Fix admin document browsing and canonical event expectations

Author: KSemenenko

docs/ADR/ADR-039-official-mcp-agent-api.md

@@ -185,9 +185,10 @@ limits. Native BlobResourceContents.FromBytes receives raw bytes; official clien
 use DecodedData, avoiding double base64. Native resources/read has no IsError;
 unresolved URIs use safe protocol InvalidParams for the current revision. No
 unfinished blob tool or resource may be advertised. The current source catalog
-contains 47 operations: the base 37 below plus ten implemented-source BlobStorage
-tools whose names/routes/contracts are frozen by ADR-038. All runtime and delivery
-gates remain pending; a catalog count does not qualify blob semantics.
+contains 50 operations: the base 37 below, ten implemented-source BlobStorage
+tools whose names/routes/contracts are frozen by ADR-038, and three additive
+read-only [AdminDashboard](ADR-051-admin-dashboard.md) tools. All runtime and
+delivery gates remain pending; a catalog count does not qualify blob semantics.
 
 ```mermaid
 flowchart LR

docs/Features/AdminDashboard.md

@@ -80,6 +80,8 @@ Manual exception: subjective visual polish is inspected via desktop/mobile scree
 
 REQ/AC-AD-001..007 map to ADR-051 and tasks AD-C (shared integration), AD-B (backend), AD-U (UI), AD-T (tests) and AD-J (lead review/delivery). The requirement table and criterion-to-test matrix identify the automated owning suites. The subjective design exception requires desktop and mobile visual review; no functional or numeric gate is waived.
 
-Latest completed candidate: exact `b533c80a128a85c6e2072de3bc011a09d4a97cc7`, [CI run 37032546228](https://github.com/managedcode/KeyLoad/actions/runs/37032546228). Build, format, governance and analyzer/source-inventory checks passed on all three operating systems. Real RF3 SDK/MCP catalog and queue parity, non-consuming inspection, physical-node snapshots and actual HTTP counters passed. The complete run failed: slash-equivalent static routes made the shell return HTTP 500, browser navigation could not start, and authorization/queue fixtures violated existing epoch/time contracts. Source repairs and stronger GET/HEAD/browser assertions await a new exact-SHA run; there is no successful browser screenshot receipt yet. Shared MCP discovery oracle, native logging lifecycle, process recovery and comparison failures are tracked independently and cannot count as successful qualification.
+Latest completed candidate: exact `1bee2609ff0de620640f304e2e42eb2859716646`, [CI run 37036628601](https://github.com/managedcode/KeyLoad/actions/runs/37036628601). Build, format, governance and analyzer/source-inventory checks passed on all three operating systems. Every OS passed 805/805 unit tests, including 13/13 AdminDashboard cases, zero skipped. All 6 RF3 AdminDashboard API cases passed, including exact shell GET/HEAD/redirect/auth protection, SDK/MCP catalog/queue parity, physical observations and persisted revocation/expiry. The browser passed shell/connection, overlap, reduced motion, background suspension and catalog navigation before failing the first document-row wait. Its UI sent an invalid empty AST projection; the source repair uses the existing standard wildcard selection and strengthens the actual seeded row/title assertion. No browser PNG was produced; full browser qualification awaits the repaired exact-SHA run. Three independent EventStreams canonical-JSON oracle failures, process recovery and comparison gates also keep the complete workflow failed.
+
+The previous exact `b533c80a128a85c6e2072de3bc011a09d4a97cc7`, [CI run 37032546228](https://github.com/managedcode/KeyLoad/actions/runs/37032546228), exposed slash-equivalent routes and fixture epoch/time defects; those repairs are now qualified by the latest candidate. Native logging lifecycle and complete 50-tool discovery regressions also pass in the latest candidate. Actual receipts are retained under ignored `artifacts/qualification/admin-dashboard/37036628601/`.
 
 The earlier exact `49a5b6054843800e20e333ddaa28fa96d79dd294`, [CI run 37029344985](https://github.com/managedcode/KeyLoad/actions/runs/37029344985), stopped before runtime tests at compiler/analyzer errors; later source fixes compile. Downloaded candidate receipts are retained under ignored `artifacts/qualification/admin-dashboard/37032546228/`. Root thresholds require numeric coverage, but no MTP/TUnit collector or baseline is configured: coverage remains an open gate. No local tests were executed. ADR-051 remains Accepted while required qualification is incomplete.

