Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
 goals
|
3af594590a | ||
|
goals
|
9dc90be7e1 | ||
|
goals
|
43fa047787 |
@@ -9,19 +9,19 @@ This book is the canonical home for installation, configuration, deployment, rou
|
|||||||
- [Documentation atlas](../README.md) — placement rules and source-of-truth boundaries.
|
- [Documentation atlas](../README.md) — placement rules and source-of-truth boundaries.
|
||||||
- [Documentation sitemap](../SITEMAP.md) — resolvable current navigation and authority-gated migration summary.
|
- [Documentation sitemap](../SITEMAP.md) — resolvable current navigation and authority-gated migration summary.
|
||||||
- [Product requirements](../PRD.md) — normative requirements, currently marked draft.
|
- [Product requirements](../PRD.md) — normative requirements, currently marked draft.
|
||||||
- [Operations index](operations/README.md) — current local procedures and explicitly held operational outlines.
|
- [Operations index](operations/README.md) — current local procedures, unattended fleet first-start handling, and explicitly held operational outlines.
|
||||||
- [Security index](security/README.md) — current SSO provider configuration.
|
- [Security index](security/README.md) — current SSO provider configuration.
|
||||||
|
|
||||||
## Chapter map
|
## Chapter map
|
||||||
|
|
||||||
| Chapter | Scope | Status |
|
| Chapter | Scope | Status |
|
||||||
| ------------------------------------- | ------------------------------------------------------------------- | ----------------------------------------------------------------------- |
|
| ------------------------------------- | ------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------- |
|
||||||
| `installation/` | Prerequisites, installation, and first deployment. | Scaffold only. |
|
| `installation/` | Prerequisites, installation, and first deployment. | Scaffold only. |
|
||||||
| `configuration/` | Environment, provider, tier, and runtime configuration. | Scaffold only. |
|
| `configuration/` | Environment, provider, tier, and runtime configuration. | Scaffold only. |
|
||||||
| `deployment/` | Topologies, rollout, migration, and upgrade procedures. | Scaffold only. |
|
| `deployment/` | Topologies, rollout, migration, and upgrade procedures. | Scaffold only. |
|
||||||
| [`operations/`](operations/README.md) | Health, observability, routine operation, and maintenance. | Local upgrade/recovery is current; connector lease operations are held. |
|
| [`operations/`](operations/README.md) | Health, observability, routine operation, and maintenance. | Local upgrade/recovery and fleet first start are current; connector lease operations are held. |
|
||||||
| [`security/`](security/README.md) | Authentication, authorization, SSO, secrets, and security controls. | SSO provider guide is current; other pages are planned. |
|
| [`security/`](security/README.md) | Authentication, authorization, SSO, secrets, and security controls. | SSO provider guide is current; other pages are planned. |
|
||||||
| `recovery/` | Incident response, backup, rollback, and recovery. | Scaffold only. |
|
| `recovery/` | Incident response, backup, rollback, and recovery. | Scaffold only. |
|
||||||
|
|
||||||
Every promoted page must be added to this index and to [`SITEMAP.md`](../SITEMAP.md) in the same migration slice.
|
Every promoted page must be added to this index and to [`SITEMAP.md`](../SITEMAP.md) in the same migration slice.
|
||||||
|
|
||||||
|
|||||||
@@ -5,6 +5,7 @@
|
|||||||
## Current procedures
|
## Current procedures
|
||||||
|
|
||||||
- [Upgrade safety and recovery](upgrade-safety-and-recovery.md) — installed-CLI and local-PGlite upgrade, rollback, and framework-configuration recovery.
|
- [Upgrade safety and recovery](upgrade-safety-and-recovery.md) — installed-CLI and local-PGlite upgrade, rollback, and framework-configuration recovery.
|
||||||
|
- [Fleet unattended first start](fleet-unattended-first-start.md) — systemd/no-TTY identity initialization, failure handling, and isolated verification.
|
||||||
|
|
||||||
## Held procedures
|
## Held procedures
|
||||||
|
|
||||||
|
|||||||
@@ -0,0 +1,70 @@
|
|||||||
|
# Fleet Unattended First-Start Operations
|
||||||
|
|
||||||
|
> **Status:** Current after issue #1264 lands. This runbook covers only Mosaic's first-run identity
|
||||||
|
> gate; it does not install runtimes or credentials.
