wS-QEZVd9MVPY1ugMmHKzrLdvM3-3J9eoiHKEC1AvGZGbLa0Zvias4xb7dxT9b7JPbxkbI_rGzvuEP_9DeOdfrezfakUOjjMhmRbOKAGEB-JYYBp2n99ZkhF_uHjR6A6G4bWZU2dUqKTg8aB_IVt2hiJAtIb_7AJ0YrpK95-m-mcSrerPkD9tA6cMnmEAsRmImF3sv0wivin-EWHZBVeuyCds3KO84G-AqdiwSDXQ_kZgHPTkU5rU0mSt1G0LF2U0K9B4JFlvLsV2NlU9LQQCoAuNUgl51R_2QcjeZg8IUqnbnnN-_oqnu6CT2i6joARy7usFIkst4_vNc3GkiiyOkHKSAxELk90mrfaqwTAQkRAAMA8zxz-GxeOz8MoItzXoK0ZGwJEpCu4mD3IgQaekWgpFOeRx-tyXhDyL3klb_trbQmoR9ONv1CRx28N6CPGn1d0Sor01ev07W4KiVdMfuIY1R3Da8JM3p0bEn9XK805Y_1J9daU8dLf0kGmbLlpkc4V0SVRpfx9qkm-7b1Efzixrw70UA_zxgwjyxRnxi8QF9NuX63TULD2DpL1pkBO3vxjoCzBDR5Nu9-__4ogAN9sVkzA1-1CZhWSCWJ97qCd5ah9_p9of6H3Pzw2X7SIhrmUyE8h__u3WCVPpEqNlJ6eEaoctMU9jGHwixpP6g7zykjYkE3SCNkZzBNgJ6vAinlifELQ8ZyhOUikxeQbKrzMoC6ddH5aAKiplM2B6O6OLf6768eOsLsVW_jm-TXbX8PQMyAhYbIl6WyfOnBvi27NvL5Obr0MyATniug72UvDhqnTRYaqFips-LgdE9JmalmTbiPLN5z-1zyVxH9rkpM0_KM3gZwM8pn2KsZOTPFDKSnupYHV-9-409-RHqD_QrA1hfMLIX0IbjvgBqMnecEAY2JX6A7AtMTSdNzbydm4A8Jto1P4yGdjJPmNCbYNCD3xZJQAapz7ag4dBNe2zwd3rqQbuSDNoG_nFWe8GEFjhvg-dTzu_jOikFXJYAJE7s5FxrQA7ULTs2aZSo8IjhbAeVT_scDHNPDIH5qxt2J-Ouz0FkJMAIEo6urM4r5dphU6bJj0KckOaGsehLqUIWtNgB8awuJnDCuvjikpMl4Wjnu0gHmzBqnysBSzDb5nV1BGbViTr3UIg3X2hCjwAv6QtR66sJQZ-Y1NbI4n0_kYE4wzQByWubsws06hyL-mFl_SgtztadzKeoMqRuGP8vaIxMyU_T1xem2xiDxQ9-Lg44SeHKMXYgYboZXaAaiRikU9uyYvVZ2ESQXjhwusvZ6GKm8MWUqDcvN_OTBMfDAlvCG2072Gao2junkWzfACQrwAKdfjHI5SN3DD15MERyvtdDlloCN0EH0lm4D9zP3sW3yO51WHl98TFC5uyxk-zSFu-v4aC535M2m9MHhGVPfepheGrj3CmIMyXB_jU0TpXU55FKZW0cb-ehlOID059Bs7EyptrP60kGuIVzBO_X06BZaPOEccR4gOlR-Q2-STzKP_rcyxfm-GtGORfIakz3OZYsJ2tEAVQh3c0BbDcCqXfqA5rxRZLZXGqvYTKvU1q9ugXOaumGXRg4sV_3i5Xnxj4kRpC4M3GIOMsRX_F_BnzZiC18KlGzFtPWqiWkzFcF4jYi1p5PHA9wtIcSYJOTDxJSyetsaDMzDoOAVe3yIuG31dPnbkYp-cYk8tRNVPOwbecWfs7-r-_EuvshtiRhHQUvajHQ9q-Xn17OomM0LhIFPefkCVGn0CaXyE9ph4QWq5452LcHVroLVDZNFgNi7uYEb0YWOqauRdX9qmd60rSGMaEqG2scbXRiCKiboBhn2dLswvkpNKMDjiBDjKJROR7R1nVwKs6txJu3E0S1_i364oORTTVyfGugQx2AEEMmSQ1fXHwQZEDjoN1vyDWTBOpSxNHTSzfF554nt328840LWi5HmD4HfwRCq44UDqcxkNvU5u8A0Uv-LM1ALkhjJobsTqUHeqxHD3PUu3uxM9BJD3v-3xn9hL","rs_0f68152e58c069a5016a6ef0f01c24819686742760a9ff7ab2",{"_519":493},[1240,1241],{"_49":1243,"_96":586},{"_49":1242,"_96":586},"**Fixing selectOption and cleanup awaiting**","**Refining logout handling and request timing**",{"_525":1245,"_507":1246,"_486":487,"_509":493},1785655543361,{"_510":1247,"_45":1237,"_581":1248,"_96":583},[],[1243,1242],{"_507":1250,"_486":487,"_509":493},{"_553":1251,"_45":-5,"_514":1252,"_194":-5,"_556":1253,"_96":558},"call_I7vu6ComTOJwvHo0BERidgQv",{"_519":493},{"_327":1254,"_560":-5},[1255,1256],{"_49":664,"_96":564},{"_49":1175,"_96":564},{"_525":1258,"_507":1259,"_486":487,"_509":493},1785655534923,{"_1179":1260,"_45":1261,"_500":117,"_96":1182},[1262,1263,1264,1265],"exec-a1dd0679-70fc-43fb-b23b-635204cd58d3",{"_338":1274,"_9":1275,"_169":1276},{"_338":1272,"_9":1273,"_169":1192},{"_338":1269,"_9":1270,"_169":1271},{"_338":1266,"_9":1267,"_169":1268},"@@ -167,2 +167,8 @@\n const generation = ++sessionGeneration;\n+ // A refresh response can carry Set-Cookie after this login's response and\n+ // silently replace the newer session's cookie even though the generation\n+ // guard correctly rejects its JavaScript result. Cancel it before starting\n+ // the newer login; unlike logout, the login below will immediately install a\n+ // fresh cookie, so there is no useful reason to let the old rotation land.\n+ abortInFlightRefresh?.();\n // The server sets the HttpOnly refresh cookie; the body returns only the\n",{"_1188":-5,"_96":1189},"/workspace/cluckwork/web/src/api/client.ts","@@ -39,2 +39,9 @@\n \n+ // Exercise correctness without logout's abort optimisation. If this is\n+ // removed, the held request is cancelled and the test can pass without the\n+ // session-generation guard ever rejecting a late successful response.\n+ await page.evaluate(() => {\n+ AbortController.prototype.abort = () => undefined;\n+ });\n+\n // Hold every refresh open for HOLD_MS.\n@@ -134,3 +141,4 @@\n \n- // Let the superseded bootstrap refresh land on top of the new session.\n+ // Give the superseded bootstrap refresh enough time either to be aborted by\n+ // the newer login or (if cancellation loses the race) to settle stale.\n await page.waitForTimeout(HOLD_MS + 2_000);\n@@ -153,2 +161,11 @@\n await expect(nav.link(\"nav:customers\")).toBeVisible();\n+\n+ // The in-memory token is only half the session. A stale refresh response\n+ // also carries Set-Cookie, which the browser applies before client code can\n+ // reject the response. Reload forces bootstrap to prove the durable cookie\n+ // still belongs to Sales rather than the superseded Owner.\n+ await page.reload();\n+ await expect(nav.link(\"nav:sales\")).toBeVisible();\n+ await expect(nav.link(\"nav:audit\")).toBeHidden();\n+ await expect(nav.link(\"nav:users\")).toBeHidden();\n });\n",{"_1188":-5,"_96":1189},"/workspace/cluckwork/tools/simulation/ui/specs/session-races.spec.ts","@@ -64,2 +64,8 @@\n \n+ // The initial seven-day fan-out is not evidence that changing the date\n+ // controls refetched anything. Start the measurement window only after the\n+ // initial screen has settled, so deleting refetch-on-change leaves this\n+ // collection empty and fails below.\n+ timings.length = 0;\n+\n // Widen to the maximum. `to` first: `from`'s own `max` attribute is `to`, so\n@@ -95,3 +101,4 @@\n const atMaxRange = timings.filter((t) => t.status === 200);\n- expect(atMaxRange.length, \"no report endpoint responded at the maximum range\").toBeGreaterThan(0);\n+ expect(atMaxRange.length, \"no report endpoint refetched after the maximum range was applied\")\n+ .toBeGreaterThan(0);\n \n",{"_1188":-5,"_96":1189},"@@ -86,3 +86,8 @@\n const selector = languageSelect(page);\n+ const resetPersisted = page.waitForResponse((response) =>\n+ response.url().includes(\"/api/v1/me/language\")\n+ && response.request().method() === \"PUT\"\n+ && response.status() === 204);\n await selector.selectOption(\"en\");\n+ await resetPersisted;\n await expect(page.getByRole(\"link\", { name: tEn(\"nav:reports\"), exact: true })).toBeVisible();\n@@ -90,3 +95,8 @@\n // The switch, made the way a user makes it.\n+ const languagePersisted = page.waitForResponse((response) =>\n+ response.url().includes(\"/api/v1/me/language\")\n+ && response.request().method() === \"PUT\"\n+ && response.status() === 204);\n await selector.selectOption(lang);\n+ await languagePersisted;\n \n@@ -109,2 +119,10 @@\n \n+ // Prove the preference survived outside optimistic local i18n state. A\n+ // missing PUT can still repaint this tab; only a reload bootstrapping from\n+ // /me demonstrates that the user's durable preference changed.\n+ await page.reload();\n+ await expect(page.locator(\"html\")).toHaveAttribute(\"lang\", lang);\n+ await expect(page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }))\n+ .toBeVisible();\n+\n // And the screens still WORK in that language — the point of #277's \"not\n",{"_1188":-5,"_96":1189},"/workspace/cluckwork/tools/simulation/ui/specs/i18n.spec.ts",{"_507":1278,"_486":487,"_509":493},{"_553":1251,"_45":1279,"_569":1280,"_514":1281,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef0dbc09c8196a07be8e9db86d482","const patch = \"*** Begin Patch\\n*** Update File: /workspace/cluckwork/web/src/api/client.ts\\n@@\\n export async function login(body: LoginRequest): Promise {\\n@@\\n const generation = ++sessionGeneration;\\n+ // A refresh response can carry Set-Cookie after this login's response and\\n+ // silently replace the newer session's cookie even though the generation\\n+ // guard correctly rejects its JavaScript result. Cancel it before starting\\n+ // the newer login; unlike logout, the login below will immediately install a\\n+ // fresh cookie, so there is no useful reason to let the old rotation land.\\n+ abortInFlightRefresh?.();\\n*** Update File: /workspace/cluckwork/tools/simulation/ui/specs/session-races.spec.ts\\n@@\\n await signIn(owner());\\n+\\n+ // Exercise correctness without logout's abort optimisation. If this is\\n+ // removed, the held request is cancelled and the test can pass without the\\n+ // session-generation guard ever rejecting a late successful response.\\n+ await page.evaluate(() => {\\n+ AbortController.prototype.abort = () => undefined;\\n+ });\\n@@\\n- // Let the superseded bootstrap refresh land on top of the new session.\\n+ // Give the superseded bootstrap refresh enough time either to be aborted by\\n+ // the newer login or (if cancellation loses the race) to settle stale.\\n await page.waitForTimeout(HOLD_MS + 2_000);\\n@@\\n await expect(nav.link(\\\"nav:sales\\\")).toBeVisible();\\n await expect(nav.link(\\\"nav:customers\\\")).toBeVisible();\\n+\\n+ // The in-memory token is only half the session. A stale refresh response\\n+ // also carries Set-Cookie, which the browser applies before client code can\\n+ // reject the response. Reload forces bootstrap to prove the durable cookie\\n+ // still belongs to Sales rather than the superseded Owner.\\n+ await page.reload();\\n+ await expect(nav.link(\\\"nav:sales\\\")).toBeVisible();\\n+ await expect(nav.link(\\\"nav:audit\\\")).toBeHidden();\\n+ await expect(nav.link(\\\"nav:users\\\")).toBeHidden();\\n*** Update File: /workspace/cluckwork/tools/simulation/ui/specs/reports-range.spec.ts\\n@@\\n await page.goto(\\\"/reports\\\");\\n await expect(page.getByRole(\\\"heading\\\", { name: tEn(\\\"reports:title\\\") })).toBeVisible();\\n+\\n+ // The initial seven-day fan-out is not evidence that changing the date\\n+ // controls refetched anything. Start the measurement window only after the\\n+ // initial screen has settled, so deleting refetch-on-change leaves this\\n+ // collection empty and fails below.\\n+ timings.length = 0;\\n@@\\n- const atMaxRange = timings.filter((t) => t.status === 200);\\n- expect(atMaxRange.length, \\\"no report endpoint responded at the maximum range\\\").toBeGreaterThan(0);\\n+ const atMaxRange = timings.filter((t) => t.status === 200);\\n+ expect(atMaxRange.length, \\\"no report endpoint refetched after the maximum range was applied\\\")\\n+ .toBeGreaterThan(0);\\n*** Update File: /workspace/cluckwork/tools/simulation/ui/specs/i18n.spec.ts\\n@@\\n await page.goto(\\\"/account\\\");\\n const selector = languageSelect(page);\\n- await selector.selectOption(\\\"en\\\");\\n+ const resetPersisted = page.waitForResponse((response) =>\\n+ response.url().includes(\\\"/api/v1/me/language\\\")\\n+ && response.request().method() === \\\"PUT\\\"\\n+ && response.status() === 204);\\n+ await selector.selectOption(\\\"en\\\");\\n+ await resetPersisted;\\n@@\\n- await selector.selectOption(lang);\\n+ const languagePersisted = page.waitForResponse((response) =>\\n+ response.url().includes(\\\"/api/v1/me/language\\\")\\n+ && response.request().method() === \\\"PUT\\\"\\n+ && response.status() === 204);\\n+ await selector.selectOption(lang);\\n+ await languagePersisted;\\n@@\\n await expect(page.locator(\\\"html\\\")).toHaveAttribute(\\\"lang\\\", lang);\\n+\\n+ // Prove the preference survived outside optimistic local i18n state. A\\n+ // missing PUT can still repaint this tab; only a reload bootstrapping from\\n+ // /me demonstrates that the user's durable preference changed.\\n+ await page.reload();\\n+ await expect(page.locator(\\\"html\\\")).toHaveAttribute(\\\"lang\\\", lang);\\n+ await expect(page.getByRole(\\\"link\\\", { name: t(lang, \\\"nav:reports\\\"), exact: true }))\\n+ .toBeVisible();\\n*** End Patch\";\ntext(await tools.apply_patch(patch));\n",{"_519":493},{"_507":1283,"_486":487,"_509":493},{"_510":-5,"_577":1284,"_45":1285,"_514":1286,"_581":1287,"_96":583},"gAAAAABqbvDbrndJJ_FL8H-OmstwLUDmM8fCn_UcmAFziZhuOlJaz74iiqNrZpG9bdpAwxoPuVfFJlCtA2tFxkheXRoi6QGLj237bid-HThzXhhgRJK6o7xcooF3EkF0cwuLe59RJMxZb-FieaSIItPt8RvmoLBG5gHfj81WtSUlmX3j9Z4BN47niOEy36rjjLYXwKi4p3bl_PXboEsvgF_NZq18qfiME6s8p8IMX-ltkedQp64QR06mtoGf_pnYiFRkH6Oc_WNMHi6Gr-R3LOt9gk1wbKz7h7NZh6H4I4hv94gTygxpdDzvJAsrenKkK_-U3gFHeY2fzuFyRob3J08wv3BVyqOQHEUZo9Eg6fVVUtHuyH4riJONwyCDvWmuNKsIqbpKj8yvdWDdW6n54q5t5WqqorKqWXyYaVNIM9_wxyG3cxkl1Aubr30D0id1xKlUM5pGqKcK_XAXsqC0wlgDkeG6rbqxjbNwW__9VjpNpXCJ9fYGtLh187AEU53Kd_BFFZcTw9XssRsPzit65j3dSPwrXRTUvj5ENoap2BnmekGeM_h7OFjKMJnNlNuPlwD2nJlU3tWH4PQ2FNbc5AwS_g-5wcaPuZ2ksxUnLuoHFmZ2kGfhWmLRnvhZggOZrkLIt_uMUbu70pMwWY0OerS0ZHZhj--JMd_bE41u3oxmd1U4o4NCO3m4djy1yFFB83_tyEfI9EOGdlhtTgbK5cF_UPm7AP_G2P56Pn27ZCqVbj2wc46toLIGpkDZ5WPA34hGvb2hv8ZJO4_XMgwNyJ31CUgaK8TiVwD-LS0aw8Y2jXSvCmDEOtHCYSJIgfAlC6tjRYYY0nZWTM7fCT1sZWgmz1b2_PrNQ5zEJkjIFh3UvcBKtFIyKmWd9buqtFFAPE5mxL2b3MyZ_9fzUoIvT2orBe1ZrX3pYfuYk-XQpi7CgaW8bVLhiMle3h7keKwqZRghk0-0LivDXOlLkk01BG5dSpIa5GuwfZwrmlVa55P5zoVubDy4ij4xnuwZKV71O-mXGVbNS7tD0HfjiKW3tPIVDtmY81F-VCkBMYITgv6EB_jxYTtMeQc1sWq-oyOpMo1mjEWr-D_BvBwAonNd_bJHboge8-Opzg==","rs_0f68152e58c069a5016a6ef0dabdec8196973d9a1758ffa3ba",{"_519":493},[1288],{"_49":1289,"_96":586},"**Waiting for i18n update confirmation**",{"_525":1291,"_507":1292,"_486":487,"_509":493},1785655515678,{"_510":1293,"_45":1285,"_581":1294,"_96":583},[],[1289],{"_507":1296,"_486":487,"_509":493},{"_510":-5,"_577":1297,"_45":1298,"_514":1299,"_581":1300,"_96":583},"gAAAAABqbvDaL6cHKpcpr_qUlpRplWdzTRMHzN_PZBkG4MFbi4N2vWteAcYd9D_UIgH2fbkPAUVGD2MwKIn1twVuQxir9naZ8OZCrfJYuaIDxAshhgJMdmjc2VvkDvSSLZEDpzSuWasAyrDs7KXBwyLQBByTyaCF6HTF-PRFrDyKCJ_q_ggySNNt4iBrwSsWNWE3syHCW-SoweqWYcNNb2btMe-H9x6Geh4OKF1iq4ByKygeJMIFLIHqzuJyli3rTtjhz4OL5Zf_7jzXQxC_P-nWlIol9OUNjwLI0HVdnEQF_Od4s4vz2qIQiSOFuRN8PJL3QrlqTo8-zEvyKLtBAVaccCEseoY97ea-QLRyDmDTpcXIkrB6oB7JZeXDi0KKj04Gap36ND5uNBlWyPir5mJJaDTevCpziX5UXrahYpGAJiionRLcTrYEUFtZ3J8GnT-p8PjeO0tSBx2-tTYsG_x-5wKmSvBu756A7rvPjmDYO5CyD1Lqp8we8iWt5VBeDRlH9e8PyB35BkctVuzN_mLvT7pGtQtZfJU0P6GrXhMh9JlGFXP1xSlEyjb2689Unlh2V7K2sFqBzXZm3p9Wf9747hrVqIzihik2xm1JPaimxLNJqB7FTR0N_mFV4YD_LHW7vyXLcJNxvY721_g2pPTBR6LRjfSS9DCLcN1b2CCHVQf2BLHgCds28bmfbnfdYYiDyRoFVgpxr112y6j-3vKcPwuwxiPFupxSir8VD0jeYfuTWV1ccnx36pRcvsccAj0_X9GC_J_7OeIHYJKM5bz2HZyrMIBFjXiI3DbUEKBGCOJUD6foADL7GPxVgnCDGsRhoDk7D6B4p-nei_VX5saHfnWic3FcrcFYE-vEI5Qu_TDbxuJsL7w_ZwHoIlhiHS02Wvp-qItLZrOxvfsUpDmmLJvD8GiYi-qm1kQuVwAN43cxy3jom--OA1Iyl-Xk_Kf-lhAfVU8sChCAeeDsINhC0Yoq0cqUTCpEPHlEwDxO74AG1rjwf8Jv9Lu8UUvghVdqgH7wnhJniyyzjoAajGkZxDIvZ0mMK8uhe0B4UVBthbWFzsfxwFMMfIJecL3mNxf4klVY4kaV1eGrKLJEpAQ05WyAXXNh6ZN7UYsIkG0CY0xWcQShFFjsGXIXE8V_SisjQn8T0v55byWf0h-UxmJypjqr7j9Uf83wcAdtLfoOZ9tU7ItHsIQMoHCpexFFDsko2L9qVNGVNiJJ9hjrFOe6gPJoJaTNmxDRTAnwwKdHg4hcr6wHqd8dvRk-m8tR1FB__02PhtmSUKB1xo9XBKLohYi8DafMXQ_HF1ayjN74JJydcP11n-pscWNlBXbj_ngsyetwrSoYwYkfUnr1OvZrjY1vokH1rKsebRUxP3hRvfqHDcfq8bKLRPgK3l8CaeGJNntYF0OgZ9abEZkZAmavLLYrdQ86rH_iOfS7ZAs3msIPKiw55XF5vXhhQ1F88-ty75w4XsmQFN4rY5O_hX6QP97A7XHaL4S2Xo9lRLiuIZpOlVjPXGnhNeG5wluYBqDWGXNuUol2m8pRGO6_Uo9dDimmEpippKDhAIqfFXovJ7mAuirg7l7sG2OrArBzPSgbOMf3PcjW59Spj1VFvQQNmo4FnzYJ8SgVaEyiPhs8cxNhzLMjLrpQwltMALxI3FbJk173FQnXQr3XG1ydc3pVwkSx49qVKKq5ws5IDmRwhgGFXjQeq8Q_aXX-qYK1LdKrPf9-SFuBi60igadqb39dlwMV_c6UIb-ypF9ND9XBFQ2UQV9ts7ErIEwSpTDZmlZ6GBlPwrcEwE62kVWFD0aCozLVR2ePAnA7WYKm6YSXcZ7WPan8LWN9pnJZsUvsrmbGdio-r6bBzdSB50__uZ1gb1VN9STfGTorxm4XIj2-RsvRwAsgUPqQ8alUjWTZbQjhiHKNY6ww59_ugBDNi3XuA6bGn0sldXOXXlHgHzoEv5_PdMWOPxIet56ZqzC7R2cRj716rgfxWQqMkJ-uY4TP6kiFxc53dPiK979-_W7YQvONLHO0V5FD63eQKPc0kLjwqCKr8OpE8JOmTYrKJKc_r790GXzS0PuepbKrfqbS_zx_w2SwIA89-ItniE281kKwVkOKx7qnpnowfyX2PA6iqHoOu482XHRC3E4cpxofYVkgp1sCOTFJPCAEbFZ7p4ud0sTXhBbwsPPoWadgfMklgOYGHNoYJwuoBW1yGd6XhFB_O20YMjuWLLnflNDzQdTmEgejixDxbu8EdKolKlIQMJZ-Ti9UTe7-9c5SP1dCCDSgNkTTd2GA5qPPYGC4w6-ghJNrJnOOIq5TdEqRikKoFfzD9ucIRjVhud1TINFTvkc58ocquaf_LfKWFdfB7HjjC_akXk11VzQWf0IOJ6e5HncNQdc5NuFR8wp85ykaBWI4NDLaSrvgFctk2hyIdEfCpsjzm06EY5imnDrMIZjRHIeO2vXLxVtcSgnMEkLoXCJZC9TEuAunpqHbUpVOASssL5d3xe-YrwOoF6AYUHR9lwDCnCxormZZoOlEW86tqEjIGZ_3owbqvobTjSacLfvXcnkADCytUcEVPVgVmAyGwZJhtqnzLzorrssH5m27QyH12nfR7KJxjJLrdc4BxXDv5_C_gUsWF0t0IMOgzTRBQbuCSRPEty4xOkEygvhz9WTVSgUFGpbM09mPspsHUjwIe3nfsgeipZhnJtrjvMeZ-xUSkXcCpUjIgbHCF4lNe6JcEq_Nhu-lOJA5o4S_w7Yu1_oRcfR6wM64DvT2PDgvYtJ9D39kH8jFS3sMbAYu4eUPyEOT0OF7LHwlV8qTwNgVeGuCWgA61eTGC0p0IA-rtNBMq6DrysDoY4tDYA7D_c99iBoIECLfc1cMUppn_l4yHj3VAhL6AStU0kkGFu1p2fc2CXbVEy5Kl2Y8H4oobB2WmrHL9lPXtxagKQVfFYT9awjs6WaJ94qIkBgtSvKtqL3uYVyZBbr_42Ykt2JJnr6UyoXzc5vPGuepnEYymiqfB94tT0ChRWmMxlg8ybUIMKcJEjp-oZNPADo-l9Zb4nt1QPpU3RHf9KaBqrt3g3Q986Mm8YOMWNQJEXLN53C3zpy7pOxqfO1h9nh4kGRhcYP_lmFT88aFaTLqjSytjqvsgja3xvsrYCS6m_ZyJLIgddGtJ-m5VT7kISOVBxd0iWceUIb4KsjyKMsvKcDxRmtG6YDchK9RhcpINFEzkEgzmm92sVKp5zoSenmbtC5eN686vwCeby6dB2bb_SdwP_s_gdWghmCnB5dR7loM8gPL4NFUemvOBT6mJt5XkqpajKXLM29ZtyLI89Opl8o5MM4mnGQnj4QRYYhFksQ7p31unchWxQnBTHHggyJuT3EQOkxpg6OnAR0pKqSjsHWXlJ_VfzH8n8yvv2XBMqiS61-NZVYhyzKZ6SIQOuplqZsSuxZgGjcOIj9QKuXL1joSWO_JRbn77Vm3UNQKSEBe8vqCNGCKEhtUT_1Hhq-gW6PB27_RDs0gD87KcCUqcgboX5V5PVvxlwr-EX_2wBh2LqI6Mv5M2QiTIU3mJTAbDGxqUxSoAGCfpUBZv9hfRG-3gpWnS-1z5oyo6c58BTk-stJIFVyR7n5LRSzc9hW8THdY1RJTJHIse1k3Gd6qwiftyZWqvC2fzP1D3R8yOvvCkZg-wwW5tezZaQqZUF9ycxQ1tovHHnMXfyKT9Yr0fytUG5Lkazy4bTry1en0EVs-8cTDwk-2YudZHB_s-ZTwM2-HavVOr84q5yXw6_eOMFkuNByw8YCtU-fYmnPD6S5Tbz2rKTHjX5UoFSwKpu38D1gK1A_0Xo8Iwsli2PDc7mRsh5kyviiItv31LD-Bt7wvTrHFkLbAoEanje1KXllYPza6ORpoIVjTiAV4LjTql2SN65Oj9WYpjiJmWxt1tYulMto7HBvfgf2zigQ0U6f0rPSJ8yxYG_G7Z5MpZtekP_cIUmtYk41irleI886BK1PkmV_1JIjGwl8CjBfBjmhUlJpKZowgiLrEar1fBFXeJCSmjsoIHbfutT41MG8SighuDhRnWj1o3BIZMRoYiRn2N8yX2x9zlWcjh7zpOrfkyavaSXUxHL_gGQaamxu_z7JF8uCpneph7gSYWQxrdgc356m30F17cYNNqwr9SMh7uN1OK8dZZbbE5Yg6Ncuou4fIPPo304H49OmH-kBLW4CBCbCcA8-OgU_Q_QuObeJOInbWf1V94MS9vLKgzpwe4A9eCtRW-89Tfvfcgw-a2OXaalsHrll5x4HeocgTJ2Ej4VoGyaOhLyMZyaRPmDRJpxKOV-VFTWi0AgH9o9HmdeTwYvhvxlvTzm6imStcbeNyJDRgM3lxvR9bt59bfYvFVVJsLo8RDw5RPlN9ZXOxtPFfFZX24PpwF3--Gja_rcREba5H_WWxESHmSJiJ-8NeC6-5BAKTPhQzFrcdJf5LWREWhaM3lKqJESjItvDBddfybTSAT3jbMCbDH-sV2PS00N1L1J--Q0gzYiXF_S5gQS_gJKWzPHT0c1AYZWEcJsjP-rokbWZQ-eQHpeXCGt4TxVh4wK-VA8WpN_6_MfvRoDGZCA1MDim736JJO9Ks17UNwrxJm_SGVM6tdCDO_vlGQuzdiNmwzbw9_oT_Up7xnCOdv38Z3I1VhCQ_Zjz0BKzjrbMa4J-VQAx0XTqfsk3-bAH7mfur6_vvu9jbbZ0deBRsz-oR764lPvWCYGfo6Qxd2GtxvJ13K01qvWpL","rs_0f68152e58c069a5016a6ef0c660548196b6347e7d3385500c",{"_519":493},[1301,1302,1303],{"_49":1306,"_96":586},{"_49":1305,"_96":586},{"_49":1304,"_96":586},"**Designing abort for in-flight refresh calls**","**Planning test fixes for refresh cookie handling**","**Identifying refresh token cookie race bug**",{"_525":1308,"_507":1309,"_486":487,"_509":493},1785655514664,{"_510":1310,"_45":1298,"_581":1311,"_96":583},[],[1306,1305,1304],{"_525":1313,"_507":1314,"_486":487,"_509":493},1785655492346,{"_532":1315,"_534":1316,"_536":1317,"_538":539,"_491":1318,"_541":35,"_45":1319,"_543":1320,"_545":546,"_500":117,"_96":547},"src/Cluckwork.Application/Common/IIdentityProvider.cs:77: // #45 — set/clear the user's language, account-scoped (foreign id -> NotFound).\nsrc/Cluckwork.Application/Common/IIdentityProvider.cs:79: Guid accountId, Guid userId, string? language, CancellationToken ct = default);\nsrc/Cluckwork.Api/Program.cs:309:// read their own identity and language preference.\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:12:// every role, ReadOnly included, can read their identity and set their language.\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:19: .WithSummary(\"The signed-in user's identity and UI-language preference.\");\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:22: // a UI-language preference is personal, not a farm-scoped admin action.\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:23: group.MapPut(\"/language\", SetLanguage)\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:25: .WithSummary(\"Set or clear your UI-language preference.\");\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:51: var language = request.Language?.Trim().ToLowerInvariant();\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:52: var command = new SetLanguageCommand(language);\nsrc/Cluckwork.Application/Features/Users/SetLanguage/SetLanguageHandler.cs:7:// only ever set their OWN language. Account-scoped inside the provider.\nsrc/Cluckwork.Application/Features/Users/SetLanguage/SetLanguageValidator.cs:10: // null clears; otherwise a BCP-47 primary language subtag: 2–8 ASCII\nsrc/Cluckwork.Application/Features/Users/SetLanguage/SetLanguageValidator.cs:16: .WithMessage(\"Language must be a 2–8 letter language code, for example 'en'.\")\n","/bin/bash -lc \"rg -n \\\"sessionGeneration|AbortController|restoreSession|changeLanguage|language\\\" web/src/api web/src | head -160; sed -n '1,280p' web/src/api/client.ts; rg -n \\\"me/language|preferredLanguage|language\\\" src/Cluckwork.Api src/Cluckwork.Application | head -100\"",[1321,1322,1323],155,"exec-71274de4-9eaf-428a-8f31-7aad423efa89","99354",{"_534":1332,"_169":1333,"_1326":1334,"_96":1328},{"_534":1329,"_194":1330,"_169":1268,"_96":1331},{"_534":1324,"_169":1325,"_1326":1327,"_96":1328},"rg -n 'me/language|preferredLanguage|language' src/Cluckwork.Api src/Cluckwork.Application","Cluckwork.Api","query","me/language|preferredLanguage|language","search","sed -n '1,280p' web/src/api/client.ts","client.ts","read","rg -n 'sessionGeneration|AbortController|restoreSession|changeLanguage|language' web/src/api web/src","api","sessionGeneration|AbortController|restoreSession|changeLanguage|language",{"_507":1336,"_486":487,"_509":493},{"_553":1337,"_45":-5,"_514":1338,"_194":-5,"_556":1339,"_96":558},"call_sYSKw1szCPbgorngEo3hgljr",{"_519":493},{"_327":1340,"_560":-5},[1341,1342],{"_49":565,"_96":564},{"_49":1343,"_96":564},"web/src/auth/AuthContext.tsx:4: login as apiLogin, logout as apiLogout, restoreSession,\nweb/src/auth/AuthContext.tsx:79: void restoreSession()\nweb/src/auth/AuthContext.tsx:87: // restoreSession never rejects today, but clearing isLoading here too keeps\nweb/src/api/client.ts:132:let sessionGeneration = 0;\nweb/src/api/client.ts:146:// restoreSession() and the session the user ended comes back.\nweb/src/api/client.ts:167: const generation = ++sessionGeneration;\nweb/src/api/client.ts:177: if (sessionGeneration !== generation) {\nweb/src/api/client.ts:204: const generation = sessionGeneration;\nweb/src/api/client.ts:208: if (sessionGeneration !== generation) {\nweb/src/api/client.ts:248: sessionGeneration++;\nweb/src/api/client.ts:314: const controller = new AbortController();\nweb/src/api/client.ts:338: const generation = sessionGeneration;\nweb/src/api/client.ts:351: if (sessionGeneration !== generation) {\nweb/src/api/client.ts:364: throw sessionGeneration !== generation ? new StaleSessionError() : err;\nweb/src/api/client.ts:377:export async function restoreSession(): Promise {\nweb/src/auth/AuthContext.lifecycle.test.tsx:7:import { login as apiLogin, logout as apiLogout, restoreSession, setOnTokensChanged, setOnUnauthenticated } from \"../api/client\";\nweb/src/auth/AuthContext.lifecycle.test.tsx:11:// and capture the refresh/unauth callbacks AuthProvider registers. restoreSession\nweb/src/auth/AuthContext.lifecycle.test.tsx:16: restoreSession: vi.fn().mockResolvedValue(false),\nweb/src/auth/AuthContext.lifecycle.test.tsx:25:const mockRestoreSession = vi.mocked(restoreSession);\nweb/src/auth/AuthContext.lifecycle.test.tsx:85: // either already-authenticated or with restoreSession resolving false, so\nweb/src/auth/tokenStore.ts:7:// silent refresh against the cookie (see client.restoreSession / AuthContext).\nweb/src/api/cluckwork.ts:350:// list DTO: this carries the user's UI-language preference. Role is echoed for\nweb/src/api/cluckwork.ts:357: language: string | null;\nweb/src/api/cluckwork.ts:364:export const putMeLanguage = (language: string | null): Promise =>\nweb/src/api/cluckwork.ts:365: apiPut(\"/me/language\", { language });\nweb/src/test/renderWithProviders.tsx:16:const DEFAULT_ME: Me = { id: \"u1\", email: \"test@farm.local\", name: null, role: \"Admin\", language: null };\nweb/src/test/setup.ts:24: // A test that switches the UI language (e.g. via changeLanguage or the\nweb/src/test/setup.ts:25: // LanguageSelector) must not leak that language into the next test file's\nweb/src/test/setup.ts:27: // Reset BEFORE clearing storage: the languageChanged handler writes the\nweb/src/test/setup.ts:30: void i18n.changeLanguage(\"en\");\nweb/src/api/client.test.ts:12: restoreSession,\nweb/src/api/client.test.ts:201: errors: { language: [\"Language must be a 2–8 letter code.\"], name: [\"required\"] },\nweb/src/api/client.test.ts:202: errorCodes: { language: [\"Me.Language.Format\"] },\nweb/src/api/client.test.ts:221: errors: { language: [\"some english message\"] },\nweb/src/api/client.test.ts:222: errorCodes: { language: [\"Not.A.Real.Code\"] },\nweb/src/api/client.test.ts:863: await expect(restoreSession()).resolves.toBe(false);\nweb/src/api/client.test.ts:864: await expect(restoreSession()).resolves.toBe(true);\nweb/src/api/client.test.ts:886: const restored = restoreSession(); // parks on the hung refresh\nweb/src/api/client.test.ts:890: // (does not hang forever) — restoreSession catches the abort and reports no\nweb/src/api/client.test.ts:921: await expect(restoreSession()).resolves.toBe(true);\nweb/src/api/client.test.ts:936: const restoring = restoreSession(); // bootstrap refresh in flight, held open\nweb/src/api/client.test.ts:974: const restoring = restoreSession(); // older bootstrap refresh in flight\nweb/src/api/client.test.ts:1204: const restoring = restoreSession();\nweb/src/i18n/formattingIndependence.test.ts:6:afterEach(async () => { await i18n.changeLanguage(\"en\"); });\nweb/src/i18n/formattingIndependence.test.ts:8:describe(\"formatting is driven by the farm, not the UI language (#182, §4.5)\", () => {\nweb/src/i18n/formattingIndependence.test.ts:9: it(\"money output is unchanged when the UI language changes\", async () => {\nweb/src/i18n/formattingIndependence.test.ts:12: await i18n.changeLanguage(\"xx\");\nweb/src/i18n/formattingIndependence.test.ts:16: it(\"date output is driven by the farm timezone, unchanged by UI language\", async () => {\nweb/src/i18n/formattingIndependence.test.ts:19: await i18n.changeLanguage(\"xx\");\nweb/src/i18n/en.ts:79: language: \"Language\",\nweb/src/i18n/en.ts:80: languageHint: \"The language the interface is shown in, just for you.\",\nweb/src/i18n/en.ts:1063: // client-side arithmetic, never routed through i18n.language.\nweb/src/i18n/en.ts:1240: // farm-locale `formatMoney` — never `i18n.language` (formattingIndependence\nweb/src/i18n/en.ts:1282: // never routed through i18n.language.\nweb/src/i18n/en.ts:1344: // never `i18n.language` (formattingIndependence guard).\nweb/src/i18n/en.ts:1525: // (formatMoney is farm-locale-driven, never keyed off i18n.language —\nweb/src/i18n/en.ts:1913: // mechanism, not user-facing language.\nweb/src/i18n/en.ts:1920: \"Interface language. Everyone can choose the language the interface is shown in from \"\nweb/src/i18n/en.ts:1925: + \"in English, whatever language you picked.\",\nweb/src/i18n/en.ts:2545: glossaryUiLanguageTerm: \"UI language\",\nweb/src/i18n/en.ts:2547: \"The per-user language the interface is shown in — English, Español, or Tagalog — chosen from \"\nweb/src/i18n/en.ts:2549: + \"language you picked.\",\nweb/src/i18n/en.ts:2552: \"Full spec-language definitions live in the repository's specs/product/GLOSSARY.md.\",\nweb/src/api/client.ts:132:let sessionGeneration = 0;\nweb/src/api/client.ts:146:// restoreSession() and the session the user ended comes back.\nweb/src/api/client.ts:167: const generation = ++sessionGeneration;\nweb/src/api/client.ts:177: if (sessionGeneration !== generation) {\nweb/src/api/client.ts:204: const generation = sessionGeneration;\nweb/src/api/client.ts:208: if (sessionGeneration !== generation) {\nweb/src/api/client.ts:248: sessionGeneration++;\nweb/src/api/client.ts:314: const controller = new AbortController();\nweb/src/api/client.ts:338: const generation = sessionGeneration;\nweb/src/api/client.ts:351: if (sessionGeneration !== generation) {\nweb/src/api/client.ts:364: throw sessionGeneration !== generation ? new StaleSessionError() : err;\nweb/src/api/client.ts:377:export async function restoreSession(): Promise {\nweb/src/api/cluckwork.ts:350:// list DTO: this carries the user's UI-language preference. Role is echoed for\nweb/src/api/cluckwork.ts:357: language: string | null;\nweb/src/api/cluckwork.ts:364:export const putMeLanguage = (language: string | null): Promise =>\nweb/src/api/cluckwork.ts:365: apiPut(\"/me/language\", { language });\nweb/src/i18n/es.ts:64: language: \"Idioma\",\nweb/src/i18n/es.ts:65: languageHint: \"El idioma en que se muestra la interfaz, solo para usted.\",\nweb/src/i18n/i18n.test.ts:9: it(\"falls back to English for a language that lacks the key\", async () => {\nweb/src/i18n/i18n.test.ts:13: await i18n.changeLanguage(\"xx\");\nweb/src/i18n/i18n.test.ts:15: await i18n.changeLanguage(\"en\");\nweb/src/i18n/i18n.test.ts:23: it(\"syncs to the resolved language on changeLanguage\", async () => {\nweb/src/i18n/i18n.test.ts:24: // The bootstrap awaits changeLanguage before revealing the gated shell, and\nweb/src/i18n/i18n.test.ts:25: // the language selector calls it on every switch — must track\nweb/src/i18n/i18n.test.ts:27: await i18n.changeLanguage(\"es\");\nweb/src/i18n/i18n.test.ts:29: await i18n.changeLanguage(\"en\");\nweb/src/api/client.test.ts:12: restoreSession,\nweb/src/api/client.test.ts:201: errors: { language: [\"Language must be a 2–8 letter code.\"], name: [\"required\"] },\nweb/src/api/client.test.ts:202: errorCodes: { language: [\"Me.Language.Format\"] },\nweb/src/api/client.test.ts:221: errors: { language: [\"some english message\"] },\nweb/src/api/client.test.ts:222: errorCodes: { language: [\"Not.A.Real.Code\"] },\nweb/src/api/client.test.ts:863: await expect(restoreSession()).resolves.toBe(false);\nweb/src/api/client.test.ts:864: await expect(restoreSession()).resolves.toBe(true);\nweb/src/api/client.test.ts:886: const restored = restoreSession(); // parks on the hung refresh\nweb/src/api/client.test.ts:890: // (does not hang forever) — restoreSession catches the abort and reports no\nweb/src/api/client.test.ts:921: await expect(restoreSession()).resolves.toBe(true);\nweb/src/api/client.test.ts:936: const restoring = restoreSession(); // bootstrap refresh in flight, held open\nweb/src/api/client.test.ts:974: const restoring = restoreSession(); // older bootstrap refresh in flight\nweb/src/api/client.test.ts:1204: const restoring = restoreSession();\nweb/src/i18n/resolve.ts:4:// users.language (if a pack exists) → farm-locale's language subtag (if a pack\nweb/src/i18n/resolve.ts:6:// — never an error — so a language the SPA can't render degrades to the farm\nweb/src/i18n/resolve.test.ts:5: it(\"prefers the user's language when a pack exists\", () => {\nweb/src/i18n/resolve.test.ts:10: it(\"falls back to the farm-locale language subtag when the user's has no pack\", () => {\nweb/src/i18n/resolve.test.ts:19: it(\"treats null/undefined user language as unset\", () => {\nweb/src/i18n/resolve.test.ts:34: it(\"falls back to English when a language has no pack, even by default\", () => {\nweb/src/i18n/resolve.test.ts:35: // \"de\" has no pack today; neither the user's language nor the farm\nweb/src/i18n/languageHint.integration.test.ts:5:// LOGIC — hint → validated initial language — is unit-tested directly on the pure\nweb/src/i18n/languageHint.integration.test.ts:6:// `pickInitialLanguage` in ../lib/languageHint.test.ts (a genuine reload of the\nweb/src/i18n/languageHint.integration.test.ts:9:// i18n/index.ts: the `languageChanged` listener persists the hint and keeps\nweb/src/i18n/languageHint.integration.test.ts:18: await i18n.changeLanguage(\"en\");\nweb/src/i18n/languageHint.integration.test.ts:22:describe(\"languageChanged persists the device hint\", () => {\nweb/src/i18n/languageHint.integration.test.ts:23: it(\"writes the new language to the hint on every switch\", async () => {\nweb/src/i18n/languageHint.integration.test.ts:24: await i18n.changeLanguage(\"tl\");\nweb/src/i18n/languageHint.integration.test.ts:26: await i18n.changeLanguage(\"es\");\nweb/src/i18n/languageHint.integration.test.ts:31:describe(\" tracks the UI language\", () => {\nweb/src/i18n/languageHint.integration.test.ts:33: await i18n.changeLanguage(\"es\");\nweb/src/i18n/languageHint.integration.test.ts:35: await i18n.changeLanguage(\"tl\");\nweb/src/i18n/languageHint.integration.test.ts:39: it(\"stays in sync with i18n.language (listener is registered before init, so it never lags)\", async () => {\nweb/src/i18n/languageHint.integration.test.ts:40: await i18n.changeLanguage(\"es\");\nweb/src/i18n/languageHint.integration.test.ts:41: expect(document.documentElement.lang).toBe(i18n.language);\nweb/src/i18n/index.ts:6:import { pickInitialLanguage, readLanguageHint, writeLanguageHint } from \"../lib/languageHint\";\nweb/src/i18n/index.ts:14:// Add codes here as packs ship; resolveLanguage + the language selector both\nweb/src/i18n/index.ts:28:// catches init()'s OWN first `languageChanged`. With in-memory resources i18next\nweb/src/i18n/index.ts:32:// the bootstrap's resolved-language switch and every later LanguageSelector change,\nweb/src/i18n/index.ts:34:i18n.on(\"languageChanged\", (lng) => {\nweb/src/i18n/index.ts:37: // resolved-language self-heal, and every LanguageSelector change — so the next\nweb/src/i18n/index.ts:38: // load (the login screen OR a signed-in refresh) opens in this language instead\nweb/src/i18n/index.ts:43:// Init ONCE at module load, seeding the language from the device hint (the code\nweb/src/i18n/index.ts:44:// last used on this device — see lib/languageHint.ts) so a refresh or the pre-auth\nweb/src/i18n/index.ts:48:// with in-memory resources, so React's first paint already renders in this language\nweb/src/i18n/index.ts:50:// later calls changeLanguage with the language resolved from /me + /account, which\nweb/src/components/useConfirm.test.tsx:224:// translations-status.ts), so under ANY UI language its rendered text falls\nweb/src/components/ErrorBoundary.test.tsx:226:// translations-status.ts), so under ANY UI language the fallback text is\nweb/src/components/NumberField.test.tsx:404:// translations-status.ts), so under ANY UI language the rendered text falls\nweb/src/components/ThemeToggle.test.tsx:35:// translations-status.ts), so under ANY UI language the rendered text falls\nweb/src/session/LanguageSelector.multilang.test.tsx:15:describe(\"LanguageSelector with all installed languages\", () => {\nweb/src/session/LanguageSelector.multilang.test.tsx:16: it(\"shows every installed language and persists + switches on change\", async () => {\nweb/src/session/LanguageSelector.multilang.test.tsx:18: const changeSpy = vi.spyOn(i18n, \"changeLanguage\");\nweb/src/session/LanguageSelector.multilang.test.tsx:20: \nweb/src/session/LanguageSelector.multilang.test.tsx:33: // Regression guard: the select must reflect the live i18n language, not the\nweb/src/session/LanguageSelector.multilang.test.tsx:34: // stale `me` object (MeContext is never updated on a language switch).