210 Commits

Author	SHA1	Message	Date
ms-lead-reviewer	0b953faf79	fix(#828): bound persisted broker token state ... Prune consumed and revoked tokens, cap pending token state, reject oversized serialization before replacement, and roll back in-memory mutations when persistence fails.\n\ncloses #828	2026-07-17 21:04:21 -05:00
ms-lead-reviewer	4e9b4cdf97	test(#828): cover bounded broker token state	2026-07-17 20:56:56 -05:00
ms-lead-reviewer	57770e3443	fix(#828): drain oversized broker frames safely ... closes #828	2026-07-17 20:50:00 -05:00
ms-lead-reviewer	deb11df783	feat(#828): add authenticated lease broker ... Bind broker sessions to Linux SO_PEERCRED and /proc starttime ancestry, fence runtime generations, persist cryptographic single-use cycle tokens, and enforce protected Unix socket/state posture.\n\ncloses #828	2026-07-17 20:45:00 -05:00
ms-lead-reviewer	d61c5441fc	test(#828): define lease broker security contract ... Add red-first acceptance coverage for kernel peer credentials, broker-minted sessions, ancestry and generation fencing, crypto tokens, protected socket/state posture, and fail-closed persistence boundaries.	2026-07-17 20:44:37 -05:00
jason.woltje	d801d6c4c8	feat(mosaic): add secure skill registration CLI (#826)	2026-07-17 23:45:35 +00:00
jason.woltje	d3bf52898b	fix: reject unknown installer arguments (#825)	2026-07-17 22:16:51 +00:00
jason.woltje	3f77229e88	fix(#792): fleet roster ENOENT actionable exit + installer heading printf (#818)	2026-07-17 21:36:36 +00:00
jason.woltje	686c881fe4	fix: fetch actual Gitea PR head for Codex reviews (#815)	2026-07-17 19:44:56 +00:00
jason.woltje	9ddc6fbda8	feat(fleet): mosaic fleet regen — regenerate roster-derived projections (PR3 of #791) (#813)	2026-07-17 03:17:55 +00:00
jason.woltje	31607a4af6	feat(mosaic): durable pre-update snapshot + verify net + restore CLI (#791 PR2) (#811)	2026-07-17 00:43:18 +00:00
jason.woltje	32a0ffba13	feat(mosaic): manifest-owned upgrade guard so updates never wipe operator config (#791) (#802)	2026-07-16 23:01:26 +00:00
jason.woltje	8536454257	fix(glpi): accept HTTP 206 in list wrappers (#807) (#810)	2026-07-16 22:47:58 +00:00
jason.woltje	4f29cc604d	fix(tmux): correct cross-socket sender identity (#808) (#809)	2026-07-16 22:47:25 +00:00
jason.woltje	3be443c96d	feat(mosaic): claudex isolated config + env-inject + yolo wiring (P2–P4 of #790) (#806)	2026-07-16 22:10:33 +00:00
jason.woltje	59f5f51ffd	feat(mosaic): claudex proxy preflight + lifecycle (P1 of #790) (#793)	2026-07-16 21:15:33 +00:00
jason.woltje	9745bc3f29	feat(fleet): add reviewed v1-to-v2 migration preview (#788)	2026-07-16 13:11:16 +00:00
jason.woltje	adad486b6f	fix(fleet): enforce exact comms authority (#787)	2026-07-16 00:32:23 +00:00
jason.woltje	c1aecfabe9	test(fleet): cover reconciler lifecycle gates (#786)	2026-07-15 16:46:13 +00:00
jason.woltje	499090508e	feat(fleet): reconcile local roster state (#785)	2026-07-15 15:03:31 +00:00
jason.woltje	bc5e73629e	feat(fleet): add generation-guarded agent CRUD (#773)	2026-07-15 12:03:05 +00:00
jason.woltje	191efaefeb	feat(fleet): enforce generated environment boundary (#772)	2026-07-15 08:40:32 +00:00