|
||||||
|
|
||||||
|
## Operational contract
|
||||||
|
|
||||||
|
A systemd fleet unit launches under a sanitized environment with no TTY. The generated environment
|
||||||
|
sets `MOSAIC_AGENT_NAME`; Mosaic resolves that exact value against the canonical installed roster
|
||||||
|
before writing identity files.
|
||||||
|
|
||||||
|
If top-level identity contracts are missing, Mosaic atomically seeds them from the shipped generic
|
||||||
|
sources:
|
||||||
|
|
||||||
|
| Destination | Source | New-file mode |
|
||||||
|
| ---------------------- | ------------------------------- | ------------- |
|
||||||
|
| `$MOSAIC_HOME/SOUL.md` | `$MOSAIC_HOME/defaults/SOUL.md` | `0600` |
|
||||||
|
| `$MOSAIC_HOME/USER.md` | `$MOSAIC_HOME/defaults/USER.md` | `0600` |
|
||||||
|
|
||||||
|
Creation is no-clobber and safe under concurrent seat starts. Existing regular files remain
|
||||||
|
byte-for-byte and mode-for-mode unchanged. The runtime composer then injects the exact roster name
|
||||||
|
and class; the generic source files grant no seat authority.
|
||||||
|
|
||||||
|
## Failure handling
|
||||||
|
|
||||||
|
The fleet path never falls back to an interactive wizard. It exits nonzero before runtime execution
|
||||||
|
when:
|
||||||
|
|
||||||
|
- `MOSAIC_AGENT_NAME` is not an exact roster member;
|
||||||
|
- a defined ambient `MOSAIC_AGENT_CLASS` is blank/whitespace or disagrees with that member's
|
||||||
|
canonical class;
|
||||||
|
- a missing destination has no safe regular default source;
|
||||||
|
- a source or existing destination is a symlink (including dangling), directory, unavailable, or over the bounded size;
|
||||||
|
- the fleet communications helper/roster cannot be validated; or
|
||||||
|
- `USER.md` cannot be securely re-read at the point where its content is composed.
|
||||||
|
|
||||||
|
Diagnostics begin with:
|
||||||
|
|
||||||
|
```text
|
||||||
|
[mosaic] ERROR: unattended fleet identity initialization failed: ...
|
||||||
|
```
|
||||||
|
|
||||||
|
Repair the exact named source, destination, roster, or helper and retry only that roster member. Do
|
||||||
|
not delete or replace an existing personalized `SOUL.md`/`USER.md` merely to clear the check.
|
||||||
|
|
||||||
|
## Verification without a live seat
|
||||||
|
|
||||||
|
The source gate is:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
pnpm --filter @mosaicstack/mosaic... build && \
|
||||||
|
pnpm --filter @mosaicstack/mosaic exec vitest run \
|
||||||
|
src/commands/launch-first-start.spec.ts
|
||||||
|
```
|
||||||
|
|
||||||
|
The build leg is load-bearing: `dist/` is ignored, so a direct Vitest invocation could otherwise run
|
||||||
|
absent or stale CLI output. The gate runs the exact-source built CLI in subprocesses with piped stdin,
|
||||||
|
temporary homes, a canonical fixture roster, fake runtime/broker executables, and no provider call. It
|
||||||
|
covers no-TTY launch, exact identity,
|
||||||
|
private modes, no-clobber, missing/symlink defaults, unknown members, blank/mismatched class,
|
||||||
|
portable standalone composition/wizard preservation, and concurrent first start.
|
||||||
|
|
||||||
|
Do not use this fixture as proof that a real provider credential is present or that a package has
|
||||||
|
been deployed. Those require separate environment-specific evidence.
|
||||||
|
|
||||||
|
## Related
|
||||||
|
|
||||||
|
- [User workflow](../../USER-GUIDE/workflows/fleet-unattended-first-start.md)
|
||||||
|
- [Developer architecture](../../DEVELOPER-GUIDE/architecture/fleet-first-start-identity.md)
|
||||||
|
- [Verification report](../../reports/qa/2026-08-16-1264-unattended-first-start.md)
|
||||||
@@ -26,6 +26,7 @@ This book is the canonical home for architecture, package and application guides
|
|||||||
|
|
||||||
- [Lease-broker operations and verification](testing/lease-broker-operations.md) — safe static/test commands plus explicitly held live operations.
|
- [Lease-broker operations and verification](testing/lease-broker-operations.md) — safe static/test commands plus explicitly held live operations.
|
||||||
- [Channel adapters](integrations/channel-adapters.md) — current shared contracts and Discord reference boundary; future adapter parity is draft.