\nweb/src/session/LanguageSelector.multilang.test.tsx:39: await act(async () => { await i18n.changeLanguage(\"en\"); }); // reset for subsequent tests\nweb/src/session/LanguageSelector.multilang.test.tsx:49: \nweb/src/session/LanguageSelector.multilang.test.tsx:61: await act(async () => { await i18n.changeLanguage(\"en\"); }); // reset for subsequent tests\nweb/src/session/LanguageSelector.test.tsx:8:// one here so this file keeps covering the single-language hidden state. The\nweb/src/session/LanguageSelector.test.tsx:9:// real, multi-language rendering is covered by LanguageSelector.multilang.test.tsx.\nweb/src/session/LanguageSelector.test.tsx:17: \nweb/src/session/LanguageSelector.test.tsx:24: it(\"renders nothing while only one language is installed\", () => {\nweb/src/session/LanguageSelector.test.tsx:27: expect(screen.queryByLabelText(/language/i)).toBeNull();\nweb/src/session/LanguageSelector.tsx:6:// Names of each installed language, keyed by code, in that language's own\nweb/src/session/LanguageSelector.tsx:10:// Per-user UI language (#182). Hidden while only one language is installed — a\nweb/src/session/LanguageSelector.tsx:12:// language is installed, which is the case today (en/es/tl). The change path\nweb/src/session/LanguageSelector.tsx:13:// persists to the server (PUT /me/language) AND switches i18next live.\nweb/src/session/LanguageSelector.tsx:23: // useTranslation() re-renders this component on i18next's languageChanged\nweb/src/session/LanguageSelector.tsx:24: // event, so i18n.language is always current — both at bootstrap (seeded from\nweb/src/session/LanguageSelector.tsx:25: // the resolved user/farm language) and after a switch. Reading me?.language\nweb/src/session/LanguageSelector.tsx:26: // instead would go stale the moment changeLanguage runs, since MeContext is\nimport type { AccessTokenResponse, LoginRequest, ProblemDetails } from \"./types\";\nimport { clearAccessToken, getAccessToken, setAccessToken } from \"../auth/tokenStore\";\nimport { newId } from \"../lib/ids\";\nimport i18n from \"../i18n\";\nimport { newTraceparent } from \"../lib/traceparent\";\n\nconst BASE = \"/api/v1\";\n\n// #145 — refresh/logout ride the HttpOnly refresh cookie; this custom header\n// (which a cross-site simple request cannot set) is the CSRF second factor\n// alongside the cookie's SameSite=Strict. Mirrors AuthCookies.CsrfHeaderName.\nconst CSRF_HEADER = \"X-Cluckwork-Auth\";\n\n// #308 — carries a short-lived step-up grant (see stepUp() below) on the two\n// sensitive user-administration calls that need one. Mirrors\n// AuthEndpoints.StepUpHeaderName.\nexport const STEP_UP_HEADER = \"X-Cluckwork-Step-Up\";\n\nexport class ApiError extends Error {\n constructor(\n public status: number,\n public title: string,\n message: string,\n ) {\n super(message);\n this.name = \"ApiError\";\n }\n}\n\n// Called when the session is unrecoverable (refresh failed). AuthContext wires\n// this to drop React auth state and bounce to /login.\nlet onUnauthenticated: (() => void) | null = null;\nexport function setOnUnauthenticated(cb: (() => void) | null): void {\n onUnauthenticated = cb;\n}\n\n// Called whenever a new token pair is saved (login or transparent refresh).\n// AuthContext re-derives the role from the fresh access token so a demotion\n// or promotion shows in the UI within one token lifetime, not at next reload.\nlet onTokensChanged: (() => void) | null = null;\nexport function setOnTokensChanged(cb: (() => void) | null): void {\n onTokensChanged = cb;\n}\n\nasync function parseError(res: Response): Promise {\n let title = res.statusText;\n let detail = res.statusText;\n try {\n const body = (await res.json()) as ProblemDetails & {\n errors?: Record;\n errorCodes?: Record;\n };\n title = body.title ?? title;\n // ValidationProblem carries an errors map and usually no detail — flatten\n // it so the user sees which field is wrong, not just \"Bad Request\".\n if (body.errors && Object.keys(body.errors).length > 0) {\n // Per-field, index-aligned: a slot with an explicit code whose catalog key\n // exists renders the translated message; otherwise the English server\n // message at the SAME index (uncoded slots, or codes without a catalog key,\n // keep their English — matching the additive, explicit-only #45 contract).\n const parts: string[] = [];\n for (const [field, messages] of Object.entries(body.errors)) {\n const codes = body.errorCodes?.[field] ?? [];\n messages.forEach((msg, i) => {\n const code = codes[i];\n // `defaultValue: msg` IS the fallback: a known catalog key wins, an\n // unknown code (or an uncoded/null slot) renders the server English\n // message. This also satisfies i18next's typed t() — a runtime string\n // key needs the defaultValue overload (a bare i18n.t(dynamicKey) is a\n // type error under CustomTypeOptions). keySeparator:false makes the\n // dotted `errors:Me.Language.Format` a literal key, not a nested path.\n parts.push(code ? i18n.t(`errors:${code}`, { defaultValue: msg }) : msg);\n });\n }\n detail = parts.join(\" \");\n } else {\n detail = body.detail ?? detail;\n }\n } catch {\n // non-JSON body — keep status text\n }\n return new ApiError(res.status, title, detail);\n}\n\n// #217 — the trace id of the most recent API request, success or failure (a\n// FAILED request's id is exactly the one worth having: the crash report\n// attaches it, joining a browser crash to that request's server-side story).\nlet lastTraceId: string | null = null;\nexport function getLastTraceId(): string | null {\n return lastTraceId;\n}\n\n// Mint per request, never reused: the server treats the incoming id as the\n// request's TraceId (#214), so sharing one across requests would fuse\n// unrelated request logs into one trace.\nfunction attachTraceparent(headers: Headers): void {\n const tp = newTraceparent();\n headers.set(\"traceparent\", tp.header);\n lastTraceId = tp.traceId;\n}\n\nasync function raw(\n path: string,\n init: RequestInit,\n accessToken?: string,\n): Promise {\n const headers = new Headers(init.headers);\n // A caller that declared its own type keeps it: the farm-logo upload (#123)\n // PUTs raw image bytes, not JSON.\n if (!headers.has(\"Content-Type\")) headers.set(\"Content-Type\", \"application/json\");\n if (accessToken) headers.set(\"Authorization\", `Bearer ${accessToken}`);\n attachTraceparent(headers);\n\n const res = await fetch(`${BASE}${path}`, { ...init, headers });\n if (!res.ok) throw await parseError(res);\n if (res.status === 204) return undefined as T;\n return (await res.json()) as T;\n}\n\n// --- Auth endpoints -------------------------------------------------------\n\n// #310 — login, the load-time bootstrap refresh, an explicit (401-triggered)\n// refresh, and logout are treated as ONE browser-session state machine, not\n// four independent calls racing each other. Every entry into that machine\n// captures the CURRENT generation before its own await; login and logout each\n// bump it (login because it is by definition a newer session than anything\n// already in flight, logout because ending the session must supersede\n// everything). A completion — success OR failure — may only commit tokens or\n// user state while the generation it captured is still the current one;\n// otherwise it is stale and must be discarded rather than resurrecting or\n// clobbering whatever the (newer) generation already did.\nlet sessionGeneration = 0;\n\nclass StaleSessionError extends Error {\n constructor() {\n super(\"Discarded: superseded by a newer login or an intervening logout.\");\n this.name = \"StaleSessionError\";\n }\n}\n\n// #310 review — discarding the JS result is NOT enough for a request that also\n// rotates the refresh cookie (/auth/login and /auth/refresh both do). The\n// browser applies Set-Cookie the moment the response arrives, before any of our\n// code runs, so a login that lands after logout leaves a VALID HttpOnly refresh\n// cookie behind: the next reload authenticates straight through\n// restoreSession() and the session the user ended comes back.\n//\n// So when a cookie-setting response is discarded, ask the server to revoke what\n// it just issued. Only when the session is actually gone (no access token): if a\n// newer LOGIN superseded this flight, the cookie now belongs to that live\n// session and revoking it would sign the user out of the thing they just did.\nasync function revokeSupersededCookie(): Promise {\n if (getAccessToken()) return; // superseded by a newer login, not by a logout\n try {\n await raw(\"/auth/logout\", { method: \"POST\", headers: { [CSRF_HEADER]: \"1\" } });\n } catch (err) {\n // Best-effort, like logout's own revoke: report it rather than swallow, but\n // never surface it to the caller whose result was already discarded.\n console.error(\"discarded response: revoking its refresh cookie failed\", err);\n }\n}\n\nexport async function login(body: LoginRequest): Promise {\n // #310 — bump first: login is a NEWER session than anything already in\n // flight (a bootstrap refresh, say), so its resolution must be the one that\n // wins, and any earlier flight must see its captured generation go stale.\n const generation = ++sessionGeneration;\n // The server sets the HttpOnly refresh cookie; the body returns only the\n // access token, which lives in memory for this tab's lifetime.\n const res = await raw(\"/auth/login\", {\n method: \"POST\",\n body: JSON.stringify(body),\n });\n // Superseded while in flight (e.g. a logout landed before this resolved) —\n // do not resurrect a session the user already ended. The response already\n // set a refresh cookie, so revoke it too, not just the in-memory token.\n if (sessionGeneration !== generation) {\n await revokeSupersededCookie();\n throw new StaleSessionError();\n }\n setAccessToken(res.accessToken);\n onTokensChanged?.();\n}\n\n// #165 — self-service password change. The server revokes every session for the\n// user (other devices are signed out) and hands this one a fresh pair, so we\n// swap in the returned access token; the rotated refresh cookie is set by the\n// response.\n//\n// apiPost attaches an Idempotency-Key like any write, but the SERVER exempts\n// this route from the response cache, so that key is inert here. Caching this\n// response would persist the access token and, on replay, return it WITHOUT the\n// rotated Set-Cookie — leaving the client holding a revoked refresh cookie\n// (#165 review). Replay protection isn't needed anyway: a repeat can't re-apply,\n// because the current password no longer matches.\nexport async function changePassword(\n body: { currentPassword: string; newPassword: string },\n): Promise {\n // #310 — this is a token-store writer like login/refresh, so it needs the\n // same generation guard: logout is reachable from every screen (AppLayout's\n // persistent button), so a user who submits a password change and logs out\n // before it lands would otherwise have the response write a fresh token back\n // over the cleared session.\n const generation = sessionGeneration;\n const res = await apiPost(\"/auth/change-password\", body);\n // This response rotates the refresh cookie too, so a discarded one needs that\n // cookie revoked, not merely the in-memory token dropped.\n if (sessionGeneration !== generation) {\n await revokeSupersededCookie();\n throw new StaleSessionError();\n }\n setAccessToken(res.accessToken);\n onTokensChanged?.();\n}\n\n// #308 — re-confirms the CURRENT password to mint a short-lived step-up grant\n// for one sensitive user-administration call (creating another Owner;\n// resetting an Owner's password). The grant is returned to the caller and\n// used EXACTLY ONCE, immediately, as the X-Cluckwork-Step-Up header on that\n// one follow-up request (see UsersPage.tsx) — this function itself never\n// stores the token or the password anywhere longer-lived than its own return\n// value, and there is nothing here to clear on logout: unlike the access\n// token, no module-level state holds a step-up grant at all.\n//\n// #336 review — this goes through apiPost, so it inherits the transparent\n// refresh-and-retry every 401 triggers. That is only safe because the server\n// answers a REJECTED password with 400 (Users.CurrentPasswordIncorrect), the\n// same status change-password uses, and reserves 401 for a genuinely\n// unauthenticated caller. If /auth/step-up ever went back to 401 for a wrong\n// password, one typed password would be replayed as two failed accesses —\n// halving the server's five-attempt account lockout and rotating the refresh\n// token per attempt. The contract is pinned by a test in client.test.ts.\nexport async function stepUp(password: string): Promise<{ token: string; expiresAt: string }> {\n return apiPost<{ token: string; expiresAt: string }>(\"/auth/step-up\", { password });\n}\n\nexport async function logout(): Promise {\n // #310 — bump the generation and clear in-memory state SYNCHRONOUSLY, before\n // any await: local logout must win immediately, whatever a slower in-flight\n // login/refresh does later. Also cancel any refresh currently in flight —\n // note this only reaches a refresh that has already been GRANTED the\n // cross-tab lock (#169); one still queued behind another tab has no\n // controller yet, so it will still fire its request and then be discarded on\n // arrival by the generation check. Correctness rests on the generation, not\n // on the abort; the abort is only an optimisation so it stops sooner\n // instead of only being\n // discarded on arrival by the generation check in refreshTokens().\n sessionGeneration++;\n abortInFlightRefresh?.();\n // #336 — capture BEFORE clearing: this tab's access token names the user who\n // actually clicked logout, and the clear below is deliberately synchronous.\n // Read it after and we would always send nothing.\n const bearer = getAccessToken();\n clearAccessToken();\n try {\n // Cookie-authenticated: the HttpOnly refresh cookie rides along and the CSRF\n // header satisfies the check. Always fires — JS can't read the HttpOnly\n // cookie to know whether a session exists, so we always ask the server to\n // revoke + clear it.\n //\n // #336 — the bearer is sent too, when this tab still has one. The refresh\n // cookie is per-origin (one per browser, last login wins) while this store\n // is per-tab, so the cookie can belong to a DIFFERENT user than the one\n // logging out here; without the bearer the server would revoke that other\n // user's step-up grants and leave this user's alive. It stays OPTIONAL —\n // the endpoint is AllowAnonymous, so an already-expired token just leaves\n // the call unauthenticated and the cookie path still ends the session, and\n // the server exempts /auth/logout from the Idempotency-Key requirement so\n // authenticating it does not make the request need one.\n await raw(\n \"/auth/logout\",\n { method: \"POST\", headers: { [CSRF_HEADER]: \"1\" } },\n bearer ?? undefined,\n );\n } catch (err) {\n // Best-effort revoke: the in-memory token is already cleared above and this\n // failure can never reverse that. Still surfaced (not silently swallowed,\n // #310) so an operator can see the server-side session may be un-revoked —\n // logged, never the (already-cleared) token itself.\n console.error(\"logout: server-side session revoke failed\", err);\nsrc/Cluckwork.Application/Common/IIdentityProvider.cs:77: // #45 — set/clear the user's language, account-scoped (foreign id -> NotFound).\nsrc/Cluckwork.Application/Common/IIdentityProvider.cs:79: Guid accountId, Guid userId, string? language, CancellationToken ct = default);\nsrc/Cluckwork.Api/Program.cs:309:// read their own identity and language preference.\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:12:// every role, ReadOnly included, can read their identity and set their language.\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:19: .WithSummary(\"The signed-in user's identity and UI-language preference.\");\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:22: // a UI-language preference is personal, not a farm-scoped admin action.\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:23: group.MapPut(\"/language\", SetLanguage)\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:25: .WithSummary(\"Set or clear your UI-language preference.\");\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:51: var language = request.Language?.Trim().ToLowerInvariant();\nsrc/Cluckwork.Api/Endpoints/Me/MeEndpoints.cs:52: var command = new SetLanguageCommand(language);\nsrc/Cluckwork.Application/Features/Users/SetLanguage/SetLanguageHandler.cs:7:// only ever set their OWN language. Account-scoped inside the provider.\nsrc/Cluckwork.Application/Features/Users/SetLanguage/SetLanguageValidator.cs:10: // null clears; otherwise a BCP-47 primary language subtag: 2–8 ASCII\nsrc/Cluckwork.Application/Features/Users/SetLanguage/SetLanguageValidator.cs:16: .WithMessage(\"Language must be a 2–8 letter language code, for example 'en'.\")\n",{"_507":1345,"_486":487,"_509":493},{"_553":1337,"_45":1346,"_569":1347,"_514":1348,"_194":572,"_573":-5,"_500":117,"_96":574},"ctc_0f68152e58c069a5016a6ef0c18584819691d516bc58d4b204","const r = await tools.exec_command({cmd:\"rg -n \\\"sessionGeneration|AbortController|restoreSession|changeLanguage|language\\\" web/src/api web/src | head -160; sed -n '1,280p' web/src/api/client.ts; rg -n \\\"me/language|preferredLanguage|language\\\" src/Cluckwork.Api src/Cluckwork.Application | head -100\",\"workdir\":\"/workspace/cluckwork\",\"yield_time_ms\":10000,\"max_output_tokens\":30000}); text(r.output)\n",{"_519":493},{"_507":1350,"_486":487,"_509":493},{"_510":-5,"_577":1351,"_45":1352,"_514":1353,"_581":1354,"_96":583},"gAAAAABqbvDB_aLa_PcxLPNQrzU0KdVHgBE10kEK2XkIWsp2yMXko3p3uzR0CQMewxOP3Gv9GkFhK4kFC1O_XS9nff7yJ5wo1OhX8tG0McB4ArhMDOVRgWHQyUGQPIzAqeGyCFGOuYbc4auV_n3EeU2ouOQVfeWcIRVC6ROpG_pMhVhE_AnwfvPNsMm357FHkuvBgc6n6Yohu-RJVVodiOy-aMX0XjBiPJ1Xp5-jSw00WfauOpbiXtn6uJpFWGsQfVaRTGiRlWDIqjIG3HIbDg1v-AeezEn4chzs1sH6cHwdzn0QeR9TbxdGXj2YHbtEfXHS7cXnGq7dqd2XIzrA6JjMF1uGSa-4nVHneYrwBneLVceTGUcTVNN2KKc-sjp9Gx5LaLiugQ0bYrhfW4ABAjYDZXRZSQBoniDVVCdNcKgp5g-b84LSU-TxbLpdVweb6vE_IqC0eEXTDjtlZPJcq_H163JcBzcVOPUQk_QXl4tpOpFbwS9WrSwToEIVhO7M0MXLy5JfjE51f8DooVmApXCYISq1slnZWnIZKH2fgMWjJHcB2TCbiO7W9vRKPUr0SsmwmY5FgyAV7hS_OT5nBgGFVFRIDcDKFBy7Rw-7zvQsujqzUp7vHENv6tP3lNTWlYM8LMBEb0zg4BnfcO296mu36kpFTPi4ZoNB54Ytq8-1w6NePIScHLS_Xkq4uXb4aipQm9e4SR04jnohXLMcQg4eVdFMci0eexP1gR1EkGTQriunTxveDD4cQ7qwbd05HY8Pi2nKzePOgC9kf1izwFVxUIEO8B8PjcQcwAh9929Wo1LroKTJP2XHBvP8fXEcTMHwjq1srMgbuIGVJ9L9L5Na0_Fv_aIptm1bDvrTCxPIY7uIR6QcNcWR0suqyleXOi5tNXyV42NT1ThX7tF5zZqTMmLcDY0iDZm2h4On0siLXDVtJdWZsN1BdoG4WDMj_xqap-wHmlRhKyZ4XxcBwlH_Z2Yq4qRLq9ViLtvPygxfdp-wpiWGKl88LeAWC1us0k_qdjX5fEAntm72UZjy6QKMTdePZ_s8WV_T7cobkSpGZBpI58pr0kyn9qsGzgoGw96RpqQ0kIZpE_gB5aLWFWO-lNupepi6sPw5D-CRc-qY6cbnip17a-My1A5-PIpe4SUaMNZnuDqe1BDWSFzxiidl5wOY5ou2madW0nqug_wvRhm7CyB3Z5pplxpFqivOxdnzMHfnlyh6SRzyGgyJCd9GDlpH7ZL1zZR5rsgbS3B2U08VmgW0-IE9H4Tl-Cgw8szMIEWIjICt3wAqlMlJFAueqUO8FHJxRQcCVqE5RnP7tj9WKXbcErHXz4LQc__b8UihmmaDSDftn5fyXysB5H406zjhPHDxtqrM65Dot_ZCepmdhoZCi8HMptnydVxt3hgii7cmFlySXgmjwSghlAmkQ2c2vMAIlAcmakIMApUZzRVcUTs4579DVt6ay3gDF4IqpXhLEcHzXcflqBkX5BlIQXM7YCTsy854U-9jLqdmqWcgX0YNV5_1cI3EZYeDoVefoye68oleymoudxp8sSZmDzQHDnrD8DUdFV5chtayvCmh357P64uRkZwrR7cA1oiQpOPu9Hq37TJjxxRosGUDSLkGW-mtVyFaVKIP44qY75PP8dVxVCMfvGf9iKCrJUywYeUZKzG5QVGjyKj-2-GzorJj549-7J7y9ZADyhpOuGna7wq5e21jcl_lJdM5gtQVFoKRDVxw5d4-ePrPszUac41K03hU8rJEoSMUqzZ_Z2JgUWBbYxLf0LAUF5lcRa-9qzKcHzP3p-zFYEA1WL5s0pQNxtAgGDKK8fcFq43z6oPv87XcfWENCkIRwcut-fDwcWbg1QCFgp0_Qo9t4y3vzJIJeuSSaCStwPqVImhPkRCGGJZ5J3_BvZER5YvRxltDST_z0n1sLtum6_tuPYkk9cz8KY9GAkMGw8CkDfMyU-4_j64OkV7W6s4ZDEX82fUPwaV1awk6AcjWe5xKMkeoMUYw_XzNCz2w9My0KH_puixIWG9TyQ5d_eNcBHU4eCi0X41XiBrLJvSX75PMOi-ypZf6M8B70r3DPkF4eukU882oy_gVd3zMTt1KEScOPUIRHsx7jdqNZULtxlYF-PaqqRNUE-r45ugUtFsh1JPlTntTZERntyNfLzRbKJwqQ_WbEWrG2COav2R05h8aszX299uiro_LAfXwQ1PezpWlpn13KH8P7KY=","rs_0f68152e58c069a5016a6ef0ba580c8196a853eedb296adda6",{"_519":493},[1355,1356],{"_49":1358,"_96":586},{"_49":1357,"_96":586},"**Inspecting client abort behavior**","**Planning robust route interception**",{"_525":1360,"_507":1361,"_486":487,"_509":493},1785655489449,{"_510":1362,"_45":1352,"_581":1363,"_96":583},[],[1358,1357],{"_507":1365,"_486":487,"_509":493},{"_553":1366,"_45":-5,"_514":1367,"_194":-5,"_556":1368,"_96":558},"call_Pb340EfBhSeBf5MkBK4xeSLw",{"_519":493},{"_327":1369,"_560":-5},[1370,1371],{"_49":664,"_96":564},{"_49":1372,"_96":564},"// #310 acceptance — the two session-generation races, driven in a real browser.\n//\n// #310 is CLOSED; this is the end-to-end regression layer for it, not the fix.\n// The fix is `sessionGeneration` in `web/src/api/client.ts`: a module-level\n// counter that `login()` and `logout()` bump, captured before each await and\n// re-checked on settlement, so a superseded completion is discarded\n// (`StaleSessionError`) instead of committing tokens.\n//\n// ================== WHY A BROWSER IS THE RIGHT INSTRUMENT ==================\n//\n// Both races are about what happens to a REAL in-flight fetch when the user does\n// something else mid-flight. A unit test can assert the counter's arithmetic; it\n// cannot tell you whether the user ends up looking at somebody else's farm. The\n// assertions below are therefore all about the resulting SCREEN — which session\n// the browser is actually in — not about a counter or a request.\n//\n// ================== HOW THE RACE IS MADE DETERMINISTIC ==================\n//\n// `page.route` holds the refresh request open for a fixed window, so \"in flight\"\n// is a state the spec controls rather than one it hopes to hit. The alternative,\n// firing both actions and hoping the interleaving lands, is a spec that passes\n// most of the time for the wrong reason — and this is precisely the class of bug\n// where \"passed 9 times out of 10\" means \"did not test it 9 times out of 10\".\n\nimport { expect, test } from \"../src/fixtures\";\nimport { castMember, owner } from \"../src/cast\";\nimport { tEn } from \"../src/i18n\";\n\n/** How long a held refresh stays in flight. Long enough to act inside, short enough to run. */\nconst HOLD_MS = 3_000;\n\ntest.describe(\"#310 session races\", () => {\n test(\"a logout during an in-flight refresh cannot be resurrected by the late response\", async ({\n page,\n signIn,\n nav,\n }) => {\n await signIn(owner());\n\n // Hold every refresh open for HOLD_MS.\n await page.route(\"**/api/v1/auth/refresh\", async (route) => {\n await new Promise((r) => setTimeout(r, HOLD_MS));\n await route.continue();\n });\n\n // Provoke a refresh by injecting one 401 (same one-shot technique as\n // session-refresh.spec.ts). The refresh it triggers is now held open.\n let injected = false;\n await page.route(\"**/api/v1/**\", async (route) => {\n const url = route.request().url();\n if (injected || url.includes(\"/auth/\")) {\n await route.fallback();\n return;\n }\n injected = true;\n await route.fulfill({\n status: 401,\n contentType: \"application/problem+json\",\n body: JSON.stringify({ title: \"Unauthorized\", status: 401 }),\n });\n });\n\n await nav.link(\"nav:reports\").click();\n // Do NOT await the refresh here — the whole point is to act while it is\n // still outstanding.\n await page.waitForRequest((r) => r.url().includes(\"/api/v1/auth/refresh\"));\n\n // The user signs out mid-flight.\n await nav.signOut.click();\n await expect(page).toHaveURL(/\\/login/);\n\n // Now let the held refresh land, and then some.\n await page.waitForTimeout(HOLD_MS + 2_000);\n\n // THE GUARANTEE, in three independent forms — because \"we are on /login\" on\n // its own would be satisfied by a router that moved while the session\n // quietly survived underneath it.\n //\n // 1. Still on the login screen, not swept back into the app.\n await expect(page).toHaveURL(/\\/login/);\n await expect(page.getByRole(\"navigation\", { name: tEn(\"nav:primaryNavAriaLabel\") }))\n .toBeHidden();\n\n // 2. The credential itself is gone. If the late refresh had committed, its\n // rotated cookie would be sitting here ready to restore the session.\n const cookies = await page.context().cookies();\n const refreshCookie = cookies.find((c) => c.name === \"cluckwork_rt\" && c.value !== \"\");\n expect(\n refreshCookie,\n \"a live refresh cookie survived the logout — the late response resurrected the session\",\n ).toBeUndefined();\n\n // 3. The strongest form: ask for a protected screen and be refused. This is\n // what an attacker with the abandoned tab would actually try.\n await page.goto(\"/\");\n await expect(\n page,\n \"a protected route was served after logout — the session outlived the sign-out\",\n ).toHaveURL(/\\/login/);\n });\n\n test(\"an explicit login beats a pending bootstrap refresh, and the newer login wins\", async ({\n page,\n signIn,\n nav,\n }) => {\n // Establish a real Owner session first, so the browser is holding a VALID\n // refresh cookie — the bootstrap refresh this race needs must be one that\n // would genuinely succeed. A race against a doomed request proves nothing.\n await signIn(owner());\n\n await page.route(\"**/api/v1/auth/refresh\", async (route) => {\n await new Promise((r) => setTimeout(r, HOLD_MS));\n await route.continue();\n });\n\n // Land on /login with that cookie present: AuthContext's bootstrap fires\n // `restoreSession()` immediately, and it is now held open. /login is outside\n // ProtectedRoute, so the form is interactive while that is pending.\n await page.goto(\"/login\");\n await page.waitForRequest((r) => r.url().includes(\"/api/v1/auth/refresh\"));\n\n // A DIFFERENT person signs in on the same browser while the old session's\n // refresh is still outstanding. Different persona on purpose: the two\n // sessions are then distinguishable on screen, so the assertion can name\n // which one won instead of inferring it.\n const sales = castMember(\"Sales\");\n await page.getByLabel(tEn(\"auth:email\")).fill(sales.email);\n await page.getByLabel(tEn(\"auth:password\")).fill(sales.password);\n await page.getByRole(\"button\", { name: tEn(\"auth:signIn\") }).click();\n\n await expect(page.getByRole(\"navigation\", { name: tEn(\"nav:primaryNavAriaLabel\") }))\n .toBeVisible();\n\n // Let the superseded bootstrap refresh land on top of the new session.\n await page.waitForTimeout(HOLD_MS + 2_000);\n\n // THE GUARANTEE: this is the Sales session, and the Owner's has not been\n // restored underneath it. Asserted through the nav's role gates, which\n // differ between the two personas — Sales is not an admin, so the Setup\n // group is absent, and Sales cannot produce, so the Production group is too.\n await expect(\n nav.link(\"nav:audit\"),\n \"an admin destination appeared — the late Owner refresh overwrote the Sales login\",\n ).toBeHidden();\n await expect(nav.link(\"nav:users\")).toBeHidden();\n await expect(nav.link(\"nav:expenses\")).toBeHidden();\n await expect(nav.link(\"nav:dailyEntry\")).toBeHidden();\n\n // Control: the Sales-shaped destinations ARE there, so the assertions above\n // are proving \"the Sales session won\" rather than \"the sidebar is empty\".\n await expect(nav.link(\"nav:sales\")).toBeVisible();\n await expect(nav.link(\"nav:customers\")).toBeVisible();\n });\n});\n\n--- reports ---\n// #311 acceptance — the report at its maximum supported date range.\n//\n// #311 is CLOSED; this is the regression layer, not the fix.\n//\n// ================== WHERE THE BOUND ACTUALLY LIVES ==================\n//\n// `src/Cluckwork.Api/Endpoints/Reports/ReportEndpoints.cs`:\n//\n// private const int MaxRangeDays = 366;\n// if (t.DayNumber - f.DayNumber >= MaxRangeDays)\n// return Results.Problem($\"Range cannot exceed {MaxRangeDays} days.\",\n// statusCode: 400, title: \"Report.RangeTooLarge\");\n//\n// Note the `>=`. The largest range the server ACCEPTS is therefore a 365-day\n// difference between `from` and `to` (a 366-day inclusive window) — not 366.\n// Off-by-one here is the difference between testing the boundary and testing a\n// point comfortably inside it, so the spec probes BOTH SIDES: the largest\n// accepted range must work, and one day more must be refused. A test that only\n// asserted the accepted side would still pass if the bound were quietly widened\n// to a year and a half.\n//\n// ReportsPage enforces NO client-side cap — `from` is bounded only by `to`, and\n// `to` only by farm-local today — so the browser genuinely sends these.\n\nimport { expect, test } from \"../src/fixtures\";\nimport { owner } from \"../src/cast\";\nimport { daysBefore, farmToday } from \"../src/farm\";\nimport { tEn } from \"../src/i18n\";\n\n/** Mirrors ReportEndpoints.MaxRangeDays. The comparison there is `>=`. */\nconst MAX_RANGE_DAYS = 366;\n/** The largest `to - from` the server accepts. */\nconst LARGEST_ACCEPTED_SPAN = MAX_RANGE_DAYS - 1;\n\nconst REPORT_PATH = /\\/api\\/v1\\/reports\\//;\n\ntest.describe(\"#311 report range\", () => {\n test(\"renders at the maximum supported range, and records what it cost\", async ({\n page,\n signIn,\n farm,\n }, testInfo) => {\n await signIn(owner());\n\n const to = farmToday(farm.timeZoneId);\n const from = daysBefore(to, LARGEST_ACCEPTED_SPAN);\n\n // Collect every report response the screen makes — ReportsPage fans out to\n // production, sales, expenses and profit, so a single waitForResponse would\n // time one of four and call it \"the\" latency.\n const timings: Array<{ path: string; status: number; ms: number }> = [];\n page.on(\"response\", (res) => {\n if (!REPORT_PATH.test(res.url())) return;\n const t = res.request().timing();\n timings.push({\n path: new URL(res.url()).pathname,\n status: res.status(),\n ms: Math.round(t.responseEnd),\n });\n });\n\n await page.goto(\"/reports\");\n await expect(page.getByRole(\"heading\", { name: tEn(\"reports:title\") })).toBeVisible();\n\n // Widen to the maximum. `to` first: `from`'s own `max` attribute is `to`, so\n // setting `from` to a far-past date while `to` is still the default would be\n // clamped by the browser and the spec would quietly test a 7-day window.