30 Commits

Include renames

Author	SHA1	Message	Date
installer-7andClaude Opus 5	b0fb208b89	fix(git): push-guard — resolve 5 review blockers + a 6th self-found instance ... Authored by installer-7; committed by mos-claude (installer-7 has no credential for this remote). All five blockers from rev-974's review were REPRODUCED before any fix. B1 mode 100644: the artifact was never executable, so an untouched clone could not run the suite at all (exit 126) — both prior 32/32 runs used a local exec bit set at creation. Fixed in the INDEX (git update-index --chmod=+x), plus verify-clean-clone.sh which asserts the mode via 'git ls-files -s' (not disk) and executes the suite DIRECTLY ('bash script' masks a missing bit). Negative control: chmod 644 makes the verifier refuse. B2 mapfile < <(git diff) observed mapfile's status, not the producer's — a fatal pathspec error reported a clean scan, exit 0. pipefail governs PIPELINES; a process substitution is an async child whose status is never collected. B3 OFF accepted from an untracked working-tree config, defeating the committed-artifact asymmetry — and write_config() wrote untracked configs, so every opt-out control asserted the forbidden provenance and passed green. OFF is now re-read from HEAD; untracked, staged-uncommitted, committed-symlink, and committed-ON-flipped-locally are all refused. B4 --since-head proved inequality, not ancestry: an unrelated pre-existing commit passed as new work. B5 empty ROOT commit exempted by parent-count, then reported PUSH CONFIRMED. Emptiness is now defined as 'tree identical to every parent' rather than exempted by category. B6 (self-found by sweeping for the CONSTRUCT, not the report) same < <(git diff) in cmd_check_staged — fails closed but published a wrong diagnosis. Both callers now route through one staged_files_z(). 41/41 needles, executed directly from a clean clone. Known gap, stated: B2's second instance is fixed but UNNEEDLED — a corrupt index aborts earlier at 128, so no fault injection reaches it. Co-Authored-By: Claude Opus 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01YKj59Qadrb2WBLaePvkM7H	2026-07-30 20:38:06 -05:00
installer-7andmos-claude	62e3bf9e28	fix(git): push-guard.README.md — required repo config (#975) + heredoc-in-substitution warning	2026-07-31 00:22:47 +00:00
installer-7andmos-claude	b7d391f9f4	fix(git): test-push-guard.sh — required repo config (#975) + heredoc-in-substitution warning	2026-07-31 00:22:45 +00:00
installer-7andmos-claude	1036449b57	fix(git): push-guard.sh — required repo config (#975) + heredoc-in-substitution warning	2026-07-31 00:22:43 +00:00
installer-7andmos-claude	63c5d2056f	feat(git): add push-guard.README.md ... Mechanical closure of 'a verification that passes when the thing it verifies never happened.'	2026-07-31 00:03:38 +00:00
installer-7andmos-claude	1288ce3721	feat(git): add test-push-guard.sh ... Mechanical closure of 'a verification that passes when the thing it verifies never happened.'	2026-07-31 00:03:37 +00:00
installer-7andmos-claude	92272a6400	feat(git): add push-guard.sh ... Mechanical closure of 'a verification that passes when the thing it verifies never happened.'	2026-07-31 00:03:36 +00:00
jason.woltjeandMos	2483dada33	fix(framework): pr-review.sh -r/--repo + -H/--host overrides + UA + repo preflight (Patches 5/5c) (#896) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 22:08:08 +00:00
jason.woltjeandMos	3c7890f17f	fix(framework): detect-platform get_gitea_token fail-loud on absent per-slot token (Patch 2b) (#890) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 20:51:19 +00:00
jason.woltjeandMos	4422231bdb	feat: per-agent Gitea identity resolution (#873) ... Closes #873 Mos (id-11) Gate-16 merge: independent APPROVE @4b472a22 (author-blocker dissolved via (a) re-author, identical tree hash to tech-approved head), author id2 != approver id11, clean mosaic-coder commit-author, CI green wp1985. Framework train COMPLETE 6/6. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 18:09:34 +00:00
jason.woltjeandMos	8504216964	fix(pr-review): case-insensitive _belongs slug compare (#875) ... Closes #875 Mos (id-11) Gate-16 merge: independent APPROVE @9d8d58ae, author id2 != approver id11, clean mosaic-coder commit-author, CI green wp1982. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 17:53:26 +00:00
