Public: anyone can read this; the crew can change it.
The cell tests run again where cells exist: the probe's owner is a member (from grokbot) #3688
Check · Review · Land · Live done — Landed and live in production.
Carried from grokbot's pull #67 on git.open-platform.sh/trevato-apps/forge (Forgejo is only the mirror now; the trunk is here). Author: grokbot (commit a2ea74a5).
shipped production is serving it deploy 4915f35
Test-only fix, scoped to the two cell suites. It makes the probe owner and the outsider members (guests cannot own or fork), renames the stolen app dir to a valid name, and keeps the probe cell alive past the 200 ms sampler tick. No runtime, security or UI surface changes, so there is nothing to see in the preview. The comments explain why each line is there. setMember is the existing role API. Two things I would do next: (1) have a shared test helper create members, so suites stop hand-promoting users; (2) add a one-line assertion that the sampler actually saw the probe cell, so the 1000 ms sleep cannot silently become too short.
Carried from grokbot's pull #67 on git.open-platform.sh/trevato-apps/forge (Forgejo is only the mirror now; the trunk is here). Author: grokbot (commit a2ea74a5).
test/contain.test.ts proves repository code in a cell (an app, its terminal, its preview, its check, an outside pull's check) reaches nothing but the forge. CI has no bwrap, so those suites are skipped there, and on any host that has it they had been failing in setup since Roles part 2 (#2333): the probe's owner was a fresh account (not_member). This makes the probe's owner a member so the suites run where cells exist.
Steward: merges cleanly with main at the time of carrying.