19 Commits

Include renames

Author	SHA1	Message	Date
fredandClaude Opus 5	3b4055017e	fix(installer): pin umask and set the 0700 modes the fleet boundary requires (#1236) ... A greenfield install cannot run `mosaic fleet init --write`. It fails with `unsafe-permissions` on an unnamed `(directory)` and an unhandled Node throw, and every mutating `mosaic fleet` command fails the same way. Measured on a reverted-to-greenfield sandbox VM at CLI 0.0.50-next.2413: `~/.config/mosaic`, `fleet/` and `credentials/` all land at 0775, and 1735 directories under the framework root carry `mode & 022`. Two independent causes, and fixing either one alone leaves it broken. 1. The installer inherited the caller's umask. Debian/Ubuntu ship 002, so every `mkdir -p` produced 0775. Fedora/RHEL ship 022 and produced 0755. The product therefore worked or did not depending on the operator's login shell, with nothing in the install output distinguishing the two. 022 is already what this script assumes it produces — `make_durable_snapshot` restores the ambient umask specifically so "every later sync copy and new framework dir" gets 0644/0755 — so pin it rather than inherit it. 2. Even at a correct 0755, three directories are rejected. The fleet code guards its managed paths with two masks in two languages: `assertPrivateManagedDirectory` (fleet-reconciler.js, `mode & 0o077`) covers MOSAIC_HOME and `fleet/` and runs before the roster lock is taken; `assert_private_directory` (tools/fleet/start-agent-session.sh, `mode & 077`) covers `fleet/agents` and runs before a pane is spawned. Their laxer siblings use `mode & 0o022` and accept 0755. The strict mask wins, so the installer states 0700 outright instead of hoping a umask implies it. The `find -perm /022 -exec chmod go-w` sweep repairs a tree installed before this change, which the umask alone cannot reach. It strips group/other WRITE only — never read or execute — and is scoped to directories, so it corrects the boundary violation without changing who may traverse or read anything. It is not sufficient for `fleet/agents`: stripping write from 0755 yields 0750 and `mode & 077` is still non-zero, which is why that path gets its own chmod. Reported as #1236. The `fleet/agents` half was found by scooby reading start-agent-session.sh; the umask framing is theirs too — my first report blamed the distro rather than the umask. Co-Authored-By: Claude Opus 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01WYgWocp36goy8hj2ui6ps1	2026-08-15 22:29:48 -05:00
jason.woltjeandMos	2378665eaf	feat(wake): W7 A10 idempotent installer + mosaic-wake.service (component-manifest, Gate-A, blank-reset retire, snapshot-guard, fail-closed install-validate) (#911) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 04:19:09 +00:00
jason.woltjeandMos	d351caad36	feat(869-c2): install-ordering enforcement-hook guard (Part of #869) ... Part of #869 Mos (id-11) Gate-16 merge: independent APPROVE @b6f36564 (8/8, verified vs real production settings template), author id2 != approver id11, clean mosaic-coder author, CI green wp1988. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 18:48:33 +00:00
jason.woltjeandMos	4422231bdb	feat: per-agent Gitea identity resolution (#873) ... Closes #873 Mos (id-11) Gate-16 merge: independent APPROVE @4b472a22 (author-blocker dissolved via (a) re-author, identical tree hash to tech-approved head), author id2 != approver id11, clean mosaic-coder commit-author, CI green wp1985. Framework train COMPLETE 6/6. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 18:09:34 +00:00
jason.woltje	31607a4af6	feat(mosaic): durable pre-update snapshot + verify net + restore CLI (#791 PR2) (#811)	2026-07-17 00:43:18 +00:00
jason.woltje	32a0ffba13	feat(mosaic): manifest-owned upgrade guard so updates never wipe operator config (#791) (#802)	2026-07-16 23:01:26 +00:00
jason.woltje	adad486b6f	fix(fleet): enforce exact comms authority (#787)	2026-07-16 00:32:23 +00:00
jason.woltje	84d2757817	feat(fleet): update-surviving persona customization (H4) (#661)	2026-06-24 16:21:01 +00:00
jason.woltje	a738ac1410	feat(fleet): system-type profiles (H2) (#660)	2026-06-24 16:02:25 +00:00