docs/Features/ClientApi.md

@@ -152,7 +152,7 @@ dependency patch, broad exception fallback, trusted caller role or timeout chang
 |---|---|---|
 | REQ-CLIENT-004: supported typed operations і capabilities дзеркалять canonical server contracts | AC-CLIENT-004: existing document/event/queue/group/graph/series/query/search/feed/admin calls повертають typed values/outcomes; unsupported capability/version дає явну помилку; equivalent query adapters дають однаковий result/authority | Existing `SqlJsonAndCSharpUseTheSameAuthorizedHttpQueryContract` у [ClusterTests](../../tests/KeyLoad.IntegrationTests/ClusterTests.cs), [QueryAdapterTests](../../tests/KeyLoad.UnitTests/QueryAdapterTests.cs); operation-manifest parity expansion PLANNED |
 | REQ-CLIENT-005: retry/error/cancellation зберігають stable command identity та unknown outcome | AC-CLIENT-005: transient disconnect після committed write не спричиняє другу logical operation; same ID/content replay стабільний, different payload conflict; typed errors, cancellation, bounded decode/disposal зберігають caller semantics без fabricated success | Existing `ReplicatedAtomicBatchSurvivesLeaderProcessKillAndMinorityRejectsWrites` у ClusterTests; transport edge/error cases з AC-MP-009 PLANNED/GitHub pending |
-| REQ-CLIENT-006: official MCP SDK adapter виконує ті самі authorized operations | AC-CLIENT-006 and AC-MCP-001–008: real official MCP C# SDK caller на Docker RF3 має operation/result/error/cancellation parity з .NET SDK; invalid/forged/revoked grants та unsupported calls fail before effects; search/storage coverage включено лише після owning capability implementation | Source IntegrationTests `Features/ClientApi/` MCP parity/adversarial suite; [ADR-039](../ADR/ADR-039-official-mcp-agent-api.md) accepted stateless `/mcp`, version-one 47-operation source catalog including ten ADR-038 BlobStorage operations and bounded admission contract; runtime pending |
+| REQ-CLIENT-006: official MCP SDK adapter виконує ті самі authorized operations | AC-CLIENT-006 and AC-MCP-001–008: real official MCP C# SDK caller на Docker RF3 має operation/result/error/cancellation parity з .NET SDK; invalid/forged/revoked grants та unsupported calls fail before effects; search/storage coverage включено лише після owning capability implementation | Source IntegrationTests `Features/ClientApi/` MCP parity/adversarial suite; [ADR-039](../ADR/ADR-039-official-mcp-agent-api.md) accepted stateless `/mcp`, version-one 50-operation source catalog including ten ADR-038 BlobStorage operations, three read-only ADR-051 AdminDashboard operations and bounded admission contract; runtime pending |
 | REQ-CLIENT-007: simple agent/worker API має bounded capability та processing contract | AC-CLIENT-007: PLANNED versioned agent calls користуються тим самим persisted principal, typed operations, quotas і outcome semantics; queue worker stale lease/duplicate handler, empty input та cancellation не дають unauthorized/duplicate effects | Existing processing semantics у [MessagingTests](../../tests/KeyLoad.UnitTests/MessagingTests.cs); agent surface tests PLANNED після ADR-039 acceptance |
 
 MCP і agent surface required; accepted contracts, exact names and wrappers are in

docs/Features/EventStreams.md

@@ -68,3 +68,16 @@ Preserve all existing range/policy/budget/cancellation and fixture lifetime case
 This is test-only input repair: ADR-035/041/039 and the canonical batch contract
 are sufficient, with no product/API/data boundary change or separate ADR. Lead
 reviews/builds/formats and qualifies complete exact-SHA GitHub unit/RF3 suites.
+
+TASK-AD-E2 preserves REQ/AC-EVENT-004/005/006 and AC-MCP-002/005/007 after
+run37032546228 at exactb533c80 fails three RF3 cases at byte-exact EventData
+expectations. The existing production contract canonicalizes JSON payload/header
+property order; SDK/MCP bytes already agree, while the fixture expects unsorted
+producer bytes. One worker owns only IntegrationTests/Features/EventStreams/
+McpEventStreamScenario.cs and McpEventStreamTokens.cs. Keep unsorted InputEvents
+for actual append and handcrafted independent canonical ExpectedEvents for the
+unchanged exact equality, identity, sequence, paging, retry and security assertions.
