conductor

[conductor] task integration on ${attr.unique.hostname}
[conductor] commit 2c4cae92a912 attempt 1
[conductor] image node:24-alpine
$ apk add --no-cache git
( 1/12) Installing brotli-libs (1.2.0-r1)
( 2/12) Installing c-ares (1.34.8-r0)
( 3/12) Installing libunistring (1.4.2-r0)
( 4/12) Installing libidn2 (2.3.8-r0)
( 5/12) Installing nghttp2-libs (1.69.0-r0)
( 6/12) Installing libpsl (0.21.5-r3)
( 7/12) Installing zstd-libs (1.5.7-r2)
( 8/12) Installing libcurl (8.22.0-r0)
( 9/12) Installing libexpat (2.8.4-r0)
(10/12) Installing pcre2 (10.48-r0)
(11/12) Installing git (2.54.0-r0)
(12/12) Installing git-init-template (2.54.0-r0)
Executing busybox-1.37.0-r31.trigger
OK: 24.0 MiB in 30 packages
$ npm install --no-audit --no-fund

added 79 packages in 3s
npm notice
npm notice New major version of npm available! 11.19.0 -> 12.1.0
npm notice Changelog: https://github.com/npm/cli/releases/tag/v12.1.0
npm notice To update run: npm install -g npm@12.1.0
npm notice
$ npm test

> conductor@0.6.0 test
> node --test "test/**/*.test.js"

✔ a success carries ok and data, and nothing else (322.75064ms)
✔ a failure carries a name, a message and the matching status (132.40667ms)
✔ details are absent rather than null when there are none (121.49504ms)
✔ a url under the api that matches no route is enveloped too (86.1537ms)
✔ a url outside the api is left to the interface (196.10056ms)
✔ a malformed body is refused by name (124.95538ms)
✔ the worker protocol reports its refusals by name (164.14433ms)
✔ no error body carries a stack (128.86401ms)
✔ a page reports where it sits and how many there are (245.36836ms)
✔ following next walks the whole collection exactly once (214.08516ms)
✔ next is absent on the last page (281.27036ms)
✔ an unusable offset or limit falls back rather than failing (181.85906ms)
✔ a task reports its artifacts as a page (193.642ms)
✔ a limit is clamped to the cap, and a missing one defaults (0.51826ms)
✔ an offset reads as zero unless it is a usable number (0.36688ms)
✔ next preserves the other query parameters (0.56172ms)
✔ the key order is next, offset, total (0.33586ms)
✔ every tracked text file is pure ASCII (174.20226ms)
✔ no file uses CRLF line endings or trailing whitespace (124.18484ms)
✔ a password round trips and a wrong one is refused (32.80772ms)
✔ the same password hashes differently each time (12.73186ms)
✔ parameters are read back from the stored hash (15.51079ms)
✔ a malformed stored hash is refused rather than throwing (0.56369ms)
✔ password length is bounded (0.71151ms)
✔ a session token round trips its claims (1.52894ms)
✔ a token signed with another secret is refused (0.48917ms)
✔ a tampered payload is refused (0.40682ms)
✔ an expired token is refused (0.53066ms)
✔ a malformed token is refused rather than throwing (0.42847ms)
✔ cookies are parsed and issued (4.07621ms)
✔ the oidc login state round trips with its return path (1.11961ms)
✔ a missing return path means the root (0.35333ms)
✔ the oidc login state is refused when forged, stale or off-site (0.50912ms)
✔ oidc roles are collected from the usual claim shapes (0.66157ms)
✔ mask replaces secrets, longest first (0.48374ms)
✔ mask ignores very short values and leaves clean output alone (0.28616ms)
✔ health reports the selected drivers (308.04584ms)
✔ a signed trigger creates a job and expands the pipeline (230.2844ms)
✔ an unsigned or wrongly signed trigger is refused (107.31448ms)
✔ github and gitlab push payloads are understood (309.60201ms)
✔ a branch deletion is ignored rather than failing (89.51504ms)
✔ a broken pipeline is reported as a client error with detail (213.69067ms)
✔ a missing pipeline file is reported clearly (200.76625ms)
✔ a pipeline may be spelled .conductor.yaml instead of .conductor.yml (216.60911ms)
✔ a project pointed at a specific file gets no fallback (220.69471ms)
