80 Commits

Author	SHA1	Message	Date
Hermes Agent	0a5e703a70	test(mosaic): gate #797 ledger upgrade-survival + harden manifest parity (#791) ... Fold the Mos-elevated #797 Runtime-Ledger survival sentinel into #791 PR1 and harden the .txt-format parity test per the accepted-format conditions. - framework-manifest.txt: annotate the existing fleet/run/** operator carve-out to name the #797 ledger (fleet/run/sessions/) so it reads as load-bearing. The glob already matches the #797 spec exactly — no location divergence. - HARD GATE (test-upgrade-manifest-guard.sh): seed a populated ledger (events.ndjson journal + ledger.json projection, 0600 under 0700) as an operator sentinel; assert byte-identical + mtime-unchanged + dir-perms unchanged after a keep-mode upgrade. Relabel the prune check as the explicit negative control. 48 -> 58 checks. - Parity (manifest-parity.spec.ts): add format-edge fixtures driven through BOTH resolvers via MANIFEST_FILE — comments/blanks/whitespace, duplicate and overlapping globs (deny-wins), section/glob-ordering independence, and an explicit UNKNOWN->operator negative probe; add ledger probe paths. - manifest.spec.ts: isolate the carve-out's load-bearing value with a resolver red->green — under a hypothetical fleet/** framework glob, the ledger is pruned WITHOUT the fleet/run/** carve-out and protected WITH it (deny-wins). Gates: typecheck, lint, format:check green; mosaic vitest 1069 passed; HARD GATE 58/58; migration 21/21. Commits forward on 34e55d4a (no rebase). Part of #791 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 16:11:06 -05:00
Hermes Agent	34e55d4a2e	feat(mosaic): manifest-owned upgrade guard so updates never wipe operator config (#791) ... Invert the framework updater from a denylist ("framework owns everything unless preserved") to an explicit allow-list manifest ("operator owns everything unless framework"). A path the manifest never anticipated resolves to operator-owned by the fail-safe default, so it is structurally unreachable by any write or prune. Root cause (#791): `mosaic update` re-seeds via `install.sh` keep-mode, whose `rsync -a --delete` + hand-maintained PRESERVE_PATHS denylist wiped operator paths the denylist forgot (agents/*.conf, policy/*.md, *.local.md, harvester SOP, tools/_lib/credentials.json, unanticipated fleet files). - framework-manifest.txt: single SSOT ([framework]/[operator], deny-wins, UNKNOWN=>operator fail-safe), read by BOTH installers. - src/framework/manifest.ts: pure resolver (parse/matchGlob/resolveOwnership/ frameworkSubtreeRoots/planPrune) — the testable seam. - tools/_lib/manifest.sh: bash resolver (compiled globs, fork-free hot path), sourced by install.sh; parity-tested against the TS resolver. - install.sh keep mode is now manifest-driven (no --delete): overlay-copy framework files, scoped-prune only retired framework files inside shipped subtrees. Operator + unknown paths are never written or deleted. - file-ops.syncDirectory gains an isOperatorOwned guard; file-adapter derives it from the shared manifest, replacing the drifted hardcoded preservePaths. Tests (TDD, red->green): - HARD GATE test-upgrade-manifest-guard.sh: 10 operator sentinels (incl. an unanticipated one) survive a keep-mode reseed byte-identical + mtime-unchanged; retired framework file pruned; secret value absent from output. RED 31 fail on the old installer -> GREEN 48 pass. Wired merge-blocking into CI. - manifest-parity.spec.ts (§6.1): bash<->TS agree on 34 paths + subtree roots. - manifest.spec.ts: 18 tests incl. planPrune property test + shipped-tree completeness (§6.2). - test-install-migration.sh F6 flipped: an unanticipated operator fleet file now MUST survive keep-mode reseed. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 15:47:28 -05:00
jason.woltje	adad486b6f	fix(fleet): enforce exact comms authority (#787)	2026-07-16 00:32:23 +00:00
jason.woltje	191efaefeb	feat(fleet): enforce generated environment boundary (#772)	2026-07-15 08:40:32 +00:00
jason.woltje	a5e8e55401	feat(fleet): add shared role semantics (#768)	2026-07-15 00:53:47 +00:00
jason.woltje	405984af5a	De-hardcode orchestrator and interaction agent names (#748)	2026-07-13 18:59:27 +00:00
jason.woltje	e3b5113be2	feat(tess): add configurable Pi interaction service (#728)	2026-07-13 02:59:27 +00:00
jason.woltje	b580d37d51	Fixes #703 (#705)	2026-07-12 20:49:43 +00:00
jason.woltje	a99aded26d	fix(tools/git): -h/--help now exits 0 across 7 wrappers (#702)	2026-07-11 09:23:46 +00:00
jason.woltje	4df38f7e81	fix(tools/_lib): /etc/mosaic host-level fallback for credential resolution (#700)	2026-07-10 01:57:12 +00:00
jason.woltje	4e9e053800	fix(tools/tmux): unique per-invocation paste buffer; track auto-submit-drafts.sh (#697)	2026-07-09 17:37:40 +00:00
jason.woltje	851c67c27b	docs(bootstrap): add python-is-python3 to agent-host prerequisites (#694)	2026-07-03 09:38:40 +00:00
jason.woltje	248193cd3b	fix(fleet): export MOSAIC_AGENT_CLASS into the agent pane so personas inject (#669)	2026-06-24 19:38:15 +00:00
jason.woltje	6c84ccd0b1	feat(fleet): dedicated orchestrator persona, split from planner (#662)	2026-06-24 16:42:23 +00:00
jason.woltje	84d2757817	feat(fleet): update-surviving persona customization (H4) (#661)	2026-06-24 16:21:01 +00:00
