mosaicstack/stack
25
0
Fork 1
Code Issues 358 Pull Requests 13 Actions Packages Projects Releases 15 Wiki Activity

feat(business): roles v2, business and project files, variable layers (row 36, S1, darkwing)

Browse Source 
Darkwing's round 2 candidate, approved by Filbert (#1518 comment 26730).
build-r2.patch a27890d5, manifest 869168c7, 34 files, applied on HEAD and
checked 34/34. Integration gate on an export of HEAD plus the patch:
business 60/60 on Node 24 and 26, every package test and every
scripts/test-*.sh green, test-task 98/98 with the live-provider cases.
Conductor, queue, conversation and discord confirmed in git worktrees of
HEAD with and without the patch, identical results. Lead decision 63
accepts the vocabulary location, the example path and the business
branch.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
This commit is contained in:
jason.woltje
2026-10-05 17:09:07 -05:00
co-authored by Claude Opus 5.5
parent d1e633b220
commit 2d64c71eb2
34 changed files with 2825 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/test-task.sh
+34
View File
@@ -261,6 +261,40 @@ EOF
node scripts/mosaic-task.mjs resolve-role "$SANDBOX/roles/aliens.json"
expect_exit "resolve-role refuses missing contract file" 4 -- \
node scripts/mosaic-task.mjs resolve-role "$SANDBOX/roles/absent.json"
# role version 2 (slice 1 row S1): contract, authority, credentials.
printf '%s\n' "$ROLE_OUT" | grep -q '^MOSAIC_ROLE_CONTRACT=' \
&& check "version 1 role prints no contract line" 1 || check "version 1 role prints no contract line" 0
V2_OK=0
for r in pm cto coder reviewer; do
V2_OUT="$(node scripts/mosaic-task.mjs resolve-role "roles/$r.json" 2>/dev/null)" \
&& printf '%s\n' "$V2_OUT" | grep -qx "MOSAIC_ROLE_CONTRACT=$PWD/roles/$r.md" \
&& printf '%s\n' "$V2_OUT" | grep -q '^MOSAIC_ROLE_NETWORK=api-only$' || V2_OK=1
done
check "shipped version 2 roles resolve with their contracts (pm, cto, coder, reviewer)" "$V2_OK"
printf '# v2\n' > "$SANDBOX/roles/v2.md"
v2role() { # v2role NAME AUTHORITY_JSON CREDENTIALS_JSON [CONTRACT]
printf '{"roleVersion":2,"name":"%s","title":"T","contract":"%s","tools":["read"],"network":"none","authority":%s,"credentials":%s}' \
"$1" "${4:-v2.md}" "$2" "$3" > "$SANDBOX/roles/$1.json"
}
v2role v2ok '{"withinRole":["message.send"],"crossRole":["task.reassign"]}' '[{"service":"vikunja","scopes":{"tasks":["read_one"]}}]'
expect_exit "resolve-role accepts a minimal version 2 role" 0 -- \
node scripts/mosaic-task.mjs resolve-role "$SANDBOX/roles/v2ok.json"
v2role v2unknown '{"withinRole":["task.delete"],"crossRole":[]}' '[]'
expect_exit "resolve-role refuses an action outside the vocabulary" 2 -- \
node scripts/mosaic-task.mjs resolve-role "$SANDBOX/roles/v2unknown.json"
v2role v2gated '{"withinRole":["deploy"],"crossRole":[]}' '[]'
expect_exit "resolve-role refuses a gated-only action in a role file" 2 -- \
node scripts/mosaic-task.mjs resolve-role "$SANDBOX/roles/v2gated.json"
v2role v2scope '{"withinRole":[],"crossRole":[]}' '[{"service":"vikunja","scopes":{"tasks":["delete"]}}]'
expect_exit "resolve-role refuses a Vikunja verb no role may hold" 2 -- \
node scripts/mosaic-task.mjs resolve-role "$SANDBOX/roles/v2scope.json"
v2role v2nocontract '{"withinRole":[],"crossRole":[]}' '[]' absent.md
expect_exit "resolve-role refuses a version 2 role whose contract is missing" 2 -- \
node scripts/mosaic-task.mjs resolve-role "$SANDBOX/roles/v2nocontract.json"
ln -sf v2.md "$SANDBOX/roles/linked.md"
v2role v2link '{"withinRole":[],"crossRole":[]}' '[]' linked.md
expect_exit "resolve-role refuses a contract that is a symbolic link" 2 -- \
node scripts/mosaic-task.mjs resolve-role "$SANDBOX/roles/v2link.json"
printf '# SOUL - roleseat\n\nVerifies before claiming.\n' > "$SANDBOX/agents/roleseat/SOUL.md"
printf '{"agentVersion":1,"name":"roleseat","role":"analyst","capabilities":{"tools":["read","write","bash"]}}' > "$SANDBOX/agents/roleseat/agent.json"
printf '{"roleVersion":1,"name":"analyst","tools":["read","grep","bash"],"network":"none"}' > "$SANDBOX/roles/analyst.json"