129 Commits

Author	SHA1	Message	Date
mosaic-coder	b6f3656422	feat(mosaic): install-ordering guard for lease-enforcement hook wiring (#869 Point-1 C2) ... mosaic-link-runtime-assets wired the PreToolUse mutator-gate.py and Stop receipt-observer-client.py hooks into ~/.claude/settings.json unconditionally. If the activation half (C1's leaseEnforcementActivatable()) can't be confirmed on the host, the fail-closed gate then denies every tool call — bricking it. Add a TS install-ordering guard (guardClaudeSettingsWiring / runInstallOrderingGuard, hidden CLI bridge `mosaic __link-claude-settings`) that imports leaseEnforcementActivatable() directly and decides whether the enforcement hooks get wired: - activatable -> wire as-is. - NOT activatable, no opt-out -> strip the enforcement hooks, exit non-zero with an actionable message (default, fail-loud). - NOT activatable + explicit --allow-inactive-enforcement -> wire anyway, loud warning logged. --allow-inactive-enforcement is a real CLI flag threaded through install.sh -> mosaic-link-runtime-assets -> the hidden subcommand — deliberately never an environment variable, so it can't sit as a silently-inherited default. Wire mosaic-link-runtime-assets's guarded settings.json copy to call out to the CLI (with a python3 fallback if `mosaic` isn't resolvable at all), and stop swallowing stderr in install.sh/finalize.ts so the guard's message actually reaches the operator. mutator-gate.py's own fail-closed-on-absent-identity runtime behavior is untouched (this only gates the WIRING); runtime_tools_unittest.py and fail-closed-regression.spec.ts remain green. Part of #869 (Point-1 C2)	2026-07-23 13:31:31 -05:00
jason.woltje	2f50c0876b	feat(869-c3): lease-broker supervisor unit (Part of #869) ... Part of #869 Mos (id-11) Gate-16 merge: independent APPROVE @75235ef8 (9/9, no live host mutation), author id2 != approver id11, CI green wp1971. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 17:19:48 +00:00
jason.woltje	db90da347e	feat(869-c1): activation-capability probe (Part of #869) ... Part of #869 Mos (id-11) Gate-16 merge: independent 3-round APPROVE @c5a2bcc5, author id2 != approver id11, CI green wp1973. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 17:14:57 +00:00
jason.woltje	b0d78d8632	fix(mosaic): de-flake mutator-class lease gate TTL-expiry test (#861)	2026-07-20 10:32:45 +00:00
jason.woltje	77c9a82614	fix(lease-broker): de-flake recovery_runtime b2 broker-socket ConnectionRefused race (#849) (#851)	2026-07-20 06:44:37 +00:00
jason.woltje	627cf2bb38	docs(fleet): add operator configuration guide (#789)	2026-07-20 05:22:25 +00:00
jason.woltje	0582a8912b	WI-7 #834: T-C server-side branch-protection posture + R1 honesty amendment (#847)	2026-07-20 04:20:02 +00:00
jason.woltje	2509eb7646	WI-6 (#833): constrained recovery command + mosaic-context-refresh skill wrapper (#846)	2026-07-20 03:33:00 +00:00
jason.woltje	07553ead33	WI-5 #832: Receipt-challenge protocol (compaction-refresh, milestone 188) (#845)	2026-07-19 23:18:56 +00:00
jason.woltje	e522b22fa4	WI-4 (#831): verbatim-hashed normative fragments (B_payload/H_payload) (#844)	2026-07-19 20:34:20 +00:00
jason.woltje	e4d7d4502d	WI-3 (#830): compaction observers → revoke + D4 same-PID generation auto-revoke (#842)	2026-07-19 19:46:28 +00:00
jason.woltje	8dfcf1903e	fix(#838): bound broker reply deadlines + fail-close empty-read; de-flake acceptance harness (#839) ... Bound broker reply deadlines (separate read/lock/send budgets, BROKER_BUSY-before-mutation, fresh post-handle send budget → closes drop-after-commit window); fail-close empty/truncated read → GATE_UNAVAILABLE deny. De-flakes the 1917 acceptance surface. terra CODE APPROVE (pi) + Opus SECREV APPROVED (claude) — RoR comment 18143. Promote-lease-lost-ACK residual = fail-safe two-generals observability-gap, routed to WI-3 D2-v5 as named-disclosed-bounded-residual (route i). Gate-16 3-principal author=gpt-sol. closes #838	2026-07-18 07:15:50 +00:00
jason.woltje	abd2791f59	feat(mosaic): WI-2 mutator-class guard for directive-freshness (#837) ... WI-2: mutator-class guard for the compaction directive-freshness mechanism — command-position parser (prefix x var-indirection unified) + primitive-anchored invariant backstop + all-tools-hook fail-close. Parser-complete on principle: realistic evasion matrix RED-regression-covered, residual exotic evasions proven backstop-caught (B-tests), lens-convergence reached. closes #829	2026-07-18 05:51:58 +00:00
