Skip to content

Bind offline mutations to their account, enforce idempotent retries exactly-once, and pin the rate-limit budgets #170

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
unbraind merged 7 commits into from
Oct 4, 2026
Merged

Bind offline mutations to their account, enforce idempotent retries exactly-once, and pin the rate-limit budgets #170

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
5a2f143
Bind offline mutations to their account, make keyed retries exactly-o…
unbraind Oct 4, 2026
349178f
Merge origin/main
unbraind Oct 4, 2026
901b511
Close account races in offline replay and recovery
unbraind Oct 4, 2026
77bf925
Recover offline mutations after uncertain failures
unbraind Oct 4, 2026
0f32050
Run the workspace-recovery harness through the production CSRF and ra…
unbraind Oct 4, 2026
f50115d
Clear resolved offline recovery notices and index pending sweeps
unbraind Oct 4, 2026
d8ba168
Close pm-web-ccie, pm-web-s552 and pm-web-25nv with review and gate e…
unbraind Oct 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions .agents/pm/history/pm-web-25nv.jsonl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,3 +3,12 @@
{"ts":"2026-08-28T14:55:08.821Z","author":"claude","author_source":"asserted","agent_harness":"claude-code","agent_instance":"7405dc9b453c8154184ac8fe","agent_provenance":{"model":null,"effort":{"value":"xhigh","source":"environment"},"role":null,"topic":null},"op":"docs_add","patch":[{"op":"add","path":"/metadata/docs/1","value":{"path":"test/rate-limit.test.ts","scope":"project","note":"the header-rotation regression test"}},{"op":"replace","path":"/metadata/updated_at","value":"2026-08-28T14:55:08.821Z"}],"before_hash":"846441eb191ec08ac9f328cc5554f3142f833215921f03f4e87ada6da6aa5f81","after_hash":"5595c324c072d58b67082cd0b8adde3592b6ffeaf400b6df22f44d16ae9c465f","item_hash_version":2,"context":{"agent_provenance_outcomes":{"model":{"status":"failed","reason":"resolver_failed","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"failed","reason":"resolver_failed","resolver":"claude_session_file","rule_version":"v1"}}}}
{"ts":"2026-08-28T14:55:13.653Z","author":"claude","author_source":"asserted","agent_harness":"claude-code","agent_instance":"7405dc9b453c8154184ac8fe","agent_provenance":{"model":null,"effort":{"value":"xhigh","source":"environment"},"role":null,"topic":null},"op":"comment_add","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-08-28T14:55:13.653Z"},{"op":"add","path":"/metadata/comments","value":[{"created_at":"2026-08-28T14:55:13.653Z","author":"claude","text":"Revert-checked: restoring the one-hop default drops the new test from passing to failing, so it measures the fix rather than describing it. The complementary test that opts into one hop and asserts the limiter follows the real client behind a proxy still passes, so the proxied behaviour is unchanged. Fifteen tests in the suite pass. Raised by Greptile as a P1 security finding on PR 110."}]}],"before_hash":"5595c324c072d58b67082cd0b8adde3592b6ffeaf400b6df22f44d16ae9c465f","after_hash":"4710256aaf96aa7ab61fbbcad2261ae0915a95581b40b234931b67a5887fa9d5","item_hash_version":2,"context":{"agent_provenance_outcomes":{"model":{"status":"failed","reason":"resolver_failed","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"failed","reason":"resolver_failed","resolver":"claude_session_file","rule_version":"v1"}}}}
