600 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Hermes Agent	d12c5f7808	test(mosaic): make #791 PR2 Part 7 symlink control busybox-portable (#791 PR2) ... CI #1881 failed at head 8bee1b65: the durable-snapshot gate was 40/41, the sole failure being the Part 7 NEGATIVE control ("secret leaked through the symlink"). Root cause is a test-harness portability gap, not a code defect: node:24-alpine runs busybox cp as root, and busybox cp REPLACES a symlinked destination instead of following it, whereas GNU/BSD cp — what a real operator runs `mosaic update` under — follows the link and leaks. So under the CI harness the CWE-59 leak vector the control asserts simply cannot occur, and the negative control can't reproduce. Fix is test-only; install.sh (independently approved at 8bee1b65) and the real security assertions are untouched. make_symlink_leaf_shim now emulates GNU cp's follow-through-dest-symlink behavior portably: when the destination is a symlink it writes the source bytes through the link via redirection (which follows symlinks on every coreutils, busybox included); otherwise it delegates to the host cp unchanged. Both the shipped-case and the control run through this single shim, so the ONLY difference between them remains the SYMLINK-LEAF-GUARD — the control stays load-bearing and non-tautological, now on busybox too. With the guard present the symlinked leaf is dropped before this cp runs, so the shipped path is unchanged. Verified in the exact CI image (node:24-alpine, busybox, root, apk add bash rsync): durable-snapshot 41/41, manifest-guard 193, rollback 28. GNU host 41/41, shellcheck clean. Sole tracked delta vs 8bee1b65 = this test file. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 19:24:49 -05:00
Hermes Agent	8bee1b65ea	feat(mosaic): durable pre-update snapshot + verify net + restore CLI (#791 PR2) ... Third, independent recovery layer for keep-mode upgrades (Part of #791). PR1's manifest keeps the sync out of operator paths and the ephemeral /tmp snapshot rolls back a mid-write crash; this adds the case neither covers — a "successful" upgrade that a manifest/logic bug silently let touch an operator file. - install.sh make_durable_snapshot(): before any mutation, copy the operator-owned surface that exists to $XDG_STATE_HOME/mosaic/backups/pre-update-<UTC-ts>/ (0700 dirs / 0600 files, umask 077 scoped + restored). Fail-open; retention MOSAIC_BACKUP_RETENTION (default 5). - install.sh verify_operator_surface(): post-sync, restore any operator file the upgrade diverged/removed and warn loudly (a divergence = manifest bug). Honors intentional migration removals; refuses to restore through a symlink (CWE-59); guards mkdir under set -e. - mosaic restore (TS): --list (default dry-run), --from <ts> confirmation-gated restore. Strict timestamp selector (CWE-22), O_NOFOLLOW 0600 writes (CWE-59), containment + managed-dir checks via secure-file.ts. Counts/paths only — never emits file contents (secrev). - Gates: typecheck/lint/format ✓; mosaic vitest 1252; restore.spec 30; bash gates durable-snapshot 41 / manifest-guard 193 / rollback 28 / migration 21. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 19:04:14 -05:00
jason.woltje	32a0ffba13	feat(mosaic): manifest-owned upgrade guard so updates never wipe operator config (#791) (#802)	2026-07-16 23:01:26 +00:00
jason.woltje	8536454257	fix(glpi): accept HTTP 206 in list wrappers (#807) (#810)	2026-07-16 22:47:58 +00:00
jason.woltje	4f29cc604d	fix(tmux): correct cross-socket sender identity (#808) (#809)	2026-07-16 22:47:25 +00:00
jason.woltje	3be443c96d	feat(mosaic): claudex isolated config + env-inject + yolo wiring (P2–P4 of #790) (#806)	2026-07-16 22:10:33 +00:00
jason.woltje	59f5f51ffd	feat(mosaic): claudex proxy preflight + lifecycle (P1 of #790) (#793)	2026-07-16 21:15:33 +00:00
jason.woltje	9745bc3f29	feat(fleet): add reviewed v1-to-v2 migration preview (#788)	2026-07-16 13:11:16 +00:00
jason.woltje	adad486b6f	fix(fleet): enforce exact comms authority (#787)	2026-07-16 00:32:23 +00:00
jason.woltje	c1aecfabe9	test(fleet): cover reconciler lifecycle gates (#786)	2026-07-15 16:46:13 +00:00
jason.woltje	499090508e	feat(fleet): reconcile local roster state (#785)	2026-07-15 15:03:31 +00:00
