checkpoint

⚒️ Generated with [Fabro](https://fabro.sh)
2026-10-07 03:00:29 +00:00 · 2026-06-08 16:57:04 -04:00 · 2026-06-08 16:57:04 -04:00 · e9691ee0b4
commit e9691ee0b4
parent e578d9877e
6 changed files with 1336 additions and 83 deletions
--- a/run.json
+++ b/run.json
--- a/stages/006-simplify_opus@1/diff.patch
+++ b/stages/006-simplify_opus@1/diff.patch
@ -0,0 +1,369 @@
+diff --git a/apps/fabro-web/app/components/run-summary-panel.test.tsx b/apps/fabro-web/app/components/run-summary-panel.test.tsx
+index abc5d6e7c..219aec6b1 100644
+--- a/apps/fabro-web/app/components/run-summary-panel.test.tsx
+++ b/apps/fabro-web/app/components/run-summary-panel.test.tsx
+@@ -6,6 +6,7 @@ import {
+   RunSummaryPanelView,
+   type RunSummaryPanelViewProps,
+ } from "./run-summary-panel";
+import { TEST_PRINCIPAL } from "../lib/test-fixtures";
+ 
+ function instanceText(instance: TestRenderer.ReactTestInstance): string {
+   const parts: string[] = [];
+@@ -34,14 +35,6 @@ function render(props: Partial<RunSummaryPanelViewProps> = {}) {
+   return tree!;
+ }
+ 
+-const TEST_PRINCIPAL = {
+-  kind:        "user" as const,
+-  identity:    { issuer: "fabro:test", subject: "test-user" },
+-  login:       "test",
+-  auth_method: "dev_token" as const,
+-  avatar_url:  null,
+-};
+-
+ function cellAfterLabel(
+   tree: TestRenderer.ReactTestRenderer,
+   label: string,
+@@ -79,9 +72,8 @@ describe("RunSummaryPanelView", () => {
+     }
+   });
+ 
+-  test("shows unavailable copy for missing optional run fields after load", () => {
+  test("shows unavailable copy for missing run fields after load", () => {
+     const tree = render({ run: makeRun() });
+-    expect(instanceText(cellAfterLabel(tree, "Created by"))).toBe("Ttest");
+     expect(instanceText(cellAfterLabel(tree, "Changes"))).toBe(EMPTY_VALUE);
+     expect(instanceText(cellAfterLabel(tree, "Cost"))).toBe(EMPTY_VALUE);
+   });
+diff --git a/apps/fabro-web/app/components/runs-list/run-table-row.tsx b/apps/fabro-web/app/components/runs-list/run-table-row.tsx
+index 5fd17dad1..20c85f63f 100644
+--- a/apps/fabro-web/app/components/runs-list/run-table-row.tsx
+++ b/apps/fabro-web/app/components/runs-list/run-table-row.tsx
+@@ -35,6 +35,7 @@ export function RunTableRow({
+ }) {
+   const lifecycleLabel = listLifecycleStatusLabel(run);
+   const statusDisplay = columnStatusDisplay[run.status];
+  const createdByDisplay = principalDisplay(run.createdBy);
+   const show = (col: ToggleableColumn) => !hiddenColumns.has(col);
+ 
+   return (
+@@ -54,14 +55,9 @@ export function RunTableRow({
+       </td>
+       {show("created_by") && (
+         <td className="relative z-10 w-8 whitespace-nowrap px-3 py-2.5">
+-          {(() => {
+-            const display = principalDisplay(run.createdBy);
+-            return (
+-              <Tooltip label={display.label}>
+-                <span aria-label={`Created by ${display.label}`}>{display.glyph}</span>
+-              </Tooltip>
+-            );
+-          })()}
+          <Tooltip label={createdByDisplay.label}>
+            <span aria-label={`Created by ${createdByDisplay.label}`}>{createdByDisplay.glyph}</span>
+          </Tooltip>
+         </td>
+       )}
+       {show("repo") && (
+diff --git a/apps/fabro-web/app/data/runs.test.ts b/apps/fabro-web/app/data/runs.test.ts
+index 69f2dbe81..feb2ba568 100644
+--- a/apps/fabro-web/app/data/runs.test.ts
+++ b/apps/fabro-web/app/data/runs.test.ts
+@@ -8,14 +8,7 @@ import {
+   mapRunToRunItem,
+   runStatusDisplay,
+ } from "./runs";
+-
+-const TEST_PRINCIPAL = {
+-  kind:        "user" as const,
+-  identity:    { issuer: "fabro:test", subject: "test-user" },
+-  login:       "test",
+-  auth_method: "dev_token" as const,
+-  avatar_url:  null,
+-};
+import { TEST_PRINCIPAL } from "../lib/test-fixtures";
+ 
+ function makeRun(overrides: Partial<Run> = {}): Run {
+   return {
+diff --git a/apps/fabro-web/app/lib/run-actions.test.ts b/apps/fabro-web/app/lib/run-actions.test.ts
+index c5cb1245c..a95fa6b8d 100644
+--- a/apps/fabro-web/app/lib/run-actions.test.ts
+++ b/apps/fabro-web/app/lib/run-actions.test.ts
+@@ -37,15 +37,9 @@ type CapturedRequest = {
+   data?: unknown;
+ };
+ 
+-const originalAdapter = generatedAxios.defaults.adapter;
+import { TEST_PRINCIPAL } from "./test-fixtures";
+ 
+-const TEST_PRINCIPAL = {
+-  kind:        "user" as const,
+-  identity:    { issuer: "fabro:test", subject: "test-user" },
+-  login:       "test",
+-  auth_method: "dev_token" as const,
+-  avatar_url:  null,
+-};
+const originalAdapter = generatedAxios.defaults.adapter;
+ 
+ function makeRun(status: RunStatus, archived = false): Run {
+   return {
+diff --git a/apps/fabro-web/app/lib/test-fixtures.ts b/apps/fabro-web/app/lib/test-fixtures.ts
+new file mode 100644
+index 000000000..2c7b1391d
+--- /dev/null
+++ b/apps/fabro-web/app/lib/test-fixtures.ts
+@@ -0,0 +1,12 @@
+import type { Principal } from "@qltysh/fabro-api-client";
+
+/**
+ * Shared frontend test fixture mirroring `fabro_types::test_support::test_principal()`.