|
- [Channel adapters](integrations/channel-adapters.md) — current shared contracts and Discord reference boundary; future adapter parity is draft.
|
||||||
|
- [Fleet first-start identity](architecture/fleet-first-start-identity.md) — no-TTY launch boundary, roster authority, and no-clobber filesystem design.
|
||||||
|
|
||||||
Every promoted page must be added to this index and to [`SITEMAP.md`](../SITEMAP.md) in the same migration slice.
|
Every promoted page must be added to this index and to [`SITEMAP.md`](../SITEMAP.md) in the same migration slice.
|
||||||
|
|
||||||
|
|||||||
@@ -11,6 +11,7 @@ This chapter is the canonical home for Mosaic Stack's system model, component bo
|
|||||||
- [`mutator-class-gate.md`](mutator-class-gate.md) — default-deny tool authorization, runtime adapters, launch choke point, and parser assurance boundary.
|
- [`mutator-class-gate.md`](mutator-class-gate.md) — default-deny tool authorization, runtime adapters, launch choke point, and parser assurance boundary.
|
||||||
- [`compaction-revocation.md`](compaction-revocation.md) — Claude/Pi observer lifecycle, runtime generations, revocation, and the bounded residual stale window.
|
- [`compaction-revocation.md`](compaction-revocation.md) — Claude/Pi observer lifecycle, runtime generations, revocation, and the bounded residual stale window.
|
||||||
- [`channel-protocol.md`](channel-protocol.md) — current shared channel DTOs and Discord compatibility baseline, with unimplemented adapter work explicitly marked draft.
|
- [`channel-protocol.md`](channel-protocol.md) — current shared channel DTOs and Discord compatibility baseline, with unimplemented adapter work explicitly marked draft.
|
||||||
|
- [`fleet-first-start-identity.md`](fleet-first-start-identity.md) — roster-owned identity bootstrap for concurrent no-TTY fleet launches.
|
||||||
- [`decisions/mos-runtime-portability-m1.md`](decisions/mos-runtime-portability-m1.md) — current logical identity, connector lease, grant, audit, and fencing decision; connector activation remains held.
|
- [`decisions/mos-runtime-portability-m1.md`](decisions/mos-runtime-portability-m1.md) — current logical identity, connector lease, grant, audit, and fencing decision; connector activation remains held.
|
||||||
|
|
||||||
These pages are current security-contract references and are consumed by the lease-broker acceptance suites. Their live deployment gaps remain explicitly labeled in the pages; this migration does not change runtime behavior.
|
These pages are current security-contract references and are consumed by the lease-broker acceptance suites. Their live deployment gaps remain explicitly labeled in the pages; this migration does not change runtime behavior.
|
||||||
|
|||||||
@@ -0,0 +1,81 @@
|
|||||||
|
# Fleet First-Start Identity Boundary
|
||||||
|
|
||||||
|
> **Status:** Implemented by issue #1264. Requirements: `FCM-REQ-12`, `AC-FCM-10`.
|
||||||
|
|
||||||
|
## Problem
|
||||||
|
|
||||||
|
`launchRuntime()` called `checkSoul()` before runtime execution. A missing top-level `SOUL.md`
|
||||||
|
caused `checkSoul()` to spawn a child `mosaic wizard` with inherited stdio. Under a systemd-created
|
||||||
|
fleet pane with no TTY, that child blocked or failed before the runtime boundary even though generic
|
||||||
|
`defaults/SOUL.md` and `defaults/USER.md` already shipped in the same `MOSAIC_HOME`.
|
||||||
|
|
||||||
|
## Chosen boundary
|
||||||
|
|
||||||
|
The fix remains at `checkSoul()` and does not add flags to `yolo`, fleet commands, systemd units, or
|
||||||
|
`start-agent-session.sh`:
|
||||||
|
|
||||||
|
1. A present, nonblank, whitespace-exact `MOSAIC_AGENT_NAME` selects the fleet path.
|
||||||
|
2. `resolveFleetIdentity()` must resolve that exact member through the existing roster/helper
|
||||||
|
boundary, and any defined `MOSAIC_AGENT_CLASS` (including blank/whitespace) must canonicalize to
|
||||||
|
the roster class, before any identity seed. Only undefined means absent.
|
||||||
|
3. `lstatSync()` preflights every destination directory entry without following links, so a dangling
|
||||||
|
link is rejected before its counterpart can be published.
