71 Commits

Author	SHA1	Message	Date
mosaic-coder	4b472a2242	fix(tools/git): restore executable bit on new per-agent-identity scripts ... core.filemode=false in this worktree meant the initial commit recorded git-credential-mosaic, test-git-credential-mosaic.sh, and test-gitea-token-identity.sh as 100644. git invokes a path-configured credential.helper directly (exec, not `sh <path>`), so git-credential-mosaic must carry the executable bit; the two test scripts match the 100755 convention already used by the other test-*.sh harnesses in this directory. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-23 12:54:46 -05:00
mosaic-coder	9d7038d325	feat(tools/git): per-agent Gitea identity (git-credential-mosaic + get_gitea_token) ... Adds an opt-in per-agent Gitea identity so a fleet agent can push/commit/open PRs under its own token instead of the single shared account, giving cryptographic author-!=-reviewer separation (Gate-16). Resolution priority (both tools): MOSAIC_GIT_IDENTITY env > git config mosaic.gitIdentity (per-worktree, persists on disk) > git-supplied username (git-credential-mosaic only). If the resolved identity has a token file at ~/.config/mosaic/secrets/gitea-tokens/gitea-{usc,mosaicstack}-<id>.token, that identity is used; otherwise both tools fall through to the existing shared-account path unchanged, so this is a no-op on any host without per-slot tokens configured. - tools/git/git-credential-mosaic: new git credential helper (get verb). - tools/git/detect-platform.sh: get_gitea_token() gains the same identity resolution, prepended ahead of the existing shared-token logic, so API tooling (pr-create.sh, issue-create.sh, ...) authors under the same identity as git push/fetch. - install.sh: explicit chmod +x for git-credential-mosaic (it ships without a .sh suffix, so the existing *.sh glob does not cover it); tools/** is already framework-owned so the file syncs automatically. - tools/git/README.md: documents the feature, the one-time `git config credential.helper` registration step (deliberately not auto-wired — see README for why), and the PowerShell-parity decision (detect-platform.ps1 authenticates via tea logins, not a raw-token function, so there is nothing to port there). - tools/git/test-git-credential-mosaic.sh, tools/git/test-gitea-token-identity.sh: new regression harnesses (red verified against the pre-patch code) covering identity-resolution priority, per-host token path selection, and shared-account fallback. Wired into package.json's test:framework-shell. Upstreams Mos host-local tooling-patch kit (2026-07-23), Patches 1+2. Closes #873 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-23 12:54:45 -05:00
jason.woltje	7edc9b3121	fix(gitea): direct REST comment/review with fail-closed read-back (#865) ... Closes #865 Mos (id-11) Gate-16 merge: fresh confirmatory independent APPROVE @8ac7e70f (1241-case fuzz 0 fail-open), author id2 != approver id11, clean commit-author, CI green wp1966. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 17:25:32 +00:00
jason.woltje	2f50c0876b	feat(869-c3): lease-broker supervisor unit (Part of #869) ... Part of #869 Mos (id-11) Gate-16 merge: independent APPROVE @75235ef8 (9/9, no live host mutation), author id2 != approver id11, CI green wp1971. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 17:19:48 +00:00
jason.woltje	48fd1df28a	fix(ci-queue-wait): treat absent branch (404) as queue-clear (#872) ... Closes #872 Mos (id-11) Gate-16 merge: independent review APPROVE @23cbdaf8, author jason.woltje(id2) != approver Mos(id11), CI green wp1974. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 17:08:57 +00:00