+ */
+export const TEST_PRINCIPAL: Principal = {
+  kind:        "user",
+  identity:    { issuer: "fabro:test", subject: "test-user" },
+  login:       "test",
+  auth_method: "dev_token",
+  avatar_url:  null,
+};
+diff --git a/apps/fabro-web/app/routes/automations-new.test.tsx b/apps/fabro-web/app/routes/automations-new.test.tsx
+index 2a767fcea..76e840c89 100644
+--- a/apps/fabro-web/app/routes/automations-new.test.tsx
+++ b/apps/fabro-web/app/routes/automations-new.test.tsx
+@@ -5,6 +5,7 @@ import { createMemoryRouter, RouterProvider } from "react-router";
+ 
+ import { ToastProvider } from "../components/toast";
+ import { setupReactTestEnv } from "../lib/test-utils";
+import { TEST_PRINCIPAL } from "../lib/test-fixtures";
+ 
+ let currentRun: any = null;
+ let currentRunError: unknown = null;
+@@ -101,14 +102,6 @@ mock.module("swr", () => ({
+ const { default: AutomationsNew } = await import("./automations-new");
+ mock.restore();
+ 
+-const TEST_PRINCIPAL = {
+-  kind:        "user" as const,
+-  identity:    { issuer: "fabro:test", subject: "test-user" },
+-  login:       "test",
+-  auth_method: "dev_token" as const,
+-  avatar_url:  null,
+-};
+-
+ function makeRun(overrides: Record<string, unknown> = {}) {
+   return {
+     id:               "run_1",
+diff --git a/apps/fabro-web/app/routes/run-detail.test.ts b/apps/fabro-web/app/routes/run-detail.test.ts
+index cb9906196..a850cc0b5 100644
+--- a/apps/fabro-web/app/routes/run-detail.test.ts
+++ b/apps/fabro-web/app/routes/run-detail.test.ts
+@@ -13,6 +13,7 @@ import {
+ 
+ import { ToastProvider } from "../components/toast";
+ import { DemoModeProvider } from "../lib/demo-mode";
+import { TEST_PRINCIPAL } from "../lib/test-fixtures";
+ 
+ let currentRunSummary: any = null;
+ let currentRunState: any = null;
+@@ -20,14 +21,6 @@ let currentQuestions: any[] = [];
+ let deleteRunApiResult: Promise<unknown> | null = null;
+ const mountedRenderers: TestRenderer.ReactTestRenderer[] = [];
+ 
+-const TEST_PRINCIPAL = {
+-  kind:        "user" as const,
+-  identity:    { issuer: "fabro:test", subject: "test-user" },
+-  login:       "test",
+-  auth_method: "dev_token" as const,
+-  avatar_url:  null,
+-};
+-
+ const deleteRunApiMock = mock((_id: string) =>
+   deleteRunApiResult ?? Promise.resolve({}),
+ );
+diff --git a/apps/fabro-web/app/routes/run-files.render.test.tsx b/apps/fabro-web/app/routes/run-files.render.test.tsx
+index b6d95b70c..40a51614e 100644
+--- a/apps/fabro-web/app/routes/run-files.render.test.tsx
+++ b/apps/fabro-web/app/routes/run-files.render.test.tsx
+@@ -5,6 +5,7 @@ import { MemoryRouter, Route, Routes } from "react-router";
+ import { toast as sonnerToast } from "sonner";
+ 
+ import { ToastProvider } from "../components/toast";
+import { TEST_PRINCIPAL } from "../lib/test-fixtures";
+ 
+ let currentFilesPayload: any = null;
+ let currentCommitsPayload: any = null;
+@@ -18,14 +19,6 @@ const virtualizerCalls: any[] = [];
+ const providerCalls: any[] = [];
+ const mountedRenderers: TestRenderer.ReactTestRenderer[] = [];
+ 
+-const TEST_PRINCIPAL = {
+-  kind:        "user" as const,
+-  identity:    { issuer: "fabro:test", subject: "test-user" },
+-  login:       "test",
+-  auth_method: "dev_token" as const,
+-  avatar_url:  null,
+-};
+-
+ mock.module("@pierre/diffs/react", () => ({
+   MultiFileDiff: (props: any) => {
+     multiFileDiffCalls.push(props);
+diff --git a/apps/fabro-web/app/routes/runs.preferences.test.tsx b/apps/fabro-web/app/routes/runs.preferences.test.tsx
+index e2be07d12..7e18ff679 100644
+--- a/apps/fabro-web/app/routes/runs.preferences.test.tsx
+++ b/apps/fabro-web/app/routes/runs.preferences.test.tsx
+@@ -6,14 +6,7 @@ import type { PaginatedRunList, Run } from "@qltysh/fabro-api-client";
+ import { ToastProvider } from "../components/toast";
+ import { CHILD_RUNS_LIST_PREFERENCES_STORAGE_KEY } from "../components/runs-list/preferences";
+ import { setupReactTestEnv } from "../lib/test-utils";
+-
+-const TEST_PRINCIPAL = {
+-  kind:        "user" as const,
