110 Commits

Author	SHA1	Message	Date
Hermes Agent	79e2fa35d5	fix(mosaic): close claudex isolation gaps S1 (Bedrock/Vertex bypass) + S2 (fail-open catches) ... Addresses MS-LEAD secrev REQUEST CHANGES on #806. S1 (CRITICAL — REQ 2 defeated by provider switches + cloud creds): the env sweep did not neutralize AWS Bedrock / GCP Vertex routing. CLAUDE_CODE_USE_BEDROCK / CLAUDE_CODE_USE_VERTEX are routing switches whose mere presence makes Claude Code talk to the real Anthropic API via the ambient cloud credential chain, bypassing ANTHROPIC_BASE_URL (the loopback proxy) entirely — and the cloud credentials (AWS_SECRET_ACCESS_KEY, AWS_BEARER_TOKEN_BEDROCK, GOOGLE_APPLICATION_CREDENTIALS, …) passed straight through. - buildClaudexEnv now force-deletes the routing switches by exact name (CLAUDEX_FORCED_UNSET_ENV) regardless of value — a name pattern is the wrong model for a boolean switch. - CLAUDEX_CREDENTIAL_ENV_RE extended to the cloud-cred families (^AWS_, ^GOOGLE_APPLICATION_CREDENTIALS, ^GOOGLE_CLOUD_, ^GCP_) and the mid-string _KEY$ / _SECRET gap (STRIPE_SECRET_KEY, SSH_PRIVATE_KEY, AWS_SECRET_ACCESS_KEY). - Doc-comment updated to match reality. S2 (HIGH — fail-open contradicts documented fail-closed): defaultCanonicalizeIntended and defaultIsSymlink swallowed ANY fs error. Now they distinguish ENOENT (genuinely absent → safe to continue) from every other errno (ELOOP, EACCES, ENOTDIR, …) which rethrows and fails CLOSED. Tests (TDD red-first, 4 new specs red before the fix): Bedrock/Vertex switches + AWS/GCP creds swept while the loopback proxy stays the only route; mid-string _KEY/_SECRET closed; real-FS ELOOP (canonicalize) and ENOTDIR (isSymlink) fail closed; injected EACCES not swallowed. New-module coverage 100% stmts/lines, 93.75% branch. Full mosaic suite 1169 green; typecheck / lint / format:check green. No --no-verify. Refs #790 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 17:00:04 -05:00
Hermes Agent	ab8c9a2d4b	feat(mosaic): claudex isolated config + env-inject + yolo wiring (P2–P4 of #790) ... Second and final PR for `mosaic [yolo] claudex` — runs GPT models inside the Claude Code harness via claude-code-proxy (ChatGPT-subscription OAuth). Builds on the PR-1 preflight/lifecycle library (#793). New `claudex.ts` (pure / dependency-injected composition): - resolveClaudexConfigDir / assertIsolatedConfigDir — the isolated CLAUDE_CONFIG_DIR seam. HARD REQ 1 (provable isolation): canonicalizes both sides, rejects `~/.claude` and any descendant, ensures the dir 0700, then re-checks post-create and rejects a symlinked target (TOCTOU). Ambient CLAUDE_CONFIG_DIR is never inherited. Fails closed on any uncertainty. - buildClaudexEnv — HARD REQ 2 (zero token leakage): strips the entire credential-bearing env family (ANTHROPIC_*, *_TOKEN, *_API_KEY, *_SECRET, CLAUDE_CODE_OAUTH*) and hands Claude Code only ANTHROPIC_AUTH_TOKEN=unused. Never reads the proxy credential file. Returns a fresh object (no mutation). - resolveClaudexModels — P3 tier map: primary→gpt-5.6-sol, small/fast→gpt-5.6-luna; operator env values win. - buildClaudexBanner / buildClaudexContractNote — P4 EXPERIMENTAL classification (no token material by construction). - runClaudexProxyGate — preflight → device reauth (only when needed) → ensure a trusted-live listener → re-preflight; surfaces non-sensitive problems only. - launchClaudex — fail-closed DI orchestration: preflight → gate → compose env → exec; never reaches exec on a gate failure or guard throw. Proxy endpoint imported