mosaicstack/stack
16
0
Fork 1
Code Issues 331 Pull Requests 16 Actions Packages Projects Releases 15 Wiki Activity
1,061 Commits 355 Branches 18 Tags
e0b28c91c307826659f14fc8d46ef3789bb8bb06
Commit Graph
1061 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
jason.woltje 23d610ba5b chore: switch from develop/dev to main/latest image tags (#434) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-21 22:05:07 +00:00
jason.woltje 25ae14aba1 fix(web): resolve flaky CI test failures (#433) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-21 21:12:00 +00:00
jason.woltje 1425893318 Merge pull request 'Merge develop into main — branch consolidation' (#432) from merge/develop-to-main into main 2026-02-21 20:56:40 +00:00
jason.woltjeandClaude Opus 4.6 bc4c1f9c70 Merge develop into main 
Consolidate all feature and fix branches into main:
- feat: orchestrator observability + mosaic rails integration (#422)
- fix: post-422 CI and compose env follow-up (#423)
- fix: orchestrator startup provider-key requirements (#425)
- fix: BetterAuth OAuth2 flow and compose wiring (#426)
- fix: BetterAuth UUID ID generation (#427)
- test: web vitest localStorage/file warnings (#428)
- fix: auth frontend remediation + review hardening (#421)
- Plus numerous Docker, deploy, and auth fixes from develop

Lockfile conflict resolved by regenerating from merged package.json.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-21 14:52:43 -06:00
jason.woltje d66451cf48 fix(ci): suppress Next.js bundled tar/minimatch CVEs in trivy (#431) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-21 20:40:17 +00:00
jason.woltje c23ebca648 fix(ci): resolve pipeline #516 audit and test failures (#429) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-21 20:11:58 +00:00
Jason WoltjeandClaude Opus 4.6 eae55bc4a3 chore: mosaic upgrade — centralize AGENTS.md, update CLAUDE.md pointer 
CLAUDE.md replaced with thin pointer to ~/.config/mosaic/AGENTS.md.
SOUL.md and AGENTS.md now managed globally by the Mosaic framework.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-19 14:08:25 -06:00
jason.woltje b5ac2630c1 docs(auth): record digest-based deploy fix verification 2026-02-18 23:39:06 -06:00
jason.woltje 8424a28faa fix(auth): use set_config for transaction-scoped RLS context 2026-02-18 23:23:15 -06:00
jason.woltje d2cec04cba fix(auth): preserve raw BetterAuth cookie token for session lookup 2026-02-18 23:06:37 -06:00
jason.woltje 9ac971e857 chore(deploy): align swarm auth env with deployed stack 2026-02-18 22:40:22 -06:00
jason.woltje 0c2a6b14cf fix(auth): verify BetterAuth sessions via cookie headers 2026-02-18 22:39:54 -06:00
jason.woltje af299abdaf debug(auth): log session cookie source 2026-02-18 21:36:01 -06:00
jason.woltje fa9f173f8e chore(web): use prod-only deps in runtime image 2026-02-18 21:13:12 -06:00
jason.woltje 7935d86015 chore(web): avoid pnpm in runtime image to reduce CVE noise 2026-02-18 20:24:22 -06:00
jason.woltje f43631671f chore(deps): override tar to 7.5.8 for trivy 2026-02-18 20:01:10 -06:00
jason.woltje 8328f9509b Merge pull request 'test(web): silence localStorage-file warnings in vitest' (#428) from fix/web-test-warnings-2 into develop 
Reviewed-on: http://git.mosaicstack.dev/mosaic/stack/pulls/428
 2026-02-19 01:45:06 +00:00
jason.woltje f72e8c2da9 chore(deps): override minimatch to 10.2.1 for audit fix 2026-02-18 19:41:38 -06:00
jason.woltje 1a668627a3 test(web): silence localStorage-file warnings in vitest setup 2026-02-18 19:38:23 -06:00
jason.woltje bd3625ae1b Merge pull request 'fix(auth): generate UUID ids for BetterAuth Prisma writes' (#427) from fix/authentik-betterauth-interop into develop 
Reviewed-on: http://git.mosaicstack.dev/mosaic/stack/pulls/427
 2026-02-19 01:07:32 +00:00
jason.woltje aeac188d40 chore(deps): override minimatch to 10.2.1 for audit fix 2026-02-18 18:53:25 -06:00
jason.woltje f219dd71a0 fix(auth): use UUID id generation for BetterAuth DB models 2026-02-18 18:49:16 -06:00
jason.woltje 2c3c1f67ac Merge pull request 'fix(auth): restore BetterAuth OAuth2 flow and compose wiring' (#426) from fix/authentik-betterauth-interop into develop 
Reviewed-on: http://git.mosaicstack.dev/mosaic/stack/pulls/426
 2026-02-18 05:44:19 +00:00
jason.woltje dedc1af080 fix(auth): restore BetterAuth OIDC flow across api/web/compose 2026-02-17 23:37:49 -06:00
jason.woltje 3b16b2c743 Merge pull request 'Fix orchestrator startup provider-key requirements for Issue 424' (#425) from fix/post-422-runtime into develop 