+-  identity:    { issuer: "fabro:test", subject: "test-user" },
+-  login:       "test",
+-  auth_method: "dev_token" as const,
+-  avatar_url:  null,
+-};
+import { TEST_PRINCIPAL } from "../lib/test-fixtures";
+ 
+ class MemoryStorage {
+   values = new Map<string, string>();
+diff --git a/apps/fabro-web/app/routes/runs.test.tsx b/apps/fabro-web/app/routes/runs.test.tsx
+index edc7e388f..babef285b 100644
+--- a/apps/fabro-web/app/routes/runs.test.tsx
+++ b/apps/fabro-web/app/routes/runs.test.tsx
+@@ -11,14 +11,7 @@ import {
+   shouldRefreshBoardForEvent,
+ } from "./runs";
+ import { summarizeBatchLifecycleAction } from "../components/runs-list/batch-lifecycle";
+-
+-const TEST_PRINCIPAL = {
+-  kind:        "user" as const,
+-  identity:    { issuer: "fabro:test", subject: "test-user" },
+-  login:       "test",
+-  auth_method: "dev_token" as const,
+-  avatar_url:  null,
+-};
+import { TEST_PRINCIPAL } from "../lib/test-fixtures";
+ 
+ function boardRun(id: string, column: BoardColumn, questionText?: string): Run {
+   const status =
+diff --git a/lib/crates/fabro-store/src/run_state.rs b/lib/crates/fabro-store/src/run_state.rs
+index d525906bc..f2b2a8d8a 100644
+--- a/lib/crates/fabro-store/src/run_state.rs
+++ b/lib/crates/fabro-store/src/run_state.rs
+@@ -1443,7 +1443,8 @@ mod tests {
+                 "settings": WorkflowSettings::default(),
+                 "graph": Graph::new("test"),
+                 "labels": {},
+-                "run_dir": "/tmp/run"
+                "run_dir": "/tmp/run",
+                "provenance": test_support::test_run_provenance()
+             }),
+             None,
+         );
+@@ -1471,7 +1472,8 @@ mod tests {
+                 "graph": Graph::new("test"),
+                 "automation": automation,
+                 "labels": {},
+-                "run_dir": "/tmp/run"
+                "run_dir": "/tmp/run",
+                "provenance": test_support::test_run_provenance()
+             }),
+             None,
+         );
+@@ -1494,7 +1496,8 @@ mod tests {
+                 "settings": WorkflowSettings::default(),
+                 "graph": Graph::new("test"),
+                 "labels": {},
+-                "run_dir": "/tmp/run"
+                "run_dir": "/tmp/run",
+                "provenance": test_support::test_run_provenance()
+             }),
+             None,
+         )])
+@@ -1516,7 +1519,8 @@ mod tests {
+                 "settings": WorkflowSettings::default(),
+                 "graph": Graph::new("test"),
+                 "labels": {},
+-                "run_dir": "/tmp/run"
+                "run_dir": "/tmp/run",
+                "provenance": test_support::test_run_provenance()
+             }),
+             None,
+         )])
+@@ -1593,7 +1597,8 @@ mod tests {
+                     "settings": WorkflowSettings::default(),
+                     "graph": Graph::new("test"),
+                     "labels": {},
+-                    "run_dir": "/tmp/run"
+                    "run_dir": "/tmp/run",
+                    "provenance": test_support::test_run_provenance()
+                 }),
+                 None,
+             ),
+@@ -1640,7 +1645,6 @@ mod tests {
+         properties: &serde_json::Value,
+         node_id: Option<&str>,
+     ) -> EventEnvelope {
+-        let properties = run_created_properties(event, properties);
+         EventEnvelope {
+             seq,
+             event: RunEvent::from_value(json!({
+@@ -1662,7 +1666,6 @@ mod tests {
+         properties: &serde_json::Value,
+         node_id: Option<&str>,
+     ) -> EventEnvelope {
+-        let properties = run_created_properties(event, properties);
+         EventEnvelope {
+             seq,
+             event: RunEvent::from_value(json!({
+@@ -1677,19 +1680,6 @@ mod tests {
+         }
+     }
+ 
+-    fn run_created_properties(event: &str, properties: &serde_json::Value) -> serde_json::Value {
+-        let mut properties = properties.clone();
