52 Commits

Include renames

Author	SHA1	Message	Date
code-be-01andorch-01	04a01be992	ci(publish): serialize workspace-consuming image builds after publish-next-npm (#1411) (#1412) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-25 01:18:02 +00:00
code-be-01andorch-01	f45928c311	fix(ci): restore workspace manifests after publish pin transform (#1404) (#1405) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-25 00:08:40 +00:00
code-be-01andorch-01	d790572e2e	ci(publish): pin next-channel @mosaicstack deps to exact same-pipeline builds (#1389) (#1400) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-24 23:05:37 +00:00
code-be-01andorch-01	9014a510a9	ci(mosaic): repo-structure declaration CI gate (T51 WP5c) (#1378) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-24 04:43:26 +00:00
fredandgate-merge-01	24294d3b77	fix(git-tools): issue-view shows comment bodies and names the real tea failure (#1357) (#1365) ... Co-authored-by: fred <[email protected]>	2026-08-22 00:23:22 +00:00
fredandgate-merge-01	888a6ad29b	fix(#1356): tea login resolution fails closed on a declared git identity (#1361) ... Co-authored-by: fred <[email protected]>	2026-08-21 23:04:31 +00:00
ops-ci-01	20ad89c86b	docs(ci): state the measured push-CI model in ci.yml's when-comment (#1326) ... Co-authored-by: ops-ci-01 <[email protected]>	2026-08-20 15:48:46 +00:00
ops-01	9af456c240	merge: absorb next (pin cb9a0d1 + #1325 + #1129) for the controlled pinned-image rerun ... Per ops-ci-01's procedure (comments 23386/23394, brain D27): pipeline config travels with the commit under test, so the controlled rerun requires the pinned anchor in the PR head itself. This merge absorbs everything next took since the original merge parent (1bdeed62): the ci-base pin (cb9a0d1, lock-9cb7ffcd8828), the legacy-credential removal (#1325), and the ci-queue-wait statuses:null fix (#1129 — the branch from the divergence analysis, now landed). One conflict, same file as round 1: test:framework-shell union — our 54-entry chain plus next's new test-ci-queue-wait-no-status.sh entry at its position (55 entries, every target existence-verified). Enumeration guard green: population 61, enumerated 46, excluded (signed) 16.	2026-08-19 18:43:19 -05:00
ops-ci-01	cb9a0d1642	ci: pin ci-base to immutable lock-9cb7ffcd8828 (Closes #1328) (#1329) ... Co-authored-by: ops-ci-01 <[email protected]>	2026-08-19 23:42:05 +00:00
ops-01	b01950e92f	merge: absorb main into next — 23-commit divergence (08-05..13 base=main window) ... 17 content commits + 3 merge bubbles were genuinely missing from next (~8,000 lines: goal controller #1152, framework enforcement #1174/#1195, pr-edit wrapper #1173/#1200, pipefail series #1100/#1105/#1106/#1107, git-tools fixes #1073/#1085/#1086/#1089, #991, #1007, enrollment tolerance #1094). 3 commits were already in next by content (#1060 identical, #1066/#1062 evolved twins — conflicts resolved to next's side). Per-commit classification and evidence: mosaic-brain fleet/lanes/stack-remediation/main-next-divergence.md. Conflict resolutions (6 files) itemized in the PR body.	2026-08-19 16:27:17 -05:00
jarvis	5c5a25e4de	fix(ci): image pushes read the registry secrets that exist (#1275) (#1306) ... Squash-merged by topher (jarvis principal) via break-glass API path (wrapper main-only gap, documented). Gates: CI 2492 green at head e19013ed, review 181 APPROVED (fred) at pinned head. Diagnostic merge: the push pipeline now exercises kaniko with the REGISTRY_* secrets - valid creds yield the first fully green gated publish; invalid yield an explicit 401. Co-authored-by: Jarvis <[email protected]>	2026-08-18 05:02:23 +00:00
jarvis	d8e0aec950	feat(ri-050): bind next publication to exact-commit terminal verification — RI-1-001 (#1275) (#1277) ... Squash-merged by topher (jarvis principal) via break-glass: pr-merge.sh hard-codes main-only merge targets and cannot express this repo's next trunk. Gates: CI 2476 green at head 46784c8d, review 177 APPROVED (fred) at pinned head. First gated publish: every publish step now depends on verify-release at the exact commit.	2026-08-18 03:57:43 +00:00