✔ a repository carrying both spellings is refused rather than guessed at (259.37291ms)
✔ a pipeline still using the jobs key is told what it was renamed to (273.99208ms)
✔ a job can be created directly, without a push payload to imitate (263.31836ms)
✔ creating a job requires the same signature as a trigger (108.94581ms)
✔ creating a job insists on a real commit rather than inferring one (85.17346ms)
✔ a job can be read back, with the state of every task (226.45292ms)
✔ a public job is readable without any credential at all (253.81932ms)
✔ a private job needs the trigger secret, and is otherwise absent (226.8473ms)
✔ a job of another project cannot be read through this one (237.24471ms)
✔ a task can be read back on its own, and by its full name (292.05818ms)
✔ reading a task back carries its dependencies and matrix (419.40575ms)
✔ reading a task back never exposes its environment, services or script (300.82866ms)
✔ a task lists the artifacts it stored, with a usable download url (232.8014ms)
✔ reading a task back needs no worker token (294.21538ms)
✔ a private task is absent without a credential, and needs its project named (245.67192ms)
✔ a private task is readable by an administrator, by either path (403.12832ms)
✔ a task of another project cannot be read through this one (274.72237ms)
✔ an unknown task is 404 by either path (144.82679ms)
✔ a claim records what the machine advertises, even when there is no work (129.18243ms)
✔ a machine that changes its features updates its row rather than adding one (164.42837ms)
✔ machines sharing a token are recorded separately (171.17779ms)
✔ the worker api rejects missing and invalid tokens (86.27465ms)
✔ independent tasks dispatch concurrently (249.69522ms)
✔ a task is only offered to a worker that satisfies its requires (257.3932ms)
✔ a worker is not offered work for an architecture it cannot build (370.25835ms)
✔ a claimed task carries everything the worker needs (274.5968ms)
✔ a task that requires a feature reports it to the worker (283.60047ms)
✔ the standard conductor variables are present in the task environment (276.91191ms)
✔ the source tarball is served from the mirror (285.84216ms)
✔ a worker cannot touch a task it does not hold (239.7769ms)
✔ log appends are resumable and deduplicated by offset (383.70781ms)
✔ an oversized log chunk is refused (388.48695ms)
✔ a finished log moves to storage and is still readable (423.05562ms)
✔ artifacts are stored, hashed, and stripped of traversal (330.46107ms)
✔ an artifact shorter than its content-length is rejected (245.06284ms)
✔ success releases dependents, matched on shared dimensions (390.22565ms)
✔ failure skips transitive dependents, not just direct ones (447.53216ms)
✔ a job settles as failed once every task is terminal (316.31668ms)
✔ a job settles as success when everything passes (330.93304ms)
✔ an allowed failure does not fail the job or block dependents (293.01247ms)
✔ a task with retries left is requeued instead of failing the job (394.02124ms)
✔ heartbeats keep a task alive and report cancellation (327.04789ms)
✔ the reaper fails a task whose worker stopped reporting (304.92493ms)
✔ a second push produces an independent, numbered job (691.90929ms)
﹣ jobs can be listed and filtered by project (0.96159ms) # the JSON API was removed
﹣ unknown jobs, tasks and artifacts return 404 (0.39462ms) # the JSON API was removed
✔ a disabled project refuses triggers (190.39355ms)
✔ a trigger for an unknown project is a 404 (169.11925ms)
✔ a commit that is not in the repository is refused (266.74363ms)
✔ a task is told to fetch an archive, and never the repository itself (406.90757ms)
✔ the source archive is the bare tree, with no wrapping directory (474.77173ms)
✔ the working directory is resolved from the pipeline, then the project (1127.25525ms)