+-        if event == "run.created" && properties.get("provenance").is_none() {
+-            if let Some(object) = properties.as_object_mut() {
+-                object.insert(
+-                    "provenance".to_string(),
+-                    serde_json::to_value(test_support::test_run_provenance()).unwrap(),
+-                );
+-            }
+-        }
+-        properties
+-    }
+-
+     #[test]
+     fn live_run_timing_returns_none_before_run_starts() {
+         let state = initialized_projection();
+@@ -2927,7 +2917,8 @@ mod tests {
+                     "attrs": { "goal": { "String": "Goal title" } }
+                 },
+                 "labels": {},
+-                "run_dir": "/tmp/run"
+                "run_dir": "/tmp/run",
+                "provenance": test_support::test_run_provenance()
+             }),
+             None,
+         );
+@@ -2954,7 +2945,8 @@ mod tests {
+                     "attrs": { "goal": { "String": "## Plan: Legacy title\n\nDetails" } }
+                 },
+                 "labels": {},
+-                "run_dir": "/tmp/run"
+                "run_dir": "/tmp/run",
+                "provenance": test_support::test_run_provenance()
+             }),
+             None,
+         );
+@@ -2983,7 +2975,8 @@ mod tests {
+                         "attrs": { "goal": { "String": "Goal title" } }
+                     },
+                     "labels": {},
+-                    "run_dir": "/tmp/run"
+                    "run_dir": "/tmp/run",
+                    "provenance": test_support::test_run_provenance()
+                 }),
+                 None,
+             ),
--- a/stages/006-simplify_opus@1/status.json
+++ b/stages/006-simplify_opus@1/status.json
@ -0,0 +1,6 @@
+{
+  "outcome": "succeeded",
+  "notes": "Stage completed: simplify_opus",
+  "failure_reason": null,
+  "timestamp": "2026-06-08T20:53:24.645727Z"
+}
--- a/stages/007-simplify_gpt@1/prompt.md
+++ b/stages/007-simplify_gpt@1/prompt.md
@ -0,0 +1,337 @@
+Goal: # Plan: Make run actors and provenance total
+
+## Context
+
+This is a greenfield app. Backward compatibility with old serialized runs, old API clients, old generated models, and old tests is not a constraint. Prefer the clean invariant and remove all traces of the placeholder shape.
+
+`Principal::Anonymous` currently represents "no authenticated actor on this request" inside auth middleware. That is auth state, not an actor. A `Principal` should only mean "who acted."
+
+Likewise, a persisted run should always have a creator. `Run.created_by`, `RunSpec.provenance`, `RunProvenance.subject`, and `run.created` event provenance should all be total. No `Option<Principal>`, no nullable OpenAPI fields, no legacy deserialization defaults, and no fallback creator in projection code.
+
+Two commits, in order.
+
+---
+
+## Commit 1 - Remove `Principal::Anonymous`
+
+Breaking cleanup. `Principal` becomes actor-only. Missing/invalid auth is represented as absent request principal, not as an anonymous principal variant.
+
+### Rust
+
+`lib/crates/fabro-types/src/principal.rs`:
+- Drop `Anonymous`.
+- Drop `Anonymous` arms in `kind()` and `display()`.
+- Delete anonymous serialization/round-trip test coverage.
+
+`lib/crates/fabro-server/src/principal_middleware.rs`:
+- `RequestAuthContext.principal: Principal` -> `Option<Principal>`.
+- `RequestAuthLogContext.principal: Principal` -> `Option<Principal>`.
+- `initial()` and `rejected()` set `principal: None`.
+- `authenticated(...)`, `authenticated_worker(...)`, and `authenticated_user(...)` set `principal: Some(...)`.
+- Update `principal_without_log_unused_fields` to preserve `None` and strip user avatar data only inside `Some(Principal::User(...))`.
+- Update all gate helpers to match `Option<Principal>`:
+  - `require_user`
+  - `require_authenticated_user`
+  - `require_run_management_actor`
+  - `require_worker_or_user_for_run`
+  - `require_run_management_target`
+- `None` routes to the existing `auth_rejection(context.auth_status, context.auth_error_code)` behavior.