jason.woltje	f852250419	feat(fleet): native Mosaic backlog on @mosaicstack/db (atomic claim + TTL) (#657)	2026-06-24 14:55:10 +00:00
jason.woltje	cabb179d5a	feat(fleet): seed role registry markdown library (#655)	2026-06-24 14:39:54 +00:00
jason.woltje	bf2a6745c8	fix(install): preserve user fleet data on re-seed + refresh active units (CRITICAL) (#632) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-06-22 21:38:09 +00:00
jason.woltje	31e7a4d25e	docs(framework): P4.1 — fix stale install.sh comments + cmp-equal early-exit (#593) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-06-21 23:12:31 +00:00
jason.woltje	bb7d549080	feat(framework): P4 — upgrade-safe Constitution migration (both installers) (#590) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-06-21 23:03:48 +00:00
jason.woltje	5118be74cb	feat(framework): P3 — extract Constitution (L0) + gut AGENTS dispatcher (#575) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-06-21 03:20:32 +00:00
jason.woltje	c3f810bbd1	fix(mosaic): seed TOOLS.md from defaults on install (#458) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-04-12 02:02:21 +00:00
jason.woltje	f64ec12f39	fix(installer): preserve credentials dir and seed STANDARDS.md (#452) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-04-08 00:40:49 +00:00
jarvis	15830e2f2a	feat!: unify mosaic CLI — native launcher, no bin/ directory ... BREAKING CHANGE: ~/.config/mosaic/bin/ is removed entirely. The mosaic npm CLI is now the only executable. ## What changed - **bin/ → deleted**: All scripts moved to tools/_scripts/ (internal) - **mosaic-launch → deleted**: Launcher logic is native TypeScript in packages/cli/src/commands/launch.ts - **mosaic.ps1 → deleted**: PowerShell launcher removed - **Framework install.sh**: Complete rewrite with migration system - **Version tracking**: .framework-version file (schema v2) - **Migration v1→v2**: Auto-removes bin/, cleans old PATH entries from shell profiles ## Native TypeScript launcher (commands/launch.ts) All runtime launch logic ported from bash: - Runtime prompt builder (AGENTS.md + RUNTIME.md + USER.md + TOOLS.md) - Mission context injection (reads .mosaic/orchestrator/mission.json) - PRD status injection (scans docs/PRD.md) - Pre-flight checks (MOSAIC_HOME, AGENTS.md, SOUL.md, runtime binary) - Session lock management with signal cleanup - Per-runtime launch: Claude, Codex, OpenCode, Pi - Yolo mode flags per runtime - Pi skill discovery + extension loading - Framework management (init, doctor, sync, bootstrap) delegates to tools/_scripts/ bash implementations ## Installer - tools/install.sh: detects framework by .framework-version or AGENTS.md - Framework install.sh: migration system with schema versioning - Forward-compatible: add migrations as numbered blocks - No PATH manipulation for framework (npm bin is the only PATH entry)	2026-04-02 19:37:13 -05:00
Jason Woltje	b38cfac760	feat: integrate framework files into monorepo under packages/mosaic/framework/ ... Moves all Mosaic framework runtime files from the separate bootstrap repo into the monorepo as canonical source. The @mosaic/mosaic npm package now ships the complete framework — bin scripts, runtime configs, tools, and templates — enabling standalone installation via npm install. Structure: packages/mosaic/framework/ ├── bin/ 28 CLI scripts (mosaic, mosaic-doctor, mosaic-sync-skills, etc.) ├── runtime/ Runtime adapters (claude, codex, opencode, pi, mcp) ├── tools/ Shell tooling (git, prdy, orchestrator, quality, etc.) ├── templates/ Agent and repo templates ├── defaults/ Default identity files (AGENTS.md, STANDARDS.md, SOUL.md, etc.) ├── install.sh Legacy bash installer └── remote-install.sh One-liner remote installer Key files with Pi support and recent fixes: - bin/mosaic: launch_pi() with skills-local loop - bin/mosaic-doctor: --fix auto-wiring for all 4 harnesses - bin/mosaic-sync-skills: Pi as 4th link target, symlink-aware find - bin/mosaic-link-runtime-assets: Pi settings.json patching - bin/mosaic-migrate-local-skills: Pi skill roots, symlink find - runtime/pi/RUNTIME.md + mosaic-extension.ts Package ships 251 framework files in the npm tarball (278KB compressed).	2026-04-01 21:19:21 -05:00