from claudex-proxy.ts (single source of truth). launch.ts wiring: - execRuntime gains an env parameter. - `claudex` + `yolo claudex` commander dispatch (keeps the #454 arg-slice fix); claudexHandler is an injectable seam for the wiring tests. - launchClaudexProduction glue assembles the real harness adapter. Tests: 45 claudex specs + 5 launch wiring specs, TDD red-first. New-module coverage 99% stmts/lines, 93% branch (≥85% gate). Full mosaic suite 1164 green; typecheck / lint / format:check green. Refs #790 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 16:42:32 -05:00
jason.woltje	59f5f51ffd	feat(mosaic): claudex proxy preflight + lifecycle (P1 of #790) (#793)	2026-07-16 21:15:33 +00:00
jason.woltje	9745bc3f29	feat(fleet): add reviewed v1-to-v2 migration preview (#788)	2026-07-16 13:11:16 +00:00
jason.woltje	adad486b6f	fix(fleet): enforce exact comms authority (#787)	2026-07-16 00:32:23 +00:00
jason.woltje	c1aecfabe9	test(fleet): cover reconciler lifecycle gates (#786)	2026-07-15 16:46:13 +00:00
jason.woltje	499090508e	feat(fleet): reconcile local roster state (#785)	2026-07-15 15:03:31 +00:00
jason.woltje	bc5e73629e	feat(fleet): add generation-guarded agent CRUD (#773)	2026-07-15 12:03:05 +00:00
jason.woltje	191efaefeb	feat(fleet): enforce generated environment boundary (#772)	2026-07-15 08:40:32 +00:00
jason.woltje	e9c4aa3e8b	test(fleet): validate shipped artifact dispositions (#770)	2026-07-15 01:37:12 +00:00
jason.woltje	a5e8e55401	feat(fleet): add shared role semantics (#768)	2026-07-15 00:53:47 +00:00
jason.woltje	aa5b43bba2	feat(fleet): add roster v2 structural compiler (#764)	2026-07-14 20:37:52 +00:00
jason.woltje	d077183554	docs(tess): remediate M5 qualification findings (#750)	2026-07-13 19:59:38 +00:00
jason.woltje	405984af5a	De-hardcode orchestrator and interaction agent names (#748)	2026-07-13 18:59:27 +00:00
jason.woltje	6345dbfcf2	feat(agent): add Matrix native runtime provider (#744)	2026-07-13 15:29:37 +00:00
jason.woltje	0b621660c8	feat(tess): wire durable interaction surfaces (#732)	2026-07-13 10:05:29 +00:00
jason.woltje	8246ee0137	feat(tess): add generic interaction CLI (#731)	2026-07-13 05:52:41 +00:00
jason.woltje	e3b5113be2	feat(tess): add configurable Pi interaction service (#728)	2026-07-13 02:59:27 +00:00
jason.woltje	9a8a572fcf	feat(tess): add roster-bound tmux fleet provider (#724)	2026-07-13 00:59:24 +00:00
jason.woltje	67135d3822	fix(fleet): guard mosaic fleet restart against tight-loop re-entry race (#680)	2026-06-25 01:44:48 +00:00
jason.woltje	d7eaa19380	feat(fleet): provision roster from system-type profile (H3) (#665)	2026-06-24 19:48:54 +00:00
jason.woltje	0d17a29ebe	feat(fleet): export MOSAIC_AGENT_CLASS into agent env (A3a) (#663)	2026-06-24 17:19:59 +00:00
jason.woltje	28cfecda94	feat(fleet): inject persona contract at launch (A3b) (#664)	2026-06-24 17:06:51 +00:00
jason.woltje	6c84ccd0b1	feat(fleet): dedicated orchestrator persona, split from planner (#662)	2026-06-24 16:42:23 +00:00
jason.woltje	84d2757817	feat(fleet): update-surviving persona customization (H4) (#661)	2026-06-24 16:21:01 +00:00
jason.woltje	a738ac1410	feat(fleet): system-type profiles (H2) (#660)	2026-06-24 16:02:25 +00:00
jason.woltje	a094c86eea	feat(fleet): North Star scope — general-purpose system, personas & system profiles (workstream H) (#658)	2026-06-24 15:25:57 +00:00
jason.woltje	f852250419	feat(fleet): native Mosaic backlog on @mosaicstack/db (atomic claim + TTL) (#657)	2026-06-24 14:55:10 +00:00