+Do not compute expectations through production normalization or weaken comparisons.
+ADR-035/039 remain sufficient for this test-only oracle correction; no product,
+schema, authority or transport contract changes. Lead owns integration/delivery
+and exact-SHA GitHub qualification; local tests remain prohibited.

docs/implementation/status.json

@@ -1222,14 +1222,14 @@
     ],
     "manualDesignReview": "desktop_1280x720_and_mobile_390x844_disconnected_real_shell_inspected_2026_10_02_only_subjective_design",
     "localTestsExecuted": false,
-    "qualification": "candidate_build_format_governance_analyzers_pass_RF3_catalog_queue_node_and_http_observation_pass_shell_browser_fixture_repairs_pending_exact_source_requalification",
+    "qualification": "805_unit_and_13_dashboard_unit_pass_each_OS_all_6_RF3_admin_API_pass_browser_invalid_AST_projection_repair_pending_exact_source_requalification",
     "coverage": "required_thresholds_preserved_collector_and_actual_result_not_yet_available",
     "candidateRun": {
-      "id": 37032546228,
-      "sha": "b533c80a128a85c6e2072de3bc011a09d4a97cc7",
-      "url": "https://github.com/managedcode/KeyLoad/actions/runs/37032546228",
-      "conclusion": "failure_27_of_36_RF3_pass_no_skips_three_dashboard_observation_tests_pass_shell_500_browser_not_started_test_epoch_and_clock_repairs_unqualified",
-      "artifacts": "artifacts/qualification/admin-dashboard/37032546228/"
+      "id": 37036628601,
+      "sha": "1bee2609ff0de620640f304e2e42eb2859716646",
+      "url": "https://github.com/managedcode/KeyLoad/actions/runs/37036628601",
+      "conclusion": "failure_805_of_805_unit_each_OS_13_dashboard_unit_each_OS_all_6_RF3_admin_API_pass_browser_row_wait_error_and_three_EventStreams_oracle_failures_no_skips",
+      "artifacts": "artifacts/qualification/admin-dashboard/37036628601/"
     },
     "baselineRun": {
       "id": 37028314087,

src/KeyLoad.Server/Features/AdminDashboard/Assets/browsing.js

@@ -162,7 +162,7 @@ function fetchData(kind, cursor) {
         query:{
             collection:resource.name,
             alias:null,
-            projection:[],
+            projection:[{path:Config.wildcard, alias:Config.wildcard}],
             filter:null,
             order:[],
             limit:Config.rows,

src/KeyLoad.Server/Features/AdminDashboard/Assets/constants.js

@@ -4,6 +4,7 @@ export const Config  =  Object.freeze({
     pageSize:50,
     rows:25,
     astVersion:1,
+    wildcard:'*',
     zero:0,
     one:1,
     unauthenticated:401,

tests/KeyLoad.IntegrationTests/Features/AdminDashboard/AdminDashboardBrowserTests.cs

@@ -12,7 +12,9 @@ internal sealed class AdminDashboardBrowserTests(ClusterFixture fixture)
     private const string SelectCollections = "document.querySelector('button[data-view=collections]').click();true";
     private const string ResourcesLoaded = "document.querySelector('#resource-list')?.textContent.includes('dashboard-documents')===true";
     private const string SelectResource = "(()=>{const button=[...document.querySelectorAll('#resource-list button')].find(item=>item.textContent.includes('dashboard-documents'));button.click();return true;})()";
-    private const string RowsLoaded = "document.querySelector('#data-table')?.textContent.includes('document-1')===true";
+    private const string RowsLoaded = "document.querySelector('#data-title')?.textContent==='dashboard-documents'"
+        + "&&document.querySelectorAll('#data-table tbody tr').length===1"
+        + "&&document.querySelector('#data-table')?.textContent.includes('document-1')===true";
     private const string InjectionAbsent = "window.dashboardInjection!==true";
     private const string FocusVisible = "(()=>{const refresh=document.getElementById('refresh');refresh.focus();return document.activeElement===refresh;})()";
 

