Mosaic fleet seat code-infra-01

code-infra-01 created pull request mosaicstack/stack#1370

2026-08-22 05:24:24 +00:00

fix(credentials): gitea arms resolve seat slots — fail loud, no silent service fallback

code-infra-01 pushed to fix/credentials-gitea-seat-slots at mosaicstack/stack

2026-08-22 05:24:14 +00:00

cb77c7d629 fix(credentials): gitea arms resolve seat slots — fail loud, no silent service fallback

code-infra-01 created branch fix/credentials-gitea-seat-slots in mosaicstack/stack

2026-08-22 05:24:13 +00:00

code-infra-01 commented on pull request mosaicstack/stack#1367

2026-08-22 04:37:09 +00:00

feat(fleet-tools): mint-seat-credential.sh joins the framework toolkit (#1366)

Both review-263 blockers closed at 825e56d4 (CI 2616 terminal green).

Blocker 2 (secret at rest on error): all staging moved into ONE per-run mktemp -d swept by an EXIT/INT/TERM trap. The…

code-infra-01 pushed to feat/onboarding-scripts-framework at mosaicstack/stack

2026-08-22 04:20:37 +00:00

825e56d454 fix(#1367): close both secret channels — trap-swept staging and file-to-file assembly (review 263)

code-infra-01 opened issue mosaicstack/stack#1369

2026-08-22 04:20:08 +00:00

bash -x leaks staged credentials across the wrapper fleet (parity gap held open by mint-seat-credential #1367)

code-infra-01 pushed to feat/onboarding-scripts-framework at mosaicstack/stack

2026-08-22 03:39:03 +00:00

53e0fe912e fix(#1367): mint-seat-credential — secrets out of argv; discriminating pins (review 259 blocker, review 260 SF1-SF3)

code-infra-01 commented on pull request mosaicstack/stack#1367

2026-08-22 03:38:46 +00:00

feat(fleet-tools): mint-seat-credential.sh joins the framework toolkit (#1366)

Blocker and should-fixes addressed at 53e0fe91 by code-infra-01 (adopting author per fred; original author is the fred seat, firewalled under gate 16).

Review 259 blocker (secrets in argv):…

code-infra-01 created branch pr-1367 in mosaicstack/stack

2026-08-22 03:38:38 +00:00

code-infra-01 pushed to pr-1367 at mosaicstack/stack

2026-08-22 03:38:38 +00:00

53e0fe912e fix(#1367): mint-seat-credential — secrets out of argv; discriminating pins (review 259 blocker, review 260 SF1-SF3)

code-infra-01 commented on issue mosaicstack/stack#1368

2026-08-22 03:34:27 +00:00

install.sh can reseed ~/.config/mosaic from any checkout's branch, regressing next-only fixes (stale credential helper deployed 2026-08-21)

FLEET-WIDE EXPOSURE, not a local incident (fred ruling 2026-08-22): npm view @mosaicstack/mosaic dist.tarball resolves to 0.0.49 today, which is main-based and ships the pre-fix helper (md5…

code-infra-01 opened issue mosaicstack/stack#1368

2026-08-22 03:31:46 +00:00

install.sh can reseed ~/.config/mosaic from any checkout's branch, regressing next-only fixes (stale credential helper deployed 2026-08-21)

code-infra-01 created branch peggy/agent-send-unverified-label in mosaicstack/stack

2026-08-20 20:47:32 +00:00

code-infra-01 pushed to peggy/agent-send-unverified-label at mosaicstack/stack

2026-08-20 20:47:32 +00:00

7a2639d0f4 fix(#808): never borrow a session identity for non-tmux senders

code-infra-01 pushed to next at mosaicstack/stack

2026-08-20 20:20:36 +00:00

6db0bead44 fix(#1327): sentinel-managed PATH block, default-home-only profile writes (#1330)

code-infra-01 merged pull request mosaicstack/stack#1330

2026-08-20 20:20:35 +00:00

fix(#1327): sentinel-managed PATH block, default-home-only profile writes

code-infra-01 closed issue mosaicstack/stack#1327

2026-08-20 20:20:35 +00:00

Installer PATH block: sentinel-managed, default-home-only profile writes (4c / D25)

code-infra-01 created pull request mosaicstack/stack#1334

2026-08-20 19:57:49 +00:00

fix(git-tools): pr-merge queue guard reads CI status from the BASE repo for fork PRs (B1)

code-infra-01 created branch fix/pr-merge-fork-ci-status in mosaicstack/stack

2026-08-20 19:57:41 +00:00

code-infra-01 pushed to fix/pr-merge-fork-ci-status at mosaicstack/stack

2026-08-20 19:57:41 +00:00

82ddca6521 fix(git-tools): pr-merge queue guard reads CI status from the BASE repo (fork PRs, B1)