\n //\n // `exact: true` on both: the labels are the single words \"From\" and \"To\",\n // and getByLabel substring-matches accessible names — so a bare \"To\" also\n // resolves the theme toggle (\"Switch to night mode\"). Two elements, strict\n // mode violation, and the failure names the toggle rather than the ambiguity.\n const startedAt = Date.now();\n await page.getByLabel(tEn(\"reports:toLabel\"), { exact: true }).fill(to);\n await page.getByLabel(tEn(\"reports:fromLabel\"), { exact: true }).fill(from);\n\n // THE GUARANTEE: the screen renders the report, rather than the bound\n // refusing it. `role=\"alert\"` is ReportsPage's error region.\n const production = page\n .getByRole(\"table\")\n .filter({ has: page.getByRole(\"columnheader\", { name: tEn(\"reports:dateHeader\") }) });\n await expect(production).toBeVisible();\n await expect(\n page.getByRole(\"alert\"),\n `a ${LARGEST_ACCEPTED_SPAN}-day range was refused, but MaxRangeDays=${MAX_RANGE_DAYS} should accept it`,\n ).toBeHidden();\n const renderedInMs = Date.now() - startedAt;\n\n // The date fields really do hold the wide range — proof the browser did not\n // clamp what was typed, which would make every assertion above describe a\n // narrower request than the one this spec claims to have made.\n await expect(page.getByLabel(tEn(\"reports:fromLabel\"), { exact: true })).toHaveValue(from);\n await expect(page.getByLabel(tEn(\"reports:toLabel\"), { exact: true })).toHaveValue(to);\n\n const atMaxRange = timings.filter((t) => t.status === 200);\n expect(atMaxRange.length, \"no report endpoint responded at the maximum range\").toBeGreaterThan(0);\n\n // Recorded, not asserted. A latency THRESHOLD here would be a flaky test\n // dressed as a performance gate — the number depends on the host, and under\n // the canary (#386) it is supposed to degrade. #311's acceptance item asks\n // for the figure to be captured; the canary is where it gets compared.\n const slowest = Math.max(...atMaxRange.map((t) => t.ms));\n const summary = [\n `range: ${from} .. ${to} (${LARGEST_ACCEPTED_SPAN} days, the documented maximum)`,\n `server: ${atMaxRange.map((t) => `${t.path} ${t.ms}ms`).join(\", \")}`,\n `slowest endpoint: ${slowest}ms`,\n `browser: table rendered ${renderedInMs}ms after the range was applied`,\n ].join(\"\\n\");\n await testInfo.attach(\"report-max-range-timing\", {\n body: summary,\n contentType: \"text/plain\",\n });\n testInfo.annotations.push({ type: \"#311 max-range timing\", description: summary });\n });\n\n test(\"refuses one day beyond the documented bound\", async ({ page, signIn, farm }) => {\n await signIn(owner());\n\n const to = farmToday(farm.timeZoneId);\n // One day wider than the largest accepted span — the first value the\n // server's `>=` rejects.\n const from = daysBefore(to, MAX_RANGE_DAYS);\n\n await page.goto(\"/reports\");\n await page.getByLabel(tEn(\"reports:toLabel\"), { exact: true }).fill(to);\n await page.getByLabel(tEn(\"reports:fromLabel\"), { exact: true }).fill(from);\n\n // The user is TOLD. A silently empty table would be worse than the refusal:\n // it reads as \"no data in that period\" for a farm that has plenty.\n await expect(\n page.getByRole(\"alert\"),\n `a ${MAX_RANGE_DAYS}-day range was accepted — the documented bound is not being enforced`,\n ).toBeVisible();\n\n // And the screen offers a way out rather than stranding them.\n await expect(page.getByRole(\"button\", { name: tEn(\"common:retry\") })).toBeVisible();\n });\n});\n\n--- i18n ---\n// i18n render — es and tl do not break the screens (#277 cross-cutting, #182).\n//\n// ================== WHAT MAKES THIS NON-VACUOUS ==================\n//\n// The suite builds its selectors from the SPA's own catalogs (src/i18n.ts), so\n// there is an obvious way for this spec to be worthless: pick a key whose\n// Spanish and English strings happen to be identical, assert it renders, and\n// pass no matter what the language machinery does. That is not hypothetical —\n// `nav:dashboard` really is \"Dashboard\" in BOTH en and tl.\n//\n// So the spec asserts, first, that the strings it is about to look for ACTUALLY\n// DIFFER from English, and fails loudly if a catalog change ever makes them the\n// same. Verify the instrument can observe the thing before trusting what it says.\n//\n// ================== AND WHY IT USES ITS OWN PERSONA ==================\n//\n// `LanguageSelector` persists through `PUT /me/language`. Switching language is\n// a durable change to that USER, not a page-local toggle — see `i18nPersona()`.\n\nimport { expect, test, type Page } from \"../src/fixtures\";\nimport { i18nPersona } from \"../src/cast\";\nimport { t, tEn, type Language } from \"../src/i18n\";\n\n/**\n * The language ``, located WITHOUT using its label."," *"," * Its label is `account:language`, which is itself translated (\"Language\" ->"," * \"Idioma\" -> \"Wika\") — so the moment the switch under test works, a"," * `getByLabel(tEn(...))` locator stops matching. That is not a hypothetical: it"," * turned the cleanup hook into a 45-second hang that reported as a failure of"," * the NEXT test. Matching on the option values, which are language-invariant"," * codes, keeps the handle stable across exactly the change being tested."," */","function languageSelect(page: Page) {"," return page.locator('select:has(option[value=\"en\"]):has(option[value=\"es\"])');","}"," * Keys chosen because all three catalogs give them genuinely different strings"," * (en \"Language\" / es \"Idioma\" / tl \"Wika\"; en \"Reports\" / es \"Informes\" /"," * tl \"Mga Report\"). The guard below re-checks that at run time rather than"," * trusting this comment.","const WITNESS_KEYS = [\"account:language\", \"nav:reports\"] as const;","const LANGUAGE_OPTION = { en: \"English\", es: \"Español\", tl: \"Tagalog\" } as const;","test.describe(\"i18n\", () => {"," // Always hand the persona back in English, even when an assertion above fails"," // — otherwise one red run leaves the account in Spanish and the NEXT run of"," // this spec starts from a state it did not choose."," test.afterEach(async ({ page }) => {"," // Best-effort and time-boxed: this is cleanup, and a cleanup hook that can"," // itself hang converts one failure into a cascade across the whole file."," try {"," await page.goto(\"/account\", { timeout: 10_000 });"," await languageSelect(page).selectOption(\"en\", { timeout: 10_000 });"," // Wait for the persist to land, not just the local switch — the point of"," // the reset is the SERVER-side preference, which is what the next run"," // bootstraps from."," await expect(page.locator(\"html\")).toHaveAttribute(\"lang\", \"en\", { timeout: 10_000 });"," } catch {"," // Deliberately swallowed. A failed reset is worth knowing about but is not"," // itself the finding, and re-throwing here would mask the real failure."," }"," });"," for (const lang of [\"es\", \"tl\"] as const satisfies readonly Language[]) {"," test(`switching to ${lang} renders that language across the shell`, async ({ page, signIn }) => {"," // The guard. A key whose translation equals English cannot distinguish"," // \"the language switched\" from \"nothing happened\"."," for (const key of WITNESS_KEYS) {"," expect("," t(lang, key),"," `\"${key}\" is identical in en and ${lang}, so this spec cannot tell a working language `"," + `switch from a broken one. Pick a different witness key.`,"," ).not.toBe(tEn(key));"," }"," await signIn(i18nPersona());"," // Start from a known language rather than whatever this account was last"," // left in — the persona is reserved, but a previous failed run is still a"," // possible starting state."," await page.goto(\"/account\");"," const selector = languageSelect(page);"," const resetPersisted = page.waitForResponse((response) =>"," response.url().includes(\"/api/v1/me/language\")"," && response.request().method() === \"PUT\""," && response.status() === 204);"," await selector.selectOption(\"en\");"," await resetPersisted;"," await expect(page.getByRole(\"link\", { name: tEn(\"nav:reports\"), exact: true })).toBeVisible();"," // The switch, made the way a user makes it."," const languagePersisted = page.waitForResponse((response) =>"," await selector.selectOption(lang);"," await languagePersisted;"," // THE ASSERTION: the destination the user reads in the sidebar is now in"," // the new language. The sidebar is the right place to look because it is"," // rendered by a different component tree than the screen that owns the"," // selector — a switch that only repainted the current screen would pass a"," // narrower check and still be broken everywhere else."," await expect("," page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }),"," `the sidebar did not switch to ${lang}`,"," ).toBeVisible();"," await expect(page.getByRole(\"link\", { name: tEn(\"nav:reports\"), exact: true })).toBeHidden();"," // follows. This is a real accessibility guarantee, not"," // decoration: it is what tells a screen reader which voice to use, and"," // index.html ships a static \"en\" that a broken listener would leave in"," // place while the visible text changed underneath it."," await expect(page.locator(\"html\")).toHaveAttribute(\"lang\", lang);"," // Prove the preference survived outside optimistic local i18n state. A"," // missing PUT can still repaint this tab; only a reload bootstrapping from"," // /me demonstrates that the user's durable preference changed."," await page.reload();"," await expect(page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }))"," .toBeVisible();"," // And the screens still WORK in that language — the point of #277's \"not"," // broken\", as opposed to \"translated\". A populated data screen renders its"," // table, not an error."," await page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }).click();"," await expect(page.getByRole(\"heading\", { name: t(lang, \"reports:title\") })).toBeVisible();"," await expect(page.getByRole(\"alert\")).toBeHidden();"," page"," .getByRole(\"table\")"," .filter({ has: page.getByRole(\"columnheader\", { name: t(lang, \"reports:dateHeader\") }) }),"," });"," }"," test(\"the language selector offers every installed pack in its own script\", async ({"," page,"," signIn,"," }) => {"," await signIn(i18nPersona());"," await page.goto(\"/account\");"," // Each pack is named in ITS OWN language (\"Español\", not \"Spanish\") — the"," // one string in the app deliberately left untranslated, because somebody who"," // cannot read the current language must still be able to find their own."," for (const [code, name] of Object.entries(LANGUAGE_OPTION)) {"," await expect(languageSelect(page).locator(`option[value=\"${code}\"]`)).toHaveText(name);","});","tools/simulation/ui/specs/reports-range.spec.ts",[1773],{"_1639":348,"_1640":1774,"_510":1775,"_1643":62},146,[1776,1645,1777,1645,1778,1645,1779,1645,1780,1781,1782,1783,1645,1784,1785,1786,1787,1788,1789,1790,1645,1791,1792,212,1793,1794,1795,1796,212,1797,1798,1799,1800,212,1801,212,1802,1803,1760,1761,1804,1805,1806,212,1807,1808,212,1809,1810,1811,1812,1813,1814,1815,1816,1817,1818,1819,1820,1757,212,1821,1822,1823,212,1824,1825,1826,1827,1828,212,1829,1830,1831,1832,1833,1834,1835,1836,1837,1838,1839,212,1840,1841,1842,1843,1844,1845,1846,1847,1848,1849,1850,212,1851,1852,1853,1854,1855,212,1856,1857,1858,212,1859,1860,1861,1862,1863,1864,1865,1866,1867,1868,1869,1870,1871,1872,1757,1873,1698,212,1874,1806,212,1807,1875,1876,1877,212,1821,1838,1839,212,1878,1879,1846,1847,1880,1881,212,1882,1883,1698,1770],"// #311 acceptance — the report at its maximum supported date range.","// #311 is CLOSED; this is the regression layer, not the fix.","// ================== WHERE THE BOUND ACTUALLY LIVES ==================","// `src/Cluckwork.Api/Endpoints/Reports/ReportEndpoints.cs`:","// private const int MaxRangeDays = 366;","// if (t.DayNumber - f.DayNumber >= MaxRangeDays)","// return Results.Problem($\"Range cannot exceed {MaxRangeDays} days.\",","// statusCode: 400, title: \"Report.RangeTooLarge\");","// Note the `>=`. The largest range the server ACCEPTS is therefore a 365-day","// difference between `from` and `to` (a 366-day inclusive window) — not 366.","// Off-by-one here is the difference between testing the boundary and testing a","// point comfortably inside it, so the spec probes BOTH SIDES: the largest","// accepted range must work, and one day more must be refused. A test that only","// asserted the accepted side would still pass if the bound were quietly widened","// to a year and a half.","// ReportsPage enforces NO client-side cap — `from` is bounded only by `to`, and","// `to` only by farm-local today — so the browser genuinely sends these.","import { expect, test } from \"../src/fixtures\";","import { owner } from \"../src/cast\";","import { daysBefore, farmToday } from \"../src/farm\";","import { tEn } from \"../src/i18n\";","/** Mirrors ReportEndpoints.MaxRangeDays. The comparison there is `>=`. */","const MAX_RANGE_DAYS = 366;","/** The largest `to - from` the server accepts. */","const LARGEST_ACCEPTED_SPAN = MAX_RANGE_DAYS - 1;","const REPORT_PATH = /\\/api\\/v1\\/reports\\//;","test.describe(\"#311 report range\", () => {"," test(\"renders at the maximum supported range, and records what it cost\", async ({"," farm,"," }, testInfo) => {"," await signIn(owner());"," const to = farmToday(farm.timeZoneId);"," const from = daysBefore(to, LARGEST_ACCEPTED_SPAN);"," // Collect every report response the screen makes — ReportsPage fans out to"," // production, sales, expenses and profit, so a single waitForResponse would"," // time one of four and call it \"the\" latency."," const timings: Array<{ path: string; status: number; ms: number }> = [];"," page.on(\"response\", (res) => {"," if (!REPORT_PATH.test(res.url())) return;"," const t = res.request().timing();"," timings.push({"," path: new URL(res.url()).pathname,"," status: res.status(),"," ms: Math.round(t.responseEnd),"," });"," await page.goto(\"/reports\");"," await expect(page.getByRole(\"heading\", { name: tEn(\"reports:title\") })).toBeVisible();"," await page.waitForLoadState(\"networkidle\");"," // The initial seven-day fan-out is not evidence that changing the date"," // controls refetched anything. Start the measurement window only after the"," // initial screen has settled, so deleting refetch-on-change leaves this"," // collection empty and fails below."," timings.length = 0;"," // Widen to the maximum. `to` first: `from`'s own `max` attribute is `to`, so"," // setting `from` to a far-past date while `to` is still the default would be"," // clamped by the browser and the spec would quietly test a 7-day window."," //"," // `exact: true` on both: the labels are the single words \"From\" and \"To\","," // and getByLabel substring-matches accessible names — so a bare \"To\" also"," // resolves the theme toggle (\"Switch to night mode\"). Two elements, strict"," // mode violation, and the failure names the toggle rather than the ambiguity."," const startedAt = Date.now();"," await page.getByLabel(tEn(\"reports:toLabel\"), { exact: true }).fill(to);"," await page.getByLabel(tEn(\"reports:fromLabel\"), { exact: true }).fill(from);"," // THE GUARANTEE: the screen renders the report, rather than the bound"," // refusing it. `role=\"alert\"` is ReportsPage's error region."," const production = page"," .getByRole(\"table\")"," .filter({ has: page.getByRole(\"columnheader\", { name: tEn(\"reports:dateHeader\") }) });"," await expect(production).toBeVisible();"," await expect("," page.getByRole(\"alert\"),"," `a ${LARGEST_ACCEPTED_SPAN}-day range was refused, but MaxRangeDays=${MAX_RANGE_DAYS} should accept it`,"," ).toBeHidden();"," const renderedInMs = Date.now() - startedAt;"," // The date fields really do hold the wide range — proof the browser did not"," // clamp what was typed, which would make every assertion above describe a"," // narrower request than the one this spec claims to have made."," await expect(page.getByLabel(tEn(\"reports:fromLabel\"), { exact: true })).toHaveValue(from);"," await expect(page.getByLabel(tEn(\"reports:toLabel\"), { exact: true })).toHaveValue(to);"," const atMaxRange = timings.filter((t) => t.status === 200);"," expect(atMaxRange.length, \"no report endpoint refetched after the maximum range was applied\")"," .toBeGreaterThan(0);"," // Recorded, not asserted. A latency THRESHOLD here would be a flaky test"," // dressed as a performance gate — the number depends on the host, and under"," // the canary (#386) it is supposed to degrade. #311's acceptance item asks"," // for the figure to be captured; the canary is where it gets compared."," const slowest = Math.max(...atMaxRange.map((t) => t.ms));"," const summary = ["," `range: ${from} .. ${to} (${LARGEST_ACCEPTED_SPAN} days, the documented maximum)`,"," `server: ${atMaxRange.map((t) => `${t.path} ${t.ms}ms`).join(\", \")}`,"," `slowest endpoint: ${slowest}ms`,"," `browser: table rendered ${renderedInMs}ms after the range was applied`,"," ].join(\"\\n\");"," await testInfo.attach(\"report-max-range-timing\", {"," body: summary,"," contentType: \"text/plain\","," testInfo.annotations.push({ type: \"#311 max-range timing\", description: summary });"," test(\"refuses one day beyond the documented bound\", async ({ page, signIn, farm }) => {"," // One day wider than the largest accepted span — the first value the"," // server's `>=` rejects."," const from = daysBefore(to, MAX_RANGE_DAYS);"," // The user is TOLD. A silently empty table would be worse than the refusal:"," // it reads as \"no data in that period\" for a farm that has plenty."," `a ${MAX_RANGE_DAYS}-day range was accepted — the documented bound is not being enforced`,"," ).toBeVisible();"," // And the screen offers a way out rather than stranding them."," await expect(page.getByRole(\"button\", { name: tEn(\"common:retry\") })).toBeVisible();","tools/simulation/ui/specs/session-races.spec.ts",[1886],{"_1639":348,"_1640":1887,"_510":1888,"_1643":62},172,[1889,1645,1890,1891,1892,1893,1894,1645,1895,1645,1896,1897,1898,1899,1900,1645,1901,1645,1902,1903,1904,1905,1906,212,1793,1907,1796,212,1908,1909,212,1910,1911,1760,1761,1912,1762,1806,212,1913,1914,1915,1916,1917,1757,212,1918,1919,1920,1921,1757,212,1922,1923,1924,1925,1926,1927,1928,1929,1709,1930,1931,1932,1933,1934,1820,1757,212,1935,1936,1937,1938,212,1939,1940,1941,212,1942,1943,212,1944,1945,1946,1832,1947,1941,1948,1949,212,1950,1951,1952,1953,1954,1955,1956,1957,212,1958,1959,1960,1846,1961,1962,1963,1698,212,1964,1760,1761,1912,1762,1965,1966,1967,1806,212,1919,1920,1921,1757,212,1968,1969,1970,1971,1938,212,1972,1973,1974,1975,1976,1977,1978,1979,212,1948,1980,212,1981,1982,1943,212,1983,1984,1985,1986,1846,1987,1988,1849,1989,1990,1991,212,1992,1993,1994,1995,212,1996,1997,1998,1999,2000,1994,2001,1989,1698,1770],"// #310 acceptance — the two session-generation races, driven in a real browser.","// #310 is CLOSED; this is the end-to-end regression layer for it, not the fix.","// The fix is `sessionGeneration` in `web/src/api/client.ts`: a module-level","// counter that `login()` and `logout()` bump, captured before each await and","// re-checked on settlement, so a superseded completion is discarded","// (`StaleSessionError`) instead of committing tokens.","// ================== WHY A BROWSER IS THE RIGHT INSTRUMENT ==================","// Both races are about what happens to a REAL in-flight fetch when the user does","// something else mid-flight. A unit test can assert the counter's arithmetic; it","// cannot tell you whether the user ends up looking at somebody else's farm. The","// assertions below are therefore all about the resulting SCREEN — which session","// the browser is actually in — not about a counter or a request.","// ================== HOW THE RACE IS MADE DETERMINISTIC ==================","// `page.route` holds the refresh request open for a fixed window, so \"in flight\"","// is a state the spec controls rather than one it hopes to hit. The alternative,","// firing both actions and hoping the interleaving lands, is a spec that passes","// most of the time for the wrong reason — and this is precisely the class of bug","// where \"passed 9 times out of 10\" means \"did not test it 9 times out of 10\".","import { castMember, owner } from \"../src/cast\";","/** How long a held refresh stays in flight. Long enough to act inside, short enough to run. */","const HOLD_MS = 3_000;","test.describe(\"#310 session races\", () => {"," test(\"a logout during an in-flight refresh cannot be resurrected by the late response\", async ({"," nav,"," // Exercise correctness without logout's abort optimisation. If this is"," // removed, the held request is cancelled and the test can pass without the"," // session-generation guard ever rejecting a late successful response."," await page.evaluate(() => {"," AbortController.prototype.abort = () => undefined;"," // Hold every refresh open for HOLD_MS."," await page.route(\"**/api/v1/auth/refresh\", async (route) => {"," await new Promise((r) => setTimeout(r, HOLD_MS));"," await route.continue();"," // Provoke a refresh by injecting one 401 (same one-shot technique as"," // session-refresh.spec.ts). The refresh it triggers is now held open."," let injected = false;"," await page.route(\"**/api/v1/**\", async (route) => {"," const url = route.request().url();"," if (injected || url.includes(\"/auth/\")) {"," await route.fallback();"," return;"," injected = true;"," await route.fulfill({"," status: 401,"," contentType: \"application/problem+json\","," body: JSON.stringify({ title: \"Unauthorized\", status: 401 }),"," await nav.link(\"nav:reports\").click();"," // Do NOT await the refresh here — the whole point is to act while it is"," // still outstanding."," await page.waitForRequest((r) => r.url().includes(\"/api/v1/auth/refresh\"));"," // The user signs out mid-flight."," await nav.signOut.click();"," await expect(page).toHaveURL(/\\/login/);"," // Now let the held refresh land, and then some."," await page.waitForTimeout(HOLD_MS + 2_000);"," // THE GUARANTEE, in three independent forms — because \"we are on /login\" on"," // its own would be satisfied by a router that moved while the session"," // quietly survived underneath it."," // 1. Still on the login screen, not swept back into the app."," await expect(page.getByRole(\"navigation\", { name: tEn(\"nav:primaryNavAriaLabel\") }))"," .toBeHidden();"," // 2. The credential itself is gone. If the late refresh had committed, its"," // rotated cookie would be sitting here ready to restore the session."," const cookies = await page.context().cookies();"," const refreshCookie = cookies.find((c) => c.name === \"cluckwork_rt\" && c.value !== \"\");"," expect("," refreshCookie,"," \"a live refresh cookie survived the logout — the late response resurrected the session\","," ).toBeUndefined();"," // 3. The strongest form: ask for a protected screen and be refused. This is"," // what an attacker with the abandoned tab would actually try."," await page.goto(\"/\");"," page,"," \"a protected route was served after logout — the session outlived the sign-out\","," ).toHaveURL(/\\/login/);"," test(\"an explicit login beats a pending bootstrap refresh, and the newer login wins\", async ({"," // Establish a real Owner session first, so the browser is holding a VALID"," // refresh cookie — the bootstrap refresh this race needs must be one that"," // would genuinely succeed. A race against a doomed request proves nothing."," // Land on /login with that cookie present: AuthContext's bootstrap fires"," // `restoreSession()` immediately, and it is now held open. /login is outside"," // ProtectedRoute, so the form is interactive while that is pending."," await page.goto(\"/login\");"," // A DIFFERENT person signs in on the same browser while the old session's"," // refresh is still outstanding. Different persona on purpose: the two"," // sessions are then distinguishable on screen, so the assertion can name"," // which one won instead of inferring it."," const sales = castMember(\"Sales\");"," await page.getByLabel(tEn(\"auth:email\")).fill(sales.email);"," await page.getByLabel(tEn(\"auth:password\")).fill(sales.password);"," await page.getByRole(\"button\", { name: tEn(\"auth:signIn\") }).click();"," .toBeVisible();"," // Give the superseded bootstrap refresh enough time either to be aborted by"," // the newer login or (if cancellation loses the race) to settle stale."," // THE GUARANTEE: this is the Sales session, and the Owner's has not been"," // restored underneath it. Asserted through the nav's role gates, which"," // differ between the two personas — Sales is not an admin, so the Setup"," // group is absent, and Sales cannot produce, so the Production group is too."," nav.link(\"nav:audit\"),"," \"an admin destination appeared — the late Owner refresh overwrote the Sales login\","," await expect(nav.link(\"nav:users\")).toBeHidden();"," await expect(nav.link(\"nav:expenses\")).toBeHidden();"," await expect(nav.link(\"nav:dailyEntry\")).toBeHidden();"," // Control: the Sales-shaped destinations ARE there, so the assertions above"," // are proving \"the Sales session won\" rather than \"the sidebar is empty\"."," await expect(nav.link(\"nav:sales\")).toBeVisible();"," await expect(nav.link(\"nav:customers\")).toBeVisible();"," // The in-memory token is only half the session. A stale refresh response"," // also carries Set-Cookie, which the browser applies before client code can"," // reject the response. Reload forces bootstrap to prove the durable cookie"," // still belongs to Sales rather than the superseded Owner."," await page.reload();"," await expect(nav.link(\"nav:audit\")).toBeHidden();","web/src/api/client.test.ts",[2004],{"_1639":348,"_1640":2005,"_510":2006,"_1643":62},1239,[2007,2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020,2021,2022,2023,2024,2025,2026,2027,212,2028,2029,2030,2031,2032,212,2033,2034,212,2035,2036,2037,2038,1698,1673,212,2039,2040,2041,1673,212,2042,212,2043,2044,1673,212,2045,2046,1673,212,2047,2048,1673,212,2049,2050,2051,2052,2053,2054,1673,212,2055,2056,2057,212,2058,2059,2060,212,2061,2062,2063,2064,2065,2066,2067,2068,1770,212,2069,2070,2071,2072,2073,1770,212,2074,2075,2076,2077,2078,2079,2080,2081,2082,1698,212,2083,2084,2085,1698,1770,212,2086,2087,2088,2089,2090,2091,2092,2093,2094,1698,212,2095,2088,2096,2097,2098,2099,2100,2101,1698,1770,212,2102,2103,2104,2105,2106,212,2107,2108,2109,2110,1698,212,2111,2112,2113,2114,2115,2116,2110,1698,212,2117,2096,2118,2119,2109,2120,2121,2122,212,2123,2124,1698,212,2125,2126,2127,2128,2129,1698,1770,212,2130,2131,2132,2133,2134,1698,212,2135,2136,2137,2138,2139,2140,2141,2142,1698,212,2143,2144,2145,1698,212,2146,2147,2148,2136,2149,2150,2151,2152,2153,2154,2155,2156,2138,2139,2140,2157,2158,2159,2160,2161,2138,1698,212,2162,2136,2149,2150,2163,2164,2154,2155,2156,2138,2139,2140,2165,2166,1698,212,2167,2168,2136,2169,2138,2139,2140,2142,1698,1770,212,2170,2171,2096,2172,2173,2174,212,2099,2100,2175,212,2176,2177,2178,2179,2180,2181,2182,2183,2184,2185,2186,2187,2188,1698,212,2189,2096,2190,2173,2191,212,2192,2176,2193,2194,2195,2196,2197,2198,2199,2200,2201,1698,212,2202,2203,2204,2205,2206,2207,2208,2209,2210,1709,2211,2212,1757,212,2213,2214,2215,2216,212,2217,2218,2219,2187,1698,212,2220,2096,2221,2222,2223,2224,2225,2226,212,2227,2228,2229,2230,1698,1770,212,2231,2232,2096,2233,2234,212,2139,2140,2235,2236,2237,2091,2238,1698,212,2239,2096,2172,2240,2241,212,2139,2235,2242,2243,2093,2091,2238,1698,212,2244,2096,2172,2245,212,2139,2140,2235,2091,2238,1698,212,2246,2247,2248,2249,2096,2233,2250,212,2139,2140,2251,2252,2253,1698,212,2254,2096,2255,2256,2257,212,2258,2259,2260,2096,2261,2240,2262,2263,2264,1698,1770,212,2265,2266,2267,2268,2269,1698,212,2270,2271,2272,2273,2274,2275,2276,2277,2278,1698,212,2279,2267,2280,2281,1698,212,2282,2084,2283,2079,2284,2285,2286,1698,212,2287,2084,2283,2288,1698,212,2289,2290,2291,2292,2267,2293,2294,1698,212,2295,2267,2268,2296,1698,212,2297,2084,2298,2299,1698,212,2300,2301,2302,212,2303,212,2079,2304,2285,2305,2306,2307,2308,2309,2310,1698,212,2311,2301,2312,2269,1698,212,2313,2314,2315,2096,2316,2317,2318,212,2303,212,2319,2320,2321,2322,2323,2324,2325,1698,212,2326,2084,2327,2079,2328,2329,2330,1698,1770,212,2331,2332,2136,2333,2334,2335,2336,2138,2337,2338,2339,2340,1698,212,2341,2115,2342,2343,1698,212,2344,2096,2345,2173,2346,212,2347,2348,2175,2349,1698,212,2350,2088,2351,2352,2091,2093,2353,1698,1770,212,2354,2355,2088,2356,2357,2358,2359,2187,2079,2360,2361,1698,212,2362,2363,2084,2364,2365,2079,2366,2367,2368,2369,2238,1698,212,2370,2371,2372,2373,2374,2375,2376,2377,2378,2084,212,2364,212,2379,2238,1698,212,2380,2381,2382,2383,2088,2084,212,2364,212,2365,2384,1698,212,2385,2386,2387,2238,1698,212,2388,2088,2084,2389,2365,2390,1698,212,2391,2392,2393,2394,2395,212,2396,2397,2238,212,2398,2399,1698,212,2400,2401,2402,2395,2403,2389,2238,1698,212,2404,2405,2406,2407,2408,2409,2410,2377,2378,2403,212,2389,212,2238,2411,2412,2413,2414,1698,1770,212,2415,2416,2417,2418,2419,2420,2421,2422,2423,2424,212,2425,212,2426,2427,2428,2429,2430,2431,2432,2433,212,2434,2435,2436,2437,1698,212,2438,2439,212,2440,2441,1698,1770,212,2442,2443,2444,2445,2446,2447,2448,212,2449,212,2426,2450,2451,2452,2453,2454,1698,212,2455,2136,2456,212,2457,2140,2458,1698,212,2459,2460,2461,2462,2463,2464,2465,2466,2456,212,2467,212,2365,2468,2469,2470,2471,2472,2473,1698,212,2474,2475,2476,2477,2096,2478,2222,2479,212,2480,212,2454,2481,2093,1698,212,2482,2447,2483,2441,2473,1698,1770,212,2484,2485,2486,2487,2488,2489,2490,2491,2492,2493,2494,2495,2496,1757,2497,1758,212,2498,2499,2500,2501,1758,212,2502,2503,2504,212,2505,2506,2507,212,2508,2509,2510,2138,212,2511,2512,212,2513,2469,212,2514,2515,212,2217,2516,2093,2517,2518,2519,2188,1698,212,2520,2503,2504,212,2521,2522,2523,212,2088,2509,2510,2138,212,2524,2525,212,2217,2093,1698,212,2526,2527,2528,2529,2096,2530,2531,212,2532,2533,212,2534,2264,2188,1698,212,2535,2536,1687,2537,2538,2539,2540,2541,2542,2543,2544,2545,2546,2547,212,2548,2549,212,2550,2551,2552,2553,2554,2555,1697,1698,212,2556,2557,2088,2509,2510,2138,212,2558,212,2217,2559,2188,1698,1770,212,2560,2561,2562,2563,2564,2088,2565,212,2533,212,2566,2187,1698,212,2567,2088,2568,2569,2570,2571,2572,1757,212,2573,2512,2093,212,2574,212,2575,2576,212,2577,2578,2579,2580,2581,2582,2583,2584,1698,212,2585,2088,2586,212,2357,212,2587,2187,1698,212,2588,2088,2568,2569,2570,2589,2572,1757,212,2590,2512,212,2591,2592,2187,212,2593,2594,212,2595,2596,1698,212,2597,2088,2598,2599,2206,2600,2601,2602,2603,2604,2605,1709,2589,2572,1757,212,2606,2512,2357,212,2607,2608,2592,1698,212,2609,2610,2611,2612,2088,2568,2569,2570,2613,2614,2572,1757,212,2615,2616,2617,2512,212,2618,2619,212,2620,2621,212,2622,2623,2624,2625,2626,2627,2628,1698,212,2629,2630,2631,2632,2633,2634,2635,2569,2636,2637,2572,1757,212,2638,2639,2512,212,2364,2238,212,2640,2641,212,2642,1698,212,2643,2635,2417,212,2644,212,2436,1698,212,2645,2088,2646,2569,2647,2571,2572,1757,212,2648,2512,212,2649,212,2650,2651,2652,212,2238,2473,2653,2654,2584,1698,212,2655,2656,2657,2658,2659,2088,2568,2569,2570,2571,2572,1757,212,2660,2512,212,2364,2661,212,2621,2662,2663,1698,212,2664,2665,2666,2667,2568,2569,2668,2669,2670,2570,2589,2572,1757,212,2671,2512,212,2357,2672,212,2673,1698,212,2674,2568,2569,2670,2570,2571,2572,1757,212,2660,2512,212,2364,2661,212,2621,2662,2663,1698,212,2675,2676,2677,2568,2569,2678,2679,2680,2570,2589,2572,1757,212,2681,2512,212,2682,2672,212,2683,2684,1698,212,2685,2568,2569,2680,2570,2571,2572,1757,212,2686,2512,212,2364,2661,212,2687,2662,2663,1698,212,2688,2689,2690,2691,2088,2568,2569,2570,2589,2571,2572,1757,212,2606,2512,212,2682,2692,2693,212,2694,2695,1698,1770],"import { describe, it, expect, vi, beforeEach, afterEach } from \"vitest\";","import {"," apiGet,"," apiPost,"," apiPut,"," apiPutBytes,"," apiDelete,"," apiFetch,"," apiGetBlob,"," login,"," logout,"," restoreSession,"," changePassword,"," stepUp,"," STEP_UP_HEADER,"," ApiError,"," setOnUnauthenticated,"," setOnTokensChanged,"," getLastTraceId,","} from \"./client\";","import { getAccessToken, setAccessToken, clearAccessToken } from \"../auth/tokenStore\";","// The fetch client owns the SPA's session lifecycle: bearer-attach, one","// transparent refresh-and-retry on 401, single-flight refresh, and fail-closed","// teardown. Since #145 the refresh token rides an HttpOnly cookie (the browser","// attaches it), so refresh/logout send NO refresh body — only the CSRF header.","// All exercised here against a stubbed global fetch — no network.","const FUTURE = \"2099-01-01T00:00:00Z\";","const CSRF = \"X-Cluckwork-Auth\";","function jsonResponse(body: unknown, status = 200): Response {"," return new Response(JSON.stringify(body), {"," status,"," headers: { \"Content-Type\": \"application/json\" },","// The access-token body login/refresh now return (no refresh token).","function accessResponse(accessToken: string, status = 200): Response {"," return jsonResponse({ accessToken, accessTokenExpiry: FUTURE }, status);","type Call = [string, RequestInit];","function authOf(call: Call): string | null {"," return new Headers(call[1]?.headers ?? {}).get(\"Authorization\");","function headerOf(call: Call, name: string): string | null {"," return new Headers(call[1]?.headers ?? {}).get(name);","function callsTo(mock: ReturnType, suffix: string): Call[] {"," return (mock.mock.calls as Call[]).filter(([url]) => url.endsWith(suffix));","// A promise whose resolution the test controls — lets us hold a refresh open","// until both concurrent callers have provably parked on it (no timing guesses).","function deferred() {"," let resolve!: (v: T) => void;"," const promise = new Promise((r) => (resolve = r));"," return { promise, resolve };","// Runs pending microtasks AND the macrotask queue once, so every in-flight","// fetch resolution + catch handler has settled before we assert / release.","const drain = () => new Promise((r) => setTimeout(r, 0));","let fetchMock: ReturnType;","let onUnauth: ReturnType void>>;","let onTokens: ReturnType void>>;","beforeEach(() => {"," fetchMock = vi.fn();"," vi.stubGlobal(\"fetch\", fetchMock);"," onUnauth = vi.fn();"," onTokens = vi.fn();"," setOnUnauthenticated(onUnauth);"," setOnTokensChanged(onTokens);"," setAccessToken(\"at1\");","afterEach(() => {"," vi.unstubAllGlobals();"," setOnUnauthenticated(null);"," setOnTokensChanged(null);"," clearAccessToken();","describe(\"apiFetch — happy path\", () => {"," it(\"attaches the bearer token and returns parsed JSON\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ value: 42 }));"," const body = await apiGet<{ value: number }>(\"/stock\");"," expect(body).toEqual({ value: 42 });"," const [url, init] = fetchMock.mock.calls[0] as Call;"," expect(url).toBe(\"/api/v1/stock\");"," expect(new Headers(init.headers).get(\"Authorization\")).toBe(\"Bearer at1\");"," expect(onTokens).not.toHaveBeenCalled(); // a plain GET must not touch the token"," it(\"returns undefined for 204 No Content\", async () => {"," fetchMock.mockResolvedValueOnce(new Response(null, { status: 204 }));"," await expect(apiFetch(\"/thing\", { method: \"DELETE\" })).resolves.toBeUndefined();","describe(\"apiFetch — no in-memory token\", () => {"," it(\"attempts one silent refresh; on failure throws 401 and fires onUnauthenticated\", async () => {"," clearAccessToken();"," fetchMock.mockResolvedValueOnce(jsonResponse({ title: \"no cookie\" }, 401)); // the bootstrap refresh"," await expect(apiGet(\"/stock\")).rejects.toMatchObject({ status: 401 });"," expect(onUnauth).toHaveBeenCalledTimes(1);"," // exactly one fetch — the refresh attempt — and it targeted /auth/refresh"," expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(1);"," expect(callsTo(fetchMock, \"/stock\")).toHaveLength(0);"," it(\"uses the refreshed token when the silent refresh succeeds\", async () => {"," fetchMock"," .mockResolvedValueOnce(accessResponse(\"at2\")) // silent refresh"," .mockResolvedValueOnce(jsonResponse({ ok: true })); // the request, now authed"," const body = await apiGet<{ ok: boolean }>(\"/stock\");"," expect(body).toEqual({ ok: true });"," expect(authOf(callsTo(fetchMock, \"/stock\")[0])).toBe(\"Bearer at2\");","// #217 — every request mints a W3C traceparent so a browser action correlates","// with the API's request log and spans (#214). The client remembers the last","// trace id so a crash report can join the failed screen's server-side story.","describe(\"traceparent correlation\", () => {"," const TRACEPARENT = /^00-[0-9a-f]{32}-[0-9a-f]{16}-01$/;"," it(\"attaches a spec-shaped traceparent header to every JSON request\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ ok: true }));"," await apiGet(\"/stock\");"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"traceparent\")).toMatch(TRACEPARENT);"," it(\"attaches a traceparent to blob downloads too\", async () => {"," // String body, not `new Blob(...)