Reviewed-on: http://git.mosaicstack.dev/mosaic/stack/pulls/425
 2026-02-17 23:17:39 +00:00
Jason Woltje 6fd8e85266 fix(orchestrator): make provider-aware Claude key startup requirements 2026-02-17 17:15:42 -06:00
Jason Woltje d3474cdd74 chore(orchestrator): bootstrap issue 424 2026-02-17 17:05:09 -06:00
jason.woltje 157b702331 Merge pull request 'fix(runtime): post-422 CI and compose env follow-up' (#423) from fix/post-422-runtime into develop 
Reviewed-on: http://git.mosaicstack.dev/mosaic/stack/pulls/423
 2026-02-17 22:47:50 +00:00
Jason Woltje 63c6a129bd fix(runtime): stabilize LinkAutocomplete nav test and wire required compose env 2026-02-17 16:42:34 -06:00
jason.woltje 4a4aee7b7c Merge pull request 'feat: finalize orchestrator observability and mosaic rails integration' (#422) from feature/mosaic-stack-finalization into develop 
Reviewed-on: http://git.mosaicstack.dev/mosaic/stack/pulls/422
 2026-02-17 22:24:01 +00:00
Jason Woltje 9d9a01f5f7 feat(web): add orchestrator readiness badge and resilient events parsing 2026-02-17 16:20:03 -06:00
Jason Woltje 5bce7dbb05 feat(web): show latest orchestrator event in task progress widget 2026-02-17 16:12:40 -06:00
Jason Woltje ab902250f8 feat(web-hud): seed default layout with orchestration widgets 2026-02-17 16:07:09 -06:00
Jason Woltje d34f097a5c feat(web): add orchestrator events widget with matrix signal visibility 2026-02-17 15:56:12 -06:00
Jason Woltje f4ad7eba37 fix(web-hud): support hyphenated widget IDs with regression tests 2026-02-17 15:49:09 -06:00
Jason Woltje 4d089cd020 feat(orchestrator): add recent events API and monitor script 2026-02-17 15:44:43 -06:00
Jason Woltje 3258cd4f4d feat(orchestrator): add SSE events, queue controls, and mosaic rails sync 2026-02-17 15:39:15 -06:00
jason.woltje 35dd623ab5 Merge pull request 'fix(#411): complete auth/frontend remediation and review hardening' (#421) from fix/auth-frontend-remediation into develop 
Reviewed-on: http://git.mosaicstack.dev/mosaic/stack/pulls/421
 2026-02-17 21:24:13 +00:00
Jason Woltje 758b2a839b fix(web-tests): stabilize async auth and usage page assertions 2026-02-17 15:15:54 -06:00
jason.woltje af113707d9 Merge branch 'develop' into fix/auth-frontend-remediation 2026-02-17 20:35:59 +00:00
Jason Woltje 57d0f5d2a3 fix(#411): resolve CI lint crash from ajv override 
Drop the global ajv override that forced ESLint onto an incompatible major, then move @mosaic/config lint tooling deps to devDependencies so production audit stays clean without impacting runtime deps.
 2026-02-17 14:28:55 -06:00
Jason Woltje ad428598a9 docs(#411): normalize AGENTS standards paths 2026-02-17 14:21:19 -06:00
Jason Woltje cab8d690ab fix(#411): complete 2026-02-17 remediation sweep 
Apply RLS context at task service boundaries, harden orchestrator/web integration and session startup behavior, re-enable targeted frontend tests, and lock vulnerable transitive dependencies so QA and security gates pass cleanly.
 2026-02-17 14:19:15 -06:00
jason.woltje 0a780a5062 Merge pull request 'bootstrap mosaic-stack to Mosaic standards layer' (#420) from fix/auth-frontend-remediation into main 
Reviewed-on: http://git.mosaicstack.dev/mosaic/stack/pulls/420
 2026-02-17 18:51:54 +00:00
jason.woltje a1515676db Merge branch 'main' into fix/auth-frontend-remediation 2026-02-17 18:46:50 +00:00
Jason Woltje 254f85369b add repo lifecycle hooks for mosaic-stack sessions 2026-02-17 12:45:39 -06:00
Jason Woltje ddf6851bfd bootstrap repo to mosaic standards layer 2026-02-17 12:43:14 -06:00
jason.woltjeandClaude Opus 4.6 027fee1afa fix: use UUID for Better Auth ID generation to match Prisma schema 
Better Auth generates nanoid-style IDs by default, but our Prisma
schema uses @db.Uuid columns for all auth tables. This caused
P2023 errors when Better Auth tried to insert non-UUID IDs into
the verification table during OAuth sign-in.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 22:48:17 -06:00
jason.woltjeandClaude Opus 4.6 abe57621cd fix: add CORS env vars to Swarm/Portainer compose and log trusted origins 
The Swarm deployment uses docker-compose.swarm.portainer.yml, not the
root docker-compose.yml. Add NEXT_PUBLIC_APP_URL, NEXT_PUBLIC_API_URL,
and TRUSTED_ORIGINS to the API service environment. Also log trusted
origins at startup for easier CORS debugging.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 22:31:29 -06:00
jason.woltje 7c7ad59002 Remove extra docker-compose and .env.exmple files. 2026-02-16 22:08:02 -06:00