jason.woltje	a738ac1410	feat(fleet): system-type profiles (H2) (#660)	2026-06-24 16:02:25 +00:00
jason.woltje	538f0556d5	feat(fleet): cross-domain baseline persona library (H1) (#659)	2026-06-24 15:31:56 +00:00
jason.woltje	f852250419	feat(fleet): native Mosaic backlog on @mosaicstack/db (atomic claim + TTL) (#657)	2026-06-24 14:55:10 +00:00
jason.woltje	cabb179d5a	feat(fleet): seed role registry markdown library (#655)	2026-06-24 14:39:54 +00:00
jason.woltje	aa27c42129	fix(fleet): pre-trust claude agent workdir to clear the folder-trust gate (#644) (#645)	2026-06-24 05:16:46 +00:00
jason.woltje	e6b53ea103	fix(tools): default AGENT_WORK_ROOT to $HOME/mosaic/agent-work (#641)	2026-06-23 13:40:13 +00:00
jason.woltje	4da87640e8	feat(tmux): agent-send.sh --class triage tag for the comms daemon (#552)	2026-06-23 03:25:16 +00:00
jason.woltje	94e5cd7a81	ci: eliminate cold pnpm install via pre-baked CI base image (Phase 1) (#635)	2026-06-22 22:50:21 +00:00
Jason Woltje	bf2a6745c8	fix(install): preserve user fleet data on re-seed + refresh active units (CRITICAL) (#632) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 21:38:09 +00:00
Jason Woltje	d539d61e0e	refactor(fleet): rename tmux socket mosaic-factory → mosaic-fleet (#630) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 21:08:43 +00:00
Jason Woltje	7342415a32	fix(fleet): consume model_hint + fix socket-default trap (stand-up fixes) (#627) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 19:18:01 +00:00
Jason Woltje	095e19443b	feat(fleet): onboarding-injection — comms cheat-sheet + peer roster per agent (#621) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 17:54:54 +00:00
Jason Woltje	858d90329d	feat(fleet): F4 Phase 1 — chat connector abstraction + Matrix design (#617) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 16:14:32 +00:00
Jason Woltje	2bf66136e4	feat(fleet): enhancer role + two-agent floor (orchestrator + enhancer) (#615) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 13:15:59 +00:00
Jason Woltje	528700ceea	feat(framework): P6 — docs + compliance matrix + resident-budget CI (#607) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 02:20:35 +00:00
Jason Woltje	23343bb7f0	feat(mosaic): P5 — overlay composer (compose-contract + *.local overlays) (#605) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 02:16:05 +00:00
Jason Woltje	6dbe452a9f	fix(fleet): watch viewer-session leak + workdir test settle-race (#601) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 01:43:21 +00:00
Jason Woltje	59c755067e	feat(fleet): F3-m2 — native Pi heartbeat + model surface + mosaic_mission_status tool (#602) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 01:43:18 +00:00
Jason Woltje	6ffb27787e	fix(fleet): complete HB reader/writer consistency + sidecar hardening (#599) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 01:22:35 +00:00
Jason Woltje	60a309d5a4	fix(fleet): heartbeat consistency — MOSAIC_HOME path + configurable interval (#595) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 23:25:53 +00:00
Jason Woltje	31e7a4d25e	docs(framework): P4.1 — fix stale install.sh comments + cmp-equal early-exit (#593) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 23:12:31 +00:00
jason.woltje	ca19d57bba	feat(fleet): config-type presets + AI-free init wizard (F1) (#591)	2026-06-21 23:07:41 +00:00
Jason Woltje	bb7d549080	feat(framework): P4 — upgrade-safe Constitution migration (both installers) (#590) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 23:03:48 +00:00
jason.woltje	7ced5588c9	feat(fleet): launcher heartbeat sidecar — HB for all runtimes (pi/claude/codex) (#584)	2026-06-21 21:14:20 +00:00
Jason Woltje	c9cfe36204	docs(framework): P3.1 fast-follow — governance wording + gate scope + bare-launch note (#577) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 18:56:50 +00:00
jason.woltje	fc90c89913	fix(fleet): durable runtime PATH for detached agent launch (#581)	2026-06-21 17:30:40 +00:00
Jason Woltje	5118be74cb	feat(framework): P3 — extract Constitution (L0) + gut AGENTS dispatcher (#575) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 03:20:32 +00:00
Jason Woltje	bf24066a49	feat(framework): P1+P2 — public sanitization + blocking CI gate (#572) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 02:40:11 +00:00
Jason Woltje	92316ab41e	feat(framework): P0 — MIT license + executable-leak sanitization (#570) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 01:43:49 +00:00
Jason Woltje	b354bc8fae	docs(framework): add agency & persistence patterns to config + guides (#543) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 01:43:36 +00:00
jason.woltje	6dfd78f643	feat(fleet): add local canary CLI (#563)	2026-06-20 17:49:01 +00:00
jason.woltje	45e2c2aad8	docs: plan durable tmux fleet install (#557)	2026-06-20 16:19:19 +00:00
jason.woltje	57919c38d8	fix(framework/tools): wrapper hardening — TLS validation, cred-path fallback, no-CI fast-exit (#551)	2026-06-20 10:16:38 +00:00
jason.woltje	8c45857859	feat(launch): force-load fleet-critical Pi skills + reconcile skill docs (#555)	2026-06-19 18:31:02 +00:00
jason.woltje	605221d42f	docs(framework/tools): lead TOOLS.md with high-salience fleet-tools cheatsheet (#554)	2026-06-19 18:03:03 +00:00