536 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Jarvis	786762587d	fix(fleet): serialize restart-lock transitions to close concurrent-breaker race (review #680) ... Stale/max-wait takeover was not safe against concurrent breakers: two breakers could both judge the lock stale and both proceed, re-introducing the tight-loop. POSIX/Node has no content- or inode-conditional unlink or rename, so "judge stale, then replace" can never be atomic with pure path ops. Serialize ALL lock transitions (acquire, release, takeover) under one short-lived registry mutex held only across a few fs ops, never across the restart itself. This makes check-then-mutate atomic, so exactly one breaker can take over a stale lock while the others wait and re-evaluate. The mutex itself uses mtime-based staleness (open('wx') creates an empty inode before the token is written; a content check would reap a lock that is still being acquired). The mutex populates-or-cleans-up on write failure so a half-created mutex never leaks. Regression coverage at two widths: a 2-breaker barrier test (exactly one takes over, the other waits) and the existing 3-breaker test (maxActive===1, distinct tokens, final lock released). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-24 20:26:39 -05:00
Jarvis	43ad813e0d	fix(fleet): make restart-lock release/break ownership-safe (review #680) ... Addresses the reviewer's blocker (comment 15915): release() unconditionally unlinked restart.lock, so after a stale/max-wait break an OLD owner could delete a NEWER owner's lock, letting a third restart interleave and defeating the guard. - Each acquire writes a unique owner token (randomUUID) into the lock file. - release() only unlinks while that token is still on disk; once another caller has broken and re-owned the lock, the timed-out original owner's release() is a no-op and leaves the new owner's lock intact. - Breaking a stale/timed-out lock now takes ownership atomically via write-temp + rename (atomic replace) instead of a blind unlink-then-recreate; a breaker that loses a concurrent takeover reads back a foreign token and keeps waiting rather than assuming ownership. Regression test (does not let a timed-out owner drop a lock another restart broke and re-owned) reproduces the three-restart interleave: R1 hangs (stale), R2 breaks + re-owns, R1.release() must NOT drop R2's lock. Fails on the old blind-unlink path (ENOENT), passes now. Also adds explicit single-agent restart-path guard coverage (review should-fix). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-24 19:18:38 -05:00
Jarvis	9c2e4f0b2d	fix(fleet): guard mosaic fleet restart against tight-loop re-entry race ... `mosaic fleet restart` runs as a fresh process each invocation, issuing `systemctl --user restart` for the tmux holder and then each agent. The agent sessions live inside the holder's tmux, so restarting the holder tears them down. With no mutual exclusion, a second restart entering while the first is still mid-teardown (upgrade `--relaunch`, a watchdog, or a hurried operator) interleaves: agents relaunch against a half-torn-down holder, fail, and tight-loop. Add a cross-process teardown-settle guard: a lock file under `<mosaicHome>/fleet/run/restart.lock` acquired with O_CREAT|O_EXCL. A re-entrant restart waits (bounded, injectable sleep) for the in-flight restart to release the lock before relaunching, breaks a stale lock left by a crashed owner, and after a max wait breaks the lock to avoid a permanent deadlock. Both full-fleet and single-agent restart paths are guarded; start/stop/status are unchanged. Regression test reproduces the race: with an in-flight lock held, the restart must wait before issuing any systemctl command — fails on the unguarded code path, passes with the guard. Adds stale-lock-break and lock-release coverage. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-24 19:18:38 -05:00
jason.woltje	adb153428b	feat(installer): --dev flag builds CLI + gateway from source (#681)	2026-06-24 23:54:52 +00:00
jason.woltje	c739256a2c	feat(#462): add federation scope enforcement service (#672)	2026-06-24 23:22:46 +00:00
jason.woltje	fc2970916f	style(federation): re-run prettier on TASKS.md (unblock format:check) (#679)	2026-06-24 22:51:22 +00:00
jason.woltje	79eae2ffce	fix(fleet): raise fleet-personas.spec timeout to 30s (mirror #665) (#677)	2026-06-24 22:16:49 +00:00
jason.woltje	7035cd23bf	docs(federation): record M3-07/09 merges + fix M3-11 dependency DAG (#678)	2026-06-24 21:44:57 +00:00
jason.woltje	6b94d014a8	feat(#462): add federation capabilities verb (#674)	2026-06-24 21:39:56 +00:00
jason.woltje	838c44086c	feat(#462): add federation query source routing (#673)	2026-06-24 21:39:45 +00:00
jason.woltje	3eeed04e17	docs(federation): sync M3 backlog to origin/main reality (#671)	2026-06-24 21:15:14 +00:00