{"ts":"2026-08-28T15:15:10.229Z","author":"claude","author_source":"asserted","agent_harness":"claude-code","agent_instance":"7405dc9b453c8154184ac8fe","agent_provenance":{"model":null,"effort":{"value":"xhigh","source":"environment"},"role":null,"topic":null},"op":"tests_add","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-08-28T15:15:10.229Z"},{"op":"add","path":"/metadata/tests","value":[{"command":"PM_PATH=/tmp/pmweb-25nv PM_GLOBAL_PATH=/tmp/pmweb-25nv-g node --test --test-name-pattern \"rotated X-Forwarded-For\" test/rate-limit.test.ts","scope":"project","assert_stdout_regex":["pass 1"],"note":"the default must resist header rotation"}]}],"before_hash":"4710256aaf96aa7ab61fbbcad2261ae0915a95581b40b234931b67a5887fa9d5","after_hash":"2c541e922d8a6cc441403ae4d59f8881c75f5a0e05cc2bdb42efcb28ab627ba5","item_hash_version":2,"context":{"agent_provenance_outcomes":{"model":{"status":"failed","reason":"resolver_failed","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"failed","reason":"resolver_failed","resolver":"claude_session_file","rule_version":"v1"}}}}
{"hash_algorithm":"sha256","ts":"2026-10-04T18:15:53.956Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":{"value":"implementer","source":"argv"},"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"claim","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T18:15:53.956Z"},{"op":"add","path":"/metadata/assignee","value":"claude-orchestrator"},{"op":"add","path":"/metadata/claim_principal","value":"claude-orchestrator"}],"before_hash":"2c541e922d8a6cc441403ae4d59f8881c75f5a0e05cc2bdb42efcb28ab627ba5","after_hash":"690fba14b3f322248f331fe362d85db47aaa7ed2c5cef8d872f9ce2ea4594254","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"90ed463e967d758fc59586658a67519a2a0f4d5cbfa05e60ef812124a5402196"}
{"hash_algorithm":"sha256","ts":"2026-10-04T18:15:55.172Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":{"value":"implementer","source":"argv"},"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"update","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T18:15:55.172Z"},{"op":"replace","path":"/metadata/status","value":"in_progress"}],"before_hash":"690fba14b3f322248f331fe362d85db47aaa7ed2c5cef8d872f9ce2ea4594254","after_hash":"1ee1307b11f659fed6dd49e30f768ee3032d5bfe22307d2ff38f0a1cc7555f80","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"bd00ffa4aa4f35185c24a03dd31baabcd953afa5e63e27c1b3c6776fa7b6893e"}
{"hash_algorithm":"sha256","ts":"2026-10-04T18:15:58.120Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":null,"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"tests_add","patch":[{"op":"add","path":"/metadata/tests/1","value":{"command":"node scripts/with-test-db.ts node --test test/rate-limit.test.ts","scope":"project","timeout_seconds":600,"provenance":{"author":"claude-orchestrator","created_at":"2026-10-04T18:15:58.063Z","source_kind":"local_mutation","source_ref":"fix/bind-offline-queue-and-rate-limit-identity"}}},{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T18:15:58.120Z"}],"before_hash":"1ee1307b11f659fed6dd49e30f768ee3032d5bfe22307d2ff38f0a1cc7555f80","after_hash":"1ebfddaae843cca40e842ea418fd4db2dffb16b9fc98877bdd03603909263a90","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"maintenance","record_hash_version":1,"record_hash":"337a99340c56aa7167bc02c0b49025c84976817e26d86f8fda2845d0557bc19f"}
{"hash_algorithm":"sha256","ts":"2026-10-04T18:15:59.275Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":null,"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"files_add","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T18:15:59.275Z"},{"op":"add","path":"/metadata/files","value":[{"path":"src/rate-limit.ts","scope":"project"},{"path":"test/rate-limit.test.ts","scope":"project"}]}],"before_hash":"1ebfddaae843cca40e842ea418fd4db2dffb16b9fc98877bdd03603909263a90","after_hash":"084cd8d8a65fd9bd4e20e87aef2f18e342207b6507866726a8ee44cf816a6518","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"maintenance","record_hash_version":1,"record_hash":"29746ad1c0a93bb2a9581c0bfd2b9e149ac0fbfecef9e19d486b5ad11344c34e"}