`: under vitest's jsdom env `Blob` is"," // jsdom's (no .stream()) while `Response` is undici's, and whether that"," // mix works depends on the Node version — it broke on CI's Node."," fetchMock.mockResolvedValueOnce(new Response(\"x\", { status: 200 }));"," await apiGetBlob(\"/export/eggs.csv\");"," it(\"mints a fresh trace id per request and exposes the last one\", async () => {"," .mockResolvedValueOnce(jsonResponse({ ok: true }))"," .mockResolvedValueOnce(jsonResponse({ ok: true }));"," const first = headerOf(fetchMock.mock.calls[0] as Call, \"traceparent\")!;"," await apiGet(\"/flocks\");"," const second = headerOf(fetchMock.mock.calls[1] as Call, \"traceparent\")!;"," expect(second).not.toBe(first);"," expect(getLastTraceId()).toBe(second.split(\"-\")[1]);"," it(\"remembers the trace id even when the request fails — that is the one worth reporting\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ title: \"boom\" }, 500));"," await expect(apiGet(\"/stock\")).rejects.toBeInstanceOf(ApiError);"," const sent = headerOf(fetchMock.mock.calls[0] as Call, \"traceparent\")!;"," expect(getLastTraceId()).toBe(sent.split(\"-\")[1]);","describe(\"apiFetch — error mapping\", () => {"," it(\"passes a non-401 error through without attempting a refresh\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ title: \"Bad\", detail: \"nope\" }, 400));"," await expect(apiGet(\"/stock\")).rejects.toMatchObject({ status: 400, title: \"Bad\" });"," expect(fetchMock).toHaveBeenCalledTimes(1); // no refresh on non-401"," it(\"flattens a ValidationProblem errors map into the message\", async () => {"," fetchMock.mockResolvedValueOnce("," jsonResponse({ title: \"Validation failed\", errors: { name: [\"required\"], qty: [\"too big\", \"nan\"] } }, 400),"," );"," const err = await apiGet(\"/stock\").catch((e: unknown) => e);"," expect(err).toBeInstanceOf(ApiError);"," expect((err as ApiError).title).toBe(\"Validation failed\");"," expect((err as ApiError).message).toBe(\"required too big nan\");"," it(\"keeps status text when the error body is not JSON\", async () => {"," fetchMock.mockResolvedValueOnce(new Response(\"502\", { status: 502, statusText: \"Bad Gateway\" }));"," await expect(apiGet(\"/stock\")).rejects.toMatchObject({ status: 502, title: \"Bad Gateway\" });"," it(\"maps a known errorCode to its catalog message; an uncoded field (omitted from errorCodes, the real API shape) keeps English\", async () => {"," // The real API OMITS a wholly-uncoded field from errorCodes (ValidationResponse.cs),"," // so `name` has no errorCodes entry at all — it must keep its English message."," jsonResponse("," {"," title: \"Validation\","," errors: { language: [\"Language must be a 2–8 letter code.\"], name: [\"required\"] },"," errorCodes: { language: [\"Me.Language.Format\"] },"," },"," 400,"," ),"," // Exact match (not just toContain): the catalog string adds \", for example"," // 'en'.\" — absent from the server's plain English — so this fails pre-fix"," // (plain flatten yields \"Language must be a 2–8 letter code. required\")."," expect((err as ApiError).message).toBe("," \"Language must be a 2–8 letter code, for example 'en'. required\","," it(\"falls back to the English message for an UNKNOWN code (no catalog key)\", async () => {"," errors: { language: [\"some english message\"] },"," errorCodes: { language: [\"Not.A.Real.Code\"] },"," // defaultValue is the server English message → unknown code degrades to it."," expect((err as ApiError).message).toBe(\"some english message\");"," it(\"keeps the plain flattened English message when there are no errorCodes\", async () => {"," // The pre-#182 contract, unchanged."," jsonResponse({ errors: { name: [\"required\"], qty: [\"too big\", \"nan\"] } }, 400),","describe(\"apiFetch — transparent refresh\", () => {"," it(\"on 401, refreshes once and retries the original request with the new token\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // original"," .mockResolvedValueOnce(accessResponse(\"at2\")) // refresh"," .mockResolvedValueOnce(jsonResponse({ ok: true })); // retry"," expect(fetchMock).toHaveBeenCalledTimes(3);"," const calls = fetchMock.mock.calls as Call[];"," // Refresh request contract (#145): POST /auth/refresh with NO body and NO"," // bearer — it authenticates by the HttpOnly cookie — plus the CSRF header."," expect(calls[1][0]).toBe(\"/api/v1/auth/refresh\");"," expect(calls[1][1].method).toBe(\"POST\");"," expect(calls[1][1].body).toBeUndefined();"," expect(authOf(calls[1])).toBeNull();"," expect(headerOf(calls[1], CSRF)).toBe(\"1\");"," // Retry hits the same URL with the refreshed token."," expect(calls[2][0]).toBe(\"/api/v1/stock\");"," expect(authOf(calls[2])).toBe(\"Bearer at2\");"," expect(onTokens).toHaveBeenCalledTimes(1);"," expect(getAccessToken()).toBe(\"at2\");"," it(\"replays a write across a refresh with the SAME idempotency key and body\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // original POST"," .mockResolvedValueOnce(jsonResponse({ id: \"1\" })); // retry POST"," await apiPost(\"/customers\", { name: \"x\" }, \"fixed-key\");"," const original = calls[0];"," const retry = calls[2];"," expect(original[1].method).toBe(\"POST\");"," expect(retry[1].method).toBe(\"POST\");"," expect(retry[1].body).toBe(original[1].body); // same payload, not re-serialized differently"," // Same idempotency key → the server dedupes the replay instead of double-writing."," expect(headerOf(retry, \"Idempotency-Key\")).toBe(\"fixed-key\");"," expect(headerOf(original, \"Idempotency-Key\")).toBe(\"fixed-key\");"," expect(authOf(retry)).toBe(\"Bearer at2\"); // only the bearer changed"," it(\"shares a single in-flight refresh across concurrent 401s (single-flight)\", async () => {"," const gate = deferred();"," let refreshes = 0;"," fetchMock.mockImplementation(async (url: string, init: RequestInit) => {"," if (url.endsWith(\"/auth/refresh\")) {"," refreshes += 1;"," if (refreshes > 1) throw new Error(\"a second refresh must not start while one is in flight\");"," await gate.promise; // hold open until both 401s have parked on this refresh"," return accessResponse(\"at2\");"," const auth = new Headers(init.headers).get(\"Authorization\");"," return auth === \"Bearer at1\" ? jsonResponse({ title: \"expired\" }, 401) : jsonResponse({ ok: true });"," const inflight = Promise.all([apiGet<{ ok: boolean }>(\"/a\"), apiGet<{ ok: boolean }>(\"/b\")]);"," await drain(); // both 401s land, both callers park on the one refresh"," gate.resolve();"," const [a, b] = await inflight;"," expect(a).toEqual({ ok: true });"," expect(b).toEqual({ ok: true });"," expect(refreshes).toBe(1); // exactly one refresh, and the guard proves no second one started"," it(\"refreshes again on a later 401 — the single-flight latch is cleared on success\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // cycle 1 original"," .mockResolvedValueOnce(accessResponse(\"at2\"))"," .mockResolvedValueOnce(jsonResponse({ ok: 1 })) // cycle 1 retry"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // cycle 2 original"," .mockResolvedValueOnce(accessResponse(\"at3\"))"," .mockResolvedValueOnce(jsonResponse({ ok: 2 })); // cycle 2 retry"," await apiGet(\"/a\");"," await apiGet(\"/b\");"," expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(2); // a stuck latch would only refresh once"," expect(getAccessToken()).toBe(\"at3\");","describe(\"apiFetch — refresh failure is fail-closed and non-recursive\", () => {"," it(\"clears the session and rethrows the ORIGINAL error when refresh 401s\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // original 401"," .mockResolvedValueOnce(jsonResponse({ title: \"bad refresh token\" }, 401)); // refresh 401"," expect((err as ApiError).status).toBe(401);"," expect((err as ApiError).title).toBe(\"expired\"); // original, not the refresh error"," expect(fetchMock).toHaveBeenCalledTimes(2); // no retry after refresh failed"," expect(getAccessToken()).toBeNull();"," it(\"does NOT retry-refresh when the retry itself 401s (one transparent refresh only)\", async () => {"," .mockResolvedValueOnce(accessResponse(\"at2\")) // refresh ok"," .mockResolvedValueOnce(jsonResponse({ title: \"still 401\" }, 401)); // retry 401"," expect((err as ApiError).title).toBe(\"expired\"); // original surfaced, no recursion"," expect(fetchMock).toHaveBeenCalledTimes(3); // original + one refresh + one retry, then stop"," it(\"surfaces the original 401 when the refresh network call rejects\", async () => {"," .mockRejectedValueOnce(new TypeError(\"network down\")); // refresh fetch rejects"," it(\"does NOT clear the session when refresh is rate-limited (429) — keeps the token and rethrows the 429\", async () => {"," // A 429 during transparent refresh is transient throttling (#143), not a"," // dead session. Wiping the token here would force a re-login through the same"," // rate limit; instead the token is kept and the 429 surfaces."," .mockResolvedValueOnce(jsonResponse({ title: \"Too many requests\" }, 429)); // refresh 429"," expect((err as ApiError).status).toBe(429); // the 429, not the original 401"," expect(onUnauth).not.toHaveBeenCalled(); // session preserved"," expect(getAccessToken()).toBe(\"at1\"); // token untouched"," it(\"recovers on the next request after a failed refresh — the latch is cleared on failure too\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // req 1 original"," .mockResolvedValueOnce(jsonResponse({ title: \"bad refresh\" }, 401)); // req 1 refresh fails"," await apiGet(\"/a\").catch(() => {});"," // Session was torn down; a fresh login reseeds the token and the next 401 must"," // be able to start a brand-new refresh (not reuse a rejected latch)."," setAccessToken(\"at1b\");"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // req 2 original"," .mockResolvedValueOnce(jsonResponse({ ok: true })); // req 2 retry"," await expect(apiGet<{ ok: boolean }>(\"/b\")).resolves.toEqual({ ok: true });"," expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(2);","describe(\"write idempotency\", () => {"," it(\"apiPost generates an Idempotency-Key when none is given\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ id: \"1\" }));"," await apiPost(\"/customers\", { name: \"x\" });"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Idempotency-Key\")).toBeTruthy();"," it(\"generates a DISTINCT key per call (so two writes are not deduped as one)\", async () => {"," fetchMock.mockImplementation(() => Promise.resolve(jsonResponse({ id: \"1\" }))); // fresh body each call"," await apiPost(\"/customers\", { name: \"a\" });"," await apiPost(\"/customers\", { name: \"b\" });"," const k0 = headerOf(fetchMock.mock.calls[0] as Call, \"Idempotency-Key\");"," const k1 = headerOf(fetchMock.mock.calls[1] as Call, \"Idempotency-Key\");"," expect(k0).toBeTruthy();"," expect(k1).toBeTruthy();"," expect(k0).not.toBe(k1);"," it(\"apiPost honours an explicit Idempotency-Key (retry-safe replay)\", async () => {"," await apiPost(\"/customers\", { name: \"x\" }, \"my-fixed-key\");"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Idempotency-Key\")).toBe(\"my-fixed-key\");"," it(\"apiPut sends method PUT with an Idempotency-Key\", async () => {"," await apiPut(\"/egg-grades/1\", { name: \"A\" }, \"put-key\");"," expect(url).toBe(\"/api/v1/egg-grades/1\");"," expect(init.method).toBe(\"PUT\");"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Idempotency-Key\")).toBe(\"put-key\");"," it(\"apiPut declares JSON — the default no caller has to state\", async () => {"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Content-Type\")).toBe(\"application/json\");"," // #308 — apiPost/apiPut's optional 4th param is how CreateUser/SetUserPassword"," // attach the step-up grant. Both sides of the boundary: present when a caller"," // passes one, absent otherwise (every other write in the app)."," it(\"apiPost attaches an extra header (e.g. the step-up grant) when given one\", async () => {"," await apiPost(\"/users\", { role: \"Admin\" }, \"key\", { [STEP_UP_HEADER]: \"grant-abc\" });"," expect(headerOf(fetchMock.mock.calls[0] as Call, STEP_UP_HEADER)).toBe(\"grant-abc\");"," it(\"apiPost carries no step-up header when none is given (every ordinary write)\", async () => {"," expect(headerOf(fetchMock.mock.calls[0] as Call, STEP_UP_HEADER)).toBeNull();"," it(\"apiPut attaches an extra header (e.g. the step-up grant) when given one\", async () => {"," await apiPut(\"/users/1/password\", { newPassword: \"x\" }, \"key\", { [STEP_UP_HEADER]: \"grant-def\" });"," expect(headerOf(fetchMock.mock.calls[0] as Call, STEP_UP_HEADER)).toBe(\"grant-def\");"," it(\"apiPutBytes sends the body as-is under its own content type (#123 logo upload)\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ contentHash: \"abc\" }));"," const bytes = new Blob([new Uint8Array([1, 2, 3])], { type: \"image/png\" });"," await apiPutBytes(\"/account/logo\", bytes, \"image/png\", \"logo-key\");"," expect(url).toBe(\"/api/v1/account/logo\");"," // The caller's type survives: raw() must not overwrite it with JSON, or the"," // body would go up declared as something it is not."," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Content-Type\")).toBe(\"image/png\");"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Idempotency-Key\")).toBe(\"logo-key\");"," // Not JSON-encoded — the Blob itself is the body."," expect(init.body).toBe(bytes);"," it(\"apiPutBytes generates a key when none is given\", async () => {"," await apiPutBytes(\"/account/logo\", new Blob([\"x\"]), \"application/octet-stream\");"," it(\"apiPutBytes retries the SAME bytes after a 401 refresh\", async () => {"," setAccessToken(\"stale\");"," const bytes = new Blob([\"png\"], { type: \"image/png\" });"," .mockResolvedValueOnce(new Response(null, { status: 401 })) // the write"," .mockResolvedValueOnce(accessResponse(\"fresh\")) // the refresh"," .mockResolvedValueOnce(jsonResponse({ contentHash: \"abc\" })); // the retry"," const writes = callsTo(fetchMock, \"/account/logo\");"," expect(writes).toHaveLength(2);"," // A body consumed by the first attempt would make the retry upload nothing;"," // a Blob can be read again, which is why the retry is safe at all."," expect(writes[1][1].body).toBe(bytes);"," expect(authOf(writes[1])).toBe(\"Bearer fresh\");"," expect(headerOf(writes[1], \"Idempotency-Key\")).toBe(\"logo-key\");"," it(\"apiDelete sends method DELETE with an Idempotency-Key\", async () => {"," await apiDelete(\"/sales/1/items/2\", \"del-key\");"," expect(url).toBe(\"/api/v1/sales/1/items/2\");"," expect(init.method).toBe(\"DELETE\");"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Idempotency-Key\")).toBe(\"del-key\");","describe(\"apiGetBlob — file download\", () => {"," it(\"returns the blob and parses the Content-Disposition filename\", async () => {"," new Response(\"col1,col2\\n\", {"," status: 200,"," headers: { \"Content-Type\": \"text/csv\", \"Content-Disposition\": 'attachment; filename=\"export.csv\"' },"," }),"," const { blob, filename } = await apiGetBlob(\"/export/all\");"," expect(filename).toBe(\"export.csv\");"," expect(blob.size).toBe(10); // \"col1,col2\\n\" — body flowed through unread"," expect(authOf(fetchMock.mock.calls[0] as Call)).toBe(\"Bearer at1\");"," it(\"has null filename when no Content-Disposition is present\", async () => {"," const { filename } = await apiGetBlob(\"/export/flocks\");"," expect(filename).toBeNull();"," it(\"transparently refreshes on 401 and retries the download with the new token\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // original blob request"," .mockResolvedValueOnce(new Response(\"data\", { status: 200 })); // retry"," const { blob } = await apiGetBlob(\"/export/all\");"," expect(blob.size).toBe(4); // \"data\""," expect(authOf(fetchMock.mock.calls[2] as Call)).toBe(\"Bearer at2\");"," it(\"with no session, attempts one refresh, then throws 401 + fires onUnauthenticated\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ title: \"no cookie\" }, 401)); // silent refresh"," await expect(apiGetBlob(\"/export/all\")).rejects.toMatchObject({ status: 401 });"," expect(callsTo(fetchMock, \"/export/all\")).toHaveLength(0);","describe(\"auth endpoints\", () => {"," it(\"login stores the access token (memory only) and notifies listeners\", async () => {"," fetchMock.mockResolvedValueOnce(accessResponse(\"atL\"));"," await login({ email: \"a@b.co\", password: \"pw\" });"," expect(getAccessToken()).toBe(\"atL\");"," expect(localStorage.length).toBe(0); // never persisted"," expect(url).toBe(\"/api/v1/auth/login\");"," expect(new Headers(init.headers).get(\"Authorization\")).toBeNull(); // login is unauthenticated"," it(\"logout revokes cookie-authenticated (CSRF header, no body), then clears the token\", async () => {"," setAccessToken(\"at-logout\");"," await logout();"," expect(fetchMock).toHaveBeenCalledTimes(1);"," expect(url).toBe(\"/api/v1/auth/logout\");"," expect(init.method).toBe(\"POST\");"," expect(init.body).toBeUndefined(); // refresh token is in the cookie, not the body"," expect(headerOf(fetchMock.mock.calls[0] as Call, CSRF)).toBe(\"1\");"," // #336 — the refresh cookie is per-ORIGIN (one per browser, last login wins)"," // while this token store is per-TAB, so the cookie can belong to a DIFFERENT"," // user than the one logging out. The bearer is what tells the server who"," // actually clicked logout, so their step-up grants are the ones revoked;"," // without it the server revokes the cookie owner's and leaves this user's"," // alive. It must be read BEFORE the synchronous clear, or it is always null."," it(\"logout sends this tab's bearer, captured before the token is cleared\", async () => {"," const token = `tok-${crypto.randomUUID()}`;"," setAccessToken(token);"," expect(authOf(fetchMock.mock.calls[0] as Call)).toBe(`Bearer ${token}`);"," // …but it stays OPTIONAL. The endpoint is AllowAnonymous, so a tab with no"," // token (or an expired one already dropped) must still fire the request and"," // end the session off the cookie alone — never send \"Bearer null\"."," it(\"logout omits the bearer entirely when this tab holds no access token\", async () => {"," expect(authOf(fetchMock.mock.calls[0] as Call)).toBeNull();"," it(\"logout clears the local token even when the server revoke fails\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ title: \"revoke failed\" }, 500));"," await expect(logout()).resolves.toBeUndefined(); // best-effort, does not throw"," it(\"logout always calls the endpoint — a cookie may exist even with no in-memory token\", async () => {"," await expect(logout()).resolves.toBeUndefined();"," expect((fetchMock.mock.calls[0] as Call)[0]).toBe(\"/api/v1/auth/logout\");"," // #310 — local invalidation must win immediately, independent of the network."," it(\"clears in-memory auth state synchronously, before the server call settles\", async () => {"," const gate = deferred();"," fetchMock.mockReturnValueOnce(gate.promise); // server call hangs"," setAccessToken(\"live-token\");"," const done = logout();"," await Promise.resolve(); // let logout()'s synchronous prefix run; network still pending"," gate.resolve(new Response(null, { status: 204 }));"," await done;"," // #310 — a full network rejection (not just a non-2xx response) must behave"," // the same as the existing 500 case above: local state wins regardless."," it(\"clears the local token even when the server call rejects outright (network error)\", async () => {"," fetchMock.mockRejectedValueOnce(new TypeError(\"network down\"));"," // #310 — the revoke failure must be observable (not silently swallowed) but"," // must never expose the token that was already cleared."," it(\"reports a server-side revoke failure without leaking the token\", async () => {"," const consoleErr = vi.spyOn(console, \"error\").mockImplementation(() => {});"," // Generated, not a literal: nothing secret-shaped belongs in source"," // (GitGuardian scans test files too), and a unique value makes the"," // \"did not leak\" assertion exact rather than coincidental."," expect(consoleErr).toHaveBeenCalledTimes(1);"," const logged = consoleErr.mock.calls[0].map((a) => String(a)).join(\" \");"," expect(logged).not.toContain(token);"," consoleErr.mockRestore();","describe(\"changePassword (#165)\", () => {"," it(\"posts to /auth/change-password and swaps in the returned access token\", async () => {"," fetchMock.mockResolvedValueOnce(accessResponse(\"at-after-change\"));"," // Runtime-generated so no literal secret lands in source. Built through a"," // helper rather than inline: a password-shaped literal sitting directly on a"," // `currentPassword = ...` line trips secret scanners even when the value is"," // a fresh UUID (GitGuardian flagged exactly this on PR #183)."," const freshPassword = () => `Aa1!${crypto.randomUUID()}`;"," const currentPassword = freshPassword();"," const newPassword = freshPassword();"," await changePassword({ currentPassword, newPassword });"," const call = fetchMock.mock.calls[0] as Call;"," expect(call[0]).toBe(\"/api/v1/auth/change-password\");"," // A key rides along (apiPost adds one to every write) but is inert: the"," // SERVER exempts this route from the response cache, because replaying it"," // would return the token without the rotated Set-Cookie (#165 review). The"," // exemption itself is asserted server-side in UserPasswordTests."," expect(authOf(call)).toBe(\"Bearer at1\"); // authenticated write"," expect(JSON.parse(String(call[1].body))).toEqual({ currentPassword, newPassword });"," // The server rotated the session; the returned token replaces the old one so"," // this tab keeps working after every other session was revoked."," expect(getAccessToken()).toBe(\"at-after-change\");"," expect(onTokens).toHaveBeenCalled();"," it(\"propagates a rejection (e.g. wrong current password) and leaves the token alone\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ title: \"Current password is incorrect.\" }, 400));"," await expect(changePassword({ currentPassword: \"x\", newPassword: \"y\" })).rejects.toThrow(ApiError);"," expect(getAccessToken()).toBe(\"at1\"); // unchanged","// #308 — step-up grant issuance. Consumed by UsersPage.tsx immediately before","// the one sensitive write it unlocks; this file only proves the transport","// contract (posts the password, authenticated, returns the grant as-is).","describe(\"stepUp (#308)\", () => {"," it(\"posts the password to /auth/step-up as an authenticated write and returns the grant\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ token: \"grant-abc\", expiresAt: FUTURE }));"," const password = `Aa1!${crypto.randomUUID()}`;"," const grant = await stepUp(password);"," expect(call[0]).toBe(\"/api/v1/auth/step-up\");"," expect(call[1].method).toBe(\"POST\");"," expect(authOf(call)).toBe(\"Bearer at1\");"," expect(JSON.parse(String(call[1].body))).toEqual({ password });"," expect(grant).toEqual({ token: \"grant-abc\", expiresAt: FUTURE });"," it(\"propagates a rejection (wrong current password) as an ApiError carrying the server's message\", async () => {"," jsonResponse({ title: \"Users.CurrentPasswordIncorrect\", detail: \"Current password is incorrect.\" }, 400));"," const err = await stepUp(\"wrong\").catch((e: unknown) => e);"," expect(err).toMatchObject({ status: 400, message: \"Current password is incorrect.\" });"," // #336 review — the damage a 401 here would do is NOT the status the user"," // sees, it is the replay: apiFetch treats every 401 as an expired access"," // token, refreshes, and re-sends the SAME password. One typed password would"," // then reach the server's password check twice, so its five-attempt account"," // lockout would trip after three submissions and each attempt would burn a"," // refresh-token rotation. Pin the single request, not just the status."," it(\"issues exactly one request for a rejected password — no refresh, no replay\", async () => {"," fetchMock.mockResolvedValue("," await expect(stepUp(\"wrong\")).rejects.toThrow(ApiError);"," expect(callsTo(fetchMock, \"/auth/step-up\")).toHaveLength(1);"," expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(0);"," // The session is untouched: no teardown, no navigate-to-login."," expect(getAccessToken()).toBe(\"at1\");"," expect(onUnauth).not.toHaveBeenCalled();"," expect(onTokens).not.toHaveBeenCalled();"," // The other side of the boundary: a REAL 401 (the session truly expired) must"," // still take the refresh-and-retry path, so the fix above is a status"," // distinction and not a blanket opt-out of transparent refresh."," it(\"still refreshes and retries when the session itself has expired (401)\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"Unauthorized\" }, 401))"," .mockResolvedValueOnce(jsonResponse({ token: \"grant-abc\", expiresAt: FUTURE }));"," const grant = await stepUp(\"right\");"," expect(callsTo(fetchMock, \"/auth/step-up\")).toHaveLength(2);"," it(\"does not touch in-memory auth state — it is not a token-store writer\", async () => {"," await stepUp(\"whatever\");","describe(\"cross-tab refresh coordination (#169)\", () => {"," // A minimal Web Locks stand-in that is NAME-SCOPED, like the real API: each"," // lock name has its own FIFO queue, and different names never contend. Modelling"," // the scoping is what makes \"the SUT waits behind the SAME name\" a meaningful"," // assertion — if the fake ignored the name, a per-tab (non-shared) lock name"," // would look identical and the #169 fix could silently regress."," function fakeLockManager() {"," const tails = new Map>();"," const request = vi.fn((name: string, cb: () => Promise) => {"," const prev = tails.get(name) ?? Promise.resolve();"," const run = prev.then(() => cb());"," tails.set(name, run.catch(() => {})); // next waiter proceeds even if this one throws"," return run;"," return { request };"," // The SUT's OWN lock acquisition (asserting on `toHaveBeenCalledWith` alone"," // would be satisfied by a test's own setup call, proving nothing about the code)."," function sutLockName(locks: ReturnType): string | undefined {"," return locks.request.mock.calls.at(-1)?.