|
||||||
|
4. Safe bounded snapshots are read from only the missing contracts under `defaults/`.
|
||||||
|
5. Each snapshot is written to a random owner-private temporary file in `MOSAIC_HOME`.
|
||||||
|
6. `linkSync()` publishes the complete file without overwriting an existing path. `EEXIST` means a
|
||||||
|
concurrent seat or operator won; the existing path is preserved and revalidated.
|
||||||
|
7. Temporary files are removed, and both installed contracts are re-opened through the no-symlink
|
||||||
|
secure-file reader before launch continues.
|
||||||
|
8. `composeContract()` independently re-resolves the roster, securely reads fleet `USER.md` through
|
||||||
|
a Linux descriptor at the point of use, and injects exact member identity and communications data.
|
||||||
|
|
||||||
|
A standalone launch with no `MOSAIC_AGENT_NAME` retains the portable tolerant USER read and the
|
||||||
|
interactive wizard. Fleet-only no-follow enforcement must not make supported standalone macOS
|
||||||
|
composition depend on Linux `/proc` descriptor traversal.
|
||||||
|
|
||||||
|
## Identity and authority
|
||||||
|
|
||||||
|
The copied defaults deliberately say “Mosaic agent”; they are a generic behavioral base. They are
|
||||||
|
not the source of a fleet seat's identity. The canonical roster controls:
|
||||||
|
|
||||||
|
- exact agent/session name;
|
||||||
|
- canonical role/class and persona;
|
||||||
|
- peer rows and point of contact;
|
||||||
|
- tmux socket and helper target; and
|
||||||
|
- communications generation.
|
||||||
|
|
||||||
|
An unknown/padded ambient name, mismatched class, or explicitly blank/whitespace class fails before
|
||||||
|
any file is seeded. This avoids replacing the interactive wall with a fleet of indistinguishable or
|
||||||
|
ambiently invented identities.
|
||||||
|
|
||||||
|
## Concurrency and filesystem properties
|
||||||
|
|
||||||
|
- Sources and final destinations are bounded regular files beneath `MOSAIC_HOME`; target and dangling
|
||||||
|
symlinks are not followed.
|
||||||
|
- New files have mode `0600`.
|
||||||
|
- Hard-link publication is same-filesystem, atomic, and no-clobber.
|
||||||
|
- A temporary path is removed only when this process successfully created it.
|
||||||
|
- All required source snapshots are validated before the first destination is published, preventing
|
||||||
|
a missing second default from leaving a partial seed.
|
||||||
|
- Existing operator files are never chmodded or rewritten.
|
||||||
|
|
||||||
|
## Verification
|
||||||
|
|
||||||
|
`src/commands/launch-first-start.spec.ts` uses the production-kind boundary: the real built CLI in a
|
||||||
|
no-TTY subprocess, not a direct wizard test. The package `test:vitest` gate builds Mosaic before
|
||||||
|
Vitest, while the clean-checkout command builds its workspace dependencies first, so ignored
|
||||||
|
`dist/cli.js` cannot be absent or stale. A fake lease launcher records whether execution reached the
|
||||||
|
runtime boundary and captures the composed prompt.
|
||||||
|
Positive and negative cases prove the check can both proceed and refuse. Fleet composition coverage
|
||||||
|
replaces a previously validated `USER.md` with an external symlink and proves point-of-use refusal;
|
||||||
|
a standalone unreadable-optional-USER case proves the portable tolerant branch remains separate.
|
||||||
|
|
||||||
|
Real Pi authentication and provider task execution remain environment tests, not claims of this
|
||||||
|
fixture.
|
||||||
|
|
||||||
|
## Non-goals
|
||||||
|
|
||||||
|
- Runtime installation or pane-PATH resolution (#1256/#1258).
|
||||||
|
- The held `~/.mosaic` launch-composition layer in PR #1213.
|
||||||
|
- Personalizing the operator's standalone identity without a wizard.
|
||||||
|
- Changing fleet systemd or shell launcher code.
|
||||||
+23
@@ -146,6 +146,29 @@ lands. M0 consists only of these normative requirements, the complete task DAG,
|
|||||||
documentation IA checklist, and the legacy example/profile disposition inventory. Subsequent cards
|
documentation IA checklist, and the legacy example/profile disposition inventory. Subsequent cards
|
||||||
are defined in [docs/TASKS.md](./TASKS.md) and must remain one card/one PR.
|
are defined in [docs/TASKS.md](./TASKS.md) and must remain one card/one PR.
|
||||||
|
|
||||||
|
### Unattended fleet first-start amendment (#1264)
|
||||||
|
|
||||||
|
`FCM-REQ-11` is reserved by #1256's concurrent runtime-preflight delivery. This amendment therefore
|
||||||
|
uses the next non-colliding identifiers.