Mos	afdaa6d0e6	framework: make tool discoverability, workspace placement and model tiering mechanical (#1174)	2026-08-13 14:21:22 +00:00
Jason WoltjeandClaude Fable 5	b79708fdc7	ci: provision Pi runtime 0.84.1 in the test step (Invariant R) ... invariant_r_unittest.py (landing with the lease-remediation stack, PR #1109) hard-requires an installed `pi` binary pinned to the measured version: it boots Pi's real tool registry and proves the broker's read-only carve-out resolves to real, unshadowed builtins. Absent runtime fails loud by design — so CI must provide it. Install @earendil-works/[email protected].1 (the canonical Pi; @mariozechner/* is embedded-legacy) at step level in the test step. Step-level rather than baked into Dockerfile.ci because ci-image publishes are currently blocked on registry UNAUTHORIZED; baking it in is the follow-up once registry auth is fixed, at which point this line degrades to a fast no-op guard like the openssl line above it. Co-Authored-By: Claude Fable 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01Dtdjx4Gxude9fwyLezCrhh	2026-08-11 20:16:32 -05:00
Mos	aa0a7b5fa2	fix(tools/git): issue-close.sh silently dropped the closing comment (#1085)	2026-08-07 05:59:12 +00:00
coder-mos2	906ad8dc30	wip(sync): merge main into next with combined resolutions	2026-08-02 23:11:22 -05:00
mos-dt-0andMos	06e0d40352	feat(quality): CI test-membership guard — enumeration can no longer silently under-run the disk (#1017) (#1018) ... Co-authored-by: mos-dt-0 <[email protected]>	2026-07-31 14:08:41 +00:00
jason.woltjeandMos	712c770b7a	fix(wake): #912 exercise the digest/HMAC trust suite in real CI (fix runner divergence + openssl + hard-require) (#921) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 08:11:28 +00:00
jason.woltje	31607a4af6	feat(mosaic): durable pre-update snapshot + verify net + restore CLI (#791 PR2) (#811)	2026-07-17 00:43:18 +00:00
jason.woltje	32a0ffba13	feat(mosaic): manifest-owned upgrade guard so updates never wipe operator config (#791) (#802)	2026-07-16 23:01:26 +00:00
jason.woltje	a959b1d6b4	ci: restrict push-event CI to protected branches (halve feature-branch load) (#721)	2026-07-12 22:48:58 +00:00
jason.woltjeandClaude Opus 4.8	c25a551c28	ci(#462): add durable next publish pipeline (#687) ... Durable @next integration-line publish: on next pushes, compute <patch+1>-next.<pipeline#> prerelease versions (in-CI, uncommitted) and publish @mosaicstack/* under the next dist-tag; gateway image sha-only on next. Strict guardrails: next-only, never writes latest, never tags from next; main path unchanged. PR-event CI 1631 fully green + review-of-record APPROVE (head b1a887a2). Guardrails independently verified. Co-Authored-By: Claude Opus 4.8 <[email protected]>	2026-06-25 05:45:09 +00:00
jason.woltje	78d67c6261	chore(ci): bump ci-base image node 22 → 24-alpine (#639)	2026-06-23 00:59:39 +00:00
jason.woltje	94e5cd7a81	ci: eliminate cold pnpm install via pre-baked CI base image (Phase 1) (#635)	2026-06-22 22:50:21 +00:00
jason.woltje	cf8ceb3095	CI: add pre-baked ci-base image (producer) [Phase 1a] (#637)	2026-06-22 22:20:48 +00:00
jason.woltje	dd0a0d38c6	ci(publish): gate kaniko image builds + publish on changed paths (CI throughput) (#619) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-06-22 13:14:31 +00:00
jason.woltje	528700ceea	feat(framework): P6 — docs + compliance matrix + resident-budget CI (#607) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-06-22 02:20:35 +00:00
jason.woltje	5118be74cb	feat(framework): P3 — extract Constitution (L0) + gut AGENTS dispatcher (#575) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-06-21 03:20:32 +00:00
jason.woltje	bf24066a49	feat(framework): P1+P2 — public sanitization + blocking CI gate (#572) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-06-21 02:40:11 +00:00
jason.woltje	bb96a3f23e	ci: publish mosaic-as appservice image (#532)	2026-06-10 23:00:38 +00:00
jason.woltje	821e19dcbb	fix(mosaic-tools): roll up Gitea and Woodpecker wrapper fixes (#524)	2026-05-26 20:56:09 +00:00
jason.woltje	312acd8bad	chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)	2026-04-06 00:39:56 +00:00
