114 Commits

Author	SHA1	Message	Date
Jarvis	8466ca2d81	fix(fleet): verify via pane-change diff + non-resizing watch ... Blocker fix: send --verify now captures a BEFORE snapshot immediately before the send and an AFTER snapshot after the delay, then uses classifySendResult(before, after) to classify. A wedged pane showing stale non-empty content is no longer falsely reported as 'accepted' — BEFORE==AFTER maps to 'unverifiable' (exit 1, "no pane change after send"). Blank AFTER still fails closed as 'unverifiable'. Only AFTER != BEFORE without a draft suffix counts as 'accepted' (exit 0). Should-fix: agent watch now uses a GROUPED VIEWER SESSION instead of a bare 'tmux attach -r' against the agent session. A bare attach lets the viewer terminal shrink the agent's window; a grouped session has independent sizing so the agent's window is never affected. Sequence: new-session -d -t '=<agent>' -s '<agent>-watch-<pid>' (runner), attach -r to viewer session (interactiveRunner), kill-session on detach (runner). New builder functions exported: buildAgentWatchCreateViewerCommand, buildAgentWatchAttachCommand, buildAgentWatchKillViewerCommand, buildViewerSessionName. buildAgentWatchCommand kept but deprecated. New exports: classifySendResult(before, after) — the testable classifier. Tests added: - classifySendResult unit suite (6 cases): accepted/draft/unverifiable/ stale-pane/both-blank/before-blank-after-response - send --verify regression: stale (before==after non-empty) => exit 1 - send --verify regression: blank AFTER => exit 1 - send --verify regression: draft after pane change => exit 1 - send --verify regression: changed non-draft => exit 0 - send --verify: 3-call sequence assertion (before-capture, send, after-capture) - watch dispatch: grouped viewer session created/attached/killed; no bare attach against agent session; viewer name matches <agent>-watch-<pid> PRD Known-limitations updated: pane-change check rationale, Phase-3 heartbeat-ack requirement, grouped-session watch design. All gates pass: pnpm typecheck, pnpm lint, pnpm --filter @mosaicstack/mosaic test (382 tests, 74 fleet), prettier --check. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RMoEx7hfdFGjUiCHuN1RRi	2026-06-20 22:57:00 -05:00
Jarvis	aec560162b	fix(fleet): verify fails-closed on unverifiable + interactive watch ... - isSendAccepted now returns 'accepted' | 'draft' | 'unverifiable' (was bool) - Blank/empty capture => 'unverifiable' => process.exitCode=1 with distinct "could not verify delivery (blank/no response captured)" message; previously blank was treated as success, violating FR-5 fail-closed semantics - Draft line ('^> ') => process.exitCode=1 with "left as unsubmitted draft" message; distinct wording from unverifiable case - agent watch now dispatched through injectable InteractiveRunner (stdio:inherit) instead of the capturing CommandRunner; tmux attach requires TTY passthrough - Default spawnInteractive implementation uses node:child_process spawn with stdio:'inherit'; injectable via FleetCommandDeps.interactiveRunner for tests - Removed buildSystemdIsActiveCommand (dead code — exported but unused) - Tests: blank=>exitCode=1, draft=>exitCode=1, real response=>exitCode=0, watch dispatched through interactiveRunner not capturing runner - PRD: added "Known limitations" section (heuristic verify, blank fails closed, non-pi/claude draft detection is best-effort, watch requires TTY passthrough) - Code comment on isSendAccepted notes pi/claude-specific draft heuristic Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RMoEx7hfdFGjUiCHuN1RRi	2026-06-20 22:45:22 -05:00