+- `Some(Principal::Worker { .. })` keeps the current forbidden-vs-auth-rejection distinctions.
+- Update tests that assert the initial/rejected principal to assert `None`.
+
+`lib/crates/fabro-server/src/server.rs` HTTP logging:
+- Keep the `principal_kind` field on every HTTP log line.
+- Compute `principal_kind` as `auth_context.principal.as_ref().map(Principal::kind).unwrap_or("none")`.
+- Match `auth_context.principal` as an `Option<Principal>`:
+  - `Some(User(...))`, `Some(Worker { ... })`, `Some(Webhook { ... })`, `Some(Slack { ... })` keep their extra fields.
+  - `None | Some(Agent { .. } | System { .. })` emits only the common HTTP fields.
+
+`docs/internal/logging-strategy.md`:
+- Replace the `anonymous` HTTP caller category guidance with `none` for requests that have no principal.
+- Keep `auth_status` as the field that distinguishes missing, invalid, expired, and authenticated auth state.
+
+### OpenAPI and generated clients
+
+`docs/public/api-reference/fabro-api.yaml`:
+- Remove `PrincipalAnonymous` from the `Principal` `oneOf`.
+- Remove `anonymous` from the `Principal` discriminator mapping.
+- Delete the `PrincipalAnonymous` schema.
+
+Regenerate:
+- `cargo build -p fabro-api`
+- `cd lib/packages/fabro-api-client && bun run generate`
+
+Expected generated cleanup:
+- `lib/packages/fabro-api-client/src/models/principal-anonymous.ts` disappears.
+- `Principal` union no longer includes `{ kind: "anonymous" }`.
+- `lib/packages/fabro-api-client/src/models/index.ts` no longer exports `principal-anonymous`.
+
+### Frontend
+
+`apps/fabro-web/app/lib/principal-display.tsx`:
+- Remove the `"anonymous"` switch case and unused icon import.
+
+`apps/fabro-web/app/components/run-summary-panel.test.tsx` and API-client exhaustiveness tests:
+- Remove anonymous principal cases.
+
+### Documentation sweep
+
+Remove anonymous-principal references from product/API docs and tests. Be careful not to touch unrelated uses of "anonymous" such as telemetry anonymous IDs or Git's `remote_anonymous` API.
+
+Useful sweep:
+- `rg -n "Principal::Anonymous|PrincipalAnonymous|kind: 'anonymous'|kind: \"anonymous\"|anonymous actor|anonymous subject|principal_kind.*anonymous|\"anonymous\"" lib/crates apps/fabro-web lib/packages/fabro-api-client docs/public docs/internal`
+
+### Verification
+
+- `cargo +nightly-2026-04-14 fmt --check --all`
+- `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings`
+- `cargo build --workspace`
+- `cargo nextest run --workspace`
+- `cd apps/fabro-web && bun run typecheck && bun test`
+- Manual: start `fabro server start`, hit a protected endpoint without a token, confirm 401 and an HTTP log with `principal_kind="none"` and `auth_status="missing"`.
+
+---
+
+## Commit 2 - Make run provenance and creator non-optional
+
+Full-chain invariant. Every persisted run has exactly one creator principal. No nullable schema fields, no legacy defaults, no projection fallbacks.
+
+### Core type changes
+
+`lib/crates/fabro-types/src/run_summary.rs`:
+- `Run.created_by: Option<Principal>` -> `Principal`.
+- Drop `#[serde(default)]`.
+
+`lib/crates/fabro-types/src/run.rs`:
+- `RunProvenance.subject: Option<Principal>` -> `Principal`.
+- Drop `#[serde(default, skip_serializing_if = "Option::is_none")]`.
+- Drop `Default` derive on `RunProvenance`.
+- `RunSpec.provenance: Option<RunProvenance>` -> `RunProvenance`.
+- Drop `#[serde(default, skip_serializing_if = "Option::is_none")]` on `RunSpec.provenance`.
+
+`lib/crates/fabro-types/src/run_event/run.rs`:
+- `RunCreatedProps.provenance: Option<RunProvenance>` -> `RunProvenance`.
+- Drop default/skip serialization attributes for provenance.
+
+`lib/crates/fabro-workflow/src/event/events.rs`:
+- `Event::RunCreated.provenance: Option<RunProvenance>` -> `RunProvenance`.
+- Drop default/skip serialization attributes for provenance.
+
+### Creation and retry flow
+
+`lib/crates/fabro-workflow/src/operations/create.rs`:
+- `CreateRunInput.provenance: Option<RunProvenance>` -> `RunProvenance`.
+- `PersistCreateOptions.provenance: Option<RunProvenance>` -> `RunProvenance`.
+- `RunSpec { provenance }` stores the total provenance directly.
+- `Event::RunCreated { provenance }` emits total provenance directly.
+
+`lib/crates/fabro-server/src/server/handler/runs.rs`:
+- `run_provenance(headers, subject)` returns `RunProvenance { subject: subject.clone(), ... }`.
+- Build provenance before creating `CreateRunInput`.
