30 Commits

Include renames

Author	SHA1	Message	Date
Mos	92a63e7027	test(tools/git): a skip that exits 0 is a pass -- refuse instead ... be-coder-07 (#1089 review 131) showed the precondition guard exited 0 when the scratch dir turned out to be inside a git worktree: ( cd "$TMP" && git rev-parse --git-dir ) && { echo "SKIP"; exit 0; } so pointing TMPDIR beneath a git worktree made this test PASS against unchanged main. A skip that exits 0 is indistinguishable from a pass -- the same defect this suite exists to catch, in the suite itself. Now: set GIT_CEILING_DIRECTORIES to the PHYSICAL path (it is matched physically, and /tmp is commonly a symlink, so a logical path silently disables the ceiling), and if the outside-a-repo precondition still cannot be established, FAIL with an explicit message rather than skipping. Replaying be-coder-07's attack (TMPDIR beneath a worktree): before: fix rc=0, main rc=0 <- both "pass", the vulnerability after: fix rc=1, main rc=1 <- both refuse; no false pass either way Normal conditions are unchanged and still discriminate: fix rc=0, main rc=1. The test refuses to report a result it cannot establish. That is weaker than running under a hostile TMPDIR and strictly better than lying about it. Reported-by: be-coder-07	2026-08-06 19:02:29 -05:00
Mos	b4b70675b6	fix(tools/git): detect-platform died silently outside a repo, taking every wrapper with it ... detect_platform() and get_repo_info() both already contained the correct error path: remote_url=$(git remote get-url origin 2>/dev/null) if [[ -z "$remote_url" ]]; then echo "error: not a git repository or no origin remote" >&2 return 1 fi but that message was UNREACHABLE. Every wrapper in this directory runs `set -e`, and outside a git repo the assignment itself returns git's 128, terminating the caller before the -z check. The diagnostic was written and could never print. Observed cost: `pr-review.sh -n N -r owner/repo -H host -a comment -c "..."` invoked from a non-repo cwd exits 128 with NO stdout and NO stderr -- including when -r and -H are supplied, the flags whose help text says "skips git-remote inference". The inference runs first regardless. Two reviewer seats hit this tonight and correctly reported `blocked` with no diagnostic available to report; one of them lost a full review. Reproduced: cd /tmp && pr-review.sh -n 1086 -r mosaicstack/stack -H git.mosaicstack.dev \ -a comment -c "x" -> rc=128, 0 bytes of output same command from inside a repo -> rc=1, "Error: Comment required" `|| true` matches the idiom already used at the other two call sites in this same file (one `|| return 1`, one `|| true`), so the file was internally inconsistent: two guarded sites, two unguarded. test-detect-platform-outside-repo.sh asserts the MESSAGE, not merely a non-zero rc -- "rc != 0" passes on the broken build too, since 128 is also non-zero. RED on main (128:no for both functions), GREEN here (1:yes), with an in-repo control proving the functions still resolve normally. Enumerated on test:framework-shell. Found-by: be-coder-08, rev0 (both reported `blocked` per Gate 8 rather than working around it)	2026-08-06 18:56:03 -05:00
be-coder-08andMos	80a45b1e1c	feat(pr-merge): preserve linked authors in squash messages (#1066) ... Co-authored-by: be-coder-08 <[email protected]>	2026-08-06 05:36:59 +00:00
be-coder-08andMos	16f91157a1	test(ci): make queue guard harness deterministic (#1062) ... Co-authored-by: be-coder-08 <[email protected]>	2026-08-05 21:49:44 +00:00
coder-mos1andmos-dt-0	58b971aba3	fix(rm-03): make CI queue guard fail on asserted non-readiness (#1032) ... Co-authored-by: coder-mos1 <[email protected]>	2026-08-01 18:55:26 +00:00
mos-dt-0andMos	826a8b3b26	fix(git): pr-review.sh — surface the provider's stated reason, drop the hardcoded #865 attribution (#1006) ... Co-authored-by: mos-dt-0 <[email protected]>	2026-07-31 10:52:58 +00:00
Mos	089615f63b	feat(git): push-guard — refuse verifications satisfied by the null case (closes #975) (#974)	2026-07-31 03:35:24 +00:00
jason.woltjeandMos	2483dada33	fix(framework): pr-review.sh -r/--repo + -H/--host overrides + UA + repo preflight (Patches 5/5c) (#896) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 22:08:08 +00:00
jason.woltjeandMos	3c7890f17f	fix(framework): detect-platform get_gitea_token fail-loud on absent per-slot token (Patch 2b) (#890) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 20:51:19 +00:00