jason.woltje	1230f6b984	ci: fail publish pipeline loudly on registry/auth/network errors (#396)	2026-04-05 03:58:35 +00:00
jarvis	31008ef7ff	fix: update Gitea org references from mosaic/ to mosaicstack/ ... - Update all package.json repo URLs (mosaic/mosaic-stack → mosaicstack/mosaic-stack) - Update npm registry URLs (/api/packages/mosaic/npm → /api/packages/mosaicstack/npm) - Update woodpecker publish destinations - Update tools/install.sh registry and repo base URLs	2026-04-04 22:31:20 -05:00
jarvis	774b76447d	fix: rename all packages from @mosaic/* to @mosaicstack/* ... - Updated all package.json name fields and dependency references - Updated all TypeScript/JavaScript imports - Updated .woodpecker/publish.yml filters and registry paths - Updated tools/install.sh scope default - Updated .npmrc registry paths (worktree + host) - Enhanced update-checker.ts with checkForAllUpdates() multi-package support - Updated CLI update command to show table of all packages - Added KNOWN_PACKAGES, formatAllPackagesTable, getInstallAllCommand - Marked checkForUpdate() with @deprecated JSDoc Closes #391	2026-04-04 21:43:23 -05:00
jason.woltje	fc7fa11923	feat: local tier gateway with PGlite + Gitea-only publishing (#371)	2026-04-04 18:39:20 +00:00
jason.woltje	86d6c214fe	feat: gateway publishability + npmjs publish script (#370)	2026-04-04 18:07:05 +00:00
jarvis	1b4767bd8b	fix: add build tools to CI install step for better-sqlite3 native bindings	2026-04-03 07:41:39 -05:00
Jason Woltje	92998e6e65	fix(ci): use gitea_token secret for npm publish	2026-04-01 12:51:06 -05:00
Jason Woltje	13934d4879	feat: npm publish pipeline + package versioning (0.0.1-alpha.1) ... Publish pipeline: - Add publish-npm step to .woodpecker/publish.yml — publishes all @mosaic/* packages to Gitea npm registry on main push/tag - Requires gitea_npm_token Woodpecker secret (package:write scope) - publish-npm runs after build, parallel with Docker image builds - pnpm publish resolves workspace:* to concrete versions automatically Package configuration: - All 20 packages versioned at 0.0.1-alpha.1 - publishConfig added to all packages (Gitea registry, public access) - files field added to all packages (ship only dist/) - @mosaic/forge includes pipeline/ assets in published package Meta package (@mosaic/mosaic): - Now depends on @mosaic/forge, @mosaic/macp, @mosaic/prdy, @mosaic/quality-rails, @mosaic/types - npm install @mosaic/mosaic pulls in the standalone framework Build fixes: - Fix forge and macp tsconfig rootDir: '.' -> 'src' so dist/index.js resolves correctly (was dist/src/index.js) - Exclude __tests__ and vitest.config from build includes - Clean stale build artifacts from old rootDir config Required Woodpecker secret: woodpecker secret add mosaic/mosaic-stack \ --name gitea_npm_token --value '<token>' \ --event push,manual,tag	2026-04-01 12:46:13 -05:00
jarvis	3321d4575a	fix(ci): wait for postgres readiness before migration + tests	2026-03-30 20:41:46 -05:00
jarvis	47b7509288	fix(ci): add postgres service sidecar for integration tests	2026-03-30 20:25:59 -05:00
jarvis	34fad9da81	fix(ci): remove build step from ci.yml — build only in publish pipeline	2026-03-30 20:19:29 -05:00
jarvis	48be0aa195	fix(ci): separate publish pipeline — Docker builds independent of test failures	2026-03-30 20:12:23 -05:00
jarvis	f544cc65d2	fix(ci): switch to Kaniko image builder using global gitea secrets	2026-03-30 20:04:50 -05:00
jarvis	41e8f91b2d	fix(ci): decouple build/publish from test step — DB test requires external Postgres	2026-03-30 20:00:35 -05:00
jarvis	f161e3cb62	feat(ci): add Docker build+push pipeline for gateway and web images	2026-03-30 19:54:28 -05:00
jason.woltje	d31070177c	fix(ci): remove from_secret to unblock PR pipelines (#156) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-03-15 21:48:51 +00:00
jason.woltje	d5102f62fa	fix(ci): use from_secret syntax for Woodpecker v2 (#107) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-03-15 01:16:36 +00:00
jason.woltje	a881e707e2	ci: enable Turbo remote cache + parallelize pipeline steps (#106) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-03-15 01:14:56 +00:00