+
+`lib/crates/fabro-server/src/run_manifest.rs`:
+- Change `create_run_input(...)` to accept `provenance: RunProvenance` and set it directly, or stop using the helper for the final `CreateRunInput` construction. Do not create a temporary input with missing provenance.
+
+`lib/crates/fabro-workflow/src/operations/retry.rs`:
+- `RetryRunInput.provenance: Option<RunProvenance>` -> `RunProvenance`.
+- `retry_run(...)` writes the new run's `run.created` event with total provenance.
+
+`lib/crates/fabro-server/src/server/handler/lifecycle.rs`:
+- Pass `run_provenance(&headers, &actor)` directly into `RetryRunInput`.
+
+### Event conversion and projections
+
+`lib/crates/fabro-workflow/src/event/convert.rs`:
+- Convert `Event::RunCreated.provenance` into `RunCreatedProps.provenance` directly.
+- Remove `Some(...)` wrapping for run-created provenance.
+
+`lib/crates/fabro-workflow/src/event/stored_fields.rs`:
+- `Event::RunCreated { provenance, .. }` sets `actor: Some(provenance.subject.clone())`.
+
+`lib/crates/fabro-store/src/run_state.rs`:
+- `projection_from_created(...)` builds `RunSpec { provenance: props.provenance.clone(), ... }`.
+- `build_summary(...)` sets `created_by: state.spec.provenance.subject.clone()`.
+- Delete or rewrite tests that deserialize projections with `"provenance": null`.
+
+`lib/crates/fabro-types/src/run_projection.rs` and projection tests:
+- Replace all test `RunSpec` literals with total provenance.
+- Remove tests whose only purpose is legacy/null provenance tolerance.
+
+### OpenAPI
+
+`docs/public/api-reference/fabro-api.yaml`:
+- `Run.created_by` references `Principal` directly. Remove `oneOf [..., null]`.
+- `RunProvenance.required` includes `subject`.
+- `RunProvenance.subject` references `Principal` directly. Remove `oneOf [..., null]`.
+- `RunSpec.required` includes `provenance`.
+- `RunSpec.provenance` references `RunProvenance` directly. Remove `oneOf [..., null]`.
+- If `run.created` event properties are represented separately in the spec, make that event provenance required and non-nullable too.
+
+Regenerate:
+- `cargo build -p fabro-api`
+- `cd lib/packages/fabro-api-client && bun run generate`
+
+Do not hand-edit generated client files.
+
+### Demo mode
+
+`lib/crates/fabro-server/src/demo/mod.rs`:
+- Add a clearly synthetic demo principal using `AuthMethod::DevToken`, not GitHub:
+  ```rust
+  static DEMO_PRINCIPAL: LazyLock<Principal> = LazyLock::new(|| {
+      Principal::user(
+          IdpIdentity::new("fabro:demo", "demo").unwrap(),
+          "demo".to_string(),
+          AuthMethod::DevToken,
+      )
+  });
+  ```
+- Replace `created_by: None` with `created_by: DEMO_PRINCIPAL.clone()`.
+- If demo creates any full `RunSpec` or `run.created` event data, give it `RunProvenance { subject: DEMO_PRINCIPAL.clone(), ... }`.
+
+### Test support
+
+Do not add fake auth helpers to `fabro_types::fixtures`; that module is run-id constants.
+
+Use the existing `fabro-types` `test-support` feature:
+- Add `#[cfg(any(test, feature = "test-support"))] pub mod test_support;` in `lib/crates/fabro-types/src/lib.rs` if it does not already exist.
+- Add `lib/crates/fabro-types/src/test_support.rs` with:
+  - `test_principal() -> Principal`
+  - `test_run_provenance() -> RunProvenance`
+- Use an obviously fake dev-token identity, e.g. issuer `fabro:test`, subject `test-user`, login `test`.
+- In crates that need the helper from integration tests or cross-crate tests, dual-list `fabro-types` in `dev-dependencies` with `features = ["test-support"]`, following existing repo patterns.
+
+Update all constructors:
+- Replace `provenance: None` in `RunSpec`, `CreateRunInput`, `RetryRunInput`, `Event::RunCreated`, and `RunCreatedProps` literals with `test_run_provenance()` or a locally meaningful provenance.
+- Replace `subject: Some(...)` with `subject: ...`.
+- Replace `subject: None` only when it is actually `RunProvenance.subject`; leave unrelated todo/commit/message `subject` fields alone.
+- Replace `created_by: None` / `created_by: null` with `test_principal()` or a frontend TS principal fixture.
+- Delete tests that assert nullable or omitted creator/provenance behavior.