✔ an unusable working directory is refused rather than sanitised (1151.77967ms)
✔ the trigger secret is not stored in the clear (137.11419ms)
✔ worker tokens are stored only as hashes (129.68091ms)
✔ defaults select sqlite, local storage and local auth (4.68952ms)
✔ configuring an s3 bucket switches the storage driver (1.12332ms)
✔ a partial s3 configuration is rejected rather than half applied (1.28602ms)
✔ configuring an oidc discovery url switches the auth mode (0.78609ms)
✔ an oidc discovery url without a client id is rejected (0.74638ms)
✔ a database url selects its dialect (1.28921ms)
✔ an unsupported database scheme is reported clearly (1.01165ms)
✔ a sqlite url collapses into database.path (0.70371ms)
✔ environment variables override the config file (80.51033ms)
✔ relative paths resolve against the config file directory (3.84838ms)
✔ a missing explicit config file is an error, a missing default is not (1.77492ms)
✔ a heartbeat timeout below the reap interval is rejected (6.05422ms)
✔ a non-integer port is rejected with the variable named (0.77923ms)
✔ parseKey accepts hex and base64, and rejects the wrong length (0.47672ms)
✔ stateDirs omits the storage directory when s3 is in use (1.26028ms)
✔ the loaded config is frozen (0.56878ms)
✔ topological order places dependencies first (15.34031ms)
✔ topological order is deterministic (16.7527ms)
✔ a cycle is detected and named (6.48175ms)
✔ depth reflects the longest path, not insertion order (2.78599ms)
✔ independent tasks are runnable at the same time (3.47034ms)
✔ a task becomes runnable only once every dependency succeeds (2.01994ms)
✔ a running dependency does not release its dependents (1.73471ms)
✔ failure skips transitive dependents, not just direct ones (2.18321ms)
✔ a skipped dependency never releases a dependent (3.41312ms)
✔ allowed failures can satisfy a dependency when asked to (2.91056ms)
✔ transitive dependents of a leaf is empty (1.72736ms)
✔ graph helpers tolerate dependencies outside the set (2.1862ms)
✔ dialect detection covers every supported scheme (3.23581ms)
✔ statement splitter respects literals and comments (0.81578ms)
✔ statement splitter keeps postgres dollar quoted bodies whole (0.39001ms)
✔ migrations apply once and are idempotent (72.48427ms)
✔ an edited migration is refused rather than silently diverging (19.80595ms)
✔ a migration removed from disk is reported (17.16839ms)
✔ rows come back as ordinary objects (23.2986ms)
✔ a conditional update claims exactly once (43.61919ms)
✔ deleting a job cascades to its tasks (59.33256ms)
✔ a failed transaction rolls back, and a failed savepoint keeps the outer work (29.08824ms)
﹣ migrations apply and retention sweeps on postgres (5.39251ms) # SKIP
﹣ migrations apply and retention sweeps on mysql (0.20102ms) # SKIP
✔ every example pipeline compiles (39.63285ms)
✔ the distribution example fans in per architecture (9.64865ms)
✔ the node example wires services and features (9.79ms)
✔ git jobs with safe.directory set (1.84663ms)
✔ it appends to configuration already in the environment (0.27932ms)
✔ a count that is not a number does not corrupt the sequence (0.31002ms)
✔ git accepts the environment we build (53.29736ms)
✔ a file missing from a commit reads as missing, whatever sits in the working directory (53.59127ms)
﹣ the endpoints and key set come from the discovery document (1.37985ms) # docker is not available
✔ discovery reports a document that is missing an endpoint (32.09713ms)
✔ discovery reports an unreachable provider and a bad status (1.15483ms)
﹣ a token carrying the admin role authenticates as an administrator (0.18377ms) # the JSON API was removed
﹣ a token without the admin role is an ordinary user (0.18663ms) # the JSON API was removed
﹣ roles are recognised in the groups and resource_access shapes (0.1257ms) # the JSON API was removed