{"hash_algorithm":"sha256","ts":"2026-10-04T18:16:01.098Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":null,"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"comment_add","patch":[{"op":"add","path":"/metadata/comments/1","value":{"created_at":"2026-10-04T18:16:01.098Z","author":"claude-orchestrator","text":"PR #170: four accounts fire 20 parallel POSTs with rotating forged X-Forwarded-For, X-Real-IP and Forwarded headers; exactly the 6-request budget is admitted with the default trust-nothing proxy setting; revert-checked against the one-hop default. Tests restore PM_WEB_TRUST_PROXY after themselves."}},{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T18:16:01.098Z"}],"before_hash":"084cd8d8a65fd9bd4e20e87aef2f18e342207b6507866726a8ee44cf816a6518","after_hash":"7c97e4589f9f50248e80b64c807892a13524cc3180b5a04e5a95c5d1c76c6703","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"6d992f5a77917ffdaa6abde4e01318436e19037c4149ca7a2691f208c9560de9"}
{"hash_algorithm":"sha256","ts":"2026-10-04T18:16:02.799Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":{"value":"implementer","source":"argv"},"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"release","patch":[{"op":"remove","path":"/metadata/claim_principal"},{"op":"remove","path":"/metadata/assignee"},{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T18:16:02.799Z"}],"before_hash":"7c97e4589f9f50248e80b64c807892a13524cc3180b5a04e5a95c5d1c76c6703","after_hash":"0b709030673b911dc42fbe99e9068ac40a48e4bbd20c2a6035e97ea7a8394fb1","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"maintenance","record_hash_version":1,"record_hash":"8f440645226559c4792135fe5fa69fec0657d1a7c0793e306a9f9de578a91423"}
{"hash_algorithm":"sha256","ts":"2026-10-04T21:33:00.894Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":{"value":"implementer","source":"argv"},"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"update","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T21:33:00.894Z"},{"op":"add","path":"/metadata/resolution","value":"completed"}],"before_hash":"0b709030673b911dc42fbe99e9068ac40a48e4bbd20c2a6035e97ea7a8394fb1","after_hash":"c89515565bd1ad0479244848d2cb9891ef7d8afe2f28296fdd6ee6747bc35251","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"maintenance","record_hash_version":1,"record_hash":"24ff46b2f5666b0897ca2e87ddae4a47d35d497cacb82755f85fd2081348bbe9"}
{"hash_algorithm":"sha256","ts":"2026-10-04T21:33:02.402Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":{"value":"implementer","source":"argv"},"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"close","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T21:33:02.402Z"},{"op":"replace","path":"/metadata/status","value":"closed"},{"op":"add","path":"/metadata/closed_at","value":"2026-10-04T21:33:02.386Z"},{"op":"add","path":"/metadata/completed_at","value":"2026-10-04T21:33:02.386Z"},{"op":"add","path":"/metadata/close_reason","value":"PR #170: rotating forged X-Forwarded-For / X-Real-IP / Forwarded headers across four accounts never buys a fresh bucket under the default trust-nothing proxy setting; revert-checked."}],"before_hash":"c89515565bd1ad0479244848d2cb9891ef7d8afe2f28296fdd6ee6747bc35251","after_hash":"87ad7b94defe8e6c8c959026ae4ff48b1fc321e9b1ba8df40c8d1219b402938b","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"2768794ba67e92ba03a3a344c74d8e1158bd58e3bf46ba692cd6cd36362e7b63"}
{"hash_algorithm":"sha256","ts":"2026-10-04T21:33:08.698Z","author":"codex","author_source":"configured","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":{"value":"implementer","source":"argv"},"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"release","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T21:33:08.698Z"}],"before_hash":"87ad7b94defe8e6c8c959026ae4ff48b1fc321e9b1ba8df40c8d1219b402938b","after_hash":"b3754afeba7e60b366ba6b9a53ef3207b7467888777813625636049a8837c18a","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"maintenance","record_hash_version":1,"record_hash":"a61db9ac9df975de915bf44393c29a2806ef9c99f19199777d27703c11957760"}
Loading
Loading