+
+Representative Rust areas:
+- `lib/crates/fabro-store/src/run_state.rs`
+- `lib/crates/fabro-store/tests/serializable_projection.rs`
+- `lib/crates/fabro-workflow/src/operations/{create,retry,start}.rs`
+- `lib/crates/fabro-workflow/src/event/{convert,sink,stored_fields}.rs`
+- `lib/crates/fabro-workflow/src/handler/**`
+- `lib/crates/fabro-workflow/src/pipeline/**`
+- `lib/crates/fabro-workflow/src/run_{lookup,metadata}.rs`
+- `lib/crates/fabro-server/src/server/tests.rs`
+- `lib/crates/fabro-server/src/server/handler/**`
+- `lib/crates/fabro-server/tests/it/**`
+- `lib/crates/fabro-cli/tests/it/support/mod.rs`
+- `lib/crates/fabro-dump/src/lib.rs`
+- `lib/crates/fabro-tool/src/{common,create,interact,search}.rs`
+- `lib/crates/fabro-api/tests/{principal_round_trip,run_summary_round_trip,run_projection_round_trip,run_event_round_trip}.rs`
+- `lib/crates/fabro-types/tests/{run_spec_serde,run_spec_methods,run_event_serde}.rs`
+
+Representative TypeScript areas:
+- `apps/fabro-web/app/**` tests with `created_by: null`
+- `apps/fabro-web/app/data/runs.ts`
+- `apps/fabro-web/app/components/run-summary-panel.tsx`
+- `apps/fabro-web/app/components/runs-list/**`
+- `lib/packages/fabro-api-client/tests/principal-exhaustive.ts`
+
+Useful sweep after edits:
+- `rg -n "Principal::Anonymous|PrincipalAnonymous|principal-anonymous|kind: ['\"]anonymous|created_by:\\s*(None|null)|provenance:\\s*None|subject:\\s*Some\\(|subject:\\s*None" lib/crates apps/fabro-web lib/packages/fabro-api-client docs/public docs/internal`
+
+Review each hit. The only acceptable remaining matches should be unrelated uses of "anonymous" and unrelated non-principal `subject` fields.
+
+### Frontend
+
+`apps/fabro-web/app/components/run-summary-panel.tsx`:
+- `run?.created_by` may still be guarded by `run` loading state, but `created_by` itself is non-null once `run` exists.
+- Pass `run.created_by` directly to `principalDisplay(...)` inside loaded-run branches.
+
+`apps/fabro-web/app/data/runs.ts` and run-list components:
+- Treat `createdBy` as a total principal in UI data derived from a loaded API run.
+- Remove empty/fallback rendering that only existed for missing creator data.
+
+### Verification
+
+- `cargo +nightly-2026-04-14 fmt --check --all`
+- `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings`
+- `cargo build --workspace`
+- `cargo nextest run --workspace`
+- `cargo nextest run -p fabro-server`
+- `cd apps/fabro-web && bun run typecheck && bun test && bun run build`
+- Manual end-to-end:
+  - `fabro server start`
+  - `cd apps/fabro-web && bun run dev`
+  - Authenticate and create a run through the UI.
+  - Confirm `/api/v1/runs/:id` has non-null `created_by`.
+  - Confirm `/api/v1/runs/:id/state` has non-null `spec.provenance.subject`.
+  - Retry a failed run and confirm the retried run has the retrying user as creator.
+  - Hit demo mode with `X-Fabro-Demo: 1` and confirm the run summary renders the synthetic `demo` dev-token user.
+
+
+## Completed stages
+- **toolchain**: succeeded
+  - Script: `command -v cargo >/dev/null || { curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y && sudo ln -sf $HOME/.cargo/bin/* /usr/local/bin/; }; cargo --version 2>&1`
+  - Output:
+    ```
+    cargo 1.95.0 (f2d3ce0bd 2026-03-21)
+    ```
+- **preflight_compile**: succeeded
+  - Script: `cargo check -q --workspace 2>&1`
+  - Output: (empty)
+- **preflight_lint**: succeeded
+  - Script: `cargo +nightly-2026-04-14 clippy -q --workspace --all-targets -- -D warnings 2>&1`
+  - Output: (empty)
+- **implement**: succeeded
+  - Model: gpt-5.5, 3.8m tokens in / 63.4k out
+  - Files: /home/daytona/workspace/fabro/lib/crates/fabro-types/src/test_support.rs
+- **simplify_opus**: succeeded
+  - Model: claude-opus-4-7, 87.9k tokens in / 28.7k out
+  - Files: /home/daytona/workspace/fabro/apps/fabro-web/app/components/run-summary-panel.test.tsx, /home/daytona/workspace/fabro/apps/fabro-web/app/components/runs-list/run-table-row.tsx, /home/daytona/workspace/fabro/apps/fabro-web/app/data/runs.test.ts, /home/daytona/workspace/fabro/apps/fabro-web/app/lib/run-actions.test.ts, /home/daytona/workspace/fabro/apps/fabro-web/app/lib/test-fixtures.ts, /home/daytona/workspace/fabro/apps/fabro-web/app/routes/automations-new.test.tsx, /home/daytona/workspace/fabro/apps/fabro-web/app/routes/run-detail.test.ts, /home/daytona/workspace/fabro/apps/fabro-web/app/routes/run-files.render.test.tsx, /home/daytona/workspace/fabro/apps/fabro-web/app/routes/runs.preferences.test.tsx, /home/daytona/workspace/fabro/apps/fabro-web/app/routes/runs.test.tsx, /home/daytona/workspace/fabro/lib/crates/fabro-store/src/run_state.rs, /home/daytona/workspace/fabro/lib/crates/fabro-workflow/src/test_support.rs
+
+
+# Simplify: Code Review and Cleanup
+
+Review all changed files for reuse, quality, and efficiency. Fix any issues found.