Jarvis	cf304eebc3	feat(fleet): phase-2 observability — fleet ps + watch + send --verify ... FR-1 fleet ps: joins systemd show (ActiveState/SubState/UnitFileState), tmux list-panes (pid/command/dead/activity), and file-based heartbeat (~/.config/mosaic/fleet/run/<name>.hb) into one table per roster agent. Flags DRIFT (roster runtime ≠ actual pane command) and BOOT-ENABLE (active but UnitFileState=disabled). --json output includes tenant_id and host on every record (FR-6 zero-foreclosure for multi-tenant/host). FR-3 agent watch: read-only tmux attach (-r flag) so the operator can observe any session without injecting keystrokes or resizing the window. Registered as a new verb alongside tail/send/reset in registerFleetAgentCommands. FR-5 agent send --verify: after keystroke injection, captures the last 5 pane lines and checks for draft heuristic (last non-empty line starts with '> '). Exits non-zero and writes to stderr if the message appears unsubmitted. Default send behavior is unchanged when --verify is omitted. New pure exported helpers (all unit-testable without real tmux/systemd): buildSystemdShowCommand, buildTmuxListPanesCommand, buildAgentWatchCommand, buildAgentVerifyAcceptedCommand, parseHeartbeat, parseSystemdShow, parseTmuxListPanes, detectDrift, getDefaultTenantAndHost, isSendAccepted, heartbeatPath. Added 31 new spec cases (62 total) covering exact command construction, JSON shape, heartbeat parsing, drift detection, and verify flow. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RMoEx7hfdFGjUiCHuN1RRi	2026-06-20 22:30:34 -05:00
Jason Woltje	5118be74cb	feat(framework): P3 — extract Constitution (L0) + gut AGENTS dispatcher (#575) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 03:20:32 +00:00
Jason Woltje	bf24066a49	feat(framework): P1+P2 — public sanitization + blocking CI gate (#572) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 02:40:11 +00:00
Jason Woltje	92316ab41e	feat(framework): P0 — MIT license + executable-leak sanitization (#570) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 01:43:49 +00:00
Jason Woltje	b354bc8fae	docs(framework): add agency & persistence patterns to config + guides (#543) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-06-21 01:43:36 +00:00
jason.woltje	e834bbb83c	fix(fleet): install executable tmux helpers (#568)	2026-06-20 22:27:46 +00:00
jason.woltje	7498fcb20d	fix(fleet): preserve agent env overrides on install (#567)	2026-06-20 21:50:46 +00:00
jason.woltje	42d081613f	chore(release): bump mosaic cli to 0.0.32 (#566)	2026-06-20 21:15:25 +00:00
jason.woltje	b5c1381e45	fix(fleet): harden operator sends for release (#565)	2026-06-20 20:41:11 +00:00
jason.woltje	6dfd78f643	feat(fleet): add local canary CLI (#563)	2026-06-20 17:49:01 +00:00
jason.woltje	45e2c2aad8	docs: plan durable tmux fleet install (#557)	2026-06-20 16:19:19 +00:00
jason.woltje	57919c38d8	fix(framework/tools): wrapper hardening — TLS validation, cred-path fallback, no-CI fast-exit (#551)	2026-06-20 10:16:38 +00:00
jason.woltje	87f561c1f8	fix(launch): include Pi native skill roots in 'all' mode; dedup 'discover' force-loads (#556)	2026-06-19 19:58:09 +00:00
jason.woltje	8c45857859	feat(launch): force-load fleet-critical Pi skills + reconcile skill docs (#555)	2026-06-19 18:31:02 +00:00
jason.woltje	605221d42f	docs(framework/tools): lead TOOLS.md with high-salience fleet-tools cheatsheet (#554)	2026-06-19 18:03:03 +00:00
jason.woltje	ee584ab48c	fix(framework/tools): prettier-format woodpecker README — restore main format gate (#553)	2026-06-18 22:39:35 +00:00
jason.woltje	ab4e138003	feat(framework/tools): orchestration helpers — lane-brief.sh + ci-wait.sh (#547)	2026-06-18 22:08:40 +00:00
jason.woltje	719c6ac3db	fix(framework/tools): eval injection, broken JSON, tmpfile leak (#549)	2026-06-18 21:35:32 +00:00
jason.woltje	b8807e60df	feat(agent-reflection): durable kernel — reflection.v1 capture + risk-floor + Phase-0 (#545)	2026-06-16 21:35:40 +00:00