tests/KeyLoad.IntegrationTests/Features/EventStreams/McpEventStreamScenario.cs

@@ -8,8 +8,8 @@ namespace KeyLoad.IntegrationTests.Features.EventStreams;
 /// <param name="Partition">The unique configured tenant partition.</param>
 internal sealed record McpEventStreamScenario(PartitionRef Partition)
 {
-    /// <summary>Gets the immutable typed events appended by this scenario.</summary>
-    internal static ImmutableArray<EventData> ExpectedEvents { get; } =
+    /// <summary>Gets the immutable producer events with deliberately unsorted payload and header JSON.</summary>
+    internal static ImmutableArray<EventData> InputEvents { get; } =
     [
         new(McpEventStreamTokens.EventIdCreated, McpEventStreamTokens.EventType,
             McpEventStreamTokens.InitialPayload, McpEventStreamTokens.InitialHeaders,
@@ -28,6 +28,17 @@ internal sealed record McpEventStreamScenario(PartitionRef Partition)
             CausationId: McpEventStreamTokens.CausationIdShipped)
     ];
 
+    /// <summary>Gets the independent handcrafted canonical persisted event oracle.</summary>
+    internal static ImmutableArray<EventData> ExpectedEvents { get; } =
+    [
+        InputEvents[0] with { PayloadJson = McpEventStreamTokens.CanonicalInitialPayload,
+            HeadersJson = McpEventStreamTokens.CanonicalInitialHeaders },
+        InputEvents[1] with { PayloadJson = McpEventStreamTokens.CanonicalPaidPayload,
+            HeadersJson = McpEventStreamTokens.CanonicalPaidHeaders },
+        InputEvents[2] with { PayloadJson = McpEventStreamTokens.CanonicalShippedPayload,
+            HeadersJson = McpEventStreamTokens.CanonicalShippedHeaders }
+    ];
+
     /// <summary>Gets the canonical stream identity configured by the scenario.</summary>
     internal StreamRef Stream => new(Partition, McpEventStreamTokens.StreamSet,
         McpEventStreamTokens.StreamId, McpEventStreamTokens.StreamGeneration);
@@ -55,7 +66,7 @@ await McpCallerAssertions.SdkSuccessAsync(await client.ConfigureResourceAsync(Gu
     /// <param name="commandId">The caller-owned retry identity.</param>
     /// <returns>The actual typed public batch command.</returns>
     internal CommandRequest AppendCommand(Guid commandId) => new(commandId, Partition,
-        [new AppendEvents(McpEventStreamTokens.StreamSet, McpEventStreamTokens.StreamId, ExpectedEvents,
+        [new AppendEvents(McpEventStreamTokens.StreamSet, McpEventStreamTokens.StreamId, InputEvents,
             ExpectedStreamRevision.NoStream, McpEventStreamTokens.StreamGeneration)]);
 
     /// <summary>Builds a public bounded stream read at the supplied exclusive revision.</summary>

tests/KeyLoad.IntegrationTests/Features/EventStreams/McpEventStreamTokens.cs

@@ -20,6 +20,12 @@ internal static class McpEventStreamTokens
     internal const string InitialHeaders = "{\"source\":\"checkout\",\"sequence\":1}";
     internal const string PaidHeaders = "{\"source\":\"billing\",\"sequence\":2}";
     internal const string ShippedHeaders = "{\"source\":\"fulfillment\",\"sequence\":3}";
+    internal const string CanonicalInitialPayload = "{\"private\":\"mcp-private-event-canary\",\"status\":\"created\"}";
+    internal const string CanonicalPaidPayload = "{\"private\":\"mcp-private-event-canary\",\"status\":\"paid\"}";
+    internal const string CanonicalShippedPayload = "{\"private\":\"mcp-private-event-canary\",\"status\":\"shipped\"}";
+    internal const string CanonicalInitialHeaders = "{\"sequence\":1,\"source\":\"checkout\"}";
+    internal const string CanonicalPaidHeaders = "{\"sequence\":2,\"source\":\"billing\"}";
+    internal const string CanonicalShippedHeaders = "{\"sequence\":3,\"source\":\"fulfillment\"}";
     internal const string CorrelationId = "mcp-event-correlation";
     internal const string CausationIdCreated = "mcp-event-cause-created";
     internal const string CausationIdPaid = "mcp-event-cause-paid";