+
+## Phase 1: Identify Changes
+
+Run \`git diff\` (or \`git diff HEAD\` if there are staged changes) to see what changed. If there are no git changes, review the most recently modified files that the user mentioned or that you edited earlier in this conversation.
+
+## Phase 2: Launch Three Review Agents in Parallel
+
+Use the ${AGENT_TOOL_NAME} tool to launch all three agents concurrently in a single message. Pass each agent the full diff so it has the complete context.
+
+### Agent 1: Code Reuse Review
+
+For each change:
+
+1. **Search for existing utilities and helpers** that could replace newly written code. Look for similar patterns elsewhere in the codebase — common locations are utility directories, shared modules, and files adjacent to the changed ones.
+2. **Flag any new function that duplicates existing functionality.** Suggest the existing function to use instead.
+3. **Flag any inline logic that could use an existing utility** — hand-rolled string manipulation, manual path handling, custom environment checks, ad-hoc type guards, and similar patterns are common candidates.
+
+### Agent 2: Code Quality Review
+
+Review the same changes for hacky patterns:
+
+1. **Redundant state**: state that duplicates existing state, cached values that could be derived, observers/effects that could be direct calls
+2. **Parameter sprawl**: adding new parameters to a function instead of generalizing or restructuring existing ones
+3. **Copy-paste with slight variation**: near-duplicate code blocks that should be unified with a shared abstraction
+4. **Leaky abstractions**: exposing internal details that should be encapsulated, or breaking existing abstraction boundaries
+5. **Stringly-typed code**: using raw strings where constants, enums (string unions), or branded types already exist in the codebase
+6. **Unnecessary JSX nesting**: wrapper Boxes/elements that add no layout value — check if inner component props (flexShrink, alignItems, etc.) already provide the needed behavior
+7. **Unnecessary comments**: comments explaining WHAT the code does (well-named identifiers already do that), narrating the change, or referencing the task/caller — delete; keep only non-obvious WHY (hidden constraints, subtle invariants, workarounds)
+
+### Agent 3: Efficiency Review
+
+Review the same changes for efficiency:
+
+1. **Unnecessary work**: redundant computations, repeated file reads, duplicate network/API calls, N+1 patterns
+2. **Missed concurrency**: independent operations run sequentially when they could run in parallel
+3. **Hot-path bloat**: new blocking work added to startup or per-request/per-render hot paths
+4. **Recurring no-op updates**: state/store updates inside polling loops, intervals, or event handlers that fire unconditionally — add a change-detection guard so downstream consumers aren't notified when nothing changed. Also: if a wrapper function takes an updater/reducer callback, verify it honors same-reference returns (or whatever the "no change" signal is) — otherwise callers' early-return no-ops are silently defeated
+5. **Unnecessary existence checks**: pre-checking file/resource existence before operating (TOCTOU anti-pattern) — operate directly and handle the error
+6. **Memory**: unbounded data structures, missing cleanup, event listener leaks
+7. **Overly broad operations**: reading entire files when only a portion is needed, loading all items when filtering for one
+
+## Phase 3: Fix Issues
+
+Wait for all three agents to complete. Aggregate their findings and fix each issue directly. If a finding is a false positive or not worth addressing, note it and move on — do not argue with the finding, just skip it.
+
+When done, briefly summarize what was fixed (or confirm the code was already clean).
--- a/stages/007-simplify_gpt@1/provider_used.json
+++ b/stages/007-simplify_gpt@1/provider_used.json
@ -0,0 +1,5 @@
+{
+  "mode": "agent",
+  "provider": "openai",
+  "model": "gpt-5.5"
+}
--- a/stages/007-simplify_gpt@1/response.md
+++ b/stages/007-simplify_gpt@1/response.md
@ -0,0 +1,13 @@
+Cleanup review completed. I found and fixed three small issues:
+
+- Moved `TEST_PRINCIPAL` import in `app/lib/run-actions.test.ts` back with the other imports.
+- Removed an unnecessary explanatory comment from `app/lib/test-fixtures.ts`.
+- Avoided computing `principalDisplay(run.createdBy)` when the `created_by` column is hidden by extracting a small `CreatedByCell` component.
+
+Verification run:
+
+- `cd apps/fabro-web && bun run typecheck`
+- Targeted `bun test` for the touched frontend test files: 104 passed, 0 failed.
+- `git diff --check` passed.
+
+Current working tree has the three cleanup modifications above.