jason.woltje	98a771c8f8	Fix Gitea wrapper login resolution (#538)	2026-06-12 02:34:18 +00:00
jason.woltje	bd9527c033	docs(framework): canonize merge-authority policy (hard gate 13 + E2E gate note) (#537)	2026-06-11 23:56:20 +00:00
jason.woltje	aa221bf92e	release(mosaic): bump @mosaicstack/mosaic 0.0.30 -> 0.0.31 (#534)	2026-06-11 19:55:43 +00:00
jason.woltje	b79e9f32c6	chore(framework): canonize Vault-as-SSOT + ESO-default secrets policy (#519)	2026-06-11 19:07:00 +00:00
jason.woltje	59b611ba8a	refactor(framework): thin-core prompt diet — cut injected contract ~53% (#529)	2026-06-11 18:10:42 +00:00
jason.woltje	dfa0be42f6	feat(framework/tools): inter-agent tmux comms — agent-send.sh + addressing standard (#533)	2026-06-11 18:01:44 +00:00
jason.woltje	dde95a59b3	fix(pi): reduce startup skill-token overhead (#527)	2026-06-05 18:36:42 +00:00
jason.woltje	821e19dcbb	fix(mosaic-tools): roll up Gitea and Woodpecker wrapper fixes (#524)	2026-05-26 20:56:09 +00:00
jason.woltje	74fe60d8d6	feat(federation): admin controller + CLI federation commands (FED-M2-08) (#498)	2026-04-22 04:39:46 +00:00
jason.woltje	45e8f02c91	feat(mosaic-portainer): PORTAINER_INSECURE flag for self-signed TLS (#484)	2026-04-22 01:21:54 +00:00
jason.woltje	1a4b1ebbf1	feat(gateway,storage): mosaic gateway doctor with tier health JSON (FED-M1-06) (#475)	2026-04-20 01:00:39 +00:00
jason.woltje	9c89c32684	feat(config): add federated tier + rename team→standalone (FED-M1-01) (#470)	2026-04-19 23:11:11 +00:00
Jason Woltje	5f03c05523	chore(release): @mosaicstack/mosaic 0.0.30 (#459) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-04-12 02:18:17 +00:00
Jason Woltje	c3f810bbd1	fix(mosaic): seed TOOLS.md from defaults on install (#458) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-04-12 02:02:21 +00:00
Jason Woltje	b2cec8c6ba	fix(mosaic): stop yolo runtime from leaking runtime name as first user message (#455) ... Fixes mosaicstack/stack#454 Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-04-11 16:57:43 +00:00
Jason Woltje	81c1775a03	chore(release): @mosaicstack/mosaic 0.0.29 (#453) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-04-08 00:42:54 +00:00
Jason Woltje	f64ec12f39	fix(installer): preserve credentials dir and seed STANDARDS.md (#452) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-04-08 00:40:49 +00:00
Jason Woltje	026382325c	feat(framework): superpowers enforcement, typecheck hook, file-ownership rules (#451) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-04-07 00:44:22 +00:00
jason.woltje	1bfd8570d6	chore(release): @mosaicstack/mosaic 0.0.28 (#450)	2026-04-06 00:46:31 +00:00
jason.woltje	312acd8bad	chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)	2026-04-06 00:39:56 +00:00
jason.woltje	d08b969918	fix(mosaic): mask password input in TUI login prompt (#449)	2026-04-06 00:33:54 +00:00
jason.woltje	bd76df1a50	feat(mosaic): drill-down main menu + provider-first flow + quick start (#446)	2026-04-06 00:15:23 +00:00
jason.woltje	172bacb30f	feat(mosaic): IUV-M02 — CORS/FQDN UX polish + skill installer rework (#444)	2026-04-05 23:44:07 +00:00
jason.woltje	0ae932ab34	fix: bootstrap hotfix — DTO erasure, wizard failure, port prefill, Pi SDK copy (mosaic-v0.0.26) (#440)	2026-04-05 21:43:30 +00:00
jason.woltje	a4c94d9a90	chore(release): @mosaicstack/mosaic 0.0.25 (#435)	2026-04-05 20:53:19 +00:00
jason.woltje	732f8a49cf	feat: unified first-run flow — merge wizard + gateway install (IUH-M03) (#433)	2026-04-05 19:13:02 +00:00
jason.woltje	cd8b1f666d	feat: wizard remediation — password mask, hooks preview, headless (IUH-M02) (#431)	2026-04-05 17:47:53 +00:00
jason.woltje	25cada7735	feat: mosaic uninstall (IUH-M01) (#429)	2026-04-05 17:06:21 +00:00
jason.woltje	417805f330	fix: bump memory/queue/storage to 0.0.4 to force republish (#423)	2026-04-05 14:39:15 +00:00