[0] as string | undefined;"," it(\"waits for another tab's in-progress refresh before hitting the server (no cross-tab replay)\", async () => {"," const locks = fakeLockManager();"," vi.stubGlobal(\"navigator\", { locks });"," // Occupy the lock as 'another tab' still rotating the cookie; ours must queue."," const otherTab = deferred();"," locks.request(\"cluckwork.auth.refresh\", () => otherTab.promise);"," clearAccessToken(); // next call forces a silent refresh"," fetchMock.mockImplementation(async (url: string) =>"," url.endsWith(\"/auth/refresh\") ? accessResponse(\"at2\") : jsonResponse({ ok: true }),"," const inflight = apiGet<{ ok: boolean }>(\"/a\");"," await drain();"," // Blocked behind the other tab: our refresh has NOT reached the server yet."," otherTab.resolve(); // the other tab finished; the cookie is now the fresh token"," const a = await inflight;"," // Serialized strictly after the other tab — exactly one refresh, no replay."," // The SUT acquired the SHARED, stable lock name — the crux of cross-tab"," // coordination. (Asserted on the code's own call, not the setup call above.)"," expect(sutLockName(locks)).toBe(\"cluckwork.auth.refresh\");"," it(\"a lock held under a DIFFERENT name does not block refresh (fake is name-scoped, like the real API)\", async () => {"," // Some unrelated feature holds a different lock — must NOT serialise refresh."," const unrelated = deferred();"," locks.request(\"some-other-feature\", () => unrelated.promise);"," const a = await apiGet<{ ok: boolean }>(\"/a\"); // proceeds despite the other lock"," unrelated.resolve();"," it(\"clears the single-flight latch after a lock-guarded refresh FAILS, so a later refresh retries\", async () => {"," // Covers the lock-wrapped rejection path specifically (the existing latch test"," // runs in jsdom with no navigator.locks, i.e. only the fallback branch)."," vi.stubGlobal(\"navigator\", { locks: fakeLockManager() });"," .mockResolvedValueOnce(jsonResponse({ title: \"boom\" }, 500)) // refresh 1 (under lock) fails"," .mockResolvedValueOnce(accessResponse(\"at2\")); // refresh 2 succeeds"," await expect(restoreSession()).resolves.toBe(false);"," await expect(restoreSession()).resolves.toBe(true);"," // A stuck latch would have refused the second refresh entirely."," it(\"aborts and releases the lock if a refresh hangs past the timeout (no cross-tab starvation)\", async () => {"," vi.useFakeTimers();"," vi.stubGlobal(\"navigator\", { locks: fakeLockManager() });"," // A hung server: the fetch never resolves on its own — only the abort signal"," // (fired by our lock timeout) can settle it."," fetchMock.mockImplementation("," (_url: string, init: RequestInit) =>"," new Promise((_resolve, reject) =>"," init.signal?.addEventListener(\"abort\", () =>"," reject(new DOMException(\"timed out\", \"AbortError\")),"," ),"," ),"," );"," const restored = restoreSession(); // parks on the hung refresh"," await vi.advanceTimersByTimeAsync(20_000); // past REFRESH_TIMEOUT_MS"," // The timeout aborted the fetch and released the lock: the promise settles"," // (does not hang forever) — restoreSession catches the abort and reports no"," // session, but crucially the lock is freed for other tabs."," await expect(restored).resolves.toBe(false);"," } finally {"," vi.useRealTimers();"," it(\"degrades gracefully when the Web Locks API is unavailable (older browsers)\", async () => {"," vi.stubGlobal(\"navigator\", {}); // no .locks — like jsdom / older Safari"," const a = await apiGet<{ ok: boolean }>(\"/a\");"," expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(1); // still refreshes, just uncoordinated","// #310 — login, bootstrap refresh, explicit refresh, and logout are one browser","// session state machine. A stale completion (one whose generation was superseded","// by a later login or an earlier logout) may never commit tokens or state.","describe(\"session generation (#310)\", () => {"," it(\"commits a bootstrap refresh normally when nothing else races it (control)\", async () => {"," fetchMock.mockResolvedValueOnce(accessResponse(\"bootedToken\"));"," expect(getAccessToken()).toBe(\"bootedToken\");"," it(\"discards a bootstrap refresh that resolves after logout — the session does not resurrect\", async () => {"," const refreshGate = deferred();"," fetchMock.mockImplementation((url: string) => {"," if (url.endsWith(\"/auth/refresh\")) return refreshGate.promise;"," if (url.endsWith(\"/auth/logout\")) return Promise.resolve(new Response(null, { status: 204 }));"," throw new Error(`unexpected fetch: ${url}`);"," const restoring = restoreSession(); // bootstrap refresh in flight, held open"," await logout(); // user logs out while the bootstrap refresh is still pending"," refreshGate.resolve(accessResponse(\"resurrected-token\")); // the stale refresh finally answers"," await expect(restoring).resolves.toBe(false); // discarded — never reports a restored session"," expect(getAccessToken()).toBeNull(); // must stay logged out"," expect(onTokens).not.toHaveBeenCalled(); // the stale completion must not fire tokensChanged"," // #310 review — clearing the in-memory token is only half of it. That"," // response carried a rotated refresh cookie, which the browser applied"," // before any of our code ran, so the server session must be revoked too:"," // one revoke for the logout itself, a second for the cookie the discarded"," // refresh issued. Without it a reload walks straight back in."," expect(callsTo(fetchMock, \"/auth/logout\")).toHaveLength(2);"," it(\"commits an explicit login normally when nothing else races it (control)\", async () => {"," fetchMock.mockResolvedValueOnce(accessResponse(\"loggedInToken\"));"," expect(getAccessToken()).toBe(\"loggedInToken\");"," it(\"does not let a late bootstrap refresh overwrite a newer explicit login\", async () => {"," if (url.endsWith(\"/auth/login\")) return Promise.resolve(accessResponse(\"newLoginToken\"));"," const restoring = restoreSession(); // older bootstrap refresh in flight"," await login({ email: \"a@b.co\", password: \"pw\" }); // a newer, explicit login completes first"," expect(getAccessToken()).toBe(\"newLoginToken\");"," refreshGate.resolve(accessResponse(\"staleBootstrapToken\")); // the old refresh answers late"," await expect(restoring).resolves.toBe(false); // discarded, not adopted"," expect(getAccessToken()).toBe(\"newLoginToken\"); // untouched by the stale refresh"," expect(onTokens).toHaveBeenCalledTimes(1); // still just the login's single notification"," it(\"aborts an older refresh before login so its late Set-Cookie cannot replace the login cookie\", async () => {"," let refreshWasAborted = false;"," fetchMock.mockImplementation((url: string, init?: RequestInit) => {"," return new Promise((_resolve, reject) => {"," init?.signal?.addEventListener(\"abort\", () => {"," refreshWasAborted = true;"," reject(new DOMException(\"superseded by login\", \"AbortError\"));"," });"," });"," const restoring = restoreSession();"," expect(refreshWasAborted).toBe(true);"," await expect(restoring).resolves.toBe(false);"," it(\"a late-FAILING obsolete refresh does not clear or corrupt a newer session\", async () => {"," // Distinct from the success case above: here the stale refresh's own network"," // call fails (refresh token revoked) — the failure path must be gated too, or"," // it would clearAccessToken()/onUnauthenticated() and boot the fresh login."," if (url.endsWith(\"/auth/login\")) return Promise.resolve(accessResponse(\"freshLoginToken\"));"," if (url.endsWith(\"/stock\")) return Promise.resolve(jsonResponse({ ok: true }));"," // apiGet with no in-memory token forces currentAccessToken() to park on a"," // silent refresh — the same refresh a bootstrap would trigger."," const fetching = apiGet<{ ok: boolean }>(\"/stock\").catch((e: unknown) => e);"," await login({ email: \"a@b.co\", password: \"pw\" }); // supersedes the still-parked refresh"," expect(getAccessToken()).toBe(\"freshLoginToken\");"," refreshGate.resolve(jsonResponse({ title: \"refresh token revoked\" }, 401)); // stale refresh FAILS late"," const settled = await fetching;"," expect(getAccessToken()).toBe(\"freshLoginToken\"); // untouched by the stale failure"," expect(onUnauth).not.toHaveBeenCalled(); // must not tear down the fresh session"," // #310 review — the parked request itself must not surface the internal"," // discard marker. The login committed a valid token, so the request the"," // user is actually waiting on proceeds on it rather than failing with"," // \"Discarded: superseded by…\", which every screen would render verbatim."," expect(settled).toEqual({ ok: true });"," // #310 review — changePassword is a token-store writer too, and logout is"," // reachable from every screen, so it needs the same generation guard as"," // login/refresh; without it the response writes a fresh token back over a"," // session the user already ended."," it(\"discards a change-password response that resolves after logout (#310)\", async () => {"," const changeGate = deferred();"," setAccessToken(`tok-${crypto.randomUUID()}`);"," if (url.endsWith(\"/auth/change-password\")) return changeGate.promise;"," if (url.endsWith(\"/auth/logout\")) return Promise.resolve(jsonResponse({}, 204));"," const changing = changePassword({ currentPassword: \"a\", newPassword: \"b\" })"," .catch((e: unknown) => e);"," changeGate.resolve(jsonResponse({ accessToken: \"resurrected\" }));"," await changing;"," expect(getAccessToken()).toBeNull(); // the ended session stays ended"," it(\"commits a change-password response normally when nothing races it (control)\", async () => {"," await changePassword({ currentPassword: \"a\", newPassword: \"b\" });"," it(\"discards a login that resolves after a concurrent logout — does not resurrect authentication\", async () => {"," const loginGate = deferred();"," if (url.endsWith(\"/auth/login\")) return loginGate.promise;"," const loggingIn = login({ email: \"a@b.co\", password: \"pw\" }).catch((e: unknown) => e);"," await logout(); // fires while the login request is still in flight"," loginGate.resolve(accessResponse(\"late-login-token\"));"," const result = await loggingIn;"," expect(result).toBeInstanceOf(Error); // discarded, surfaced as a rejection — not silently accepted"," // The late login's Set-Cookie already reached the browser; revoke it, or a"," // reload restores the session the user just ended."," // #310 review — a request parked on a refresh that a LOGOUT discarded must"," // surface a normal 401, not the internal StaleSessionError whose message"," // every screen would render verbatim. (The newer-login counterpart, where the"," // request proceeds on the fresh token, is asserted above.)"," it(\"surfaces a plain 401 — not the discard marker — when logout ended the session\", async () => {"," const fetching = apiGet(\"/stock\").catch((e: unknown) => e);"," refreshGate.resolve(accessResponse(\"discarded-token\"));"," expect(settled).toBeInstanceOf(ApiError);"," expect(settled).toMatchObject({ status: 401 });"," // The two outcomes again for apiFetch's 401-RETRY branch specifically. The"," // test above enters through currentAccessToken (empty token store); this one"," // starts authenticated, 401s, and is superseded mid-retry — a separate branch."," it(\"retries a request on the newer login's token when the retry refresh is superseded\", async () => {"," if (url.endsWith(\"/stock\") && getAccessToken() === \"newLoginToken\")"," return Promise.resolve(jsonResponse({ value: 7 }));"," if (url.endsWith(\"/stock\")) return Promise.resolve(jsonResponse({ title: \"expired\" }, 401));"," const fetching = apiGet<{ value: number }>(\"/stock\");"," refreshGate.resolve(accessResponse(\"stale-token\"));"," expect(await fetching).toEqual({ value: 7 });"," it(\"surfaces the original 401 when logout supersedes a retry refresh\", async () => {"," // The same two outcomes for the blob path, whose 401-retry is a separate"," // branch from apiFetch's."," it(\"retries a download on the newer login's token when a refresh is superseded\", async () => {"," if (url.endsWith(\"/export/all\") && getAccessToken() === \"newLoginToken\")"," return Promise.resolve(new Response(\"data\", { status: 200 }));"," if (url.endsWith(\"/export/all\")) return Promise.resolve(jsonResponse({ title: \"expired\" }, 401));"," const downloading = apiGetBlob(\"/export/all\");"," await login({ email: \"a@b.co\", password: \"pw\" }); // supersedes the parked refresh"," const { blob } = await downloading;"," expect(blob.size).toBe(4); // \"data\" — served on the live login's token"," it(\"surfaces the original 401 on a download when logout ended the session\", async () => {"," const downloading = apiGetBlob(\"/export/all\").catch((e: unknown) => e);"," const settled = await downloading;"," // #310 review — the revoke is scoped to \"the session is gone\". When a newer"," // LOGIN supersedes an older flight, the cookie in the browser belongs to that"," // live login; revoking it would sign the user out of the thing they just did."," it(\"does not revoke the cookie when a newer login superseded the flight\", async () => {"," refreshGate.resolve(accessResponse(\"stale-refresh-token\"));"," await restoring;"," expect(getAccessToken()).toBe(\"newLoginToken\"); // the live login survives"," expect(callsTo(fetchMock, \"/auth/logout\")).toHaveLength(0); // and is NOT revoked","web/src/api/client.ts",[2698],{"_1639":348,"_1640":2699,"_510":2700,"_1643":62},575,[2701,2702,2703,2704,2705,212,2706,212,2707,2708,2709,2710,212,2711,2712,2713,2714,212,2715,2716,2717,2718,2719,2720,2721,2722,1758,1673,212,2723,2724,2725,2726,2727,1673,212,2728,2729,2730,2731,2732,2733,1673,212,2734,2735,2736,2737,2738,2739,2740,2741,2742,2743,2744,2745,2746,2747,2748,2749,2750,2751,2752,2753,2754,2755,2756,2757,2758,2759,2760,2761,2605,1709,2762,2763,2764,1697,2765,2766,1758,2767,1673,212,2768,2769,2770,2771,2772,2773,1673,212,2774,2775,2776,2777,2778,2779,2780,1673,212,2781,2782,2783,2784,2785,2786,2787,2788,2789,2790,2791,212,2792,2793,2794,2795,1673,212,2796,212,2797,2798,2799,2800,2801,2802,2803,2804,2805,2806,2807,212,2808,2809,2810,2811,1758,1673,212,2812,2813,2814,2815,2816,2817,1645,2818,2819,2820,2821,2822,2823,2737,2824,2825,2826,2827,2828,1758,1673,212,2829,2830,2831,2832,2833,2834,2835,2836,2837,2838,2839,2840,2841,2842,2843,2844,1698,2845,2846,2847,2848,2849,2850,1758,2851,2852,1673,212,2853,2854,2855,2856,1645,2857,2858,2859,2860,2861,2862,2863,2864,2865,2866,2867,2868,2869,2870,2871,2872,2873,2874,2848,2849,2850,1758,2851,2852,1673,212,2875,2876,2877,2878,2879,2880,2881,2882,1645,2883,2884,2885,2886,2887,2888,2889,2890,2891,2892,1673,212,2893,2894,2895,2896,2897,2898,2899,2900,2901,2902,2903,2904,2839,2905,2906,2907,2908,2073,2737,2909,2910,2911,2912,1832,2913,2914,2915,2916,2917,2918,2919,2920,2921,2922,2923,2924,2925,2138,2825,2926,2927,2928,2929,2930,1758,1673,212,2931,2932,2933,2934,2935,2936,2937,2938,2939,1645,2940,2941,2942,2943,2944,2945,212,2946,2947,2948,2949,2950,212,2951,2952,2953,2954,212,2955,2956,2957,2958,2959,2960,2961,2962,1757,2963,2964,2965,1673,212,2966,2967,2968,2969,2970,212,2971,2972,212,2973,2974,2975,2871,212,2976,2977,2978,2979,2980,2981,2982,2983,2984,2985,2986,2987,2988,2989,2990,2991,2992,2993,2994,2995,2996,2997,2998,2999,3000,2994,3001,3002,3003,1757,212,3004,1673,212,3005,3006,3007,3008,2737,3009,3010,2765,3011,1758,1673,212,3012,212,3013,3014,1673,212,3015,3016,3017,3018,1645,3019,3020,3021,3022,2782,3023,3024,3025,2785,3026,2843,3027,3028,1698,1673,212,3029,2782,3030,3024,3025,2785,3026,3031,3027,2844,1698,1673,212,3032,3033,3034,3035,3036,3037,2782,3038,3039,3024,2785,3026,3031,3040,3041,3042,3043,3044,1698,1673,212,3045,3026,3046,3047,1698,1673,212,3048,3049,3050,2782,3051,3052,2737,3053,2825,3054,1687,3055,3056,3057,3058,3059,3060,3061,3062,1709,3063,3064,3065,3066,1697,1758,1673,212,3067,2782,3068,3051,3069,2791,3070,2793,3071,3072,3073,3074,3075,2963,1673,212,3076,3052,2737,3077,2825,3054,1687,3055,3078,3057,3079,3080,3081,3059,3060,3082,3062,1709,3063,3064,3065,3066,1697,1758,1673,212,3083,3084,3085,3086,3087,3088,2737,3089,2825,3090,3091,3092,3093,3094,3095,3096,1758,1673,212,3097,3098,3099,3100,3101,3102,3103,3104,3105,3106,3107,3108,1673,212,3109,3110,3111,3112,3113,3114,3115,3116,3117,3118,3119,3120,1673],"import type { AccessTokenResponse, LoginRequest, ProblemDetails } from \"./types\";","import { clearAccessToken, getAccessToken, setAccessToken } from \"../auth/tokenStore\";","import { newId } from \"../lib/ids\";","import i18n from \"../i18n\";","import { newTraceparent } from \"../lib/traceparent\";","const BASE = \"/api/v1\";","// #145 — refresh/logout ride the HttpOnly refresh cookie; this custom header","// (which a cross-site simple request cannot set) is the CSRF second factor","// alongside the cookie's SameSite=Strict. Mirrors AuthCookies.CsrfHeaderName.","const CSRF_HEADER = \"X-Cluckwork-Auth\";","// #308 — carries a short-lived step-up grant (see stepUp() below) on the two","// sensitive user-administration calls that need one. Mirrors","// AuthEndpoints.StepUpHeaderName.","export const STEP_UP_HEADER = \"X-Cluckwork-Step-Up\";","export class ApiError extends Error {"," constructor("," public status: number,"," public title: string,"," message: string,"," ) {"," super(message);"," this.name = \"ApiError\";","// Called when the session is unrecoverable (refresh failed). AuthContext wires","// this to drop React auth state and bounce to /login.","let onUnauthenticated: (() => void) | null = null;","export function setOnUnauthenticated(cb: (() => void) | null): void {"," onUnauthenticated = cb;","// Called whenever a new token pair is saved (login or transparent refresh).","// AuthContext re-derives the role from the fresh access token so a demotion","// or promotion shows in the UI within one token lifetime, not at next reload.","let onTokensChanged: (() => void) | null = null;","export function setOnTokensChanged(cb: (() => void) | null): void {"," onTokensChanged = cb;","async function parseError(res: Response): Promise {"," let title = res.statusText;"," let detail = res.statusText;"," try {"," const body = (await res.json()) as ProblemDetails & {"," errors?: Record;"," errorCodes?: Record;"," };"," title = body.title ?? title;"," // ValidationProblem carries an errors map and usually no detail — flatten"," // it so the user sees which field is wrong, not just \"Bad Request\"."," if (body.errors && Object.keys(body.errors).length > 0) {"," // Per-field, index-aligned: a slot with an explicit code whose catalog key"," // exists renders the translated message; otherwise the English server"," // message at the SAME index (uncoded slots, or codes without a catalog key,"," // keep their English — matching the additive, explicit-only #45 contract)."," const parts: string[] = [];"," for (const [field, messages] of Object.entries(body.errors)) {"," const codes = body.errorCodes?.[field] ?? [];"," messages.forEach((msg, i) => {"," const code = codes[i];"," // `defaultValue: msg` IS the fallback: a known catalog key wins, an"," // unknown code (or an uncoded/null slot) renders the server English"," // message. This also satisfies i18next's typed t() — a runtime string"," // key needs the defaultValue overload (a bare i18n.t(dynamicKey) is a"," // type error under CustomTypeOptions). keySeparator:false makes the"," // dotted `errors:Me.Language.Format` a literal key, not a nested path."," parts.push(code ? i18n.t(`errors:${code}`, { defaultValue: msg }) : msg);"," detail = parts.join(\" \");"," } else {"," detail = body.detail ?? detail;"," } catch {"," // non-JSON body — keep status text"," return new ApiError(res.status, title, detail);","// #217 — the trace id of the most recent API request, success or failure (a","// FAILED request's id is exactly the one worth having: the crash report","// attaches it, joining a browser crash to that request's server-side story).","let lastTraceId: string | null = null;","export function getLastTraceId(): string | null {"," return lastTraceId;","// Mint per request, never reused: the server treats the incoming id as the","// request's TraceId (#214), so sharing one across requests would fuse","// unrelated request logs into one trace.","function attachTraceparent(headers: Headers): void {"," const tp = newTraceparent();"," headers.set(\"traceparent\", tp.header);"," lastTraceId = tp.traceId;","async function raw("," path: string,"," init: RequestInit,"," accessToken?: string,","): Promise {"," const headers = new Headers(init.headers);"," // A caller that declared its own type keeps it: the farm-logo upload (#123)"," // PUTs raw image bytes, not JSON."," if (!headers.has(\"Content-Type\")) headers.set(\"Content-Type\", \"application/json\");"," if (accessToken) headers.set(\"Authorization\", `Bearer ${accessToken}`);"," attachTraceparent(headers);"," const res = await fetch(`${BASE}${path}`, { ...init, headers });"," if (!res.ok) throw await parseError(res);"," if (res.status === 204) return undefined as T;"," return (await res.json()) as T;","// --- Auth endpoints -------------------------------------------------------","// #310 — login, the load-time bootstrap refresh, an explicit (401-triggered)","// refresh, and logout are treated as ONE browser-session state machine, not","// four independent calls racing each other. Every entry into that machine","// captures the CURRENT generation before its own await; login and logout each","// bump it (login because it is by definition a newer session than anything","// already in flight, logout because ending the session must supersede","// everything). A completion — success OR failure — may only commit tokens or","// user state while the generation it captured is still the current one;","// otherwise it is stale and must be discarded rather than resurrecting or","// clobbering whatever the (newer) generation already did.","let sessionGeneration = 0;","class StaleSessionError extends Error {"," constructor() {"," super(\"Discarded: superseded by a newer login or an intervening logout.\");"," this.name = \"StaleSessionError\";","// #310 review — discarding the JS result is NOT enough for a request that also","// rotates the refresh cookie (/auth/login and /auth/refresh both do). The","// browser applies Set-Cookie the moment the response arrives, before any of our","// code runs, so a login that lands after logout leaves a VALID HttpOnly refresh","// cookie behind: the next reload authenticates straight through","// restoreSession() and the session the user ended comes back.","// So when a cookie-setting response is discarded, ask the server to revoke what","// it just issued. Only when the session is actually gone (no access token): if a","// newer LOGIN superseded this flight, the cookie now belongs to that live","// session and revoking it would sign the user out of the thing they just did.","async function revokeSupersededCookie(): Promise {"," if (getAccessToken()) return; // superseded by a newer login, not by a logout"," await raw(\"/auth/logout\", { method: \"POST\", headers: { [CSRF_HEADER]: \"1\" } });"," } catch (err) {"," // Best-effort, like logout's own revoke: report it rather than swallow, but"," // never surface it to the caller whose result was already discarded."," console.error(\"discarded response: revoking its refresh cookie failed\", err);","export async function login(body: LoginRequest): Promise {"," // #310 — bump first: login is a NEWER session than anything already in"," // flight (a bootstrap refresh, say), so its resolution must be the one that"," // wins, and any earlier flight must see its captured generation go stale."," const generation = ++sessionGeneration;"," // A refresh response can carry Set-Cookie after this login's response and"," // silently replace the newer session's cookie even though the generation"," // guard correctly rejects its JavaScript result. Cancel it before starting"," // the newer login; unlike logout, the login below will immediately install a"," // fresh cookie, so there is no useful reason to let the old rotation land."," abortInFlightRefresh?.();"," // The server sets the HttpOnly refresh cookie; the body returns only the"," // access token, which lives in memory for this tab's lifetime."," const res = await raw(\"/auth/login\", {"," method: \"POST\","," body: JSON.stringify(body),"," // Superseded while in flight (e.g. a logout landed before this resolved) —"," // do not resurrect a session the user already ended. The response already"," // set a refresh cookie, so revoke it too, not just the in-memory token."," if (sessionGeneration !== generation) {"," await revokeSupersededCookie();"," throw new StaleSessionError();"," setAccessToken(res.accessToken);"," onTokensChanged?.();","// #165 — self-service password change. The server revokes every session for the","// user (other devices are signed out) and hands this one a fresh pair, so we","// swap in the returned access token; the rotated refresh cookie is set by the","// response.","// apiPost attaches an Idempotency-Key like any write, but the SERVER exempts","// this route from the response cache, so that key is inert here. Caching this","// response would persist the access token and, on replay, return it WITHOUT the","// rotated Set-Cookie — leaving the client holding a revoked refresh cookie","// (#165 review). Replay protection isn't needed anyway: a repeat can't re-apply,","// because the current password no longer matches.","export async function changePassword("," body: { currentPassword: string; newPassword: string },","): Promise {"," // #310 — this is a token-store writer like login/refresh, so it needs the"," // same generation guard: logout is reachable from every screen (AppLayout's"," // persistent button), so a user who submits a password change and logs out"," // before it lands would otherwise have the response write a fresh token back"," // over the cleared session."," const generation = sessionGeneration;"," const res = await apiPost(\"/auth/change-password\", body);"," // This response rotates the refresh cookie too, so a discarded one needs that"," // cookie revoked, not merely the in-memory token dropped.","// #308 — re-confirms the CURRENT password to mint a short-lived step-up grant","// for one sensitive user-administration call (creating another Owner;","// resetting an Owner's password). The grant is returned to the caller and","// used EXACTLY ONCE, immediately, as the X-Cluckwork-Step-Up header on that","// one follow-up request (see UsersPage.tsx) — this function itself never","// stores the token or the password anywhere longer-lived than its own return","// value, and there is nothing here to clear on logout: unlike the access","// token, no module-level state holds a step-up grant at all.","// #336 review — this goes through apiPost, so it inherits the transparent","// refresh-and-retry every 401 triggers. That is only safe because the server","// answers a REJECTED password with 400 (Users.CurrentPasswordIncorrect), the","// same status change-password uses, and reserves 401 for a genuinely","// unauthenticated caller. If /auth/step-up ever went back to 401 for a wrong","// password, one typed password would be replayed as two failed accesses —","// halving the server's five-attempt account lockout and rotating the refresh","// token per attempt. The contract is pinned by a test in client.test.ts.","export async function stepUp(password: string): Promise<{ token: string; expiresAt: string }> {"," return apiPost<{ token: string; expiresAt: string }>(\"/auth/step-up\", { password });","export async function logout(): Promise {"," // #310 — bump the generation and clear in-memory state SYNCHRONOUSLY, before"," // any await: local logout must win immediately, whatever a slower in-flight"," // login/refresh does later. Also cancel any refresh currently in flight —"," // note this only reaches a refresh that has already been GRANTED the"," // cross-tab lock (#169); one still queued behind another tab has no"," // controller yet, so it will still fire its request and then be discarded on"," // arrival by the generation check. Correctness rests on the generation, not"," // on the abort; the abort is only an optimisation so it stops sooner"," // instead of only being"," // discarded on arrival by the generation check in refreshTokens()."," sessionGeneration++;"," // #336 — capture BEFORE clearing: this tab's access token names the user who"," // actually clicked logout, and the clear below is deliberately synchronous."," // Read it after and we would always send nothing."," const bearer = getAccessToken();"," // Cookie-authenticated: the HttpOnly refresh cookie rides along and the CSRF"," // header satisfies the check. Always fires — JS can't read the HttpOnly"," // cookie to know whether a session exists, so we always ask the server to"," // revoke + clear it."," // #336 — the bearer is sent too, when this tab still has one. The refresh"," // cookie is per-origin (one per browser, last login wins) while this store"," // is per-tab, so the cookie can belong to a DIFFERENT user than the one"," // logging out here; without the bearer the server would revoke that other"," // user's step-up grants and leave this user's alive. It stays OPTIONAL —"," // the endpoint is AllowAnonymous, so an already-expired token just leaves"," // the call unauthenticated and the cookie path still ends the session, and"," // the server exempts /auth/logout from the Idempotency-Key requirement so"," // authenticating it does not make the request need one."," await raw("," \"/auth/logout\","," { method: \"POST\", headers: { [CSRF_HEADER]: \"1\" } },"," bearer ?? undefined,"," // Best-effort revoke: the in-memory token is already cleared above and this"," // failure can never reverse that. Still surfaced (not silently swallowed,"," // #310) so an operator can see the server-side session may be un-revoked —"," // logged, never the (already-cleared) token itself."," console.error(\"logout: server-side session revoke failed\", err);","// #169 — serialise refresh across tabs. The refresh token lives only in the","// shared HttpOnly cookie (#145), so two tabs refreshing at once each present the","// SAME cookie value; the second hits an already-rotated token, the server reads","// that as a replay and revokes the whole family — logging BOTH tabs out. The Web","// Locks API lets only one tab refresh at a time: the next tab runs its refresh","// only AFTER the first has rotated the cookie, so it presents the fresh token,","// not a replay. Server-side reuse-detection stays strict (unchanged). Browsers","// without navigator.locks (older Safari, insecure origins) degrade to per-tab","// single-flight only: no cross-tab guarantee, but never worse than before #169.","// Residual (a page-owned lock cannot make server rotation + cookie receipt","// atomic): if a tab is closed in the sub-second between sending a refresh and","// receiving the rotated cookie, the lock auto-releases while the cookie is still","// the old value, so the next tab can still trip reuse-detection. Narrow, but a","// full fix needs an idempotent server refresh — tracked in #176.","const REFRESH_LOCK = \"cluckwork.auth.refresh\";","// Cap how long one tab may hold the cross-tab lock. fetch() has no default","// timeout, so a hung /auth/refresh would otherwise keep the lock — and every","// other tab's refresh — parked indefinitely (#169 review). On timeout we abort,","// which releases the lock; the aborting tab recovers on its next request.","const REFRESH_TIMEOUT_MS = 15_000;","// #310 — the abort handle of whichever refresh attempt is currently running","// (if any), so logout() can cancel it outright rather than only waiting for","// the generation check below to discard its result on arrival.","let abortInFlightRefresh: (() => void) | null = null;","function withRefreshLock(run: (signal: AbortSignal) => Promise): Promise {"," const attempt = () => {"," const controller = new AbortController();"," abortInFlightRefresh = () => controller.abort();"," const timer = setTimeout(() => controller.abort(), REFRESH_TIMEOUT_MS);"," return run(controller.signal).finally(() => {"," clearTimeout(timer);"," abortInFlightRefresh = null;"," };"," const locks: LockManager | undefined = globalThis.navigator?.locks;"," return locks ? (locks.request(REFRESH_LOCK, attempt) as Promise) : attempt();","// Single-flight refresh: concurrent 401s (and the load-time bootstrap) share one","// in-flight refresh call. The refresh token rides the cookie; no body is sent.","// The per-tab latch dedupes within a tab; the cross-tab Web Lock (above) then","// serialises whatever refresh each tab still needs against the other tabs.","let refreshInFlight: Promise | null = null;","async function refreshTokens(): Promise {"," if (refreshInFlight) return refreshInFlight;"," // #310 — captured once, at the START of this flight. Checked again at"," // settlement (success or failure) so a logout/login that lands WHILE this"," // network call is in the air discards its outcome instead of committing it."," refreshInFlight = withRefreshLock((signal) =>"," raw(\"/auth/refresh\", {"," method: \"POST\","," headers: { [CSRF_HEADER]: \"1\" },"," signal,"," }),"," )"," .then("," async (res) => {"," // A SUCCESSFUL refresh rotated the cookie before we got here, so a"," // discarded one leaves live credentials in the browser — revoke them."," if (sessionGeneration !== generation) {"," await revokeSupersededCookie();"," throw new StaleSessionError();"," }"," setAccessToken(res.accessToken);"," onTokensChanged?.();"," return res.accessToken;"," },"," (err: unknown) => {"," // A late FAILURE from an obsolete generation is discarded the same as"," // a late success: the real error (e.g. a genuinely revoked refresh"," // token) might otherwise tear down a newer, still-valid session. No"," // revoke here — a failed refresh issued no cookie to revoke."," throw sessionGeneration !