feat(harness): meta-harness and PM launching off T3 (#1523, row 41)

Slice 1 S6. packages/harness runs a role session under the pi or claude
adapter behind a tool gate, and packages/seat holds the session and its
process. The bus host gains a launch socket: `mosaic bus start
<business> --pm <harness>:<model>` runs the PM without a window, the PM
launches role sessions through the broker within the business file's
`launch.max`, and every launch, refusal and end is a launch-log line and
a broker event. `mosaic talk`, `mosaic launches off|on|list` and
`mosaic stop <run>` are new CLI verbs. packages/bus gains the IPC ops
identity, authorize, refuse, endLaunch and credentialStatus, plus
Broker.endLaunch (decision 77); no socket verb, event kind or schema
changed. The session environment is an allowlist, and the runner exits
before claiming if a founder credential reaches it.

Filbert built it (agents/filbert/work/s6). Darkwing reviewed on #1523:
round 1 changes (26991/26995), round 2 changes (27004/27010), round 3
changes (27012/27032), round 4 approve (27033/27034) on manifest
08a78972, 42 paths.

Sage's gate on 64b0f9f1 (12:32Z), sequential and teed: node suites
business 60, bus 74, cli 83, control-board 124, conversation 182,
discord 178, harness 56, ledger 78, mosaic 69, queue 149, runs 41,
seat 27, tasks 51, webui 39, every one 0 failed; test-auth 15,
test-conductor 17, test-config 24, test-discord 66,
test-extension-package 18, test-foundation 44, test-queue 27,
test-release 14, test-task 98 and 26 without Docker, all 0 failed.
64b0f9f1..ee7f909b touches none of the 42 paths. It landed after the
Q14 hold ended at 2026-10-11T17:19:23.857Z. The recorded PM-to-coder
run on a scratch data root is still owed before row 41 moves to done.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

scripts/agent-host-dev.sh

@@ -132,7 +132,9 @@ unset MOSAIC_LAUNCH_INCARNATION
 export MOSAIC_AGENT_NAME="$AGENT"
 # Explicit resources only; preserve Pi's built-in coding prompt and tool guidance.
 # goal_report must be in the tool allowlist as well as the extension being loaded.
-exec "$PI" --approve --offline --no-context-files --no-extensions --no-skills \
+# --no-approve ignores project-local .pi/ files (settings.json, SYSTEM.md,
+# APPEND_SYSTEM.md); the -e and --skill paths given here still load.
+exec "$PI" --no-approve --offline --no-context-files --no-extensions --no-skills \
     --no-prompt-templates --no-themes \
     --extension "$REPO/.pi/extensions/goal/index.ts" \
     "${SKILL_ARGS[@]}" \

scripts/mosaic

@@ -4,8 +4,9 @@
 # `mosaic queue <verb>`: the work queue. See packages/queue/README.md.
 # `mosaic business <verb>`: business files and role instances. See
 # packages/business/README.md.
-# `mosaic inbox|decide|tasks|agents|trail` and `mosaic bus start|stop|status`:
-# the human commands and the bus host. See packages/cli/README.md.
+# `mosaic inbox|decide|tasks|agents|trail|talk|stop|launches` and
+# `mosaic bus start|stop|status`: the human commands, managed sessions and
+# the bus host. See packages/cli/README.md.
 # Not the npm-global `mosaic` CLI from the estate tooling; this one is
 # repository-local and only reachable as scripts/mosaic.
 set -euo pipefail
@@ -19,6 +20,6 @@ if [ "${1:-}" = business ]; then
   exec node "$REPO/packages/business/src/cli.mjs" "$@"
 fi
 case "${1:-}" in
-  inbox|decide|tasks|agents|trail|bus) exec node "$REPO/packages/cli/src/cli.mjs" "$@" ;;
+  inbox|decide|tasks|agents|trail|talk|stop|launches|bus) exec node "$REPO/packages/cli/src/cli.mjs" "$@" ;;
 esac
 exec node "$REPO/packages/seat/src/cli.mjs" "$@"