﹣ an OIDC user gets a local account and can own a project (0.21771ms) # the JSON API was removed
﹣ the same subject keeps one account even when the display name changes (0.23557ms) # the JSON API was removed
﹣ a display name colliding with a local account gets its own username (0.24024ms) # the JSON API was removed
﹣ a role revoked at the provider is lost on the next request (0.29045ms) # the JSON API was removed
﹣ an account disabled locally is refused despite a valid token (1.02756ms) # the JSON API was removed
﹣ a forged signature is refused (0.47961ms) # the JSON API was removed
﹣ an expired token is refused (0.1652ms) # the JSON API was removed
﹣ a token from a different issuer is refused (0.30349ms) # the JSON API was removed
﹣ an anonymous visitor asking for a protected page is sent to the provider (0.15628ms) # docker is not available
﹣ a browser signs in at the provider and comes back with a session (0.24027ms) # docker is not available
﹣ a callback with a forged state is refused (0.73086ms) # docker is not available
﹣ local passwords are refused while OIDC is in charge (1.24274ms) # the JSON API was removed
﹣ an OIDC administrator can drive the interface (0.10227ms) # docker is not available
﹣ worker ownership follows the OIDC identity (0.07312ms) # the JSON API was removed
✔ a pattern without a star matches exactly (2.5564ms)
✔ a star matches any job of characters (0.62373ms)
✔ the rest of a pattern is literal, not a regular expression (0.25512ms)
✔ a restricted task is left out of jobs for other refs (27.85648ms)
✔ it is left out rather than recorded as skipped (17.06127ms)
✔ tasks depending on an excluded task are excluded too (29.27217ms)
✔ depth and ordering describe the job that will happen (11.39639ms)
✔ without a ref nothing is filtered, so a pipeline can still be validated (11.77629ms)
✔ a restricted task cannot match a job that has no ref (21.40315ms)
✔ a malformed rule is reported rather than ignored (48.74376ms)
✔ the rule is not inherited from defaults (20.08819ms)
✔ a page number is read from the query, and nonsense reads as the first (2.35186ms)
✔ an absurd page number cannot produce an unusable offset (0.4616ms)
✔ a window describes the slice it holds (0.40812ms)
✔ an empty table is one page, and counts from zero (0.28637ms)
✔ windowOfAll slices a list that is already in memory (0.40726ms)
✔ a page link keeps the other query parameters (1.2295ms)
✔ a pager is not rendered when everything fits on one page (0.94618ms)
✔ a pager offers only the steps that exist (1.11817ms)
✔ paginate counts under the same conditions as it selects (298.89192ms)
✔ successive pages do not repeat or skip a row (146.63166ms)
✔ the job list is capped at a page and offers the next one (204.7953ms)
✔ paging past the end is an empty table rather than an error (123.24214ms)
✔ a page link keeps the project filter, and so does the live fragment (126.63429ms)
✔ the polling fragment asks for the page being viewed, not the first (166.93166ms)
✔ the count behind the pager respects who is asking (307.43496ms)
✔ a worker page pages its task history (205.27552ms)
✔ the users and workers tables keep their swap target on the wrapper (208.10015ms)
✔ a minimal pipeline compiles (98.08389ms)
✔ version is required and pinned (19.92063ms)
✔ empty and malformed documents are rejected clearly (15.47092ms)
✔ image and script are required (5.88686ms)
✔ image may come from defaults (11.23057ms)
✔ unknown keys are rejected, with a suggestion when close (17.84819ms)
✔ all problems are reported at once (8.9169ms)
✔ durations accept seconds, units and composites (15.72282ms)
✔ durations accept day and week units (29.68792ms)
✔ a malformed duration is rejected (16.24651ms)
✔ arch expands into one task per architecture (17.05535ms)