jason.woltje	b79336a8c1	feat(orchestrator): board-roll.sh — auto-roll LIVE board to LEDGER under byte cap (#868) ... feat(orchestrator): board-roll.sh - auto-roll LIVE board to LEDGER under byte cap Closes #868	2026-07-22 09:20:03 +00:00
jason.woltje	344d86a635	fix(#812 follow-up): normalize detect-platform.sh host-match port comparison by scheme (#859)	2026-07-20 10:13:29 +00:00
jason.woltje	acd7d380f6	fix(framework): install deps on worktree bootstrap + legible deps-preflight at gate seam (#856) (#858)	2026-07-20 09:38:12 +00:00
jason.woltje	3b70c66c07	fix(framework): drop unsupported --comment from tea pr approve/reject; route review body via durable comment (#835) (#857)	2026-07-20 09:19:48 +00:00
jason.woltje	aa999daf1b	fix(framework): durable Gitea comment posting in pr-review.sh via REST + read-back verify (#812) (#852)	2026-07-20 06:45:48 +00:00
jason.woltje	2509eb7646	WI-6 (#833): constrained recovery command + mosaic-context-refresh skill wrapper (#846)	2026-07-20 03:33:00 +00:00
jason.woltje	07553ead33	WI-5 #832: Receipt-challenge protocol (compaction-refresh, milestone 188) (#845)	2026-07-19 23:18:56 +00:00
jason.woltje	e522b22fa4	WI-4 (#831): verbatim-hashed normative fragments (B_payload/H_payload) (#844)	2026-07-19 20:34:20 +00:00
jason.woltje	e4d7d4502d	WI-3 (#830): compaction observers → revoke + D4 same-PID generation auto-revoke (#842)	2026-07-19 19:46:28 +00:00
jason.woltje	8dfcf1903e	fix(#838): bound broker reply deadlines + fail-close empty-read; de-flake acceptance harness (#839) ... Bound broker reply deadlines (separate read/lock/send budgets, BROKER_BUSY-before-mutation, fresh post-handle send budget → closes drop-after-commit window); fail-close empty/truncated read → GATE_UNAVAILABLE deny. De-flakes the 1917 acceptance surface. terra CODE APPROVE (pi) + Opus SECREV APPROVED (claude) — RoR comment 18143. Promote-lease-lost-ACK residual = fail-safe two-generals observability-gap, routed to WI-3 D2-v5 as named-disclosed-bounded-residual (route i). Gate-16 3-principal author=gpt-sol. closes #838	2026-07-18 07:15:50 +00:00
jason.woltje	abd2791f59	feat(mosaic): WI-2 mutator-class guard for directive-freshness (#837) ... WI-2: mutator-class guard for the compaction directive-freshness mechanism — command-position parser (prefix x var-indirection unified) + primitive-anchored invariant backstop + all-tools-hook fail-close. Parser-complete on principle: realistic evasion matrix RED-regression-covered, residual exotic evasions proven backstop-caught (B-tests), lens-convergence reached. closes #829	2026-07-18 05:51:58 +00:00
jason.woltje	8ec67a1126	feat(mosaic): add authenticated external lease broker (#836)	2026-07-18 03:12:23 +00:00
jason.woltje	d801d6c4c8	feat(mosaic): add secure skill registration CLI (#826)	2026-07-17 23:45:35 +00:00
jason.woltje	686c881fe4	fix: fetch actual Gitea PR head for Codex reviews (#815)	2026-07-17 19:44:56 +00:00
jason.woltje	31607a4af6	feat(mosaic): durable pre-update snapshot + verify net + restore CLI (#791 PR2) (#811)	2026-07-17 00:43:18 +00:00
jason.woltje	32a0ffba13	feat(mosaic): manifest-owned upgrade guard so updates never wipe operator config (#791) (#802)	2026-07-16 23:01:26 +00:00
jason.woltje	8536454257	fix(glpi): accept HTTP 206 in list wrappers (#807) (#810)	2026-07-16 22:47:58 +00:00
jason.woltje	4f29cc604d	fix(tmux): correct cross-socket sender identity (#808) (#809)	2026-07-16 22:47:25 +00:00
jason.woltje	adad486b6f	fix(fleet): enforce exact comms authority (#787)	2026-07-16 00:32:23 +00:00
jason.woltje	191efaefeb	feat(fleet): enforce generated environment boundary (#772)	2026-07-15 08:40:32 +00:00