== generation ? new StaleSessionError() : err;"," )"," .finally(() => {"," refreshInFlight = null;"," return refreshInFlight;","// Session bootstrap (page load): the access token is memory-only, so it's gone","// after a reload — try one silent refresh against the cookie. Resolves true if a","// session was restored, false if unauthenticated (→ clean login, no error flash).","export async function restoreSession(): Promise {"," await refreshTokens();"," return true;"," return false;","// --- Authenticated request with one transparent refresh-and-retry ---------","export function apiGet(path: string): Promise {"," return apiFetch(path, { method: \"GET\" });","// Writes require an Idempotency-Key (server middleware): a retry with the same","// key replays the original response instead of repeating the side effect.","// Callers retrying a logical mutation after an ambiguous failure should pass","// the SAME key so the server dedupes instead of repeating the write.","// #308 — extraHeaders is how CreateUser/SetUserPassword attach the","// X-Cluckwork-Step-Up header for a sensitive operation; every other caller","// omits it.","export function apiPost("," body?: unknown,"," idempotencyKey?: string,"," extraHeaders?: Record,"," return apiFetch(path, {"," headers: { \"Idempotency-Key\": idempotencyKey ?? newId(), ...extraHeaders },"," body: body === undefined ? undefined : JSON.stringify(body),","export function apiPut("," body: unknown,"," method: \"PUT\",","// Raw-bytes write (#123's logo upload): same auth and the same transparent","// refresh-and-retry as apiPut, but the body goes up as it is instead of being","// JSON-encoded. Safe to retry — a Blob can be read more than once. The declared","// content type is courtesy only: the API sniffs the format from the bytes and","// ignores what the client claims.","export function apiPutBytes("," body: Blob,"," contentType: string,"," headers: {"," \"Content-Type\": contentType,"," \"Idempotency-Key\": idempotencyKey ?? newId(),"," },"," body,","export function apiDelete(path: string, idempotencyKey?: string): Promise {"," method: \"DELETE\","," headers: { \"Idempotency-Key\": idempotencyKey ?? newId() },","// File download with the same auth + one transparent refresh-and-retry as","// apiFetch. Returns the body as a Blob plus the server's suggested filename.","export async function apiGetBlob(","): Promise<{ blob: Blob; filename: string | null }> {"," const token = await currentAccessToken();"," return await rawBlob(path, token);"," if (!(err instanceof ApiError) || err.status !== 401) throw err;"," const refreshed = await refreshTokens();"," return await rawBlob(path, refreshed);"," } catch (refreshErr) {"," // #310 review — same supersession handling as apiFetch."," if (refreshErr instanceof StaleSessionError) {"," const fresh = getAccessToken();"," if (fresh) return await rawBlob(path, fresh);"," throw err;"," if (isTransientRefreshFailure(refreshErr)) throw refreshErr;"," clearAccessToken();"," onUnauthenticated?.();"," throw err;","async function rawBlob("," accessToken: string,"," const headers = new Headers({ Authorization: `Bearer ${accessToken}` });"," const res = await fetch(`${BASE}${path}`, { headers });"," const disposition = res.headers.get(\"Content-Disposition\");"," const match = disposition?.match(/filename\\*?=(?:UTF-8''|\")?([^\";]+)/i);"," return {"," blob: await res.blob(),"," filename: match ? decodeURIComponent(match[1]) : null,","export async function apiFetch(path: string, init: RequestInit = {}): Promise {"," return await raw(path, init, token);"," return await raw(path, init, refreshed);"," // #310 review — superseded mid-retry: retry once on the newer login's"," // token, or surface the ORIGINAL 401 if a logout ended the session."," // Never let the internal marker reach the caller."," if (fresh) return await raw(path, init, fresh);","// The in-memory access token, or one obtained via a silent refresh when memory","// is empty (e.g. a request racing the load-time bootstrap). Throws + signals","// unauthenticated if no session can be established.","async function currentAccessToken(): Promise {"," const token = getAccessToken();"," if (token) return token;"," return await refreshTokens();"," // #310 — a stale (obsolete-generation) failure belongs to an already-"," // superseded session: a newer login already committed its own token, or a"," // logout already tore everything down. Either way, this failure must not"," // touch the CURRENT session — no clearing, no onUnauthenticated navigate."," if (err instanceof StaleSessionError) return supersededToken();"," onUnauthenticated?.();"," throw new ApiError(401, \"NoSession\", \"Not authenticated.\");","// #310 review — resolve a discarded refresh against whatever superseded it.","// A newer LOGIN has already committed its token, so the caller's request is","// perfectly valid and should proceed on it. A newer LOGOUT left no session,","// and has already navigated, so this raises a plain 401 rather than firing","// onUnauthenticated a second time. Either way StaleSessionError itself stops","// here: it is an internal control marker, and every screen renders a non-","// ApiError's `.message` verbatim, so letting it escape would show the user","// \"Discarded: superseded by...\" in place of a real error.","function supersededToken(): string {"," const fresh = getAccessToken();"," if (fresh) return fresh;"," throw new ApiError(401, \"NoSession\", \"Not authenticated.\");","// A refresh failure is \"transient\" when the session is likely still valid, so we","// keep the tokens and surface the error rather than forcing a re-login:","// - 429: rate-limit throttling (#143) — re-logging in hits the same limit.","// - AbortError: our own cross-tab lock timeout (#169) fired on a slow/hung","// refresh; the cookie is untouched, so the next attempt can still succeed.","// - StaleSessionError (#310): the refresh belonged to an obsolete generation","// (superseded by a newer login, or discarded by a logout) — a newer/","// already-torn-down session must not be clobbered by this stale failure.","function isTransientRefreshFailure(err: unknown): boolean {"," if (err instanceof StaleSessionError) return true;"," if (err instanceof ApiError && err.status === 429) return true;"," return err instanceof DOMException && err.name === \"AbortError\";",[3122,3123,3124,3125,3126,3127,3128,3129,3130,3131,3132,3133,3134,3135,3136],{"_1588":49,"_49":3160},{"_1588":3138,"_169":2696,"_1639":3158,"_1640":3159},{"_1588":49,"_49":3157},{"_1588":3138,"_169":2002,"_1639":3155,"_1640":3156},{"_1588":49,"_49":3154},{"_1588":3138,"_169":1884,"_1639":3152,"_1640":3153},{"_1588":49,"_49":3151},{"_1588":3138,"_169":1884,"_1639":3149,"_1640":3150},{"_1588":49,"_49":3148},{"_1588":3138,"_169":1771,"_1639":3146,"_1640":3147},{"_1588":3138,"_169":1771,"_1639":3144,"_1640":3145},{"_1588":49,"_49":3143},{"_1588":3138,"_169":1633,"_1639":3141,"_1640":3142},{"_1588":3138,"_169":1633,"_1639":3139,"_1640":3140},{"_1588":49,"_49":3137},"\n* Committed the changes as `016954a` and created the follow-up PR metadata with title **“fix(e2e): make the remaining smoke guarantees non-vacuous.”**\n\n**Testing**\n\n* ✅ `PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm test -- --run src/api/client.test.ts` — 75 tests passed.\n* ✅ `PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck` — web TypeScript build passed.\n* ✅ `git diff --check`\n* ⚠️ `PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm ci && PATH=/root/.nvm/versions/node/v24.15.0/bin:$PATH npm run typecheck` — simulation UI dependency installation was blocked by the environment’s npm policy with HTTP 403 for `playwright-core-1.62.1.tgz`.\n* ⚠️ `npm test -- --run src/api/client.test.ts` under the default Node 20 runtime — this Vitest release passes `--no-experimental-webstorage`, which the installed Node 20 binary does not support; the same test command passed under the installed Node 24 runtime.\n* ❌ `npm run lint -- src/api/client.ts src/api/client.test.ts` — no `lint` script is defined in the web package.","repo_file_citation",120,126,85,101,"\n* Made language persistence non-vacuous by requiring successful `PUT /me/language` responses and reloading before verifying the selected language. ",96,104,62,70,"\n* Excluded initial seven-day report requests from maximum-range timings, ensuring the assertion requires a refetch caused by the changed date controls. ",158,170,"\n * Reloaded after the competing login to verify the durable refresh cookie still restores the Sales session rather than Owner. ",38,50,"\n* Strengthened the session-race E2E coverage:\n * Disabled logout’s abort optimization so the held refresh must actually settle and exercise the generation guard. ",988,1011,"\n* Added a focused client regression test proving login aborts the obsolete refresh while retaining the new access token. ",163,179,"### Summary\n\n* Prevented an older in-flight refresh from overwriting a newer explicit login’s refresh cookie by aborting the refresh before starting login. ",{"_96":339,"_45":88,"_100":339,"_3163":3164,"_3165":3166,"_3167":3168,"_136":-5,"_123":3169},[87],"input_items",[3188,3189],"external_post_config",{"_3170":3171,"_276":209,"_3172":318,"_287":-5,"_1608":270,"_3173":-5,"_3174":-5,"_3175":3176,"_3177":3178,"_3179":-5,"_3180":-5,"_3181":3182,"_3183":18,"_3184":62,"_3185":57,"_3186":18,"_3187":-5},"user_model_slug","slug",1785655448.51391,"installation_id",150444056,"pr_number","gitlab_service_account_project_id","review_trigger","comment_id",5156187664,"comment_type","issue","pr_write_guard_token","pending_pr_reaction_id","pending_comment_reaction_id",391563452,"comment_if_no_findings","comment_on_error","share_url","is_parallel_review","review_summary_id",{"_96":518,"_100":339,"_510":3194},{"_325":326,"_327":328,"_3190":3191,"_3192":133,"_335":-5,"_96":3193},"base_ref","2d9dce375aa2646f9c6909480b14df9deed30174","head_ref","pull_request_info",[3195],{"_1588":49,"_49":3196},"@codex Round-1 review applied. Four reviewers ran (codex, two Claude agents, pi/glm-5.2); findings consolidated below with agreement counts. Fixes are in `7347cad` (distributed across the stack as `feat/277-e2e-smoke` → `feat/386-canary` → `chore/387-e2e-ci`, by merge rather than rebase — these branches are already pushed and force-pushing them is off the table).\n\n## Blocker — confirmed, fixed, and the credential rotated\n\n**Committed Playwright trace archives (3/4 reviewers).** Confirmed by extracting them: **36 occurrences of the Owner password in plaintext, 60 JWTs, 24 refresh-cookie entries** across four zips. Root cause: `.gitignore` listed `playwright-report/`, a trailing-slash pattern that is a literal directory name and never matched `playwright-report-canary/`, combined with `git add -A`.\n\nDone:\n- Files removed; ignore patterns are now globs (`playwright-report*/`, `test-results*/`, `blob-report*/`).\n- **Credentials rotated and verified dead.** I recovered the leaked password *from the committed trace itself* via git history and re-tested it: **401**. The new one: **200**. `bootstrap.sh --force` had silently failed first (`requires openssl on PATH` — this box is NixOS), so the first rotation attempt did nothing; caught by testing rather than assuming.\n- Worth flagging: **GitGuardian passed this PR.** Its scan does not look inside a zip.\n\nThe blobs remain in these branches' history. Purging needs a force-push, which I have not done — the credentials are throwaway, local-only and now rotated, so the exposure is inert, but the call is the owner's.\n\n## Vacuous assertions — all confirmed, all fixed\n\nEach of these would have stayed green with the guarantee removed:\n\n| Finding | Agreement | Fix |\n| --- | --- | --- |\n| Audit filter asserted `filtered <= all` — true for a filter that does nothing | 3/4 | Asserts every visible row carries the selected action |\n| `getByRole(\"row\")` counts the `` row, so a header-only table passed `not.toHaveCount(0)` | codex | `tbody tr` |\n| Dashboard test promised \"sales data\" and never looked at the sales panel | codex | Asserts the sales table has body rows |\n| PWA denylist probed with `fetch()`, which `navigateFallback` does not govern at all | codex | Real `page.goto()` navigations |\n| ReadOnly deep-link asserted a visible error, which a 500 also satisfies | codex | Captures the response and requires **403** |\n| Canary vitals recorded but never validated — deleting every observer gave all-nulls and green | codex | Asserts the instrument collected something |\n\n**The audit fix needed a second pass.** My first version asserted a strict row-count drop; it passed alone and failed **intermittently** in a full run, because the audit log paginates *and* the other specs write to it while it runs. The count comparison is gone — \"every row matches the selected action\" is page-size- and growth-independent. Verified stable over three consecutive full runs.\n\n## Mutation harness — two real defects in my own harness\n\n- **`KILLED` was awarded to any failure, including a crash** (codex + pi). An uncaught `TypeError` reports as `1 failed` exactly like a failed expectation, so the check that claimed to exclude crashes did not. Now requires an assertion-shaped failure; anything else is `INCONCLUSIVE` and **counts as survived**.\n- **`mutants.ts` claimed nav-gate coverage via \"spec-level vacuity mutants\" that did not exist** (3/4). That comment was actively hiding the gap it described. Three mutants added: `nav-role-gate-bypassed`, `payment-never-settles`, `export-returns-nothing`.\n\nThe nav mutant **survived on its first run**, and the harness reporting that is the point: forging the login token is not enough, because the SPA's bootstrap refresh replaces it before the nav renders. Fixed by forging both, and the reasoning is now in the file.\n\n```\nbaseline : GREEN\nkilled : 10 survived : 0\nrestore : GREEN\n```\n\n## Security, beyond the blocker\n\n- **`reset.sh` echoed `bootstrap-admin`'s one-time password** (codex). Unmasked in every CI log of the new workflow. Redacted at the source, so local runs stop printing it too.\n- **Trace archives were being uploaded as a CI artifact** (codex). Same leak as committing them, through a different door. The workflow now strips every `*.zip` before upload and prints what remains; retention cut to 7 days.\n\n## Prose corrected where it claimed more than the code delivered\n\n`mutants.ts` (coverage that did not exist), `browser.ts` (claimed the canary records the browser version — it does not, and that gap is now stated), `vitals.ts` (called a pre-finalisation LCP read \"exact\"), `README.md` (omitted the `CLUCKWORK_E2E_BUNDLED_BROWSER` short-circuit from the resolution order).\n\n## Declined, with reasons\n\n- **\"Worker spec is not re-runnable\" (pi).** Checked rather than accepted: `RecordDailyEntry` is an upsert on `(account, farm, house, flock, date)`, and the spec saves a draft and never submits — so a second run updates the same row. Verified by repeated consecutive runs. The real defect was that this was undocumented, which is fixed.\n- **\"Sales spec exhausts stock\" (2/4).** Real but not fixable here without isolated inventory. Documented in the spec with the symptom and the remedy (`reset.sh`), matching how `manager.spec.ts` already treats its own fixture growth.\n\n## Still open — carried, not silently dropped\n\nThese are codex findings I have **not** fixed, listed so they are visible rather than buried:\n\n1. `session-races.spec.ts` — logout aborts the held refresh via `AbortController`, so the \"late response\" may never settle; the test could pass without the `sessionGeneration` guard.\n2. `session-races.spec.ts` — \"newer login wins\" is asserted only against the in-memory token; a late `Set-Cookie` could still restore Owner after a reload.\n3. `reports-range.spec.ts` — `timings` includes the initial 7-day requests, so removing refetch-on-date-change may leave it green.\n4. `i18n.spec.ts` — assertions observe the optimistic local `changeLanguage`; deleting `PUT /me/language` would leave them green despite the durable-preference claim.\n5. `run-baseline.sh` — a stale canary vitals directory from another commit is folded into any baseline and described as the same window; needs run/commit stamping.\n6. `run-canary.sh` — k6 liveness is only checked during the initial 45s wait, so later screens could run quietly while still labelled \"under load\".\n7. `logout-not-honoured` mutant is killed by the cookie never clearing, not by the stale-refresh guarantee it is mapped to.\n\n(1)–(4) are further vacuous-assertion candidates and are the ones I would take next.\n",[4001,4002,4003],[],{"_1593":1594,"_49":1595,"_1596":1597},{"_1567":3992},{"_350":3991},{"_350":3236},{"_317":318,"_308":319,"_320":321,"_322":62,"_323":18,"_324":18,"_325":326,"_327":328,"_329":280,"_330":131,"_331":332,"_333":334,"_335":336,"_337":-5,"_338":-5,"_339":3235,"_341":342,"_343":344,"_345":346,"_347":348},{"_45":127,"_206":207,"_208":209,"_210":18,"_211":212,"_213":214,"_215":3224,"_217":-5,"_218":219,"_220":18,"_221":3225,"_223":212,"_224":212,"_225":3226,"_227":3227,"_229":3228,"_231":-5,"_232":233,"_234":235,"_236":237,"_238":3229,"_58":-5,"_123":240,"_241":3230,"_243":3231,"_245":246,"_247":18,"_248":18},{"_137":3217},[3207,3208,3209,3210,3211,3212,3213,3214,3215,3216],{"_156":184,"_158":159,"_160":161,"_162":163,"_164":185,"_166":167,"_168":35,"_169":-5},{"_156":183,"_158":159,"_160":161,"_162":163,"_164":180,"_166":167,"_168":35,"_169":-5},{"_156":181,"_158":159,"_160":161,"_162":163,"_164":182,"_166":167,"_168":35,"_169":-5},{"_156":179,"_158":159,"_160":161,"_162":163,"_164":180,"_166":167,"_168":35,"_169":-5},{"_156":178,"_158":174,"_160":175,"_162":163,"_164":177,"_166":167,"_168":35,"_169":-5},{"_156":173,"_158":174,"_160":175,"_162":176,"_164":177,"_166":167,"_168":35,"_169":-5},{"_156":172,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":171,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":170,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":157,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},[3218,3219,3220],{"_190":3223,"_192":203},{"_190":3222,"_192":199},{"_190":3221,"_192":193},{"_194":195,"_96":196,"_123":197},{"_194":200,"_96":196,"_123":201},{"_194":204,"_96":196,"_123":205},{"_310":311,"_312":-5,"_313":-5,"_314":-5,"_315":-5,"_316":-5},[270],{"_270":3232},{"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265,"_266":267,"_268":269},{},[],{"_251":62},{"_249":62,"_250":212},{"_45":272,"_194":273,"_274":3233,"_276":209,"_277":278,"_279":280,"_281":282,"_283":284,"_285":286,"_287":67,"_288":18,"_289":-5,"_290":-5,"_291":-5,"_292":-5,"_293":-5,"_294":-5,"_168":295,"_296":-5,"_58":3234},{"_302":303,"_45":304,"_96":305,"_306":307,"_308":309},{"_298":18,"_299":18,"_300":18,"_301":18},{"_302":303,"_194":303,"_349":-5,"_306":307,"_45":304},[3237,3238,3239,3240,3241,3242,3243,3244,3245,3246,3247,3248,3249,3250,3251,3252,3253,3254,3255,3256,3257,3258,3259,3260,3261,3262,3263,3264,3265,3266,3267,3268,3269,3270,3271,3272,3273,3274,3275,3276,3277,3278,3279,3280,3281,3282,3283,3284,3285,3286,3287,3288,3289,3290,3291,3292,3293,3294,3295,3296,3297,3298,3299,3300,3301,3302,3303,3304,3305,3306,3307,3308,3309,3310,3311,3312,3313,3314,3315,3316,3317,3318,3319,3320,3321,3322,3323,3324,3325,3326,3327,3328,3329,3330,3331,3332,3333,3334,3335,3336,3337,3338,3339,3340,3341,3342,3343,3344,3345,3346,3347,3348,3349,3350,3351,3352,3353,3354,3355,3356,3357,3358,3359,3360,3361,3362,3363,3364,3365,3366,3367],{"_162":1539,"_484":3987},{"_162":501,"_484":3984},{"_162":1529,"_484":3981},{"_162":505,"_484":3975},{"_162":505,"_484":3970},{"_162":505,"_484":3965},{"_162":505,"_484":3959},{"_162":505,"_484":3954},{"_162":523,"_484":3949},{"_162":523,"_484":3945},{"_162":505,"_484":3940},{"_162":505,"_484":3937},{"_162":505,"_484":3930},{"_162":523,"_484":3926},{"_162":523,"_484":3922},{"_162":505,"_484":3917},{"_162":505,"_484":3914},{"_162":523,"_484":3910},{"_162":505,"_484":3903},{"_162":523,"_484":3899},{"_162":505,"_484":3895},{"_162":505,"_484":3892},{"_162":523,"_484":3885},{"_162":505,"_484":3878},{"_162":523,"_484":3874},{"_162":505,"_484":3868},{"_162":505,"_484":3865},{"_162":505,"_484":3858},{"_162":523,"_484":3852},{"_162":523,"_484":3848},{"_162":505,"_484":3841},{"_162":523,"_484":3837},{"_162":505,"_484":3832},{"_162":505,"_484":3829},{"_162":523,"_484":3818},{"_162":505,"_484":3811},{"_162":523,"_484":3807},{"_162":505,"_484":3801},{"_162":505,"_484":3798},{"_162":523,"_484":3794},{"_162":505,"_484":3787},{"_162":523,"_484":3783},{"_162":505,"_484":3778},{"_162":505,"_484":3775},{"_162":523,"_484":3768},{"_162":505,"_484":3761},{"_162":523,"_484":3757},{"_162":505,"_484":3752},{"_162":505,"_484":3749},{"_162":505,"_484":3742},{"_162":523,"_484":3738},{"_162":505,"_484":3734},{"_162":505,"_484":3731},{"_162":505,"_484":3724},{"_162":523,"_484":3720},{"_162":505,"_484":3715},{"_162":505,"_484":3712},{"_162":505,"_484":3705},{"_162":505,"_484":3702},{"_162":505,"_484":3695},{"_162":523,"_484":3691},{"_162":505,"_484":3687},{"_162":505,"_484":3684},{"_162":505,"_484":3677},{"_162":523,"_484":3673},{"_162":523,"_484":3669},{"_162":505,"_484":3664},{"_162":505,"_484":3661},{"_162":505,"_484":3654},{"_162":505,"_484":3651},{"_162":505,"_484":3644},{"_162":505,"_484":3641},{"_162":505,"_484":3634},{"_162":523,"_484":3630},{"_162":523,"_484":3626},{"_162":523,"_484":3622},{"_162":505,"_484":3617},{"_162":505,"_484":3614},{"_162":505,"_484":3607},{"_162":505,"_484":3604},{"_162":505,"_484":3597},{"_162":523,"_484":3593},{"_162":523,"_484":3589},{"_162":505,"_484":3584},{"_162":505,"_484":3581},{"_162":505,"_484":3574},{"_162":505,"_484":3571},{"_162":505,"_484":3564},{"_162":523,"_484":3560},{"_162":523,"_484":3556},{"_162":505,"_484":3551},{"_162":505,"_484":3548},{"_162":505,"_484":3541},{"_162":523,"_484":3537},{"_162":523,"_484":3533},{"_162":505,"_484":3528},{"_162":505,"_484":3525},{"_162":505,"_484":3518},{"_162":505,"_484":3515},{"_162":505,"_484":3508},{"_162":523,"_484":3504},{"_162":523,"_484":3500},{"_162":505,"_484":3495},{"_162":505,"_484":3492},{"_162":505,"_484":3485},{"_162":505,"_484":3482},{"_162":505,"_484":3475},{"_162":523,"_484":3471},{"_162":523,"_484":3467},{"_162":505,"_484":3462},{"_162":505,"_484":3459},{"_162":505,"_484":3452},{"_162":523,"_484":3448},{"_162":505,"_484":3443},{"_162":505,"_484":3440},{"_162":505,"_484":3433},{"_162":523,"_484":3429},{"_162":523,"_484":3425},{"_162":505,"_484":3420},{"_162":505,"_484":3417},{"_162":523,"_484":3410},{"_162":505,"_484":3403},{"_162":523,"_484":3399},{"_162":505,"_484":3394},{"_162":505,"_484":3391},{"_162":505,"_484":3384},{"_162":523,"_484":3380},{"_162":523,"_484":3378},{"_162":505,"_484":3373},{"_162":501,"_484":3371},{"_162":483,"_484":3368},{"_486":487,"_91":3369},{"_489":490,"_491":492,"_107":-5,"_45":493,"_494":3370,"_496":497,"_498":499,"_500":117},[],{"_500":3372,"_486":487},{"_96":504},{"_507":3374,"_486":487,"_509":493},{"_510":3375,"_512":-5,"_45":513,"_514":3376,"_516":517,"_100":97,"_96":518},[3377],{"_519":493},{"_49":521,"_96":522},{"_525":526,"_507":3379,"_486":487,"_509":493},{"_45":513,"_516":517,"_49":521,"_96":528},{"_525":530,"_507":3381,"_486":487,"_509":493},{"_532":533,"_534":535,"_536":3382,"_538":539,"_491":540,"_541":35,"_45":542,"_543":544,"_545":546,"_500":117,"_96":547},[3383],{"_534":549,"_96":550},{"_507":3385,"_486":487,"_509":493},{"_553":554,"_45":-5,"_514":3386,"_194":-5,"_556":3387,"_96":558},{"_519":493},{"_327":3388,"_560":-5},[3389,3390],{"_49":565,"_96":564},{"_49":563,"_96":564},{"_507":3392,"_486":487,"_509":493},{"_553":554,"_45":568,"_569":570,"_514":3393,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3395,"_486":487,"_509":493},{"_510":-5,"_577":578,"_45":579,"_514":3396,"_581":3397,"_96":583},{"_519":493},[3398],{"_49":585,"_96":586},{"_525":588,"_507":3400,"_486":487,"_509":493},{"_510":3401,"_45":579,"_581":3402,"_96":583},[],[585],{"_507":3404,"_486":487,"_509":493},{"_553":594,"_45":-5,"_514":3405,"_194":-5,"_556":3406,"_96":558},{"_519":493},{"_327":3407,"_560":-5},[3408,3409],{"_49":601,"_96":564},{"_49":600,"_96":564},{"_525":603,"_507":3411,"_486":487,"_509":493},{"_605":-5,"_606":3412,"_491":608,"_107":-5,"_45":609,"_610":-5,"_611":-5,"_612":-5,"_613":3413,"_615":616,"_500":117,"_617":616,"_96":618},{"_325":623,"_327":624},{"_619":-5,"_510":3414,"_621":3415},[3416],{"_325":623,"_327":624},{"_96":49,"_49":600},{"_507":3418,"_486":487,"_509":493},{"_553":594,"_45":628,"_569":629,"_514":3419,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3421,"_486":487,"_509":493},{"_510":-5,"_577":633,"_45":634,"_514":3422,"_581":3423,"_96":583},{"_519":493},[3424],{"_49":638,"_96":586},{"_525":640,"_507":3426,"_486":487,"_509":493},{"_510":3427,"_45":634,"_581":3428,"_96":583},[],[638],{"_525":645,"_507":3430,"_486":487,"_509":493},{"_532":647,"_534":648,"_536":3431,"_538":539,"_491":650,"_541":35,"_45":651,"_543":652,"_545":546,"_500":117,"_96":547},[3432],{"_534":654,"_96":550},{"_507":3434,"_486":487,"_509":493},{"_553":657,"_45":-5,"_514":3435,"_194":-5,"_556":3436,"_96":558},{"_519":493},{"_327":3437,"_560":-5},[3438,3439],{"_49":664,"_96":564},{"_49":663,"_96":564},{"_507":3441,"_486":487,"_509":493},{"_553":657,"_45":667,"_569":668,"_514":3442,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3444,"_486":487,"_509":493},{"_510":-5,"_577":672,"_45":673,"_514":3445,"_581":3446,"_96":583},{"_519":493},[3447],{"_49":677,"_96":586},{"_525":679,"_507":3449,"_486":487,"_509":493},{"_510":3450,"_45":673,"_581":3451,"_96":583},[],[677],{"_507":3453,"_486":487,"_509":493},{"_553":685,"_45":-5,"_514":3454,"_194":-5,"_556":3455,"_96":558},{"_519":493},{"_327":3456,"_560":-5},[3457,3458],{"_49":692,"_96":564},{"_49":691,"_96":564},{"_507":3460,"_486":487,"_509":493},{"_553":685,"_45":695,"_569":696,"_514":3461,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3463,"_486":487,"_509":493},{"_510":-5,"_577":700,"_45":701,"_514":3464,"_581":3465,"_96":583},{"_519":493},[3466],{"_49":705,"_96":586},{"_525":707,"_507":3468,"_486":487,"_509":493},{"_510":3469,"_45":701,"_581":3470,"_96":583},[],[705],{"_525":712,"_507":3472,"_486":487,"_509":493},{"_532":714,"_534":715,"_536":3473,"_538":717,"_491":718,"_541":348,"_45":719,"_543":720,"_545":546,"_500":721,"_96":547},[3474],{"_534":723,"_96":550},{"_507":3476,"_486":487,"_509":493},{"_553":726,"_45":-5,"_514":3477,"_194":-5,"_556":3478,"_96":558},{"_519":493},{"_327":3479,"_560":-5},[3480,3481],{"_49":732,"_96":564},{"_49":714,"_96":564},{"_507":3483,"_486":487,"_509":493},{"_553":726,"_45":735,"_569":736,"_514":3484,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3486,"_486":487,"_509":493},{"_553":740,"_45":-5,"_514":3487,"_194":-5,"_556":3488,"_96":558},{"_519":493},{"_327":3489,"_560":-5},[3490,3491],{"_49":747,"_96":564},{"_49":746,"_96":564},{"_507":3493,"_486":487,"_509":493},{"_553":740,"_45":750,"_569":751,"_514":3494,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3496,"_486":487,"_509":493},{"_510":-5,"_577":755,"_45":756,"_514":3497,"_581":3498,"_96":583},{"_519":493},[3499],{"_49":760,"_96":586},{"_525":762,"_507":3501,"_486":487,"_509":493},{"_510":3502,"_45":756,"_581":3503,"_96":583},[],[760],{"_525":767,"_507":3505,"_486":487,"_509":493},{"_532":769,"_534":770,"_536":3506,"_538":772,"_491":773,"_541":35,"_45":774,"_543":775,"_545":546,"_500":117,"_96":547},[3507],{"_534":777,"_96":550},{"_507":3509,"_486":487,"_509":493},{"_553":780,"_45":-5,"_514":3510,"_194":-5,"_556":3511,"_96":558},{"_519":493},{"_327":3512,"_560":-5},[3513,3514],{"_49":786,"_96":564},{"_49":769,"_96":564},{"_507":3516,"_486":487,"_509":493},{"_553":780,"_45":789,"_569":790,"_514":3517,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3519,"_486":487,"_509":493},{"_553":794,"_45":-5,"_514":3520,"_194":-5,"_556":3521,"_96":558},{"_519":493},{"_327":3522,"_560":-5},[3523,3524],{"_49":801,"_96":564},{"_49":800,"_96":564},{"_507":3526,"_486":487,"_509":493},{"_553":794,"_45":804,"_569":805,"_514":3527,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3529,"_486":487,"_509":493},{"_510":-5,"_577":809,"_45":810,"_514":3530,"_581":3531,"_96":583},{"_519":493},[3532],{"_49":814,"_96":586},{"_525":816,"_507":3534,"_486":487,"_509":493},{"_510":3535,"_45":810,"_581":3536,"_96":583},[],[814],{"_525":821,"_507":3538,"_486":487,"_509":493},{"_532":823,"_534":824,"_536":3539,"_538":772,"_491":826,"_541":35,"_45":827,"_543":828,"_545":546,"_500":117,"_96":547},[3540],{"_534":830,"_96":550},{"_507":3542,"_486":487,"_509":493},{"_553":833,"_45":-5,"_514":3543,"_194":-5,"_556":3544,"_96":558},{"_519":493},{"_327":3545,"_560":-5},[3546,3547],{"_49":839,"_96":564},{"_49":823,"_96":564},{"_507":3549,"_486":487,"_509":493},{"_553":833,"_45":842,"_569":843,"_514":3550,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3552,"_486":487,"_509":493},{"_510":-5,"_577":847,"_45":848,"_514":3553,"_581":3554,"_96":583},{"_519":493},[3555],{"_49":852,"_96":586},{"_525":854,"_507":3557,"_486":487,"_509":493},{"_510":3558,"_45":848,"_581":3559,"_96":583},[],[852],{"_525":859,"_507":3561,"_486":487,"_509":493},{"_532":861,"_534":862,"_536":3562,"_538":772,"_491":864,"_541":348,"_45":865,"_543":866,"_545":546,"_500":721,"_96":547},[3563],{"_534":868,"_96":550},{"_507":3565,"_486":487,"_509":493},{"_553":871,"_45":-5,"_514":3566,"_194":-5,"_556":3567,"_96":558},{"_519":493},{"_327":3568,"_560":-5},[3569,3570],{"_49":877,"_96":564},{"_49":861,"_96":564},{"_507":3572,"_486":487,"_509":493},{"_553":871,"_45":880,"_569":881,"_514":3573,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3575,"_486":487,"_509":493},{"_553":885,"_45":-5,"_514":3576,"_194":-5,"_556":3577,"_96":558},{"_519":493},{"_327":3578,"_560":-5},[3579,3580],{"_49":747,"_96":564},{"_49":891,"_96":564},{"_507":3582,"_486":487,"_509":493},{"_553":885,"_45":894,"_569":895,"_514":3583,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3585,"_486":487,"_509":493},{"_510":-5,"_577":899,"_45":900,"_514":3586,"_581":3587,"_96":583},{"_519":493},[3588],{"_49":904,"_96":586},{"_525":906,"_507":3590,"_486":487,"_509":493},{"_510":3591,"_45":900,"_581":3592,"_96":583},[],[904],{"_525":911,"_507":3594,"_486":487,"_509":493},{"_532":913,"_534":914,"_536":3595,"_538":772,"_491":916,"_541":917,"_45":918,"_543":919,"_545":546,"_500":721,"_96":547},[3596],{"_534":921,"_96":550},{"_507":3598,"_486":487,"_509":493},{"_553":924,"_45":-5,"_514":3599,"_194":-5,"_556":3600,"_96":558},{"_519":493},{"_327":3601,"_560":-5},[3602,3603],{"_49":930,"_96":564},{"_49":913,"_96":564},{"_507":3605,"_486":487,"_509":493},{"_553":924,"_45":933,"_569":934,"_514":3606,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3608,"_486":487,"_509":493},{"_553":938,"_45":-5,"_514":3609,"_194":-5,"_556":3610,"_96":558},{"_519":493},{"_327":3611,"_560":-5},[3612,3613],{"_49":801,"_96":564},{"_49":944,"_96":564},{"_507":3615,"_486":487,"_509":493},{"_553":938,"_45":947,"_569":948,"_514":3616,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3618,"_486":487,"_509":493},{"_510":-5,"_577":952,"_45":953,"_514":3619,"_581":3620,"_96":583},{"_519":493},[3621],{"_49":957,"_96":586},{"_525":959,"_507":3623,"_486":487,"_509":493},{"_510":3624,"_45":953,"_581":3625,"_96":583},[],[957],{"_525":964,"_507":3627,"_486":487,"_509":493},{"_532":966,"_534":967,"_536":3628,"_538":717,"_491":969,"_541":348,"_45":970,"_543":971,"_545":546,"_500":721,"_96":547},[3629],{"_534":973,"_96":550},{"_525":975,"_507":3631,"_486":487,"_509":493},{"_532":977,"_534":978,"_536":3632,"_538":717,"_491":980,"_541":35,"_45":981,"_543":982,"_545":546,"_500":117,"_96":547},[3633],{"_534":984,"_96":550},{"_507":3635,"_486":487,"_509":493},{"_553":987,"_45":-5,"_514":3636,"_194":-5,"_556":3637,"_96":558},{"_519":493},{"_327":3638,"_560":-5},[3639,3640],{"_49":994,"_96":564},{"_49":993,"_96":564},{"_507":3642,"_486":487,"_509":493},{"_553":987,"_45":997,"_569":998,"_514":3643,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3645,"_486":487,"_509":493},{"_553":1002,"_45":-5,"_514":3646,"_194":-5,"_556":3647,"_96":558},{"_519":493},{"_327":3648,"_560":-5},[3649,3650],{"_49":1009,"_96":564},{"_49":1008,"_96":564},{"_507":3652,"_486":487,"_509":493},{"_553":1002,"_45":1012,"_569":998,"_514":3653,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3655,"_486":487,"_509":493},{"_553":1016,"_45":-5,"_514":3656,"_194":-5,"_556":3657,"_96":558},{"_519":493},{"_327":3658,"_560":-5},[3659,3660],{"_49":747,"_96":564},{"_49":1022,"_96":564},{"_507":3662,"_486":487,"_509":493},{"_553":1016,"_45":1025,"_569":1026,"_514":3663,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3665,"_486":487,"_509":493},{"_510":-5,"_577":1030,"_45":1031,"_514":3666,"_581":3667,"_96":583},{"_519":493},[3668],{"_49":1035,"_96":586},{"_525":1037,"_507":3670,"_486":487,"_509":493},{"_510":3671,"_45":1031,"_581":3672,"_96":583},[],[1035],{"_525":1042,"_507":3674,"_486":487,"_509":493},{"_532":1044,"_534":1045,"_536":3675,"_538":717,"_491":1047,"_541":35,"_45":1048,"_543":1049,"_545":546