jason.woltjeandMos	4422231bdb	feat: per-agent Gitea identity resolution (#873) ... Closes #873 Mos (id-11) Gate-16 merge: independent APPROVE @4b472a22 (author-blocker dissolved via (a) re-author, identical tree hash to tech-approved head), author id2 != approver id11, clean mosaic-coder commit-author, CI green wp1985. Framework train COMPLETE 6/6. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 18:09:34 +00:00
jason.woltjeandMos	8504216964	fix(pr-review): case-insensitive _belongs slug compare (#875) ... Closes #875 Mos (id-11) Gate-16 merge: independent APPROVE @9d8d58ae, author id2 != approver id11, clean mosaic-coder commit-author, CI green wp1982. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 17:53:26 +00:00
jason.woltjeandMos	7edc9b3121	fix(gitea): direct REST comment/review with fail-closed read-back (#865) ... Closes #865 Mos (id-11) Gate-16 merge: fresh confirmatory independent APPROVE @8ac7e70f (1241-case fuzz 0 fail-open), author id2 != approver id11, clean commit-author, CI green wp1966. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 17:25:32 +00:00
jason.woltjeandMos	48fd1df28a	fix(ci-queue-wait): treat absent branch (404) as queue-clear (#872) ... Closes #872 Mos (id-11) Gate-16 merge: independent review APPROVE @23cbdaf8, author jason.woltje(id2) != approver Mos(id11), CI green wp1974. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 17:08:57 +00:00
jason.woltje	344d86a635	fix(#812 follow-up): normalize detect-platform.sh host-match port comparison by scheme (#859)	2026-07-20 10:13:29 +00:00
jason.woltje	3b70c66c07	fix(framework): drop unsupported --comment from tea pr approve/reject; route review body via durable comment (#835) (#857)	2026-07-20 09:19:48 +00:00
jason.woltje	aa999daf1b	fix(framework): durable Gitea comment posting in pr-review.sh via REST + read-back verify (#812) (#852)	2026-07-20 06:45:48 +00:00
jason.woltje	b580d37d51	Fixes #703 (#705)	2026-07-12 20:49:43 +00:00
jason.woltje	a99aded26d	fix(tools/git): -h/--help now exits 0 across 7 wrappers (#702)	2026-07-11 09:23:46 +00:00
jason.woltje	4df38f7e81	fix(tools/_lib): /etc/mosaic host-level fallback for credential resolution (#700)	2026-07-10 01:57:12 +00:00
jason.woltje	e6b53ea103	fix(tools): default AGENT_WORK_ROOT to $HOME/mosaic/agent-work (#641)	2026-06-23 13:40:13 +00:00
jason.woltje	bf24066a49	feat(framework): P1+P2 — public sanitization + blocking CI gate (#572) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-06-21 02:40:11 +00:00
jason.woltje	92316ab41e	feat(framework): P0 — MIT license + executable-leak sanitization (#570) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-06-21 01:43:49 +00:00
jason.woltje	57919c38d8	fix(framework/tools): wrapper hardening — TLS validation, cred-path fallback, no-CI fast-exit (#551)	2026-06-20 10:16:38 +00:00
jason.woltje	ab4e138003	feat(framework/tools): orchestration helpers — lane-brief.sh + ci-wait.sh (#547)	2026-06-18 22:08:40 +00:00
jason.woltje	719c6ac3db	fix(framework/tools): eval injection, broken JSON, tmpfile leak (#549)	2026-06-18 21:35:32 +00:00
jason.woltje	98a771c8f8	Fix Gitea wrapper login resolution (#538)	2026-06-12 02:34:18 +00:00
jason.woltje	dde95a59b3	fix(pi): reduce startup skill-token overhead (#527)	2026-06-05 18:36:42 +00:00
jason.woltje	821e19dcbb	fix(mosaic-tools): roll up Gitea and Woodpecker wrapper fixes (#524)	2026-05-26 20:56:09 +00:00
jason.woltje	2e31626f87	fix: simplify updater to @mosaic/mosaic only, add explicit tea repo/login flags (#388)	2026-04-05 02:09:23 +00:00
Jason Woltje	b38cfac760	feat: integrate framework files into monorepo under packages/mosaic/framework/ ... Moves all Mosaic framework runtime files from the separate bootstrap repo into the monorepo as canonical source. The @mosaic/mosaic npm package now ships the complete framework — bin scripts, runtime configs, tools, and templates — enabling standalone installation via npm install. Structure: packages/mosaic/framework/ ├── bin/ 28 CLI scripts (mosaic, mosaic-doctor, mosaic-sync-skills, etc.) ├── runtime/ Runtime adapters (claude, codex, opencode, pi, mcp) ├── tools/ Shell tooling (git, prdy, orchestrator, quality, etc.) ├── templates/ Agent and repo templates ├── defaults/ Default identity files (AGENTS.md, STANDARDS.md, SOUL.md, etc.) ├── install.sh Legacy bash installer └── remote-install.sh One-liner remote installer Key files with Pi support and recent fixes: - bin/mosaic: launch_pi() with skills-local loop - bin/mosaic-doctor: --fix auto-wiring for all 4 harnesses - bin/mosaic-sync-skills: Pi as 4th link target, symlink-aware find - bin/mosaic-link-runtime-assets: Pi settings.json patching - bin/mosaic-migrate-local-skills: Pi skill roots, symlink find - runtime/pi/RUNTIME.md + mosaic-extension.ts Package ships 251 framework files in the npm tarball (278KB compressed).	2026-04-01 21:19:21 -05:00