4 Commits

Include renames

Author	SHA1	Message	Date
fargo	c8f46341cc	fix(#1320): placeholder-ize private-network topology, drop raw-curl force-merge recipe ... Implements the rev-security-01 verdict on #1320 (comment 23282): Should Fix (first, per tasking): mosaic-deploy's branch-protected-repos section shipped a working recipe for both failure modes the estate removes identity that is not the actor's (a legacy shared credential path, ~/.config/mosaic/credentials/gitea.env, which no longer exists in the credential system) and a quality gate routed around (raw curl + force_merge:true, no queue guard, no head pin). Replaced with wrapper-only merge guidance: protection blocks are signals to fix, not to bypass. Placeholder-ized estate RFC1918 topology and hostnames (six carriers, one more than the verdict's five — the original scan missed guides/): - skills/mosaic-portainer: Portainer URL, Docker host - skills/mosaic-gitea: SSH resolution target - skills/mosaic-deploy: Docker node, stack-name map (now generic example shape; estate mappings belong in skills-local overrides, which link with precedence) - tools/coolify/README: base URL - guides/INFRASTRUCTURE: cloudflare example moved from 10.0.0.5 to the RFC 5737 documentation range (192.0.2.5), the unambiguous example form Left as-is per the verdict's split: estate DNS endpoints (e.g. git.mosaicstack.dev, ci.mosaicstack.dev) pass as examples. Rescan of the whole shipped framework tree for RFC1918, estate hosts, and stack-name patterns: zero remaining hits. The gate defect itself is filed separately as #1321 (cross-referenced on #1320, comment 23285).	2026-08-19 15:54:44 -05:00
fargo	1a822493ba	format: apply repo prettier (3.8.1) to the folded skills tree ... 963 markdown files reformatted with the repository's pinned prettier so pnpm format:check covers the folded tree like every other repo file. The formatter's embedded-language pass also normalized code fences (TS semicolons, closed HTML tags in examples, lowercased CSS hex colors, one renumbered list that skipped an index). Alphanumeric token deltas vs the fold commit were audited file-by-file; all are formatter-equivalent markup normalizations plus the four sanitized skills.	2026-08-19 14:37:17 -05:00
fargo	d2eeb64433	skills: sanitize operator-identity tokens from folded ops skills ... Four folded skills carried operator identity tokens that the sanitization gate (verify-sanitized.sh) forbids in the public framework package: - kickstart: template path pointed at a private brain checkout; now uses the framework-shipped $MOSAIC_HOME/templates/docs/TASKS.md.template - mosaic-deploy: dropped one estate-specific stack-name row from the example table - mosaic-portainer, mosaic-woodpecker: credentials now name the framework credentials store (load_credentials <service>) instead of a private checkout path Estate-specific values can live in a skills-local override, which the linker applies with precedence over canonical skills.	2026-08-19 14:34:00 -05:00
Jarvis	809ca9a1d9	feat: add mosaic ops skills (portainer, gitea, woodpecker, deploy, orchestrator) ... - mosaic-portainer: stack list/status/redeploy/logs via Portainer API scripts - mosaic-gitea: PR/issue/milestone ops for git.mosaicstack.dev - mosaic-woodpecker: pipeline status, trigger, CI wait - mosaic-deploy: full end-to-end deploy flow (push → CI → merge → redeploy) - mosaic-orchestrator: mission init/run/status + worker launch rules	2026-03-22 15:32:05 +00:00