v0.41.28: BB-36 ART commit with missing objects case

Register the Artifacts black-box case `ART commit with missing objects`
(plan-20261001 BB-36): a commit naming one uploaded and one
never-uploaded oid returns 200 with `status` `missing_objects` listing
only the absent oid, and the set is not created (`GET sets/{id}` returns
404). Marks BB-35 done.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018bJDjze83ToyPysYzmxxWS
Signed-off-by: Eli Ma <eli@patch.sh>

Author: genedna

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "mega2"
-version = "0.41.27"
+version = "0.41.28"
 edition = "2024"
 license = "MIT OR Apache-2.0"
 description = "Monorepo engine and Git hosting server for AI agents: trunk-based storage, Git Smart HTTP, Git LFS, OCI registry, and Agent Session Capture"

Cargo.toml

@@ -421,6 +421,6 @@ CASE='<case>'
 docker compose -p mega2-trunk -f docker/docker-compose-storage-only.yml --profile interop exec -T -e MEGA2_SMOKE_CASE="$CASE" interop-smoke bash /repo/scripts/artifacts_smoke_storage_only.sh 2>&1 | tee target/tmp/bb-art-case.log
 ```
 
-已登记 case：`ART discovery`、`ART presigned upload and commit`、`ART server PUT upload and commit`、`ART presigned download`、`ART reject unauthenticated write`。
+已登记 case：`ART discovery`、`ART presigned upload and commit`、`ART server PUT upload and commit`、`ART presigned download`、`ART reject unauthenticated write`、`ART commit with missing objects`。
 
 不设 `MEGA2_SMOKE_CASE` 时整跑全部默认栈 case；opt-in case（auth-none、GC、本地存储）只经 `scripts/bb_optin_run.sh <none|gc|local> artifacts_smoke_storage_only.sh '<case>' <log>` 运行。

docs/deploy-trunk.md

@@ -2236,7 +2236,7 @@
 ### Task BB-35: ART reject unauthenticated write
 
 **Task type:** `implementation`  
-**Lifecycle / Acceptance:** `in-progress` / `remote-pending`（v0.41.27；Codex R1 PASS；C 组 2036 测试通过；待 D 组 `docker` job）  
+**Lifecycle / Acceptance:** `done` / `complete`（v0.41.27；C 组 2036 测试通过；D 组 docker run 36998337243 success）  
 **Description:** 在 `scripts/artifacts_smoke_storage_only.sh` 注册 case `ART reject unauthenticated write`。无 token 调用三个写端点。 唯一行为轴：无凭据写拒绝。  
 **Out of scope:** 其它 case（各自成卡）；改 `src/**`（产品缺陷按 ADR-BB-08 立 `FIX-BB-*`）；改既有 smoke 脚本（GC-BB-06）；以 cargo IT 作 VER（GC-BB-04）。  
 **Current evidence:**
@@ -2284,7 +2284,7 @@
 ### Task BB-36: ART commit with missing objects
 
 **Task type:** `implementation`  
-**Lifecycle / Acceptance:** `pending` / （空）  
+**Lifecycle / Acceptance:** `in-progress` / `remote-pending`（v0.41.28；Codex R1 PASS；C 组 2036 测试通过；待 D 组 `docker` job）  
 **Description:** 在 `scripts/artifacts_smoke_storage_only.sh` 注册 case `ART commit with missing objects`。commit 引用一个已上传 oid 与一个从未上传的 oid（文档修正由 BB-48 承接）。 唯一行为轴：缺失对象的提交语义。  
 **Out of scope:** 其它 case（各自成卡）；改 `src/**`（产品缺陷按 ADR-BB-08 立 `FIX-BB-*`）；改既有 smoke 脚本（GC-BB-06）；以 cargo IT 作 VER（GC-BB-04）。  
 **Current evidence:**

docs/plan/plan-20261001.md

@@ -253,10 +253,37 @@ case_art_reject_unauth_write() {
     [ "$code" = 401 ] || { echo "fallback PUT without a token returned $code" >&2; return 1; }
 }
 
+# --- BB-36 ART commit with missing objects ------------------------------
+# Any missing object aborts the whole commit: no artifact set or manifest is
+# committed, the set does not exist afterwards, and only the absent oid is
+# reported.
+case_art_commit_missing_objects() {
+    local d="$WORK/bb36" ns="bb36-$RUN_ID" present missing set_id size code
+    mkdir -p "$d"
+    art_case_begin
+    present=$(art_oid)
+    missing=$(art_oid)
+    set_id=$(art_set_id)
+    printf 'bb36 present %s\n' "$RUN_ID" > "$d/obj"
+    size=$(wc -c < "$d/obj" | tr -d ' ')
+    code=$(art_server_put "$present" "$d/obj")
+    [ "$code" = 204 ] || { echo "fallback PUT returned $code" >&2; return 1; }
+    jq -n --arg ns "$ns" --arg set "$set_id" --arg p "$present" --arg m "$missing" --arg dir "bb36/$RUN_ID" --argjson size "$size" \
+        '{namespace: $ns, object_type: "snapshot", artifact_set_id: $set,
+          files: [{path: "\($dir)/present.txt", oid: $p, size: $size}, {path: "\($dir)/missing.txt", oid: $m, size: 7}]}' > "$d/commit.json"
+    code=$(art_post commit "$d/commit.json" "$d/commit.out")
+    [ "$code" = 200 ] || { echo "commit returned $code" >&2; return 1; }
+    jq -e '.status == "missing_objects"' "$d/commit.out" > /dev/null || { echo "commit status is $(art_show .status "$d/commit.out"), want \"missing_objects\"" >&2; return 1; }
+    jq -e --arg m "$missing" '.missing_objects == [$m]' "$d/commit.out" > /dev/null || { echo "missing_objects is $(art_show .missing_objects "$d/commit.out"), want only the never-uploaded oid" >&2; return 1; }
+    code=$(art_curl -o /dev/null -w '%{http_code}' "$ART_API/sets/$set_id?namespace=$ns&object_type=snapshot")
+    [ "$code" = 404 ] || { echo "GET sets/{id} for the uncommitted set returned $code" >&2; return 1; }
+}
+
 run_case "ART discovery" case_art_discovery
 run_case "ART presigned upload and commit" case_art_presigned_upload_commit
 run_case "ART server PUT upload and commit" case_art_server_put_commit
 run_case "ART presigned download" case_art_presigned_download
 run_case "ART reject unauthenticated write" case_art_reject_unauth_write
+run_case "ART commit with missing objects" case_art_commit_missing_objects
 
 finish