✔ a matrix expands to the cartesian product (4.77343ms)
✔ needs match on shared dimensions rather than fanning out (6.13959ms)
✔ a task without the shared dimension depends on every instance (1.42422ms)
✔ match all opts out of dimension matching (3.08783ms)
✔ needs may name one concrete instance (1.481ms)
✔ an unsatisfiable dimension match is reported, not silently dropped (0.95101ms)
✔ needs on an unknown task lists what is defined (0.61436ms)
✔ self dependency is rejected (0.60458ms)
✔ a dependency cycle names the cycle (2.12016ms)
✔ interpolation substitutes arch and matrix values (2.38293ms)
✔ interpolating an undefined dimension is an error (1.41866ms)
✔ referring to arch without declaring one is an error (4.81571ms)
✔ matrix values must be safe for use in a task name (4.63858ms)
✔ arch may not also be a matrix dimension (6.75568ms)
✔ services get a derived alias and reject duplicates (32.35883ms)
✔ artifacts accept a bare list and reject absolute paths (7.93477ms)
✔ artifact when is constrained (4.98486ms)
✔ defaults are inherited and overridden per task (8.31866ms)
✔ env values must be scalars with valid names (5.61216ms)
✔ parsePipeline normalizes without expanding (3.8548ms)
✔ a realistic distribution pipeline produces the expected graph (11.71776ms)
✔ compiles markers to the placeholder each dialect expects (6.12659ms)
✔ numbers postgres placeholders per occurrence, including repeats (0.36765ms)
✔ ignores markers inside string literals and comments (0.50734ms)
✔ a json literal in default text survives untouched (0.29859ms)
✔ doubling a brace escapes it (0.32705ms)
✔ block comments are skipped, and nest only for postgres (0.34225ms)
✔ postgres dollar quoted bodies are skipped (0.35228ms)
✔ mysql backtick identifiers and hash comments are skipped (0.98742ms)
✔ a malformed marker is rejected with a useful message (1.38488ms)
✔ binds by name, resolving dotted paths (1.35057ms)
✔ an exact key beats path traversal (0.33533ms)
✔ reports every missing key at once (0.59753ms)
✔ rejects an array of parameters, which would silently bind by position (0.49081ms)
✔ normalizes booleans, dates and null (0.32311ms)
✔ rejects an object value, which is nearly always a forgotten stringify (0.40861ms)
✔ an artifact past its own deadline is deleted (484.52771ms)
✔ an explicit deadline overrides the policy in both directions (205.02368ms)
✔ an explicit deadline also beats the last good job (128.34034ms)
✔ the last few jobs keep their artifacts however old they are (110.30151ms)
✔ recent artifacts are kept however many jobs have followed (144.99625ms)
✔ an artifact outside both rules is deleted (124.55707ms)
✔ the most recent successful job is kept whatever the policy says (115.95621ms)
✔ only the latest success is protected, not every success (109.34533ms)
✔ a project may keep artifacts forever despite a server default (96.16092ms)
✔ a project setting overrides the server default (104.81507ms)
✔ an unfinished job is never swept (96.47776ms)
✔ logs older than the limit are removed but the task remains (116.80477ms)
✔ a swept log is distinguishable from one that never existed (104.52674ms)
✔ a log is swept only once (164.62332ms)
✔ zero keeps logs forever (113.17422ms)
✔ a storage failure leaves the row for the next pass (72.43367ms)
✔ a sweep deletes no more than its batch (145.91825ms)
✔ one project policy does not reach into another (152.57952ms)
✔ artifacts.expire in a pipeline reaches the stored artifact (354.52697ms)
﹣ the api reports and accepts project retention (0.38352ms) # the JSON API was removed
✔ a machine that has stopped claiming is forgotten (169.72383ms)
✔ zero keeps machines for ever (142.10705ms)
✔ seals and opens a value (5.64778ms)
✔ sealing twice produces different ciphertext (1.11963ms)
✔ without a key, values are stored as marked plaintext (0.41092ms)
