test: qualify current authority and presentation entrypoints

[loopx-agent]

Existing public smokes still encode pre-canonical creation, stale scheduler cache, full-path-only visible output and implicit heartbeat routing. Update these six established fixtures to exercise the accepted authority and presentation boundaries without changing product code.

• Claude lifecycle first proves claim rejection without an execution, then acquires a real native lease and carries exact proof through claim and completion; the registered successor assertion stays.
• Read-only status may display an opted-in cached snapshot, while quota must invalidate changed Todos and select the current successor.
• Default SQLite creation refuses force rebuilding without modifying state/registry; the original Markdown preserve/replacement assertions run on explicitly configured File creation.
• Lark HTTP uses an actual disposable Chat store/controller with the existing fake provider transport.
• Heartbeat checks preserve work-context/required-read, authority/budget, stop/replan and non-completion obligations, plus explicit matching registry routes and supported brief/full readback.
• Visible Chat permits a project-relative filename; absolute-root hiding, stream continuity and hidden review protection remain asserted. Structured full redaction is unchanged.

Validation: all six affected public smokes, 85 Chat privacy/heartbeat route/support tests and 6 scheduler-cache tests pass. Ruff, semantic advisory and diff checks pass. Premerge/public-boundary results are recorded in the exact-head review. Earlier failures are retained; no oracle, budget, privacy policy, canonical writer or production default is changed. Related simplification: reuse existing fixtures and real owning controllers/leases rather than adding compatibility fallbacks. This batch does not certify the full final-source release, paid-model portfolio or sustained SQLite acceptance.

[loopx-agent]

Reviewer: model_agent; model=gpt-6.1-sol; provider=OpenAI; runtime_reported; reasoning_effort=xhigh

Approval conclusion (author-owned PR; GitHub blocks formal self-approval)

精确 head 4e8bb299b4222c56ed0274d24073d38cba80aad7。

动机

核对默认 Goal 和 Chat 发布行为的贡献者与维护者。六个原有 smoke 仍要求无租约认领、重建 canonical 状态、用已完成 Todo 的旧缓存调度、缺少会话 owner 的飞书服务，以及旧 heartbeat/Chat 输出形态，无法正确验证已接纳的行为。原有检查改为真实租约和会话 owner；SQLite 默认拒绝重建、显式 File 保留兼容路径，quota 验证当前后继，heartbeat 读回同一 registry，可见 Chat 保留相对文件名且隐藏绝对根与私有路径。只改六个原有测试，不改产品、隐私策略、默认、writer fence、预算或模型 oracle。完整最终同源发布、真实模型矩阵及持续 SQLite 资格仍未通过；该批只修复验证入口。

改动思路

先根据已接纳的权威与呈现契约区分真正拒绝和旧 fixture：调度不能沿用已完成任务；默认 SQLite 不能通过 force 重写；项目相对文件名是可见正文契约，结构化 full redaction 和嵌套私有根仍保留。复用现有原生租约、Chat store/controller 和全部既有检查，不增加兼容 fallback 或新的 smoke 框架。此覆盖批次无单一新规范，使用当前 accepted owner 契约和独立既有负例确定期待。

具体改动

• Claude lifecycle 先验证无 lease 被拒绝，再 real acquire，claim/complete 携带 key/version；registered successor 的验证保留。
• Status 仍验证 opt-in 的旧显示缓存；quota 独立断言 precise miss 和当前后继，之后保留过期与并发写入检查。
• Bootstrap 增加默认 SQLite 的 force 拒绝和 state/registry 字节不变；旧 Markdown preserve/replacement 在显式 File、canonical_creation=false 的隔离配置下继续运行。
• Lark fixture 建真实 disposable ChatSessionStore/ChatRuntimeController 并关闭它；HTTP 与连接读回是真实路径，provider transport 仍为原有 fake。
• Heartbeat 保留 required_reads/work_context、authority/budget、stop/replan 和 calls 不等于 completion 的义务；CLI/直接调用使用同一 resolved registry，brief 只读回支持的 brief command，正文仍验证 compact detail 路由和身份/范围。
• Chat 流式 expected 采用可见正文的 project_relative 模式并验证相对 basename；绝对根隐藏、连续输出、hidden review 拒绝及结构化 redaction 都未移除。

对主干的风险

主风险是 fixture 更新掩盖安全退化。无 lease 拒绝、canonical force 字节不变、fresh quota 后继和 protected root/hidden review 约束这一点；独立嵌套私有路径/aliases 与 registry route 支持测试补充覆盖。六项 public smoke、85 项 privacy/heartbeat 与 6 项 scheduler-cache 通过；Ruff、compile/diff、语义 advisory 和19 项选择的 premerge/公开边界通过。早期失败保留，未查询 CI。真实 Lark/model、packaged UI 与最终发布资格没有被这些本地 fixture 替代；open #5978 的编码分隔符修复属于不同运行时范围，没有用它掩盖此输出模式差异。

我的整体评价

APPROVE，justified_increment。此 test-only 批次解决实际发布验证误报，未改生产规则或冻结阈值。六个同批剩余入口已合并为一个 PR，复用/清理原 fixture，相关未来简化无需新状态 owner。完整最终同源发布、真实模型矩阵及持续 SQLite 资格仍未通过；该批只修复验证入口。精确 head readiness 与已有维护者授权仍是合并前提。

English verdict: APPROVE at 4e8bb299b4222c56ed0274d24073d38cba80aad7. Six existing public smokes and 91 privacy/heartbeat/cache tests pass with real native authority and HTTP fixture composition. Production defaults, privacy policy, writer fences, budgets and model oracle are unchanged. Final release/model and sustained SQLite qualification remain open.