jason.woltje	8ec67a1126	feat(mosaic): add authenticated external lease broker (#836)	2026-07-18 03:12:23 +00:00
jason.woltje	d801d6c4c8	feat(mosaic): add secure skill registration CLI (#826)	2026-07-17 23:45:35 +00:00
jason.woltje	d3bf52898b	fix: reject unknown installer arguments (#825)	2026-07-17 22:16:51 +00:00
jason.woltje	3f77229e88	fix(#792): fleet roster ENOENT actionable exit + installer heading printf (#818)	2026-07-17 21:36:36 +00:00
jason.woltje	9ddc6fbda8	feat(fleet): mosaic fleet regen — regenerate roster-derived projections (PR3 of #791) (#813)	2026-07-17 03:17:55 +00:00
jason.woltje	31607a4af6	feat(mosaic): durable pre-update snapshot + verify net + restore CLI (#791 PR2) (#811)	2026-07-17 00:43:18 +00:00
jason.woltje	32a0ffba13	feat(mosaic): manifest-owned upgrade guard so updates never wipe operator config (#791) (#802)	2026-07-16 23:01:26 +00:00
jason.woltje	3be443c96d	feat(mosaic): claudex isolated config + env-inject + yolo wiring (P2–P4 of #790) (#806)	2026-07-16 22:10:33 +00:00
jason.woltje	59f5f51ffd	feat(mosaic): claudex proxy preflight + lifecycle (P1 of #790) (#793)	2026-07-16 21:15:33 +00:00
jason.woltje	9745bc3f29	feat(fleet): add reviewed v1-to-v2 migration preview (#788)	2026-07-16 13:11:16 +00:00
jason.woltje	adad486b6f	fix(fleet): enforce exact comms authority (#787)	2026-07-16 00:32:23 +00:00
jason.woltje	c1aecfabe9	test(fleet): cover reconciler lifecycle gates (#786)	2026-07-15 16:46:13 +00:00
jason.woltje	499090508e	feat(fleet): reconcile local roster state (#785)	2026-07-15 15:03:31 +00:00
jason.woltje	bc5e73629e	feat(fleet): add generation-guarded agent CRUD (#773)	2026-07-15 12:03:05 +00:00
jason.woltje	191efaefeb	feat(fleet): enforce generated environment boundary (#772)	2026-07-15 08:40:32 +00:00
jason.woltje	e9c4aa3e8b	test(fleet): validate shipped artifact dispositions (#770)	2026-07-15 01:37:12 +00:00
jason.woltje	a5e8e55401	feat(fleet): add shared role semantics (#768)	2026-07-15 00:53:47 +00:00
jason.woltje	aa5b43bba2	feat(fleet): add roster v2 structural compiler (#764)	2026-07-14 20:37:52 +00:00
jason.woltje	d077183554	docs(tess): remediate M5 qualification findings (#750)	2026-07-13 19:59:38 +00:00
jason.woltje	405984af5a	De-hardcode orchestrator and interaction agent names (#748)	2026-07-13 18:59:27 +00:00
jason.woltje	6345dbfcf2	feat(agent): add Matrix native runtime provider (#744)	2026-07-13 15:29:37 +00:00
jason.woltje	0b621660c8	feat(tess): wire durable interaction surfaces (#732)	2026-07-13 10:05:29 +00:00
jason.woltje	8246ee0137	feat(tess): add generic interaction CLI (#731)	2026-07-13 05:52:41 +00:00
jason.woltje	e3b5113be2	feat(tess): add configurable Pi interaction service (#728)	2026-07-13 02:59:27 +00:00
jason.woltje	9a8a572fcf	feat(tess): add roster-bound tmux fleet provider (#724)	2026-07-13 00:59:24 +00:00
jason.woltje	67135d3822	fix(fleet): guard mosaic fleet restart against tight-loop re-entry race (#680)	2026-06-25 01:44:48 +00:00
jason.woltje	d7eaa19380	feat(fleet): provision roster from system-type profile (H3) (#665)	2026-06-24 19:48:54 +00:00
jason.woltje	0d17a29ebe	feat(fleet): export MOSAIC_AGENT_CLASS into agent env (A3a) (#663)	2026-06-24 17:19:59 +00:00
jason.woltje	28cfecda94	feat(fleet): inject persona contract at launch (A3b) (#664)	2026-06-24 17:06:51 +00:00
jason.woltje	6c84ccd0b1	feat(fleet): dedicated orchestrator persona, split from planner (#662)	2026-06-24 16:42:23 +00:00
jason.woltje	84d2757817	feat(fleet): update-surviving persona customization (H4) (#661)	2026-06-24 16:21:01 +00:00
jason.woltje	a738ac1410	feat(fleet): system-type profiles (H2) (#660)	2026-06-24 16:02:25 +00:00
jason.woltje	a094c86eea	feat(fleet): North Star scope — general-purpose system, personas & system profiles (workstream H) (#658)	2026-06-24 15:25:57 +00:00
jason.woltje	f852250419	feat(fleet): native Mosaic backlog on @mosaicstack/db (atomic claim + TTL) (#657)	2026-06-24 14:55:10 +00:00
jason.woltje	61b1bdac2a	feat(fleet): add machine-readable NORTH_STAR.yaml + Markdown projection (#656)	2026-06-24 14:40:09 +00:00
jason.woltje	937077f6be	fix(fleet): report idle agents as available, reserve stuck for genuine blocks (#653)	2026-06-24 13:58:22 +00:00
jason.woltje	70661e3fab	fix(fleet): derive pane idle from window activity fallback (#651)	2026-06-24 06:37:45 +00:00