✔ a keyed box can still read values written before a key existed (0.30882ms)
✔ an unkeyed box refuses encrypted values with an actionable message (2.7671ms)
✔ the wrong key fails to open (0.82737ms)
✔ tampering with the ciphertext is detected (0.59219ms)
✔ associated data binds a secret to its location (0.96879ms)
✔ a key of the wrong size is refused at construction (0.5674ms)
✔ task ids are opaque, and say nothing about their job (6.46479ms)
✔ time ordered ids sort by creation time (0.48424ms)
✔ random ids use the expected alphabet (0.31124ms)
✔ slugify produces readable project ids and falls back when empty (0.63733ms)
✔ token hashing and constant time comparison (1.40083ms)
✔ the pipeline this project jobs on itself compiles (45.77954ms)
✔ its tasks declare the features they actually need (10.14936ms)
✔ publishing is restricted to main and release tags (50.63897ms)
✔ get-vanilla matches the reference signature (4.4271ms)
✔ get-vanilla-query-order-key-case matches the reference signature (1.04334ms)
✔ uriEncode percent encodes the characters encodeURIComponent leaves alone (0.31704ms)
✔ amzDate produces both required formats (0.2805ms)
✔ s3 requests carry the content hash header (2.14486ms)
✔ presigned urls carry the signature in the query string (2.83676ms)
✔ an already encoded path is not encoded a second time (0.7561ms)
✔ key validation rejects traversal and absolute paths (3.20776ms)
✔ sanitizeRelativePath strips traversal from worker supplied paths (0.54613ms)
✔ key layout is stable (0.56752ms)
✔ local backend round trips a buffer and reports its digest (41.64389ms)
✔ local backend serves ranges (7.92798ms)
✔ local backend accepts a stream (11.01029ms)
✔ local backend reports a missing object and deletes idempotently (15.4077ms)
✔ local backend has no presigned urls (1.31098ms)
✔ a partial write leaves no object behind (3.67712ms)
✔ part size grows so that a huge object still fits in 10000 parts (1.1115ms)
✔ inParts regroups an awkwardly chunked stream into fixed parts (2.06973ms)
✔ inParts handles a chunk far larger than the part size (0.67612ms)
✔ inParts yields nothing for an empty stream (0.46071ms)
﹣ s3 backend round trips awkward keys against a real server (0.09149ms) # docker is not available
﹣ s3 serves byte ranges (0.08259ms) # docker is not available
﹣ s3 accepts a stream when the size is known (0.07328ms) # docker is not available
﹣ a presigned url is usable without credentials (1.96791ms) # docker is not available
﹣ a tampered presigned url is rejected by the server (0.09468ms) # docker is not available
﹣ s3 reports a missing object and deletes idempotently (0.07649ms) # docker is not available
﹣ a stream of unknown length is accepted (0.05918ms) # docker is not available
﹣ a body past the single request threshold is uploaded in parts (0.05516ms) # docker is not available
﹣ a large body really is sent as several parts, and a small one is not (0.05037ms) # docker is not available
﹣ a multipart object still serves ranges (0.05078ms) # docker is not available
﹣ a body that does not match its declared size is rejected (0.05058ms) # docker is not available
﹣ a failed multipart upload does not leave parts behind (0.04909ms) # docker is not available
﹣ bad credentials fail loudly rather than silently storing nothing (0.04913ms) # docker is not available
✔ every javascript file parses (1239.65141ms)
✔ the shell scripts parse (11.70627ms)
✔ interpolated values are escaped by default (3.35696ms)
✔ quotes and ampersands are escaped inside attributes (0.55043ms)
✔ nested templates and arrays are kept, raw is passed through (0.3463ms)
✔ null, undefined and false render as nothing (0.24061ms)
✔ attrs omits absent values and renders bare booleans (0.44889ms)
✔ an anonymous visitor sees public jobs and an invitation to sign in (502.55779ms)