jason.woltjeandMos	7edc9b3121	fix(gitea): direct REST comment/review with fail-closed read-back (#865) ... Closes #865 Mos (id-11) Gate-16 merge: fresh confirmatory independent APPROVE @8ac7e70f (1241-case fuzz 0 fail-open), author id2 != approver id11, clean commit-author, CI green wp1966. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 17:25:32 +00:00
jason.woltjeandMos	48fd1df28a	fix(ci-queue-wait): treat absent branch (404) as queue-clear (#872) ... Closes #872 Mos (id-11) Gate-16 merge: independent review APPROVE @23cbdaf8, author jason.woltje(id2) != approver Mos(id11), CI green wp1974. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 17:08:57 +00:00
jason.woltje	344d86a635	fix(#812 follow-up): normalize detect-platform.sh host-match port comparison by scheme (#859)	2026-07-20 10:13:29 +00:00
jason.woltje	3b70c66c07	fix(framework): drop unsupported --comment from tea pr approve/reject; route review body via durable comment (#835) (#857)	2026-07-20 09:19:48 +00:00
jason.woltje	aa999daf1b	fix(framework): durable Gitea comment posting in pr-review.sh via REST + read-back verify (#812) (#852)	2026-07-20 06:45:48 +00:00
jason.woltje	b580d37d51	Fixes #703 (#705)	2026-07-12 20:49:43 +00:00
jason.woltje	a99aded26d	fix(tools/git): -h/--help now exits 0 across 7 wrappers (#702)	2026-07-11 09:23:46 +00:00
jason.woltje	4df38f7e81	fix(tools/_lib): /etc/mosaic host-level fallback for credential resolution (#700)	2026-07-10 01:57:12 +00:00
jason.woltje	e6b53ea103	fix(tools): default AGENT_WORK_ROOT to $HOME/mosaic/agent-work (#641)	2026-06-23 13:40:13 +00:00
jason.woltje	bf24066a49	feat(framework): P1+P2 — public sanitization + blocking CI gate (#572) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-06-21 02:40:11 +00:00
jason.woltje	92316ab41e	feat(framework): P0 — MIT license + executable-leak sanitization (#570) ... Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>	2026-06-21 01:43:49 +00:00
jason.woltje	57919c38d8	fix(framework/tools): wrapper hardening — TLS validation, cred-path fallback, no-CI fast-exit (#551)	2026-06-20 10:16:38 +00:00
jason.woltje	ab4e138003	feat(framework/tools): orchestration helpers — lane-brief.sh + ci-wait.sh (#547)	2026-06-18 22:08:40 +00:00
jason.woltje	719c6ac3db	fix(framework/tools): eval injection, broken JSON, tmpfile leak (#549)	2026-06-18 21:35:32 +00:00
jason.woltje	98a771c8f8	Fix Gitea wrapper login resolution (#538)	2026-06-12 02:34:18 +00:00
jason.woltje	dde95a59b3	fix(pi): reduce startup skill-token overhead (#527)	2026-06-05 18:36:42 +00:00
jason.woltje	821e19dcbb	fix(mosaic-tools): roll up Gitea and Woodpecker wrapper fixes (#524)	2026-05-26 20:56:09 +00:00
jason.woltje	2e31626f87	fix: simplify updater to @mosaic/mosaic only, add explicit tea repo/login flags (#388)	2026-04-05 02:09:23 +00:00
Jason Woltje	b38cfac760	feat: integrate framework files into monorepo under packages/mosaic/framework/ ... Moves all Mosaic framework runtime files from the separate bootstrap repo into the monorepo as canonical source. The @mosaic/mosaic npm package now ships the complete framework — bin scripts, runtime configs, tools, and templates — enabling standalone installation via npm install. Structure: packages/mosaic/framework/ ├── bin/ 28 CLI scripts (mosaic, mosaic-doctor, mosaic-sync-skills, etc.) ├── runtime/ Runtime adapters (claude, codex, opencode, pi, mcp) ├── tools/ Shell tooling (git, prdy, orchestrator, quality, etc.) ├── templates/ Agent and repo templates ├── defaults/ Default identity files (AGENTS.md, STANDARDS.md, SOUL.md, etc.) ├── install.sh Legacy bash installer └── remote-install.sh One-liner remote installer Key files with Pi support and recent fixes: - bin/mosaic: launch_pi() with skills-local loop - bin/mosaic-doctor: --fix auto-wiring for all 4 harnesses - bin/mosaic-sync-skills: Pi as 4th link target, symlink-aware find - bin/mosaic-link-runtime-assets: Pi settings.json patching - bin/mosaic-migrate-local-skills: Pi skill roots, symlink find - runtime/pi/RUNTIME.md + mosaic-extension.ts Package ships 251 framework files in the npm tarball (278KB compressed).	2026-04-01 21:19:21 -05:00