,"_500":117,"_96":547},[3676],{"_534":1051,"_96":550},{"_507":3678,"_486":487,"_509":493},{"_553":1054,"_45":-5,"_514":3679,"_194":-5,"_556":3680,"_96":558},{"_519":493},{"_327":3681,"_560":-5},[3682,3683],{"_49":1060,"_96":564},{"_49":212,"_96":564},{"_507":3685,"_486":487,"_509":493},{"_553":1054,"_45":1063,"_569":1064,"_514":3686,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3688,"_486":487,"_509":493},{"_510":-5,"_577":1068,"_45":1069,"_514":3689,"_581":3690,"_96":583},{"_519":493},[],{"_525":1073,"_507":3692,"_486":487,"_509":493},{"_510":3693,"_45":1069,"_581":3694,"_96":583},[],[],{"_507":3696,"_486":487,"_509":493},{"_553":1079,"_45":-5,"_514":3697,"_194":-5,"_556":3698,"_96":558},{"_519":493},{"_327":3699,"_560":-5},[3700,3701],{"_49":1009,"_96":564},{"_49":1044,"_96":564},{"_507":3703,"_486":487,"_509":493},{"_553":1079,"_45":1087,"_569":1064,"_514":3704,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3706,"_486":487,"_509":493},{"_553":1091,"_45":-5,"_514":3707,"_194":-5,"_556":3708,"_96":558},{"_519":493},{"_327":3709,"_560":-5},[3710,3711],{"_49":747,"_96":564},{"_49":1097,"_96":564},{"_507":3713,"_486":487,"_509":493},{"_553":1091,"_45":1100,"_569":1101,"_514":3714,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3716,"_486":487,"_509":493},{"_510":-5,"_577":1105,"_45":1106,"_514":3717,"_581":3718,"_96":583},{"_519":493},[3719],{"_49":1110,"_96":586},{"_525":1112,"_507":3721,"_486":487,"_509":493},{"_510":3722,"_45":1106,"_581":3723,"_96":583},[],[1110],{"_507":3725,"_486":487,"_509":493},{"_553":1118,"_45":-5,"_514":3726,"_194":-5,"_556":3727,"_96":558},{"_519":493},{"_327":3728,"_560":-5},[3729,3730],{"_49":1009,"_96":564},{"_49":966,"_96":564},{"_507":3732,"_486":487,"_509":493},{"_553":1118,"_45":1126,"_569":1127,"_514":3733,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3735,"_486":487,"_509":493},{"_510":-5,"_577":1131,"_45":1132,"_514":3736,"_581":3737,"_96":583},{"_519":493},[],{"_525":1136,"_507":3739,"_486":487,"_509":493},{"_510":3740,"_45":1132,"_581":3741,"_96":583},[],[],{"_507":3743,"_486":487,"_509":493},{"_553":1142,"_45":-5,"_514":3744,"_194":-5,"_556":3745,"_96":558},{"_519":493},{"_327":3746,"_560":-5},[3747,3748],{"_49":747,"_96":564},{"_49":1148,"_96":564},{"_507":3750,"_486":487,"_509":493},{"_553":1142,"_45":1151,"_569":1152,"_514":3751,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3753,"_486":487,"_509":493},{"_510":-5,"_577":1156,"_45":1157,"_514":3754,"_581":3755,"_96":583},{"_519":493},[3756],{"_49":1161,"_96":586},{"_525":1163,"_507":3758,"_486":487,"_509":493},{"_510":3759,"_45":1157,"_581":3760,"_96":583},[],[1161],{"_507":3762,"_486":487,"_509":493},{"_553":1169,"_45":-5,"_514":3763,"_194":-5,"_556":3764,"_96":558},{"_519":493},{"_327":3765,"_560":-5},[3766,3767],{"_49":601,"_96":564},{"_49":1175,"_96":564},{"_525":1177,"_507":3769,"_486":487,"_509":493},{"_1179":3770,"_45":1181,"_500":117,"_96":1182},[3771,3772],{"_338":1190,"_9":3774,"_169":1192},{"_338":1185,"_9":3773,"_169":1187},{"_1188":-5,"_96":1189},{"_1188":-5,"_96":1189},{"_507":3776,"_486":487,"_509":493},{"_553":1169,"_45":1195,"_569":1196,"_514":3777,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3779,"_486":487,"_509":493},{"_510":-5,"_577":1200,"_45":1201,"_514":3780,"_581":3781,"_96":583},{"_519":493},[3782],{"_49":1205,"_96":586},{"_525":1207,"_507":3784,"_486":487,"_509":493},{"_510":3785,"_45":1201,"_581":3786,"_96":583},[],[1205],{"_507":3788,"_486":487,"_509":493},{"_553":1213,"_45":-5,"_514":3789,"_194":-5,"_556":3790,"_96":558},{"_519":493},{"_327":3791,"_560":-5},[3792,3793],{"_49":565,"_96":564},{"_49":1219,"_96":564},{"_525":1221,"_507":3795,"_486":487,"_509":493},{"_532":1219,"_534":1223,"_536":3796,"_538":539,"_491":35,"_541":35,"_45":1225,"_543":1226,"_545":546,"_500":117,"_96":547},[3797],{"_534":1228,"_96":550},{"_507":3799,"_486":487,"_509":493},{"_553":1213,"_45":1231,"_569":1232,"_514":3800,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3802,"_486":487,"_509":493},{"_510":-5,"_577":1236,"_45":1237,"_514":3803,"_581":3804,"_96":583},{"_519":493},[3805,3806],{"_49":1243,"_96":586},{"_49":1242,"_96":586},{"_525":1245,"_507":3808,"_486":487,"_509":493},{"_510":3809,"_45":1237,"_581":3810,"_96":583},[],[1243,1242],{"_507":3812,"_486":487,"_509":493},{"_553":1251,"_45":-5,"_514":3813,"_194":-5,"_556":3814,"_96":558},{"_519":493},{"_327":3815,"_560":-5},[3816,3817],{"_49":664,"_96":564},{"_49":1175,"_96":564},{"_525":1258,"_507":3819,"_486":487,"_509":493},{"_1179":3820,"_45":1261,"_500":117,"_96":1182},[3821,3822,3823,3824],{"_338":1274,"_9":3828,"_169":1276},{"_338":1272,"_9":3827,"_169":1192},{"_338":1269,"_9":3826,"_169":1271},{"_338":1266,"_9":3825,"_169":1268},{"_1188":-5,"_96":1189},{"_1188":-5,"_96":1189},{"_1188":-5,"_96":1189},{"_1188":-5,"_96":1189},{"_507":3830,"_486":487,"_509":493},{"_553":1251,"_45":1279,"_569":1280,"_514":3831,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3833,"_486":487,"_509":493},{"_510":-5,"_577":1284,"_45":1285,"_514":3834,"_581":3835,"_96":583},{"_519":493},[3836],{"_49":1289,"_96":586},{"_525":1291,"_507":3838,"_486":487,"_509":493},{"_510":3839,"_45":1285,"_581":3840,"_96":583},[],[1289],{"_507":3842,"_486":487,"_509":493},{"_510":-5,"_577":1297,"_45":1298,"_514":3843,"_581":3844,"_96":583},{"_519":493},[3845,3846,3847],{"_49":1306,"_96":586},{"_49":1305,"_96":586},{"_49":1304,"_96":586},{"_525":1308,"_507":3849,"_486":487,"_509":493},{"_510":3850,"_45":1298,"_581":3851,"_96":583},[],[1306,1305,1304],{"_525":1313,"_507":3853,"_486":487,"_509":493},{"_532":1315,"_534":1316,"_536":3854,"_538":539,"_491":1318,"_541":35,"_45":1319,"_543":1320,"_545":546,"_500":117,"_96":547},[3855,3856,3857],{"_534":1332,"_169":1333,"_1326":1334,"_96":1328},{"_534":1329,"_194":1330,"_169":1268,"_96":1331},{"_534":1324,"_169":1325,"_1326":1327,"_96":1328},{"_507":3859,"_486":487,"_509":493},{"_553":1337,"_45":-5,"_514":3860,"_194":-5,"_556":3861,"_96":558},{"_519":493},{"_327":3862,"_560":-5},[3863,3864],{"_49":565,"_96":564},{"_49":1343,"_96":564},{"_507":3866,"_486":487,"_509":493},{"_553":1337,"_45":1346,"_569":1347,"_514":3867,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3869,"_486":487,"_509":493},{"_510":-5,"_577":1351,"_45":1352,"_514":3870,"_581":3871,"_96":583},{"_519":493},[3872,3873],{"_49":1358,"_96":586},{"_49":1357,"_96":586},{"_525":1360,"_507":3875,"_486":487,"_509":493},{"_510":3876,"_45":1352,"_581":3877,"_96":583},[],[1358,1357],{"_507":3879,"_486":487,"_509":493},{"_553":1366,"_45":-5,"_514":3880,"_194":-5,"_556":3881,"_96":558},{"_519":493},{"_327":3882,"_560":-5},[3883,3884],{"_49":664,"_96":564},{"_49":1372,"_96":564},{"_525":1374,"_507":3886,"_486":487,"_509":493},{"_532":1372,"_534":1376,"_536":3887,"_538":539,"_491":35,"_541":35,"_45":1378,"_543":1379,"_545":546,"_500":117,"_96":547},[3888,3889,3890,3891],{"_534":1391,"_194":1392,"_169":1271,"_96":1331},{"_534":1389,"_194":1390,"_169":1192,"_96":1331},{"_534":1387,"_194":1388,"_169":1276,"_96":1331},{"_534":1384,"_194":1385,"_169":1386,"_96":1331},{"_507":3893,"_486":487,"_509":493},{"_553":1366,"_45":1395,"_569":1396,"_514":3894,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3896,"_486":487,"_509":493},{"_510":-5,"_577":1400,"_45":1401,"_514":3897,"_581":3898,"_96":583},{"_519":493},[],{"_525":1405,"_507":3900,"_486":487,"_509":493},{"_510":3901,"_45":1401,"_581":3902,"_96":583},[],[],{"_507":3904,"_486":487,"_509":493},{"_553":1411,"_45":-5,"_514":3905,"_194":-5,"_556":3906,"_96":558},{"_519":493},{"_327":3907,"_560":-5},[3908,3909],{"_49":664,"_96":564},{"_49":1417,"_96":564},{"_525":1419,"_507":3911,"_486":487,"_509":493},{"_532":1417,"_534":1421,"_536":3912,"_538":539,"_491":35,"_541":917,"_45":1423,"_543":1424,"_545":546,"_500":721,"_96":547},[3913],{"_534":1426,"_96":550},{"_507":3915,"_486":487,"_509":493},{"_553":1411,"_45":1429,"_569":1430,"_514":3916,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3918,"_486":487,"_509":493},{"_510":-5,"_577":1434,"_45":1435,"_514":3919,"_581":3920,"_96":583},{"_519":493},[3921],{"_49":1439,"_96":586},{"_525":1441,"_507":3923,"_486":487,"_509":493},{"_510":3924,"_45":1435,"_581":3925,"_96":583},[],[1439],{"_525":1446,"_507":3927,"_486":487,"_509":493},{"_532":1448,"_534":1449,"_536":3928,"_538":539,"_491":1451,"_541":35,"_45":1452,"_543":1453,"_545":546,"_500":117,"_96":547},[3929],{"_534":1455,"_96":550},{"_507":3931,"_486":487,"_509":493},{"_553":1458,"_45":-5,"_514":3932,"_194":-5,"_556":3933,"_96":558},{"_519":493},{"_327":3934,"_560":-5},[3935,3936],{"_49":1465,"_96":564},{"_49":1464,"_96":564},{"_507":3938,"_486":487,"_509":493},{"_553":1458,"_45":1468,"_569":1469,"_514":3939,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":3941,"_486":487,"_509":493},{"_510":-5,"_577":1473,"_45":1474,"_514":3942,"_581":3943,"_96":583},{"_519":493},[3944],{"_49":1478,"_96":586},{"_525":1480,"_507":3946,"_486":487,"_509":493},{"_510":3947,"_45":1474,"_581":3948,"_96":583},[],[1478],{"_525":1485,"_507":3950,"_486":487,"_509":493},{"_1487":-5,"_510":3951,"_45":1489,"_96":1490},[3952],{"_49":1492,"_1493":3953,"_96":49},[],{"_507":3955,"_486":487,"_509":493},{"_510":3956,"_512":-5,"_45":-5,"_514":3957,"_516":-5,"_100":339,"_96":518},[3958],{"_519":493},{"_49":1492,"_96":564},{"_507":3960,"_486":487,"_509":493},{"_510":3961,"_512":-5,"_45":-5,"_514":3962,"_516":-5,"_100":339,"_96":518},[3963,3964],{"_519":493},{"_49":1507,"_96":564},{"_49":1506,"_96":564},{"_507":3966,"_486":487,"_509":493},{"_510":3967,"_512":-5,"_45":-5,"_514":3968,"_516":-5,"_100":1512,"_96":518},[3969],{"_519":493},{"_49":1514,"_96":564},{"_507":3971,"_486":487,"_509":493},{"_510":3972,"_512":-5,"_45":-5,"_514":3973,"_516":-5,"_100":1512,"_96":518},[3974],{"_519":493},{"_49":1520,"_96":564},{"_507":3976,"_486":487,"_509":493},{"_510":3977,"_512":-5,"_45":-5,"_514":3978,"_516":-5,"_100":1512,"_96":518},[3979,3980],{"_519":493},{"_49":1528,"_96":564},{"_49":1527,"_96":564},{"_486":487,"_91":3982},{"_107":-5,"_45":493,"_494":3983,"_496":497,"_498":499,"_500":1533},[],{"_500":3985,"_486":487},{"_1536":3986,"_96":1538},[],{"_1541":3988},{"_1543":-5,"_1544":-5,"_1545":1546,"_1547":499,"_538":539,"_1548":18,"_1549":-5,"_1550":-5,"_1551":-5,"_1552":1553,"_45":487,"_1554":1555,"_194":-5,"_1556":-5,"_169":1557,"_1558":212,"_1559":499,"_1560":487,"_545":1561,"_500":3989,"_1563":-5,"_81":3990,"_1565":499},{"_96":504},[],[],[3993],{"_45":1570,"_1571":3994,"_1573":1574,"_1575":1574,"_510":3995,"_500":1577,"_512":-5,"_1578":35,"_1579":3996,"_1581":1582,"_1583":-5},{"_100":339,"_194":-5,"_1579":4000},{"_1588":49,"_1589":3999},{"_1584":3997},{"_1586":3998},[],[1591],{},{"_96":518,"_100":97,"_510":4028},{"_96":1625,"_1626":4007},{"_96":1601,"_1602":623,"_1603":1604,"_1605":4004,"_1607":-5},{"_96":1605,"_1608":539,"_132":133,"_1609":-5,"_338":1610,"_1611":4005,"_1613":1614,"_1615":1616,"_1617":917,"_1618":1619,"_1620":4006},{"_1622":1623,"_1624":-5},[],[4008,4009,4010,4011,4012],{"_169":2696,"_1634":-5,"_1635":4025,"_1637":-5},{"_169":2002,"_1634":-5,"_1635":4022,"_1637":-5},{"_169":1884,"_1634":-5,"_1635":4019,"_1637":-5},{"_169":1771,"_1634":-5,"_1635":4016,"_1637":-5},{"_169":1633,"_1634":-5,"_1635":4013,"_1637":-5},[4014],{"_1639":348,"_1640":1641,"_510":4015,"_1643":62},[1644,1645,1646,1645,1647,1648,1649,1650,1651,1645,1652,1653,1654,1645,1655,1645,1656,1657,212,1658,1659,1660,212,1661,1662,1663,1664,1665,1666,1667,1668,1669,1670,1671,1672,1673,212,1661,1674,1675,1676,1677,1670,1678,212,1679,212,1680,1681,1682,1683,1684,1685,1686,1687,1688,1689,1690,1691,1692,1693,1694,1695,1696,1697,1698,212,1699,1700,1701,1702,1703,1704,1705,1706,1707,1708,1709,212,1710,212,1711,1712,1713,1714,1715,1716,1717,1718,1719,1720,1721,1722,212,1723,1724,1717,1718,1719,1725,1726,212,1727,1728,1729,1730,1731,1732,1733,1734,1735,1736,212,1737,1738,1739,1740,1741,212,1742,1743,1744,1745,1741,1746,1747,212,1748,1749,1750,1751,1752,1753,1732,1754,1755,1756,1735,1757,1758,212,1759,1760,1761,1762,1763,1764,212,1765,1766,1767,1768,1769,1697,1698,1770],[4017],{"_1639":348,"_1640":1774,"_510":4018,"_1643":62},[1776,1645,1777,1645,1778,1645,1779,1645,1780,1781,1782,1783,1645,1784,1785,1786,1787,1788,1789,1790,1645,1791,1792,212,1793,1794,1795,1796,212,1797,1798,1799,1800,212,1801,212,1802,1803,1760,1761,1804,1805,1806,212,1807,1808,212,1809,1810,1811,1812,1813,1814,1815,1816,1817,1818,1819,1820,1757,212,1821,1822,1823,212,1824,1825,1826,1827,1828,212,1829,1830,1831,1832,1833,1834,1835,1836,1837,1838,1839,212,1840,1841,1842,1843,1844,1845,1846,1847,1848,1849,1850,212,1851,1852,1853,1854,1855,212,1856,1857,1858,212,1859,1860,1861,1862,1863,1864,1865,1866,1867,1868,1869,1870,1871,1872,1757,1873,1698,212,1874,1806,212,1807,1875,1876,1877,212,1821,1838,1839,212,1878,1879,1846,1847,1880,1881,212,1882,1883,1698,1770],[4020],{"_1639":348,"_1640":1887,"_510":4021,"_1643":62},[1889,1645,1890,1891,1892,1893,1894,1645,1895,1645,1896,1897,1898,1899,1900,1645,1901,1645,1902,1903,1904,1905,1906,212,1793,1907,1796,212,1908,1909,212,1910,1911,1760,1761,1912,1762,1806,212,1913,1914,1915,1916,1917,1757,212,1918,1919,1920,1921,1757,212,1922,1923,1924,1925,1926,1927,1928,1929,1709,1930,1931,1932,1933,1934,1820,1757,212,1935,1936,1937,1938,212,1939,1940,1941,212,1942,1943,212,1944,1945,1946,1832,1947,1941,1948,1949,212,1950,1951,1952,1953,1954,1955,1956,1957,212,1958,1959,1960,1846,1961,1962,1963,1698,212,1964,1760,1761,1912,1762,1965,1966,1967,1806,212,1919,1920,1921,1757,212,1968,1969,1970,1971,1938,212,1972,1973,1974,1975,1976,1977,1978,1979,212,1948,1980,212,1981,1982,1943,212,1983,1984,1985,1986,1846,1987,1988,1849,1989,1990,1991,212,1992,1993,1994,1995,212,1996,1997,1998,1999,2000,1994,2001,1989,1698,1770],[4023],{"_1639":348,"_1640":2005,"_510":4024,"_1643":62},[2007,2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020,2021,2022,2023,2024,2025,2026,2027,212,2028,2029,2030,2031,2032,212,2033,2034,212,2035,2036,2037,2038,1698,1673,212,2039,2040,2041,1673,212,2042,212,2043,2044,1673,212,2045,2046,1673,212,2047,2048,1673,212,2049,2050,2051,2052,2053,2054,1673,212,2055,2056,2057,212,2058,2059,2060,212,2061,2062,2063,2064,2065,2066,2067,2068,1770,212,2069,2070,2071,2072,2073,1770,212,2074,2075,2076,2077,2078,2079,2080,2081,2082,1698,212,2083,2084,2085,1698,1770,212,2086,2087,2088,2089,2090,2091,2092,2093,2094,1698,212,2095,2088,2096,2097,2098,2099,2100,2101,1698,1770,212,2102,2103,2104,2105,2106,212,2107,2108,2109,2110,1698,212,2111,2112,2113,2114,2115,2116,2110,1698,212,2117,2096,2118,2119,2109,2120,2121,2122,212,2123,2124,1698,212,2125,2126,2127,2128,2129,1698,1770,212,2130,2131,2132,2133,2134,1698,212,2135,2136,2137,2138,2139,2140,2141,2142,1698,212,2143,2144,2145,1698,212,2146,2147,2148,2136,2149,2150,2151,2152,2153,2154,2155,2156,2138,2139,2140,2157,2158,2159,2160,2161,2138,1698,212,2162,2136,2149,2150,2163,2164,2154,2155,2156,2138,2139,2140,2165,2166,1698,212,2167,2168,2136,2169,2138,2139,2140,2142,1698,1770,212,2170,2171,2096,2172,2173,2174,212,2099,2100,2175,212,2176,2177,2178,2179,2180,2181,2182,2183,2184,2185,2186,2187,2188,1698,212,2189,2096,2190,2173,2191,212,2192,2176,2193,2194,2195,2196,2197,2198,2199,2200,2201,1698,212,2202,2203,2204,2205,2206,2207,2208,2209,2210,1709,2211,2212,1757,212,2213,2214,2215,2216,212,2217,2218,2219,2187,1698,212,2220,2096,2221,2222,2223,2224,2225,2226,212,2227,2228,2229,2230,1698,1770,212,2231,2232,2096,2233,2234,212,2139,2140,2235,2236,2237,2091,2238,1698,212,2239,2096,2172,2240,2241,212,2139,2235,2242,2243,2093,2091,2238,1698,212,2244,2096,2172,2245,212,2139,2140,2235,2091,2238,1698,212,2246,2247,2248,2249,2096,2233,2250,212,2139,2140,2251,2252,2253,1698,212,2254,2096,2255,2256,2257,212,2258,2259,2260,2096,2261,2240,2262,2263,2264,1698,1770,212,2265,2266,2267,2268,2269,1698,212,2270,2271,2272,2273,2274,2275,2276,2277,2278,1698,212,2279,2267,2280,2281,1698,212,2282,2084,2283,2079,2284,2285,2286,1698,212,2287,2084,2283,2288,1698,212,2289,2290,2291,2292,2267,2293,2294,1698,212,2295,2267,2268,2296,1698,212,2297,2084,2298,2299,1698,212,2300,2301,2302,212,2303,212,2079,2304,2285,2305,2306,2307,2308,2309,2310,1698,212,2311,2301,2312,2269,1698,212,2313,2314,2315,2096,2316,2317,2318,212,2303,212,2319,2320,2321,2322,2323,2324,2325,1698,212,2326,2084,2327,2079,2328,2329,2330,1698,1770,212,2331,2332,2136,2333,2334,2335,2336,2138,2337,2338,2339,2340,1698,212,2341,2115,2342,2343,1698,212,2344,2096,2345,2173,2346,212,2347,2348,2175,2349,1698,212,2350,2088,2351,2352,2091,2093,2353,1698,1770,212,2354,2355,2088,2356,2357,2358,2359,2187,2079,2360,2361,1698,212,2362,2363,2084,2364,2365,2079,2366,2367,2368,2369,2238,1698,212,2370,2371,2372,2373,2374,2375,2376,2377,2378,2084,212,2364,212,2379,2238,1698,212,2380,2381,2382,2383,2088,2084,212,2364,212,2365,2384,1698,212,2385,2386,2387,2238,1698,212,2388,2088,2084,2389,2365,2390,1698,212,2391,2392,2393,2394,2395,212,2396,2397,2238,212,2398,2399,1698,212,2400,2401,2402,2395,2403,2389,2238,1698,212,2404,2405,2406,2407,2408,2409,2410,2377,2378,2403,212,2389,212,2238,2411,2412,2413,2414,1698,1770,212,2415,2416,2417,2418,2419,2420,2421,2422,2423,2424,212,2425,212,2426,2427,2428,2429,2430,2431,2432,2433,212,2434,2435,2436,2437,1698,212,2438,2439,212,2440,2441,1698,1770,212,2442,2443,2444,2445,2446,2447,2448,212,2449,212,2426,2450,2451,2452,2453,2454,1698,212,2455,2136,2456,212,2457,2140,2458,1698,212,2459,2460,2461,2462,2463,2464,2465,2466,2456,212,2467,212,2365,2468,2469,2470,2471,2472,2473,1698,212,2474,2475,2476,2477,2096,2478,2222,2479,212,2480,212,2454,2481,2093,1698,212,2482,2447,2483,2441,2473,1698,1770,212,2484,2485,2486,2487,2488,2489,2490,2491,2492,2493,2494,2495,2496,1757,2497,1758,212,2498,2499,2500,2501,1758,212,2502,2503,2504,212,2505,2506,2507,212,2508,2509,2510,2138,212,2511,2512,212,2513,2469,212,2514,2515,212,2217,2516,2093,2517,2518,2519,2188,1698,212,2520,2503,2504,212,2521,2522,2523,212,2088,2509,2510,2138,212,2524,2525,212,2217,2093,1698,212,2526,2527,2528,2529,2096,2530,2531,212,2532,2533,212,2534,2264,2188,1698,212,2535,2536,1687,2537,2538,2539,2540,2541,2542,2543,2544,2545,2546,2547,212,2548,2549,212,2550,2551,2552,2553,2554,2555,1697,1698,212,2556,2557,2088,2509,2510,2138,212,2558,212,2217,2559,2188,1698,1770,212,2560,2561,2562,2563,2564,2088,2565,212,2533,212,2566,2187,1698,212,2567,2088,2568,2569,2570,2571,2572,1757,212,2573,2512,2093,212,2574,212,2575,2576,212,2577,2578,2579,2580,2581,2582,2583,2584,1698,212,2585,2088,2586,212,2357,212,2587,2187,1698,212,2588,2088,2568,2569,2570,2589,2572,1757,212,2590,2512,212,2591,2592,2187,212,2593,2594,212,2595,2596,1698,212,2597,2088,2598,2599,2206,2600,2601,2602,2603,2604,2605,1709,2589,2572,1757,212,2606,2512,2357,212,2607,2608,2592,1698,212,2609,2610,2611,2612,2088,2568,2569,2570,2613,2614,2572,1757,212,2615,2616,2617,2512,212,2618,2619,212,2620,2621,212,2622,2623,2624,2625,2626,2627,2628,1698,212,2629,2630,2631,2632,2633,2634,2635,2569,2636,2637,2572,1757,212,2638,2639,2512,212,2364,2238,212,2640,2641,212,2642,1698,212,2643,2635,2417,212,2644,212,2436,1698,212,2645,2088,2646,2569,2647,2571,2572,1757,212,2648,2512,212,2649,212,2650,2651,2652,212,2238,2473,2653,2654,2584,1698,212,2655,2656,2657,2658,2659,2088,2568,2569,2570,2571,2572,1757,212,2660,2512,212,2364,2661,212,2621,2662,2663,1698,212,2664,2665,2666,2667,2568,2569,2668,2669,2670,2570,2589,2572,1757,212,2671,2512,212,2357,2672,212,2673,1698,212,2674,2568,2569,2670,2570,2571,2572,1757,212,2660,2512,212,2364,2661,212,2621,2662,2663,1698,212,2675,2676,2677,2568,2569,2678,2679,2680,2570,2589,2572,1757,212,2681,2512,212,2682,2672,212,2683,2684,1698,212,2685,2568,2569,2680,2570,2571,2572,1757,212,2686,2512,212,2364,2661,212,2687,2662,2663,1698,212,2688,2689,2690,2691,2088,2568,2569,2570,2589,2571,2572,1757,212,2606,2512,212,2682,2692,2693,212,2694,2695,1698,1770],[4026],{"_1639":348,"_1640":2699,"_510":4027,"_1643":62},[2701,2702,2703,2704,2705,212,2706,212,2707,2708,2709,2710,212,2711,2712,2713,2714,212,2715,2716,2717,2718,2719,2720,2721,2722,1758,1673,212,2723,2724,2725,2726,2727,1673,212,2728,2729,2730,2731,2732,2733,1673,212,2734,2735,2736,2737,2738,2739,2740,2741,2742,2743,2744,2745,2746,2747,2748,2749,2750,2751,2752,2753,2754,2755,2756,2757,2758,2759,2760,2761,2605,1709,2762,2763,2764,1697,2765,2766,1758,2767,1673,212,2768,2769,2770,2771,2772,2773,1673,212,2774,2775,2776,2777,2778,2779,2780,1673,212,2781,2782,2783,2784,2785,2786,2787,2788,2789,2790,2791,212,2792,2793,2794,2795,1673,212,2796,212,2797,2798,2799,2800,2801,2802,2803,2804,2805,2806,2807,212,2808,2809,2810,2811,1758,1673,212,2812,2813,2814,2815,2816,2817,1645,2818,2819,2820,2821,2822,2823,2737,2824,2825,2826,2827,2828,1758,1673,212,2829,2830,2831,2832,2833,2834,2835,2836,2837,2838,2839,2840,2841,2842,2843,2844,1698,2845,2846,2847,2848,2849,2850,1758,2851,2852,1673,212,2853,2854,2855,2856,1645,2857,2858,2859,2860,2861,2862,2863,2864,2865,2866,2867,2868,2869,2870,2871,2872,2873,2874,2848,2849,2850,1758,2851,2852,1673,212,2875,2876,2877,2878,2879,2880,2881,2882,1645,2883,2884,2885,2886,2887,2888,2889,2890,2891,2892,1673,212,2893,2894,2895,2896,2897,2898,2899,2900,2901,2902,2903,2904,2839,2905,2906,2907,2908,2073,2737,2909,2910,2911,2912,1832,2913,2914,2915,2916,2917,2918,2919,2920,2921,2922,2923,2924,2925,2138,2825,2926,2927,2928,2929,2930,1758,1673,212,2931,2932,2933,2934,2935,2936,2937,2938,2939,1645,2940,2941,2942,2943,2944,2945,212,2946,2947,2948,2949,2950,212,2951,2952,2953,2954,212,2955,2956,2957,2958,2959,2960,2961,2962,1757,2963,2964,2965,1673,212,2966,2967,2968,2969,2970,212,2971,2972,212,2973,2974,2975,2871,212,2976,2977,2978,2979,2980,2981,2982,2983,2984,2985,2986,2987,2988,2989,2990,2991,2992,2993,2994,2995,2996,2997,2998,2999,3000,2994,3001,3002,3003,1757,212,3004,1673,212,3005,3006,3007,3008,2737,3009,3010,2765,3011,1758,1673,212,3012,212,3013,3014,1673,212,3015,3016,3017,3018,1645,3019,3020,3021,3022,2782,3023,3024,3025,2785,3026,2843,3027,3028,1698,1673,212,3029,2782,3030,3024,3025,2785,3026,3031,3027,2844,1698,1673,212,3032,3033,3034,3035,3036,3037,2782,3038,3039,3024,2785,3026,3031,3040,3041,3042,3043,3044,1698,1673,212,3045,3026,3046,3047,1698,1673,212,3048,3049,3050,2782,3051,3052,2737,3053,2825,3054,1687,3055,3056,3057,3058,3059,3060,3061,3062,1709,3063,3064,3065,3066,1697,1758,1673,212,3067,2782,3068,3051,3069,2791,3070,2793,3071,3072,3073,3074,3075,2963,1673,212,3076,3052,2737,3077,2825,3054,1687,3055,3078,3057,3079,3080,3081,3059,3060,3082,3062,1709,3063,3064,3065,3066,1697,1758,1673,212,3083,3084,3085,3086,3087,3088,2737,3089,2825,3090,3091,3092,3093,3094,3095,3096,1758,1673,212,3097,3098,3099,3100,3101,3102,3103,3104,3105,3106,3107,3108,1673,212,3109,3110,3111,3112,3113,3114,3115,3116,3117,3118,3119,3120,1673],[4029,4030,4031,4032,4033,4034,4035,4036,4037,4038,4039,4040,4041,4042,4043],{"_1588":49,"_49":3160},{"_1588":3138,"_169":2696,"_1639":3158,"_1640":3159},{"_1588":49,"_49":3157},{"_1588":3138,"_169":2002,"_1639":3155,"_1640":3156},{"_1588":49,"_49":3154},{"_1588":3138,"_169":1884,"_1639":3152,"_1640":3153},{"_1588":49,"_49":3151},{"_1588":3138,"_169":1884,"_1639":3149,"_1640":3150},{"_1588":49,"_49":3148},{"_1588":3138,"_169":1771,"_1639":3146,"_1640":3147},{"_1588":3138,"_169":1771,"_1639":3144,"_1640":3145},{"_1588":49,"_49":3143},{"_1588":3138,"_169":1633,"_1639":3141,"_1640":3142},{"_1588":3138,"_169":1633,"_1639":3139,"_1640":3140},{"_1588":49,"_49":3137},[4848,4849,4850],[],{"_1593":1594,"_49":1595,"_1596":1597},{"_1567":4839},{"_350":4838},{"_350":4083},{"_317":318,"_308":319,"_320":321,"_322":62,"_323":18,"_324":18,"_325":326,"_327":328,"_329":280,"_330":131,"_331":332,"_333":334,"_335":336,"_337":-5,"_338":-5,"_339":4082,"_341":342,"_343":344,"_345":346,"_347":348},{"_45":127,"_206":207,"_208":209,"_210":18,"_211":212,"_213":214,"_215":4071,"_217":-5,"_218":219,"_220":18,"_221":4072,"_223":212,"_224":212,"_225":4073,"_227":4074,"_229":4075,"_231":-5,"_232":233,"_234":235,"_236":237,"_238":4076,"_58":-5,"_123":240,"_241":4077,"_243":4078,"_245":246,"_247":18,"_248":18},{"_137":4064},[4054,4055,4056,4057,4058,4059,4060,4061,4062,4063],{"_156":184,"_158":159,"_160":161,"_162":163,"_164":185,"_166":167,"_168":35,"_169":-5},{"_156":183,"_158":159,"_160":161,"_162":163,"_164":180,"_166":167,"_168":35,"_169":-5},{"_156":181,"_158":159,"_160":161,"_162":163,"_164":182,"_166":167,"_168":35,"_169":-5},{"_156":179,"_158":159,"_160":161,"_162":163,"_164":180,"_166":167,"_168":35,"_169":-5},{"_156":178,"_158":174,"_160":175,"_162":163,"_164":177,"_166":167,"_168":35,"_169":-5},{"_156":173,"_158":174,"_160":175,"_162":176,"_164":177,"_166":167,"_168":35,"_169":-5},{"_156":172,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":171,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":170,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":157,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},[4065,4066,4067],{"_190":4070,"_192":203},{"_190":4069,"_192":199},{"_190":4068,"_192":193},{"_194":195,"_96":196,"_123":197},{"_194":200,"_96":196,"_123":201},{"_194":204,"_96":196,"_123":205},{"_310":311,"_312":-5,"_313":-5,"_314":-5,"_315":-5,"_316":-5},[270],{"_270":4079},{"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265,"_266":267,"_268":269},{},[],{"_251":62},{"_249":62,"_250":212},{"_45":272,"_194":273,"_274":4080,"_276":209,"_277":278,"_279":280,"_281":282,"_283":284,"_285":286,"_287":67,"_288":18,"_289":-5,"_290":-5,"_291":-5,"_292":-5,"_293":-5,"_294":-5,"_168":295,"_296":-5,"_58":4081},{"_302":303,"_45":304,"_96":305,"_306":307,"_308":309},{"_298":18,"_299":18,"_300":18,"_301":18},{"_302":303,"_194":303,"_349":-5,"_306":307,"_45":304},[4084,4085,4086,4087,4088,4089,4090,4091,4092,4093,4094,4095,4096,4097,4098,4099,4100,4101,4102,4103,4104,4105,4106,4107,4108,4109,4110,4111,4112,4113,4114,4115,4116,4117,4118,4119,4120,4121,4122,4123,4124,4125,4126,4127,4128,4129,4130,4131,4132,4133,4134,4135,4136,4137,4138,4139,4140,4141,4142,4143,4144,4145,4146,4147,4148,4149,4150,4151,4152,4153,4154,4155,4156,4157,4158,4159,4160,4161,4162,4163,4164,4165,4166,4167,4168,4169,4170,4171,4172,4173,4174,4175,4176,4177,4178,4179,4180,4181,4182,4183,4184,4185,4186,4187,4188,4189,4190,4191,4192,4193,4194,4195,4196,4197,4198,4199,4200,4201,4202,4203,4204,4205,4206,4207,4208,4209,4210,4211,4212,4213,4214],{"_162":1539,"_484":4834},{"_162":501,"_484":4831},{"_162":1529,"_484":4828},{"_162":505,"_484":4822},{"_162":505,"_484":4817},{"_162":505,"_484":4812},{"_162":505,"_484":4806},{"_162":505,"_484":4801},{"_162":523,"_484":4796},{"_162":523,"_484":4792},{"_162":505,"_484":4787},{"_162":505,"_484":4784},{"_162":505,"_484":4777},{"_162":523,"_484":4773},{"_162":523,"_484":4769},{"_162":505,"_484":4764},{"_162":505,"_484":4761},{"_162":523,"_484":4757},{"_162":505,"_484":4750},{"_162":523,"_484":4746},{"_162":505,"_484":4742},{"_162":505,"_484":4739},{"_162":523,"_484":4732},{"_162":505,"_484":4725},{"_162":523,"_484":4721},{"_162":505,"_484":4715},{"_162":505,"_484":4712},{"_162":505,"_484":4705},{"_162":523,"_484":4699},{"_162":523,"_484":4695},{"_162":505,"_484":4688},{"_162":523,"_484":4684},{"_162":505,"_484":4679},{"_162":505,"_484":4676},{"_162":523,"_484":4665},{"_162":505,"_484":4658},{"_162":523,"_484":4654},{"_162":505,"_484":4648},{"_162":505,"_484":4645},{"_162":523,"_484":4641},{"_162":505,"_484":4634},{"_162":523,"_484":4630},{"_162":505,"_484":4625},{"_162":505,"_484":4622},{"_162":523,"_484":4615},{"_162":505,"_484":4608},{"_162":523,"_484":4604},{"_162":505,"_484":4599},{"_162":505,"_484":4596},{"_162":505,"_484":4589},{"_162":523,"_484":4585},{"_162":505,"_484":4581},{"_162":505,"_484":4578},{"_162":505,"_484":4571},{"_162":523,"_484":4567},{"_162":505,"_484":4562},{"_162":505,"_484":4559},{"_162":505,"_484":4552},{"_162":505,"_484":4549},{"_162":505,"_484":4542},{"_162":523,"_484":4538},{"_162":505,"_484":4534},{"_162":505,"_484":4531},{"_162":505,"_484":4524},{"_162":523,"_484":4520},{"_162":523,"_484":4516},{"_162":505,"_484":4511},{"_162":505,"_484":4508},{"_162":505,"_484":4501},{"_162":505,"_484":4498},{"_162":505,"_484":4491},{"_162":505,"_484":4488},{"_162":505,"_484":4481},{"_162":523,"_484":4477},{"_162":523,"_484":4473},{"_162":523,"_484":4469},{"_162":505,"_484":4464},{"_162":505,"_484":4461},{"_162":505,"_484":4454},{"_162":505,"_484":4451},{"_162":505,"_484":4444},{"_162":523,"_484":4440},{"_162":523,"_484":4436},{"_162":505,"_484":4431},{"_162":505,"_484":4428},{"_162":505,"_484":4421},{"_162":505,"_484":4418},{"_162":505,"_484":4411},{"_162":523,"_484":4407},{"_162":523,"_484":4403},{"_162":505,"_484":4398},{"_162":505,"_484":4395},{"_162":505,"_484":4388},{"_162":523,"_484":4384},{"_162":523,"_484":4380},{"_162":505,"_484":4375},{"_162":505,"_484":4372},{"_162":505,"_484":4365},{"_162":505,"_484":4362},{"_162":505,"_484":4355},{"_162":523,"_484":4351},{"_162":523,"_484":4347},{"_162":505,"_484":4342},{"_162":505,"_484":4339},{"_162":505,"_484":4332},{"_162":505,"_484":4329},{"_162":505,"_484":4322},{"_162":523,"_484":4318},{"_162":523,"_484":4314},{"_162":505,"_484":4309},{"_162":505,"_484":4306},{"_162":505,"_484":4299},{"_162":523,"_484":4295},{"_162":505,"_484":4290},{"_162":505,"_484":4287},{"_162":505,"_484":4280},{"_162":523,"_484":4276},{"_162":523,"_484":4272},{"_162":505,"_484":4267},{"_162":505,"_484":4264},{"_162":523,"_484":4257},{"_162":505,"_484":4250},{"_162":523,"_484":4246},{"_162":505,"_484":4241},{"_162":505,"_484":4238},{"_162":505,"_484":4231},{"_162":523,"_484":4227},{"_162":523,"_484":4225},{"_162":505,"_484":4220},{"_162":501,"_484":4218},{"_162":483,"_484":4215},{"_486":487,"_91":4216},{"_489":490,"_491":492,"_107":-5,"_45":493,"_494":4217,"_496":497,"_498":499,"_500":117},[],{"_500":4219,"_486":487},{"_96":504},{"_507":4221,"_486":487,"_509":493},{"_510":4222,"_512":-5,"_45":513,"_514":4223,"_516":517,"_100":97,"_96":518},[4224],{"_519":493},{"_49":521,"_96":522},{"_525":526,"_507":4226,"_486":487,"_509":493},{"_45":513,"_516":517,"_49":521,"_96":528},{"_525":530,"_507":4228,"_486":487,"_509":493},{"_532":533,"_534":535,"_536":4229,"_538":539,"_491":540,"_541":35,"_45":542,"_543":544,"_545":546,"_500":117,"_96":547},[4230],{"_534":549,"_96":550},{"_507":4232,"_486":487,"_509":493},{"_553":554,"_45":-5,"_514":4233,"_194":-5,"_556":4234,"_96":558},{"_519":493},{"_327":4235,"_560":-5},[4236,4237],{"_49":565,"_96":564},{"_49":563,"_96":564},{"_507":4239,"_486":487,"_509":493},{"_553":554,"_45":568,"_569":570,"_514":4240,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4242,"_486":487,"_509":493},{"_510":-5,"_577":578,"_45":579,"_514":4243,"_581":4244,"_96":583},{"_519":493},[4245],{"_49":585,"_96":586},{"_525":588,"_507":4247,"_486":487,"_509":493},{"_510":4248,"_45":579,"_581":4249,"_96":583},[],[585],{"_507":4251,"_486":487,"_509":493},{"_553":594,"_45":-5,"_514":4252,"_194":-5,"_556":4253,"_96":558},{"_519":493},{"_327":4254,"_560":-5},[4255,4256],{"_49":601,"_96":564},{"_49":600,"_96":564},{"_525":603,"_507":4258,"_486":487,"_509":493},{"_605":-5,"_606":4259,"_491":608,"_107":-5,"_45":609,"_610":-5,"_611":-5,"_612":-5,"_613":4260,"_615":616,"_500":117,"_617":616,"_96":618},{"_325":623,"_327":624},{"_619":-5,"_510":4261,"_621":4262},[4263],{"_325":623,"_327":624},{"_96":49,"_49":600},{"_507":4265,"_486":487,"_509":493},{"_553":594,"_45":628,"_569":629,"_514":4266,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4268,"_486":487,"_509":493},{"_510":-5,"_577":633,"_45":634,"_514":4269,"_581":4270,"_96":583},{"_519":493},[4271],{"_49":638,"_96":586},{"_525":640,"_507":4273,"_486":487,"_509":493},{"_510":4274,"_45":634,"_581":4275,"_96":583},[],[638],{"_525":645,"_507":4277,"_486":487,"_509":493},{"_532":647,"_534":648,"_536":4278,"_538":539,"_491":650,"_541":35,"_45":651,"_543":652,"_545":546,"_500":117,"_96":547},[4279],{"_534":654,"_96":550},{"_507":4281,"_486":487,"_509":493},{"_553":657,"_45":-5,"_514":4282,"_194":-5,"_556":4283,"_96":558},{"_519":493},{"_327":4284,"_560":-5},[4285,4286],{"_49":664,"_96":564},{"_49":663,"_96":564},{"_507":4288,"_486":487,"_509":493},{"_553":657,"_45":667,"_569":668,"_514":4289,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4291,"_486":487,"_509":493},{"_510":-5,"_577":672,"_45":673,"_514":4292,"_581":4293,"_96":583},{"_519":493},[4294],{"_49":677,"_96":586},{"_525":679,"_507":4296,"_486":487,"_509":493},{"_510":4297,"_45":673,"_581":4298,"_96":583},[],[677],{"_507":4300,"_486":487,"_509":493},{"_553":685,"_45":-5,"_514":4301,"_194":-5,"_556":4302,"_96":558},{"_519":493},{"_327":4303,"_560":-5},[4304,4305],{"_49":692,"_96":564},{"_49":691,"_96":564},{"_507":4307,"_486":487,"_509":493},{"_553":685,"_45":695,"_569":696,"_514":4308,