jason.woltje	c593a15ef8	docs(kbn): freeze KBN-101 database role split contract (#774)	2026-07-15 13:34:29 +00:00
jason.woltje	bc5e73629e	feat(fleet): add generation-guarded agent CRUD (#773)	2026-07-15 12:03:05 +00:00
jason.woltje	191efaefeb	feat(fleet): enforce generated environment boundary (#772)	2026-07-15 08:40:32 +00:00
jason.woltje	e9c4aa3e8b	test(fleet): validate shipped artifact dispositions (#770)	2026-07-15 01:37:12 +00:00
jason.woltje	a5e8e55401	feat(fleet): add shared role semantics (#768)	2026-07-15 00:53:47 +00:00
jason.woltje	eb4e14ae5c	feat(mos): add logical identity connector fencing (#757)	2026-07-14 23:33:06 +00:00
jason.woltje	2e2280070a	docs(#753): clear KBN-010 threat and schema gate (#765)	2026-07-14 21:46:44 +00:00
jason.woltje	aa5b43bba2	feat(fleet): add roster v2 structural compiler (#764)	2026-07-14 20:37:52 +00:00
jason.woltje	ba13c08890	Fixes #756 (#763)	2026-07-14 20:26:15 +00:00
jason.woltje	c32d85a337	docs(fleet): define declarative configuration M0 (#760)	2026-07-14 19:53:12 +00:00
jason.woltje	48b2bc42c9	docs(mos): format Option 2 qualification report (#762)	2026-07-14 19:33:09 +00:00
jason.woltje	5e832049bb	docs(mos): preserve Option 2 qualification evidence (#759)	2026-07-14 19:16:11 +00:00
jason.woltje	49e8a54105	docs(#751): Publish native Kanban/SOT canon (#752)	2026-07-14 17:08:09 +00:00
jason.woltje	d077183554	docs(tess): remediate M5 qualification findings (#750)	2026-07-13 19:59:38 +00:00
jason.woltje	405984af5a	De-hardcode orchestrator and interaction agent names (#748)	2026-07-13 18:59:27 +00:00
jason.woltje	8dd4e9d541	docs(tess): ledger sync m4 — M5-003 done, #745/#746 merged (#749)	2026-07-13 18:14:24 +00:00
jason.woltje	bc8016c831	docs(#744): complete Tess documentation gate (#746)	2026-07-13 17:44:17 +00:00
jason.woltje	e72388b2cb	docs(tess): ledger sync m3 — M5-001 + M5-002 done (#745)	2026-07-13 16:14:23 +00:00
jason.woltje	6345dbfcf2	feat(agent): add Matrix native runtime provider (#744)	2026-07-13 15:29:37 +00:00
jason.woltje	c6e3cfbd95	docs(tess): ledger sync — W-001 3-of-3 merged, M5-002 approved, M5-001 in TDD (#743)	2026-07-13 15:29:33 +00:00
jason.woltje	5789711ee0	docs(tess): add migration evidence set (#742)	2026-07-13 15:14:29 +00:00
jason.woltje	f40e6ba388	docs(tess): sync M4 tracking to merged reality (M4 in-progress / gate-pending) (#741)	2026-07-13 15:00:15 +00:00
jason.woltje	b7b0f508e6	feat(gateway): register Hermes runtime provider (#740)	2026-07-13 14:45:08 +00:00
jason.woltje	3378b857eb	feat(memory): bind operator plugin to agent sessions (#739)	2026-07-13 13:44:20 +00:00
jason.woltje	e2376190e5	feat(gateway): expose Mos coordination boundary (#737)	2026-07-13 13:14:44 +00:00
jason.woltje	cca6aaf947	feat(agent): add Hermes transitional capability matrix (#738)	2026-07-13 13:14:43 +00:00
jason.woltje	2363f155b4	feat(memory): add operator retrieval plugin (#736)	2026-07-13 12:44:31 +00:00
jason.woltje	76325ca3f2	feat(tess): add Mos coordination boundary (#735)	2026-07-13 11:59:16 +00:00
jason.woltje	9e5b9188ce	feat(agent): add transitional Hermes runtime adapter (#734)	2026-07-13 11:29:27 +00:00
jason.woltje	f1c6b37b46	fix(tess): route bare Discord approvals (#733)	2026-07-13 10:29:10 +00:00
jason.woltje	0b621660c8	feat(tess): wire durable interaction surfaces (#732)	2026-07-13 10:05:29 +00:00
jason.woltje	84d884b932	feat(#709): add configured Discord interaction binding (#730)	2026-07-13 09:02:45 +00:00
jason.woltje	8246ee0137	feat(tess): add generic interaction CLI (#731)	2026-07-13 05:52:41 +00:00
jason.woltje	99a2d0fc9d	feat(tess): persist durable session state (#729)	2026-07-13 05:14:11 +00:00
jason.woltje	e3b5113be2	feat(tess): add configurable Pi interaction service (#728)	2026-07-13 02:59:27 +00:00
jason.woltje	24b07d0f83	docs(tess): sync M1 ledger to merged state; M1-V Mos-owned (#727)	2026-07-13 02:14:13 +00:00
jason.woltje	86a50138a9	feat(tess): add safe runtime observability (#726)	2026-07-13 01:29:18 +00:00
jason.woltje	7b9f40d3b7	fix(tess): redact chat persistence and egress (#725)	2026-07-13 01:14:16 +00:00
jason.woltje	9a8a572fcf	feat(tess): add roster-bound tmux fleet provider (#724)	2026-07-13 00:59:24 +00:00