jason.woltje	e0e7be70f5	chore(release): @mosaicstack/mosaic 0.0.48 (#670)	2026-06-24 20:01:17 +00:00
jason.woltje	d7eaa19380	feat(fleet): provision roster from system-type profile (H3) (#665)	2026-06-24 19:48:54 +00:00
jason.woltje	248193cd3b	fix(fleet): export MOSAIC_AGENT_CLASS into the agent pane so personas inject (#669)	2026-06-24 19:38:15 +00:00
jason.woltje	a9857c5043	fix(release): republish @mosaicstack/db 0.0.4 with BacklogService; mosaic 0.0.47 (#668)	2026-06-24 18:54:33 +00:00
jason.woltje	e4ede69144	chore(release): mosaic 0.0.46 (persona contracts live) (#666)	2026-06-24 18:29:01 +00:00
jason.woltje	a8008138c8	docs(fleet): record per-agent model switch in north star (#667)	2026-06-24 18:14:37 +00:00
jason.woltje	0d17a29ebe	feat(fleet): export MOSAIC_AGENT_CLASS into agent env (A3a) (#663)	2026-06-24 17:19:59 +00:00
jason.woltje	28cfecda94	feat(fleet): inject persona contract at launch (A3b) (#664)	2026-06-24 17:06:51 +00:00
jason.woltje	6c84ccd0b1	feat(fleet): dedicated orchestrator persona, split from planner (#662)	2026-06-24 16:42:23 +00:00
jason.woltje	84d2757817	feat(fleet): update-surviving persona customization (H4) (#661)	2026-06-24 16:21:01 +00:00
jason.woltje	a738ac1410	feat(fleet): system-type profiles (H2) (#660)	2026-06-24 16:02:25 +00:00
jason.woltje	538f0556d5	feat(fleet): cross-domain baseline persona library (H1) (#659)	2026-06-24 15:31:56 +00:00
jason.woltje	a094c86eea	feat(fleet): North Star scope — general-purpose system, personas & system profiles (workstream H) (#658)	2026-06-24 15:25:57 +00:00
jason.woltje	f852250419	feat(fleet): native Mosaic backlog on @mosaicstack/db (atomic claim + TTL) (#657)	2026-06-24 14:55:10 +00:00
jason.woltje	61b1bdac2a	feat(fleet): add machine-readable NORTH_STAR.yaml + Markdown projection (#656)	2026-06-24 14:40:09 +00:00
jason.woltje	cabb179d5a	feat(fleet): seed role registry markdown library (#655)	2026-06-24 14:39:54 +00:00
jason.woltje	eb795bab18	chore(release): mosaic CLI 0.0.45 (#654)	2026-06-24 14:11:33 +00:00
jason.woltje	937077f6be	fix(fleet): report idle agents as available, reserve stuck for genuine blocks (#653)	2026-06-24 13:58:22 +00:00
jason.woltje	1020cfaf9b	chore(release): mosaic CLI 0.0.44 (#652)	2026-06-24 06:49:04 +00:00
jason.woltje	70661e3fab	fix(fleet): derive pane idle from window activity fallback (#651)	2026-06-24 06:37:45 +00:00
jason.woltje	ec8dd7ca86	chore(release): mosaic CLI 0.0.43 (#650)	2026-06-24 06:08:20 +00:00
jason.woltje	d887555852	feat(fleet): classify agent readiness in fleet ps (#649)	2026-06-24 05:55:47 +00:00
jason.woltje	e3adc6a1bc	chore(release): mosaic CLI 0.0.42 (#648)	2026-06-24 05:28:28 +00:00
jason.woltje	aa27c42129	fix(fleet): pre-trust claude agent workdir to clear the folder-trust gate (#644) (#645)	2026-06-24 05:16:46 +00:00
jason.woltje	16ae809442	fix(update): re-seed framework on version drift, not just in-command updates (#642) (#646)	2026-06-24 05:04:34 +00:00
jason.woltje	6980e40e51	fix(db): stop pglite migration tests flaking CI (timeout + WASM OOM) (#647)	2026-06-24 05:04:28 +00:00
jason.woltje	e6b53ea103	fix(tools): default AGENT_WORK_ROOT to $HOME/mosaic/agent-work (#641)	2026-06-23 13:40:13 +00:00
jason.woltje	4da87640e8	feat(tmux): agent-send.sh --class triage tag for the comms daemon (#552)	2026-06-23 03:25:16 +00:00
jason.woltje	a38a491403	chore(release): mosaic CLI 0.0.41 (#640)	2026-06-23 02:21:04 +00:00
jason.woltje	78d67c6261	chore(ci): bump ci-base image node 22 → 24-alpine (#639)	2026-06-23 00:59:39 +00:00
jason.woltje	94e5cd7a81	ci: eliminate cold pnpm install via pre-baked CI base image (Phase 1) (#635)	2026-06-22 22:50:21 +00:00
Jason Woltje	4e84f8e850	feat(fleet): comms-block emitter + FLEET-LAUNCH runbook (#633) (#638) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 22:23:50 +00:00
jason.woltje	cf8ceb3095	CI: add pre-baked ci-base image (producer) [Phase 1a] (#637)	2026-06-22 22:20:48 +00:00
Jason Woltje	bf2a6745c8	fix(install): preserve user fleet data on re-seed + refresh active units (CRITICAL) (#632) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 21:38:09 +00:00
Jason Woltje	d539d61e0e	refactor(fleet): rename tmux socket mosaic-factory → mosaic-fleet (#630) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 21:08:43 +00:00
Jason Woltje	3f69d45334	docs(fleet): consolidate north-star doctrine (budget + control plane + identity) (#629) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 21:08:41 +00:00
jason.woltje	e2336bb0ca	chore(release): mosaic CLI 0.0.40 (#624)	2026-06-22 19:49:45 +00:00
Jason Woltje	7342415a32	fix(fleet): consume model_hint + fix socket-default trap (stand-up fixes) (#627) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 19:18:01 +00:00
Jason Woltje	095e19443b	feat(fleet): onboarding-injection — comms cheat-sheet + peer roster per agent (#621) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-22 17:54:54 +00:00