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4310,"_486":487,"_509":493},{"_510":-5,"_577":700,"_45":701,"_514":4311,"_581":4312,"_96":583},{"_519":493},[4313],{"_49":705,"_96":586},{"_525":707,"_507":4315,"_486":487,"_509":493},{"_510":4316,"_45":701,"_581":4317,"_96":583},[],[705],{"_525":712,"_507":4319,"_486":487,"_509":493},{"_532":714,"_534":715,"_536":4320,"_538":717,"_491":718,"_541":348,"_45":719,"_543":720,"_545":546,"_500":721,"_96":547},[4321],{"_534":723,"_96":550},{"_507":4323,"_486":487,"_509":493},{"_553":726,"_45":-5,"_514":4324,"_194":-5,"_556":4325,"_96":558},{"_519":493},{"_327":4326,"_560":-5},[4327,4328],{"_49":732,"_96":564},{"_49":714,"_96":564},{"_507":4330,"_486":487,"_509":493},{"_553":726,"_45":735,"_569":736,"_514":4331,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4333,"_486":487,"_509":493},{"_553":740,"_45":-5,"_514":4334,"_194":-5,"_556":4335,"_96":558},{"_519":493},{"_327":4336,"_560":-5},[4337,4338],{"_49":747,"_96":564},{"_49":746,"_96":564},{"_507":4340,"_486":487,"_509":493},{"_553":740,"_45":750,"_569":751,"_514":4341,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4343,"_486":487,"_509":493},{"_510":-5,"_577":755,"_45":756,"_514":4344,"_581":4345,"_96":583},{"_519":493},[4346],{"_49":760,"_96":586},{"_525":762,"_507":4348,"_486":487,"_509":493},{"_510":4349,"_45":756,"_581":4350,"_96":583},[],[760],{"_525":767,"_507":4352,"_486":487,"_509":493},{"_532":769,"_534":770,"_536":4353,"_538":772,"_491":773,"_541":35,"_45":774,"_543":775,"_545":546,"_500":117,"_96":547},[4354],{"_534":777,"_96":550},{"_507":4356,"_486":487,"_509":493},{"_553":780,"_45":-5,"_514":4357,"_194":-5,"_556":4358,"_96":558},{"_519":493},{"_327":4359,"_560":-5},[4360,4361],{"_49":786,"_96":564},{"_49":769,"_96":564},{"_507":4363,"_486":487,"_509":493},{"_553":780,"_45":789,"_569":790,"_514":4364,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4366,"_486":487,"_509":493},{"_553":794,"_45":-5,"_514":4367,"_194":-5,"_556":4368,"_96":558},{"_519":493},{"_327":4369,"_560":-5},[4370,4371],{"_49":801,"_96":564},{"_49":800,"_96":564},{"_507":4373,"_486":487,"_509":493},{"_553":794,"_45":804,"_569":805,"_514":4374,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4376,"_486":487,"_509":493},{"_510":-5,"_577":809,"_45":810,"_514":4377,"_581":4378,"_96":583},{"_519":493},[4379],{"_49":814,"_96":586},{"_525":816,"_507":4381,"_486":487,"_509":493},{"_510":4382,"_45":810,"_581":4383,"_96":583},[],[814],{"_525":821,"_507":4385,"_486":487,"_509":493},{"_532":823,"_534":824,"_536":4386,"_538":772,"_491":826,"_541":35,"_45":827,"_543":828,"_545":546,"_500":117,"_96":547},[4387],{"_534":830,"_96":550},{"_507":4389,"_486":487,"_509":493},{"_553":833,"_45":-5,"_514":4390,"_194":-5,"_556":4391,"_96":558},{"_519":493},{"_327":4392,"_560":-5},[4393,4394],{"_49":839,"_96":564},{"_49":823,"_96":564},{"_507":4396,"_486":487,"_509":493},{"_553":833,"_45":842,"_569":843,"_514":4397,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4399,"_486":487,"_509":493},{"_510":-5,"_577":847,"_45":848,"_514":4400,"_581":4401,"_96":583},{"_519":493},[4402],{"_49":852,"_96":586},{"_525":854,"_507":4404,"_486":487,"_509":493},{"_510":4405,"_45":848,"_581":4406,"_96":583},[],[852],{"_525":859,"_507":4408,"_486":487,"_509":493},{"_532":861,"_534":862,"_536":4409,"_538":772,"_491":864,"_541":348,"_45":865,"_543":866,"_545":546,"_500":721,"_96":547},[4410],{"_534":868,"_96":550},{"_507":4412,"_486":487,"_509":493},{"_553":871,"_45":-5,"_514":4413,"_194":-5,"_556":4414,"_96":558},{"_519":493},{"_327":4415,"_560":-5},[4416,4417],{"_49":877,"_96":564},{"_49":861,"_96":564},{"_507":4419,"_486":487,"_509":493},{"_553":871,"_45":880,"_569":881,"_514":4420,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4422,"_486":487,"_509":493},{"_553":885,"_45":-5,"_514":4423,"_194":-5,"_556":4424,"_96":558},{"_519":493},{"_327":4425,"_560":-5},[4426,4427],{"_49":747,"_96":564},{"_49":891,"_96":564},{"_507":4429,"_486":487,"_509":493},{"_553":885,"_45":894,"_569":895,"_514":4430,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4432,"_486":487,"_509":493},{"_510":-5,"_577":899,"_45":900,"_514":4433,"_581":4434,"_96":583},{"_519":493},[4435],{"_49":904,"_96":586},{"_525":906,"_507":4437,"_486":487,"_509":493},{"_510":4438,"_45":900,"_581":4439,"_96":583},[],[904],{"_525":911,"_507":4441,"_486":487,"_509":493},{"_532":913,"_534":914,"_536":4442,"_538":772,"_491":916,"_541":917,"_45":918,"_543":919,"_545":546,"_500":721,"_96":547},[4443],{"_534":921,"_96":550},{"_507":4445,"_486":487,"_509":493},{"_553":924,"_45":-5,"_514":4446,"_194":-5,"_556":4447,"_96":558},{"_519":493},{"_327":4448,"_560":-5},[4449,4450],{"_49":930,"_96":564},{"_49":913,"_96":564},{"_507":4452,"_486":487,"_509":493},{"_553":924,"_45":933,"_569":934,"_514":4453,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4455,"_486":487,"_509":493},{"_553":938,"_45":-5,"_514":4456,"_194":-5,"_556":4457,"_96":558},{"_519":493},{"_327":4458,"_560":-5},[4459,4460],{"_49":801,"_96":564},{"_49":944,"_96":564},{"_507":4462,"_486":487,"_509":493},{"_553":938,"_45":947,"_569":948,"_514":4463,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4465,"_486":487,"_509":493},{"_510":-5,"_577":952,"_45":953,"_514":4466,"_581":4467,"_96":583},{"_519":493},[4468],{"_49":957,"_96":586},{"_525":959,"_507":4470,"_486":487,"_509":493},{"_510":4471,"_45":953,"_581":4472,"_96":583},[],[957],{"_525":964,"_507":4474,"_486":487,"_509":493},{"_532":966,"_534":967,"_536":4475,"_538":717,"_491":969,"_541":348,"_45":970,"_543":971,"_545":546,"_500":721,"_96":547},[4476],{"_534":973,"_96":550},{"_525":975,"_507":4478,"_486":487,"_509":493},{"_532":977,"_534":978,"_536":4479,"_538":717,"_491":980,"_541":35,"_45":981,"_543":982,"_545":546,"_500":117,"_96":547},[4480],{"_534":984,"_96":550},{"_507":4482,"_486":487,"_509":493},{"_553":987,"_45":-5,"_514":4483,"_194":-5,"_556":4484,"_96":558},{"_519":493},{"_327":4485,"_560":-5},[4486,4487],{"_49":994,"_96":564},{"_49":993,"_96":564},{"_507":4489,"_486":487,"_509":493},{"_553":987,"_45":997,"_569":998,"_514":4490,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4492,"_486":487,"_509":493},{"_553":1002,"_45":-5,"_514":4493,"_194":-5,"_556":4494,"_96":558},{"_519":493},{"_327":4495,"_560":-5},[4496,4497],{"_49":1009,"_96":564},{"_49":1008,"_96":564},{"_507":4499,"_486":487,"_509":493},{"_553":1002,"_45":1012,"_569":998,"_514":4500,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4502,"_486":487,"_509":493},{"_553":1016,"_45":-5,"_514":4503,"_194":-5,"_556":4504,"_96":558},{"_519":493},{"_327":4505,"_560":-5},[4506,4507],{"_49":747,"_96":564},{"_49":1022,"_96":564},{"_507":4509,"_486":487,"_509":493},{"_553":1016,"_45":1025,"_569":1026,"_514":4510,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4512,"_486":487,"_509":493},{"_510":-5,"_577":1030,"_45":1031,"_514":4513,"_581":4514,"_96":583},{"_519":493},[4515],{"_49":1035,"_96":586},{"_525":1037,"_507":4517,"_486":487,"_509":493},{"_510":4518,"_45":1031,"_581":4519,"_96":583},[],[1035],{"_525":1042,"_507":4521,"_486":487,"_509":493},{"_532":1044,"_534":1045,"_536":4522,"_538":717,"_491":1047,"_541":35,"_45":1048,"_543":1049,"_545":546,"_500":117,"_96":547},[4523],{"_534":1051,"_96":550},{"_507":4525,"_486":487,"_509":493},{"_553":1054,"_45":-5,"_514":4526,"_194":-5,"_556":4527,"_96":558},{"_519":493},{"_327":4528,"_560":-5},[4529,4530],{"_49":1060,"_96":564},{"_49":212,"_96":564},{"_507":4532,"_486":487,"_509":493},{"_553":1054,"_45":1063,"_569":1064,"_514":4533,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4535,"_486":487,"_509":493},{"_510":-5,"_577":1068,"_45":1069,"_514":4536,"_581":4537,"_96":583},{"_519":493},[],{"_525":1073,"_507":4539,"_486":487,"_509":493},{"_510":4540,"_45":1069,"_581":4541,"_96":583},[],[],{"_507":4543,"_486":487,"_509":493},{"_553":1079,"_45":-5,"_514":4544,"_194":-5,"_556":4545,"_96":558},{"_519":493},{"_327":4546,"_560":-5},[4547,4548],{"_49":1009,"_96":564},{"_49":1044,"_96":564},{"_507":4550,"_486":487,"_509":493},{"_553":1079,"_45":1087,"_569":1064,"_514":4551,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4553,"_486":487,"_509":493},{"_553":1091,"_45":-5,"_514":4554,"_194":-5,"_556":4555,"_96":558},{"_519":493},{"_327":4556,"_560":-5},[4557,4558],{"_49":747,"_96":564},{"_49":1097,"_96":564},{"_507":4560,"_486":487,"_509":493},{"_553":1091,"_45":1100,"_569":1101,"_514":4561,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4563,"_486":487,"_509":493},{"_510":-5,"_577":1105,"_45":1106,"_514":4564,"_581":4565,"_96":583},{"_519":493},[4566],{"_49":1110,"_96":586},{"_525":1112,"_507":4568,"_486":487,"_509":493},{"_510":4569,"_45":1106,"_581":4570,"_96":583},[],[1110],{"_507":4572,"_486":487,"_509":493},{"_553":1118,"_45":-5,"_514":4573,"_194":-5,"_556":4574,"_96":558},{"_519":493},{"_327":4575,"_560":-5},[4576,4577],{"_49":1009,"_96":564},{"_49":966,"_96":564},{"_507":4579,"_486":487,"_509":493},{"_553":1118,"_45":1126,"_569":1127,"_514":4580,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4582,"_486":487,"_509":493},{"_510":-5,"_577":1131,"_45":1132,"_514":4583,"_581":4584,"_96":583},{"_519":493},[],{"_525":1136,"_507":4586,"_486":487,"_509":493},{"_510":4587,"_45":1132,"_581":4588,"_96":583},[],[],{"_507":4590,"_486":487,"_509":493},{"_553":1142,"_45":-5,"_514":4591,"_194":-5,"_556":4592,"_96":558},{"_519":493},{"_327":4593,"_560":-5},[4594,4595],{"_49":747,"_96":564},{"_49":1148,"_96":564},{"_507":4597,"_486":487,"_509":493},{"_553":1142,"_45":1151,"_569":1152,"_514":4598,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4600,"_486":487,"_509":493},{"_510":-5,"_577":1156,"_45":1157,"_514":4601,"_581":4602,"_96":583},{"_519":493},[4603],{"_49":1161,"_96":586},{"_525":1163,"_507":4605,"_486":487,"_509":493},{"_510":4606,"_45":1157,"_581":4607,"_96":583},[],[1161],{"_507":4609,"_486":487,"_509":493},{"_553":1169,"_45":-5,"_514":4610,"_194":-5,"_556":4611,"_96":558},{"_519":493},{"_327":4612,"_560":-5},[4613,4614],{"_49":601,"_96":564},{"_49":1175,"_96":564},{"_525":1177,"_507":4616,"_486":487,"_509":493},{"_1179":4617,"_45":1181,"_500":117,"_96":1182},[4618,4619],{"_338":1190,"_9":4621,"_169":1192},{"_338":1185,"_9":4620,"_169":1187},{"_1188":-5,"_96":1189},{"_1188":-5,"_96":1189},{"_507":4623,"_486":487,"_509":493},{"_553":1169,"_45":1195,"_569":1196,"_514":4624,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4626,"_486":487,"_509":493},{"_510":-5,"_577":1200,"_45":1201,"_514":4627,"_581":4628,"_96":583},{"_519":493},[4629],{"_49":1205,"_96":586},{"_525":1207,"_507":4631,"_486":487,"_509":493},{"_510":4632,"_45":1201,"_581":4633,"_96":583},[],[1205],{"_507":4635,"_486":487,"_509":493},{"_553":1213,"_45":-5,"_514":4636,"_194":-5,"_556":4637,"_96":558},{"_519":493},{"_327":4638,"_560":-5},[4639,4640],{"_49":565,"_96":564},{"_49":1219,"_96":564},{"_525":1221,"_507":4642,"_486":487,"_509":493},{"_532":1219,"_534":1223,"_536":4643,"_538":539,"_491":35,"_541":35,"_45":1225,"_543":1226,"_545":546,"_500":117,"_96":547},[4644],{"_534":1228,"_96":550},{"_507":4646,"_486":487,"_509":493},{"_553":1213,"_45":1231,"_569":1232,"_514":4647,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4649,"_486":487,"_509":493},{"_510":-5,"_577":1236,"_45":1237,"_514":4650,"_581":4651,"_96":583},{"_519":493},[4652,4653],{"_49":1243,"_96":586},{"_49":1242,"_96":586},{"_525":1245,"_507":4655,"_486":487,"_509":493},{"_510":4656,"_45":1237,"_581":4657,"_96":583},[],[1243,1242],{"_507":4659,"_486":487,"_509":493},{"_553":1251,"_45":-5,"_514":4660,"_194":-5,"_556":4661,"_96":558},{"_519":493},{"_327":4662,"_560":-5},[4663,4664],{"_49":664,"_96":564},{"_49":1175,"_96":564},{"_525":1258,"_507":4666,"_486":487,"_509":493},{"_1179":4667,"_45":1261,"_500":117,"_96":1182},[4668,4669,4670,4671],{"_338":1274,"_9":4675,"_169":1276},{"_338":1272,"_9":4674,"_169":1192},{"_338":1269,"_9":4673,"_169":1271},{"_338":1266,"_9":4672,"_169":1268},{"_1188":-5,"_96":1189},{"_1188":-5,"_96":1189},{"_1188":-5,"_96":1189},{"_1188":-5,"_96":1189},{"_507":4677,"_486":487,"_509":493},{"_553":1251,"_45":1279,"_569":1280,"_514":4678,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4680,"_486":487,"_509":493},{"_510":-5,"_577":1284,"_45":1285,"_514":4681,"_581":4682,"_96":583},{"_519":493},[4683],{"_49":1289,"_96":586},{"_525":1291,"_507":4685,"_486":487,"_509":493},{"_510":4686,"_45":1285,"_581":4687,"_96":583},[],[1289],{"_507":4689,"_486":487,"_509":493},{"_510":-5,"_577":1297,"_45":1298,"_514":4690,"_581":4691,"_96":583},{"_519":493},[4692,4693,4694],{"_49":1306,"_96":586},{"_49":1305,"_96":586},{"_49":1304,"_96":586},{"_525":1308,"_507":4696,"_486":487,"_509":493},{"_510":4697,"_45":1298,"_581":4698,"_96":583},[],[1306,1305,1304],{"_525":1313,"_507":4700,"_486":487,"_509":493},{"_532":1315,"_534":1316,"_536":4701,"_538":539,"_491":1318,"_541":35,"_45":1319,"_543":1320,"_545":546,"_500":117,"_96":547},[4702,4703,4704],{"_534":1332,"_169":1333,"_1326":1334,"_96":1328},{"_534":1329,"_194":1330,"_169":1268,"_96":1331},{"_534":1324,"_169":1325,"_1326":1327,"_96":1328},{"_507":4706,"_486":487,"_509":493},{"_553":1337,"_45":-5,"_514":4707,"_194":-5,"_556":4708,"_96":558},{"_519":493},{"_327":4709,"_560":-5},[4710,4711],{"_49":565,"_96":564},{"_49":1343,"_96":564},{"_507":4713,"_486":487,"_509":493},{"_553":1337,"_45":1346,"_569":1347,"_514":4714,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4716,"_486":487,"_509":493},{"_510":-5,"_577":1351,"_45":1352,"_514":4717,"_581":4718,"_96":583},{"_519":493},[4719,4720],{"_49":1358,"_96":586},{"_49":1357,"_96":586},{"_525":1360,"_507":4722,"_486":487,"_509":493},{"_510":4723,"_45":1352,"_581":4724,"_96":583},[],[1358,1357],{"_507":4726,"_486":487,"_509":493},{"_553":1366,"_45":-5,"_514":4727,"_194":-5,"_556":4728,"_96":558},{"_519":493},{"_327":4729,"_560":-5},[4730,4731],{"_49":664,"_96":564},{"_49":1372,"_96":564},{"_525":1374,"_507":4733,"_486":487,"_509":493},{"_532":1372,"_534":1376,"_536":4734,"_538":539,"_491":35,"_541":35,"_45":1378,"_543":1379,"_545":546,"_500":117,"_96":547},[4735,4736,4737,4738],{"_534":1391,"_194":1392,"_169":1271,"_96":1331},{"_534":1389,"_194":1390,"_169":1192,"_96":1331},{"_534":1387,"_194":1388,"_169":1276,"_96":1331},{"_534":1384,"_194":1385,"_169":1386,"_96":1331},{"_507":4740,"_486":487,"_509":493},{"_553":1366,"_45":1395,"_569":1396,"_514":4741,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4743,"_486":487,"_509":493},{"_510":-5,"_577":1400,"_45":1401,"_514":4744,"_581":4745,"_96":583},{"_519":493},[],{"_525":1405,"_507":4747,"_486":487,"_509":493},{"_510":4748,"_45":1401,"_581":4749,"_96":583},[],[],{"_507":4751,"_486":487,"_509":493},{"_553":1411,"_45":-5,"_514":4752,"_194":-5,"_556":4753,"_96":558},{"_519":493},{"_327":4754,"_560":-5},[4755,4756],{"_49":664,"_96":564},{"_49":1417,"_96":564},{"_525":1419,"_507":4758,"_486":487,"_509":493},{"_532":1417,"_534":1421,"_536":4759,"_538":539,"_491":35,"_541":917,"_45":1423,"_543":1424,"_545":546,"_500":721,"_96":547},[4760],{"_534":1426,"_96":550},{"_507":4762,"_486":487,"_509":493},{"_553":1411,"_45":1429,"_569":1430,"_514":4763,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4765,"_486":487,"_509":493},{"_510":-5,"_577":1434,"_45":1435,"_514":4766,"_581":4767,"_96":583},{"_519":493},[4768],{"_49":1439,"_96":586},{"_525":1441,"_507":4770,"_486":487,"_509":493},{"_510":4771,"_45":1435,"_581":4772,"_96":583},[],[1439],{"_525":1446,"_507":4774,"_486":487,"_509":493},{"_532":1448,"_534":1449,"_536":4775,"_538":539,"_491":1451,"_541":35,"_45":1452,"_543":1453,"_545":546,"_500":117,"_96":547},[4776],{"_534":1455,"_96":550},{"_507":4778,"_486":487,"_509":493},{"_553":1458,"_45":-5,"_514":4779,"_194":-5,"_556":4780,"_96":558},{"_519":493},{"_327":4781,"_560":-5},[4782,4783],{"_49":1465,"_96":564},{"_49":1464,"_96":564},{"_507":4785,"_486":487,"_509":493},{"_553":1458,"_45":1468,"_569":1469,"_514":4786,"_194":572,"_573":-5,"_500":117,"_96":574},{"_519":493},{"_507":4788,"_486":487,"_509":493},{"_510":-5,"_577":1473,"_45":1474,"_514":4789,"_581":4790,"_96":583},{"_519":493},[4791],{"_49":1478,"_96":586},{"_525":1480,"_507":4793,"_486":487,"_509":493},{"_510":4794,"_45":1474,"_581":4795,"_96":583},[],[1478],{"_525":1485,"_507":4797,"_486":487,"_509":493},{"_1487":-5,"_510":4798,"_45":1489,"_96":1490},[4799],{"_49":1492,"_1493":4800,"_96":49},[],{"_507":4802,"_486":487,"_509":493},{"_510":4803,"_512":-5,"_45":-5,"_514":4804,"_516":-5,"_100":339,"_96":518},[4805],{"_519":493},{"_49":1492,"_96":564},{"_507":4807,"_486":487,"_509":493},{"_510":4808,"_512":-5,"_45":-5,"_514":4809,"_516":-5,"_100":339,"_96":518},[4810,4811],{"_519":493},{"_49":1507,"_96":564},{"_49":1506,"_96":564},{"_507":4813,"_486":487,"_509":493},{"_510":4814,"_512":-5,"_45":-5,"_514":4815,"_516":-5,"_100":1512,"_96":518},[4816],{"_519":493},{"_49":1514,"_96":564},{"_507":4818,"_486":487,"_509":493},{"_510":4819,"_512":-5,"_45":-5,"_514":4820,"_516":-5,"_100":1512,"_96":518},[4821],{"_519":493},{"_49":1520,"_96":564},{"_507":4823,"_486":487,"_509":493},{"_510":4824,"_512":-5,"_45":-5,"_514":4825,"_516":-5,"_100":1512,"_96":518},[4826,4827],{"_519":493},{"_49":1528,"_96":564},{"_49":1527,"_96":564},{"_486":487,"_91":4829},{"_107":-5,"_45":493,"_494":4830,"_496":497,"_498":499,"_500":1533},[],{"_500":4832,"_486":487},{"_1536":4833,"_96":1538},[],{"_1541":4835},{"_1543":-5,"_1544":-5,"_1545":1546,"_1547":499,"_538":539,"_1548":18,"_1549":-5,"_1550":-5,"_1551":-5,"_1552":1553,"_45":487,"_1554":1555,"_194":-5,"_1556":-5,"_169":1557,"_1558":212,"_1559":499,"_1560":487,"_545":1561,"_500":4836,"_1563":-5,"_81":4837,"_1565":499},{"_96":504},[],[],[4840],{"_45":1570,"_1571":4841,"_1573":1574,"_1575":1574,"_510":4842,"_500":1577,"_512":-5,"_1578":35,"_1579":4843,"_1581":1582,"_1583":-5},{"_100":339,"_194":-5,"_1579":4847},{"_1588":49,"_1589":4846},{"_1584":4844},{"_1586":4845},[],[1591],{},{"_96":518,"_100":97,"_510":4875},{"_96":1625,"_1626":4854},{"_96":1601,"_1602":623,"_1603":1604,"_1605":4851,"_1607":-5},{"_96":1605,"_1608":539,"_132":133,"_1609":-5,"_338":1610,"_1611":4852,"_1613":1614,"_1615":1616,"_1617":917,"_1618":1619,"_1620":4853},{"_1622":1623,"_1624":-5},[],[4855,4856,4857,4858,4859],{"_169":2696,"_1634":-5,"_1635":4872,"_1637":-5},{"_169":2002,"_1634":-5,"_1635":4869,"_1637":-5},{"_169":1884,"_1634":-5,"_1635":4866,"_1637":-5},{"_169":1771,"_1634":-5,"_1635":4863,"_1637":-5},{"_169":1633,"_1634":-5,"_1635":4860,"_1637":-5},[4861],{"_1639":348,"_1640":1641,"_510":4862,"_1643":62},[1644,1645,1646,1645,1647,1648,1649,1650,1651,1645,1652,1653,1654,1645,1655,1645,1656,1657,212,1658,1659,1660,212,1661,1662,1663,1664,1665,1666,1667,1668,1669,1670,1671,1672,1673,212,1661,1674,1675,1676,1677,1670,1678,212,1679,212,1680,1681,1682,1683,1684,1685,1686,1687,1688,1689,1690,1691,1692,1693,1694,1695,1696,1697,1698,212,1699,1700,1701,1702,1703,1704,1705,1706,1707,1708,1709,212,1710,212,1711,1712,1713,1714,1715,1716,1717,1718,1719,1720,1721,1722,212,1723,1724,1717,1718,1719,1725,1726,212,1727,1728,1729,1730,1731,1732,1733,1734,1735,1736,212,1737,1738,1739,1740,1741,212,1742,1743,1744,1745,1741,1746,1747,212,1748,1749,1750,1751,1752,1753,1732,1754,1755,1756,1735,1757,1758,212,1759,1760,1761,1762,1763,1764,212,1765,1766,1767,1768,1769,1697,1698,1770],[4864],{"_1639":348,"_1640":1774,"_510":4865,"_1643":62},[1776,1645,1777,1645,1778,1645,1779,1645,1780,1781,1782,1783,1645,1784,1785,1786,1787,1788,1789,1790,1645,1791,1792,212,1793,1794,1795,1796,212,1797,1798,1799,1800,212,1801,212,1802,1803,1760,1761,1804,1805,1806,212,1807,1808,212,1809,1810,1811,1812,1813,1814,1815,1816,1817,1818,1819,1820,1757,212,1821,1822,1823,212,1824,1825,1826,1827,1828,212,1829,1830,1831,1832,1833,1834,1835,1836,1837,1838,1839,212,1840,1841,1842,1843,1844,1845,1846,1847,1848,1849,1850,212,1851,1852,1853,1854,1855,212,1856,1857,1858,212,1859,1860,1861,1862,1863,1864,1865,1866,1867,1868,1869,1870,1871,1872,1757,1873,1698,212,1874,1806,212,1807,1875,1876,1877,212,1821,1838,1839,212,1878,1879,1846,1847,1880,1881,212,1882,1883,1698,1770],[4867],{"_1639":348,"_1640":1887,"_510":4868,"_1643":62},[1889,1645,1890,1891,1892,1893,1894,1645,1895,1645,1896,1897,1898,1899,1900,1645,1901,1645,1902,1903,1904,1905,1906,212,1793,1907,1796,212,1908,1909,212,1910,1911,1760,1761,1912,1762,1806,212,1913,1914,1915,1916,1917,1757,212,1918,1919,1920,1921,1757,212,1922,1923,1924,1925,1926,1927,1928,1929,1709,1930,1931,1932,1933,1934,1820,1757,212,1935,1936,1937,1938,212,1939,1940,1941,212,1942,1943,212,1944,1945,1946,1832,1947,1941,1948,1949,212,1950,1951,1952,1953,1954,1955,1956,1957,212,1958,1959,1960,1846,1961,1962,1963,1698,212,1964,1760,1761,1912,1762,1965,1966,1967,1806,212,1919,1920,1921,1757,212,1968,1969,1970,1971,1938,212,1972,1973,1974,1975,1976,1977,1978,1979,212,1948,1980,212,1981,1982,1943,212,1983,1984,1985,1986,1846,1987,1988,1849,1989,1990,1991,212,1992,1993,1994,1995,212,1996,1997,1998,1999,2000,1994,2001,1989,1698,1770],[4870],{"_1639":348,"_1640":2005,"_510":4871,"_1643":62},[2007,2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020,2021,2022,2023,2024,2025,2026,2027,212,2028,2029,2030,2031,2032,212,2033,2034,212,2035,2036,2037,2038,1698,1673,212,2039,2040,2041,1673,212,2042,212,2043,2044,1673,212,2045,2046,1673,212,2047,2048,1673,212,2049,2050,2051,2052,2053,2054,1673,212,2055,2056,2057,212,2058,2059,2060,212,2061,2062,2063,2064,2065,2066,2067,2068,1770,212,2069,2070,2071,2072,2073,1770,212,2074,2075,2076,2077,2078,2079,2080,2081,2082,1698,212,2083,2084,2085,1698,1770,212,2086,2087,2088,2089,2090,2091,2092,2093,2094,1698,212,2095,2088,2096,2097,2098,2099,2100,2101,1698,1770,212,2102,2103,2104,2105,2106,212,2107,2108,2109,2110,1698,212,2111,2112,2113,2114,2115,2116,2110,1698,212,2117,2096,2118,2119,2109,2120,2121,2122,212,2123,2124,1698,212,2125,2126,2127,2128,2129,1698,1770,212,2130,2131,2132,2133,2134,1698,212,2135,2136,2137,2138,2139,2140,2141,2142,1698,212,2143,2144,2145,1698,212,2146,2147,2148,2136,2149,2150,2151,2152,2153,2154,2155,2156,2138,2139,2140,2157,2158,2159,2160,2161,2138,1698,212,2162,2136,2149,2150,2163,2164,2154,2155,2156,2138,2139,2140,2165,2166,1698,212,2167,2168,2136,2169,2138,2139,2140,2142,1698,1770,212,2170,2171,2096,2172,2173,2174,212,2099,2100,2175,212,2176,2177,2178,2179,2180,2181,2182,2183,2184,2185,2186,2187,2188,1698,212,2189,2096,2190,2173,2191,212,2192,2176,2193,2194,2195,2196,2197,2198,2199,2200,2201,1698,212,2202,2203,2204,2205,2206,2207,2208,2209,2210,1709,2211,2212,1757,212,2213,2214,2215,2216,212,2217,2218,2219,2187,1698,212,2220,2096,2221,2222,2223,2224,2225,2226,212,2227,2228,2229,2230,1698,1770,212,2231,2232,2096,2233,2234,212,2139,2140,2235,2236,2237,2091,2238,1698,212,2239,2096,2172,2240,2241,212,2139,2235,2242,2243,2093,2091,2238,1698,212,2244,2096,2172,2245,212,2139,2140,2235,2091,2238,1698,212,2246,2247,2248,2249,2096,2233,2250,212,2139,2140,2251,2252,2253,1698,212,2254,2096,2255,2256,2257,212,2258,2259,2260,2096,2261,2240,2262,2263,2264,1698,1770,212,2265,2266,2267,2268,2269,1698,212,2270,2271,2272,2273,2274,2275,2276,2277,2278,1698,212,2279,2267,2280,2281,1698,212,2282,2084,2283,2079,2284,2285,2286,1698,212,2287,2084,2283,2288,1698,212,2289,2290,2291,2292,2267,2293,2294,1698,212,2295,2267,2268,2296,1698,212,2297,2084,2298,2299,1698,212,2300,2301,2302,212,2303,212,2079,2304,2285,2305,2306,2307,2308,2309,2310,1698,212,2311,2301,2312,2269,1698,212,2313,2314,2315,2096,2316,2317,2318,212,2303,212,2319,2320,2321,2322,2323,2324,2325,1698,212,2326,2084,2327,2079,2328,2329,2330,1698,1770,212,2331,2332,2136,2333,2334,2335,2336,2138,2337,2338,2339,2340,1698,212,2341,2115,2342,2343,1698,212,2344,2096,2345,2173,2346,212,2347,2348,2175,2349,1698,212,2350,2088,2351,2352,2091,2093,2353,1698,1770,212,2354,2355,2088,2356,2357,2358,2359,2187,2079,2360,2361,1698,212,2362,2363,2084,2364,2365,2079,2366,2367,2368,2369,2238,1698,212,2370,2371,2372,2373,2374,2375,2376,2377,2378,2084,212,2364,212,2379,2238,1698,212,2380,2381,2382,2383,2088,2084,212,2364,212,2365,2384,1698,212,2385,2386,2387,2238,1698,212,2388,2088,2084,2389,2365,2390,1698,212,2391,2392,2393,2394,2395,212,2396,2397,2238,212,2398,2399,1698,212,2400,2401,2402,2395,2403,2389,2238,1698,212,2404,2405,2406,2407,2408,2409,2410,2377,2378,2403,212,2389,212,2238,2411,2412,2413,2414,1698,1770,212,2415,2416,2417,2418,2419,2420,2421,2422,2423,2424,212,2425,212,2426,2427,2428,2429,2430,2431,2432,2433,212,2434,2435,2436,2437,1698,212,2438,2439,212,2440,2441,1698,1770,212,2442,2443,2444,2445,2446,2447,2448,212,2449,212,2426,2450,2451,2452,2453,2454,1698,212,2455,2136,2456,212,2457,2140,2458,1698,212,2459,2460,2461,2462,2463,2464,2465,2466,2456,212,2467,212,2365,2468,2469,2470,2471,2472,2473,1698,212,2474,2475,2476,2477,2096,2478,2222,2479,212,2480,212,2454,2481,2093,1698,212,2482,2447,2483,2441,2473,1698,1770,212,2484,2485,2486,2487,2488,2489,2490,2491,2492,2493,2494,2495,2496,1757,2497,1758,212,2498,2499,2500,2501,1758,212,2502,2503,2504,212,2505,2506,2507,212,2508,2509,2510,2138,212,2511,2512,212,2513,2469,212,2514,2515,212,2217,2516,2093,2517,2518,2519,2188,1698,212,2520,2503,2504,212,2521,2522,2523,212,2088,2509,2510,2138,212,2524,2525,212,2217,2093,1698,212,2526,2527,2528,2529,2096,2530,2531,212,2532,2533,212,2534,2264,2188,1698,212,2535,2536,1687,2537,2538,2539,2540,2541,2542,2543,2544,2545,2546,2547,212,2548,2549,212,2550,2551,2552,2553,2554,2555,1697,1698,212,2556,2557,2088,2509,2510,2138,212,2558,212,2217,2559,2188,1698,1770,212,2560,2561,2562,2563,2564,2088,2565,212,2533,212,2566,2187,1698,212,2567,2088,2568,2569,2570,2571,2572,1757,212,2573,2512,2093,212,2574,212,2575,2576,212,2577,2578,2579,2580,2581,2582,2583,2584,1698,212,2585,2088,2586,212,2357,212,2587,2187,1698,212,2588,2088,2568,2569,2570,2589,2572,1757,212,2590,2512,212,2591,2592,2187,212,2593,2594,212,2595,2596,1698,212,2597,2088,2598,2599,2206,2600,2601,2602,2603,2604,2605,1709,2589,2572,1757,212,2606,2512,2357,212,2607,2608,2592,1698,212,2609,2610,2611,2612,2088,2568,2569,2570,2613,2614,2572,1757,212,2615,2616,2617,2512,212,2618,2619,212,2620,2621,212,2622,2623,2624,2625,2626,2627,2628,1698,212,2629,2630,2631,2632,2633,2634,2635,2569,2636,2637,2572,1757,212,2638,2639,2512,212,2364,2238,212,2640,2641,212,2642,1698,212,2643,2635,2417,212,2644,212,2436,1698,212,2645,2088,2646,2569,2647,2571,2572,1757,212,2648,2512,212,2649,212,2650,2651,2652,212,2238,2473,2653,2654,2584,1698,212,2655,2656,2657,2658,2659,2088,2568,2569,2570,2571,2572,1757,212,2660,2512,212,2364,2661,212,2621,2662,2663,1698,212,2664,2665,2666,2667,2568,2569,2668,2669,2670,2570,2589,2572,1757,212,2671,2512,212,2357,2672,212,2673,1698,212,2674,2568,2569,2670,2570,2571,2572,1757,212,2660,2512,212,2364,2661,212,2621,2662,2663,1698,212,2675,2676,2677,2568,2569,2678,2679,2680,2570,2589,2572,1757,212,2681,2512,212,2682,2672,212,2683,2684,1698,212,2685,2568,2569,2680,2570,2571,2572,1757,212,2686,2512,212,2364,2661,212,2687,2662,2663,1698,212,2688,2689,2690,2691,2088,2568,2569,2570,2589,2571,2572,1757,212,2606,2512,212,2682,2692,2693,212,2694,2695,1698,1770],[4873],{"_1639":348,"_1640":2699,"_510":4874,"_1643":62},[2701,2702,2703,2704,2705,212,2706,212,2707,2708,2709,2710,212,2711,2712,2713,2714,212,2715,2716,2717,2718,2719,2720,2721,2722,1758,1673,212,2723,2724,2725,2726,2727,1673,212,2728,2729,2730,2731,2732,2733,1673,212,2734,2735,2736,2737,2738,2739,2740,2741,2742,2743,2744,2745,2746,2747,2748,2749,2750,2751,2752,2753,2754,2755,2756,2757,2758,2759,2760,2761,2605,1709,2762,2763,2764,1697,2765,2766,1758,2767,1673,212,2768,2769,2770,2771,2772,2773,1673,212,2774,2775,2776,2777,2778,2779,2780,1673,212,2781,2782,2783,2784,2785,2786,2787,2788,2789,2790,2791,212,2792,2793,2794,2795,1673,212,2796,212,2797,2798,2799,2800,2801,2802,2803,2804,2805,2806,2807,212,2808,2809,2810,2811,1758,1673,212,2812,2813,2814,2815,2816,2817,1645,2818,2819,2820,2821,2822,2823,2737,2824,2825,2826,2827,2828,1758,1673,212,2829,2830,2831,2832,2833,2834,2835,2836,2837,2838,2839,2840,2841,2842,2843,2844,1698,2845,2846,2847,2848,2849,2850,1758,2851,2852,1673,212,2853,2854,2855,2856,1645,2857,2858,2859,2860,2861,2862,2863,2864,2865,2866,2867,2868,2869,2870,2871,2872,2873,2874,2848,2849,2850,1758,2851,2852,1673,212,2875,2876,2877,2878,2879,2880,2881,2882,1645,2883,2884,2885,2886,2887,2888,2889,2890,2891,2892,1673,212,2893,2894,2895,2896,2897,2898,2899,2900,2901,2902,2903,2904,2839,2905,2906,2907,2908,2073,2737,2909,2910,2911,2912,1832,2913,2914,2915,2916,2917,2918,2919,2920,2921,2922,2923,2924,2925,2138,2825,2926,2927,2928,2929,2930,1758,1673,212,2931,2932,2933,2934,2935,2936,2937,2938,2939,1645,2940,2941,2942,2943,2944,2945,212,2946,2947,2948,2949,2950,212,2951,2952,2953,2954,212,2955,2956,2957,2958,2959,2960,2961,2962,1757,2963,2964,2965,1673,212,2966,2967,2968,2969,2970,212,2971,2972,212,2973,2974,2975,2871,212,2976,2977,2978,2979,2980,2981,2982,2983,2984,2985,2986,2987,2988,2989,2990,2991,2992,2993,2994,2995,2996,2997,2998,2999,3000,2994,3001,3002,3003,1757,212,3004,1673,212,3005,3006,3007,3008,2737,3009,3010,2765,3011,1758,1673,212,3012,212,3013,3014,1673,212,3015,3016,3017,3018,1645,3019,3020,3021,3022,2782,3023,3024,3025,2785,3026,2843,3027,3028,1698,1673,212,3029,2782,3030,3024,3025,2785,3026,3031,3027,2844,1698,1673,212,3032,3033,3034,3035,3036,3037,2782,3038,3039,3024,2785,3026,3031,3040,3041,3042,3043,3044,1698,1673,212,3045,3026,3046,3047,1698,1673,212,3048,3049,3050,2782,3051,3052,2737,3053,2825,3054,1687,3055,3056,3057,3058,3059,3060,3061,3062,1709,3063,3064,3065,3066,1697,1758,1673,212,3067,2782,3068,3051,3069,2791,3070,2793,3071,3072,3073,3074,3075,2963,1673,212,3076,3052,2737,3077,2825,3054,1687,3055,3078,3057,3079,3080,3081,3059,3060,3082,3062,1709,3063,3064,3065,3066,1697,1758,1673,212,3083,3084,3085,3086,3087,3088,2737,3089,2825,3090,3091,3092,3093,3094,3095,3096,1758,1673,212,3097,3098,3099,3100,3101,3102,3103,3104,3105,3106,3107,3108,1673,212,3109,3110,3111,3112,3113,3114,3115,3116,3117,3118,3119,3120,1673],[4876,4877,4878,4879,4880,4881,4882,4883,4884,4885,4886,4887,4888,4889,4890],{"_1588":49,"_49":3160},{"_1588":3138,"_169":2696,"_1639":3158,"_1640":3159},{"_1588":49,"_49":3157},{"_1588":3138,"_169":2002,"_1639":3155,"_1640":3156},{"_1588":49,"_49":3154},{"_1588":3138,"_169":1884,"_1639":3152,"_1640":3153},{"_1588":49,"_49":3151},{"_1588":3138,"_169":1884,"_1639":3149,"_1640":3150},{"_1588":49,"_49":3148},{"_1588":3138,"_169":1771,"_1639":3146,"_1640":3147},{"_1588":3138,"_169":1771,"_1639":3144,"_1640":3145},{"_1588":49,"_49":3143},{"_1588":3138,"_169":1633,"_1639":3141,"_1640":3142},{"_1588":3138,"_169":1633,"_1639":3139,"_1640":3140},{"_1588":49,"_49":3137},[4893,4894],{"_3170":3171,"_276":209,"_3172":318,"_287":-5,"_1608":270,"_3173":-5,"_3174":-5,"_3175":3176,"_3177":3178,"_3179":-5,"_3180":-5,"_3181":3182,"_3183":18,"_3184":62,"_3185":57,"_3186":18,"_3187":-5},{"_96":518,"_100":339,"_510":4895},{"_325":326,"_327":328,"_3190":3191,"_3192":133,"_335":-5,"_96":3193},[4896],{"_1588":49,"_49":3196},"task_e_6a6ef09768e08328b7d7a8b2098989c1",1785655447.409898,"GitHub Mention: feat(sim): canary-under-load UX probe recording Core Web Vitals alongside the k6 baseline","has_generated_title","has_unread_turn","denormalized_metadata",{"_4927":35,"_4928":4929,"_4930":-5,"_4931":-5,"_4921":4932,"_4933":-5,"_4934":-5,"_4935":-5,"_4936":-5},"task_status_display",{"_4916":4917,"_4918":209,"_134":131,"_4919":-5,"_4920":1601},"creator_workspace","external_pull_requests",[4909],{"_45":4910,"_4911":87,"_4912":4913,"_4914":133},"github-1301193065-391","assistant_turn_id","pull_request",{"_317":318,"_308":319,"_320":321,"_322":62,"_323":18,"_324":18,"_325":326,"_327":328,"_329":280,"_330":131,"_331":332,"_333":334,"_335":336,"_337":-5,"_338":-5,"_339":4915,"_341":342,"_343":344,"_345":346,"_347":348},"codex_updated_sha",{"_302":303,"_194":303,"_349":-5,"_306":307,"_45":304},"latest_turn_status_display",{"_519":87,"_116":117,"_4921":4922,"_98":4923,"_4924":-5,"_4925":-5,"_4926":1601,"_118":-5},"environment_label","fix_task_id","initial_intent","diff_stats",{"_1613":1614,"_1615":1616,"_1617":917},[],"image_asset_pointer_citations","issue_counts","intent","num_follow_ups","repo_name_map",{},"last_user_turn_created_at","last_turn_status",{"_1613":-5,"_1615":-5,"_1617":-5},"last_pushed_turn_id","start_branch_name","pushed_branch_name","cached_pull_request_data","dd",{"_4951":4952,"_4953":4954},"disablePrefetch","shouldPrefetchAccount","shouldPrefetchUser","shouldPrefetchSystemHints","manageRootRouteStylesheet","mobileWebHandoffEnabled","promoteCss","disableSSR","stripModulepreloadImports","paidCampaignAppRedirect","statsigGateEvaluationsPromise",["P",4950],"traceId","15965377165955903496","traceTime",1787337644855]