jason.woltje	e3b5113be2	feat(tess): add configurable Pi interaction service (#728)	2026-07-13 02:59:27 +00:00
jason.woltje	b580d37d51	Fixes #703 (#705)	2026-07-12 20:49:43 +00:00
jason.woltje	a99aded26d	fix(tools/git): -h/--help now exits 0 across 7 wrappers (#702)	2026-07-11 09:23:46 +00:00
jason.woltje	4df38f7e81	fix(tools/_lib): /etc/mosaic host-level fallback for credential resolution (#700)	2026-07-10 01:57:12 +00:00
jason.woltje	4e9e053800	fix(tools/tmux): unique per-invocation paste buffer; track auto-submit-drafts.sh (#697)	2026-07-09 17:37:40 +00:00
jason.woltje	248193cd3b	fix(fleet): export MOSAIC_AGENT_CLASS into the agent pane so personas inject (#669)	2026-06-24 19:38:15 +00:00
jason.woltje	aa27c42129	fix(fleet): pre-trust claude agent workdir to clear the folder-trust gate (#644) (#645)	2026-06-24 05:16:46 +00:00
jason.woltje	e6b53ea103	fix(tools): default AGENT_WORK_ROOT to $HOME/mosaic/agent-work (#641)	2026-06-23 13:40:13 +00:00
jason.woltje	4da87640e8	feat(tmux): agent-send.sh --class triage tag for the comms daemon (#552)	2026-06-23 03:25:16 +00:00
jason.woltje	94e5cd7a81	ci: eliminate cold pnpm install via pre-baked CI base image (Phase 1) (#635)	2026-06-22 22:50:21 +00:00
Jason Woltje	bf2a6745c8	fix(install): preserve user fleet data on re-seed + refresh active units (CRITICAL) (#632) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 21:38:09 +00:00
Jason Woltje	d539d61e0e	refactor(fleet): rename tmux socket mosaic-factory → mosaic-fleet (#630) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 21:08:43 +00:00
Jason Woltje	7342415a32	fix(fleet): consume model_hint + fix socket-default trap (stand-up fixes) (#627) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 19:18:01 +00:00
Jason Woltje	528700ceea	feat(framework): P6 — docs + compliance matrix + resident-budget CI (#607) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 02:20:35 +00:00
Jason Woltje	6dbe452a9f	fix(fleet): watch viewer-session leak + workdir test settle-race (#601) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 01:43:21 +00:00
Jason Woltje	59c755067e	feat(fleet): F3-m2 — native Pi heartbeat + model surface + mosaic_mission_status tool (#602) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 01:43:18 +00:00
Jason Woltje	6ffb27787e	fix(fleet): complete HB reader/writer consistency + sidecar hardening (#599) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 01:22:35 +00:00
Jason Woltje	60a309d5a4	fix(fleet): heartbeat consistency — MOSAIC_HOME path + configurable interval (#595) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 23:25:53 +00:00
Jason Woltje	bb7d549080	feat(framework): P4 — upgrade-safe Constitution migration (both installers) (#590) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 23:03:48 +00:00
jason.woltje	7ced5588c9	feat(fleet): launcher heartbeat sidecar — HB for all runtimes (pi/claude/codex) (#584)	2026-06-21 21:14:20 +00:00
Jason Woltje	c9cfe36204	docs(framework): P3.1 fast-follow — governance wording + gate scope + bare-launch note (#577) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 18:56:50 +00:00
jason.woltje	fc90c89913	fix(fleet): durable runtime PATH for detached agent launch (#581)	2026-06-21 17:30:40 +00:00
Jason Woltje	5118be74cb	feat(framework): P3 — extract Constitution (L0) + gut AGENTS dispatcher (#575) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 03:20:32 +00:00
Jason Woltje	bf24066a49	feat(framework): P1+P2 — public sanitization + blocking CI gate (#572) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 02:40:11 +00:00
Jason Woltje	92316ab41e	feat(framework): P0 — MIT license + executable-leak sanitization (#570) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 01:43:49 +00:00