✔ an anonymous visitor cannot see a private job (289.22019ms)
✔ management pages redirect an anonymous visitor to sign in (157.22243ms)
✔ signing in through the form sets a session and reveals the nav (231.55987ms)
✔ a user creates a project through the form and is shown the secret once (210.84665ms)
✔ a project page shows variables and never their values (217.05577ms)
✔ setting and removing a variable returns the updated table (226.79036ms)
✔ a user cannot open or delete a project they do not own (363.40262ms)
✔ registering a worker shows the token once and lists it (242.1285ms)
✔ the worker page lists what each machine advertises (291.98548ms)
✔ machines sharing a token are listed separately (269.79493ms)
✔ the workers list links to the worker page (268.15778ms)
✔ a worker page is not served to someone who cannot manage it (330.73258ms)
✔ a feature name is escaped rather than rendered (294.86879ms)
✔ an ordinary user cannot create shared capacity from the form (329.0119ms)
✔ the users page is administrator only and warns about what deletion destroys (332.75197ms)
✔ a running job polls, and a finished one stops (398.61718ms)
✔ a task page streams the log and stops polling once it completes (329.14447ms)
✔ log output is escaped, so a task cannot inject markup into the page (425.01143ms)
✔ a mutation without the htmx header is refused (367.58128ms)
✔ the task graph is one table, so columns line up across stages (1.01408ms)
✔ the sign in form is centred rather than stranded at the left edge (182.84167ms)
✔ row actions stay ordinary table cells, so rows keep one height (279.53246ms)
✔ the stylesheet and htmx are served, and nothing else is (213.21623ms)
✔ the project page shows retention, with server defaults as placeholders (225.07982ms)
✔ saving retention through the form stores it, and empty means inherit (260.75754ms)
✔ a negative retention value is refused by the form (265.13941ms)
✔ the project page offers a working directory, defaulting to the server one (249.06588ms)
✔ saving a working directory stores it, and empty clears it (228.77584ms)
✔ an unusable working directory is refused by the form (281.41277ms)
✔ worker config loads from json and reports features (22.02884ms)
✔ worker config reads the token from a file (3.48121ms)
✔ environment overrides the worker config file (3.54023ms)
✔ worker config without a token is rejected (4.46887ms)
✔ a malformed feature is reported with its path (3.70596ms)
✔ shell quoting survives quotes and metacharacters (0.43527ms)
✔ a generated script echoes each command and stops on failure (0.55924ms)
✔ container names are valid for docker and stay unique (1.54608ms)
✔ job arguments carry mounts, env, network and privilege (1.19226ms)
✔ a task container is created without sharing anything with the worker (0.93994ms)
✔ a feature still contributes its bind mounts (0.46536ms)
✔ features resolve into mounts, env and privilege (1.1242ms)
✔ an unknown required feature is reported rather than ignored (0.21702ms)
✔ an artifact pattern reduces to the part that can be copied out (0.45322ms)
✔ overlapping artifact paths are copied out once (0.48053ms)
✔ artifact collection globs, and refuses to leave the workspace (60.30372ms)
✔ artifact when controls collection (0.38827ms)
✔ an idle worker keeps running instead of exiting (4012.3674ms)
✔ a worker stops promptly on a signal rather than after its poll interval (1521.06355ms)
✔ log output is batched and offsets advance (1.70181ms)
✔ a conflicting offset resynchronises instead of duplicating (0.67239ms)
✔ secrets are masked before anything leaves the host (0.94081ms)
✔ a secret split across two writes is still masked (0.39852ms)
✔ a failing conductor does not break the task (0.66963ms)
ℹ tests 376
ℹ suites 0
ℹ pass 340
ℹ fail 0
ℹ cancelled 0
ℹ skipped 36
ℹ todo 0
ℹ duration_ms 18991.45415
[conductor] done