jason.woltje	e9c4aa3e8b	test(fleet): validate shipped artifact dispositions (#770)	2026-07-15 01:37:12 +00:00
jason.woltje	a5e8e55401	feat(fleet): add shared role semantics (#768)	2026-07-15 00:53:47 +00:00
jason.woltje	aa5b43bba2	feat(fleet): add roster v2 structural compiler (#764)	2026-07-14 20:37:52 +00:00
jason.woltje	d077183554	docs(tess): remediate M5 qualification findings (#750)	2026-07-13 19:59:38 +00:00
jason.woltje	405984af5a	De-hardcode orchestrator and interaction agent names (#748)	2026-07-13 18:59:27 +00:00
jason.woltje	6345dbfcf2	feat(agent): add Matrix native runtime provider (#744)	2026-07-13 15:29:37 +00:00
jason.woltje	0b621660c8	feat(tess): wire durable interaction surfaces (#732)	2026-07-13 10:05:29 +00:00
jason.woltje	8246ee0137	feat(tess): add generic interaction CLI (#731)	2026-07-13 05:52:41 +00:00
jason.woltje	e3b5113be2	feat(tess): add configurable Pi interaction service (#728)	2026-07-13 02:59:27 +00:00
jason.woltje	9a8a572fcf	feat(tess): add roster-bound tmux fleet provider (#724)	2026-07-13 00:59:24 +00:00
jason.woltje	b580d37d51	Fixes #703 (#705)	2026-07-12 20:49:43 +00:00
jason.woltje	a99aded26d	fix(tools/git): -h/--help now exits 0 across 7 wrappers (#702)	2026-07-11 09:23:46 +00:00
jason.woltje	4df38f7e81	fix(tools/_lib): /etc/mosaic host-level fallback for credential resolution (#700)	2026-07-10 01:57:12 +00:00
jason.woltje	4e9e053800	fix(tools/tmux): unique per-invocation paste buffer; track auto-submit-drafts.sh (#697)	2026-07-09 17:37:40 +00:00
jason.woltje	851c67c27b	docs(bootstrap): add python-is-python3 to agent-host prerequisites (#694)	2026-07-03 09:38:40 +00:00
jason.woltje	67135d3822	fix(fleet): guard mosaic fleet restart against tight-loop re-entry race (#680)	2026-06-25 01:44:48 +00:00
jason.woltje	79eae2ffce	fix(fleet): raise fleet-personas.spec timeout to 30s (mirror #665) (#677)	2026-06-24 22:16:49 +00:00
jason.woltje	e0e7be70f5	chore(release): @mosaicstack/mosaic 0.0.48 (#670)	2026-06-24 20:01:17 +00:00
jason.woltje	d7eaa19380	feat(fleet): provision roster from system-type profile (H3) (#665)	2026-06-24 19:48:54 +00:00
jason.woltje	248193cd3b	fix(fleet): export MOSAIC_AGENT_CLASS into the agent pane so personas inject (#669)	2026-06-24 19:38:15 +00:00
jason.woltje	a9857c5043	fix(release): republish @mosaicstack/db 0.0.4 with BacklogService; mosaic 0.0.47 (#668)	2026-06-24 18:54:33 +00:00
jason.woltje	e4ede69144	chore(release): mosaic 0.0.46 (persona contracts live) (#666)	2026-06-24 18:29:01 +00:00
jason.woltje	0d17a29ebe	feat(fleet): export MOSAIC_AGENT_CLASS into agent env (A3a) (#663)	2026-06-24 17:19:59 +00:00
jason.woltje	28cfecda94	feat(fleet): inject persona contract at launch (A3b) (#664)	2026-06-24 17:06:51 +00:00
jason.woltje	6c84ccd0b1	feat(fleet): dedicated orchestrator persona, split from planner (#662)	2026-06-24 16:42:23 +00:00
jason.woltje	84d2757817	feat(fleet): update-surviving persona customization (H4) (#661)	2026-06-24 16:21:01 +00:00
jason.woltje	a738ac1410	feat(fleet): system-type profiles (H2) (#660)	2026-06-24 16:02:25 +00:00
jason.woltje	538f0556d5	feat(fleet): cross-domain baseline persona library (H1) (#659)	2026-06-24 15:31:56 +00:00