jason.woltje	61b1bdac2a	feat(fleet): add machine-readable NORTH_STAR.yaml + Markdown projection (#656)	2026-06-24 14:40:09 +00:00
jason.woltje	937077f6be	fix(fleet): report idle agents as available, reserve stuck for genuine blocks (#653)	2026-06-24 13:58:22 +00:00
jason.woltje	70661e3fab	fix(fleet): derive pane idle from window activity fallback (#651)	2026-06-24 06:37:45 +00:00
jason.woltje	d887555852	feat(fleet): classify agent readiness in fleet ps (#649)	2026-06-24 05:55:47 +00:00
jason.woltje	16ae809442	fix(update): re-seed framework on version drift, not just in-command updates (#642) (#646)	2026-06-24 05:04:34 +00:00
Jason Woltje	4e84f8e850	feat(fleet): comms-block emitter + FLEET-LAUNCH runbook (#633) (#638) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 22:23:50 +00:00
Jason Woltje	bf2a6745c8	fix(install): preserve user fleet data on re-seed + refresh active units (CRITICAL) (#632) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 21:38:09 +00:00
Jason Woltje	d539d61e0e	refactor(fleet): rename tmux socket mosaic-factory → mosaic-fleet (#630) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 21:08:43 +00:00
Jason Woltje	7342415a32	fix(fleet): consume model_hint + fix socket-default trap (stand-up fixes) (#627) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 19:18:01 +00:00
Jason Woltje	095e19443b	feat(fleet): onboarding-injection — comms cheat-sheet + peer roster per agent (#621) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 17:54:54 +00:00
Jason Woltje	fabc413407	feat(fleet): F4 Phase 2a — Matrix CS-API connector client + factory (#618) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 16:48:17 +00:00
Jason Woltje	858d90329d	feat(fleet): F4 Phase 1 — chat connector abstraction + Matrix design (#617) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 16:14:32 +00:00
Jason Woltje	2bf66136e4	feat(fleet): enhancer role + two-agent floor (orchestrator + enhancer) (#615) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 13:15:59 +00:00
Jason Woltje	d46ac40890	fix(fleet): boot-survival symmetry — disable-on-remove + add-enable + init-R5 (#612) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 08:12:58 +00:00
Jason Woltje	8ddd48c843	feat(mosaic): mosaic update re-seeds framework + relaunches agents (R13) (#610) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 03:34:05 +00:00
Jason Woltje	23343bb7f0	feat(mosaic): P5 — overlay composer (compose-contract + *.local overlays) (#605) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 02:16:05 +00:00
Jason Woltje	6dbe452a9f	fix(fleet): watch viewer-session leak + workdir test settle-race (#601) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 01:43:21 +00:00
Jason Woltje	59c755067e	feat(fleet): F3-m2 — native Pi heartbeat + model surface + mosaic_mission_status tool (#602) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 01:43:18 +00:00
Jason Woltje	6ffb27787e	fix(fleet): complete HB reader/writer consistency + sidecar hardening (#599) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 01:22:35 +00:00
jason.woltje	67df06f1c4	feat(fleet): orchestrator-mutable fleet — fleet add/remove (F5/R9) (#596)	2026-06-21 23:26:21 +00:00
Jason Woltje	60a309d5a4	fix(fleet): heartbeat consistency — MOSAIC_HOME path + configurable interval (#595) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 23:25:53 +00:00
Jason Woltje	31e7a4d25e	docs(framework): P4.1 — fix stale install.sh comments + cmp-equal early-exit (#593) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 23:12:31 +00:00