|
||||||
|
|
||||||
|
1. `FCM-REQ-12`: A roster-owned fleet launch SHALL NOT invoke an interactive identity wizard when
|
||||||
|
top-level `SOUL.md` or `USER.md` is absent. It SHALL initialize only missing top-level identity
|
||||||
|
contracts from the shipped generic `defaults/` contracts without overwriting operator-owned
|
||||||
|
bytes. The canonical roster member remains the sole source of the seat's exact name and class;
|
||||||
|
generic defaults grant no fleet identity or authority. Missing or unsafe defaults SHALL fail
|
||||||
|
closed with actionable diagnostics before runtime execution. Non-fleet launches retain the
|
||||||
|
interactive identity flow.
|
||||||
|
2. `AC-FCM-10`: A systemd-equivalent no-TTY test with a clean temporary Mosaic home SHALL prove a
|
||||||
|
named fleet seat reaches the runtime boundary without starting `mosaic wizard`, creates
|
||||||
|
byte-equal owner-private `SOUL.md` and `USER.md` seeds, and receives its exact roster name/class in
|
||||||
|
composed context. Tests SHALL also prove no-clobber behavior, concurrent/idempotent first start,
|
||||||
|
fail-closed invalid defaults, and preservation of the standalone interactive path.
|
||||||
|
|
||||||
|
`ASSUMPTION:` `MOSAIC_AGENT_NAME` is the existing launch discriminator for roster-owned fleet
|
||||||
|
processes. This amendment does not add a second fleet flag because generated fleet environments
|
||||||
|
already set that value and the runtime composer independently resolves it against the canonical
|
||||||
|
roster before execution.
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Exact Cross-Harness Fleet Communications Contract (#766)
|
## Exact Cross-Harness Fleet Communications Contract (#766)
|
||||||
|
|||||||
@@ -38,11 +38,13 @@ These paths remain canonical because current source/tests consume them or becaus
|
|||||||
- [Quickstart](USER-GUIDE/getting-started/quickstart.md) — installed-CLI first-use route with local PGlite safety boundaries.
|
- [Quickstart](USER-GUIDE/getting-started/quickstart.md) — installed-CLI first-use route with local PGlite safety boundaries.
|
||||||
- [Web dashboard](USER-GUIDE/product/web-dashboard.md) — current routes, views, chat persistence, settings, and admin behavior.
|
- [Web dashboard](USER-GUIDE/product/web-dashboard.md) — current routes, views, chat persistence, settings, and admin behavior.
|
||||||
- [Discord conversations](USER-GUIDE/workflows/discord-conversations.md) — current authorized parent-channel, thread, attachment, and control workflow.
|
- [Discord conversations](USER-GUIDE/workflows/discord-conversations.md) — current authorized parent-channel, thread, attachment, and control workflow.
|
||||||
|
- [Fleet unattended first start](USER-GUIDE/workflows/fleet-unattended-first-start.md) — no-TTY identity bootstrap and exact roster identity.
|
||||||
|
|
||||||
## Administrator documentation
|
## Administrator documentation
|
||||||
|
|
||||||
- [Administrator operations](ADMIN-GUIDE/operations/README.md) — current local procedures and explicitly held outlines.
|
- [Administrator operations](ADMIN-GUIDE/operations/README.md) — current local procedures and explicitly held outlines.
|
||||||
- [Upgrade safety and recovery](ADMIN-GUIDE/operations/upgrade-safety-and-recovery.md) — installed-CLI/local-PGlite upgrade and framework recovery.
|
- [Upgrade safety and recovery](ADMIN-GUIDE/operations/upgrade-safety-and-recovery.md) — installed-CLI/local-PGlite upgrade and framework recovery.
|
||||||
|
- [Fleet unattended first-start operations](ADMIN-GUIDE/operations/fleet-unattended-first-start.md) — systemd identity initialization, refusal paths, and isolated verification.
|
||||||
- [Mos connector lease operations](ADMIN-GUIDE/operations/mos-connector-lease-operations.md) — held/non-operative M1 outline while policy remains deny-all.
|
- [Mos connector lease operations](ADMIN-GUIDE/operations/mos-connector-lease-operations.md) — held/non-operative M1 outline while policy remains deny-all.
|
||||||
- [Administrator security](ADMIN-GUIDE/security/README.md) — current security chapter index.
|
- [Administrator security](ADMIN-GUIDE/security/README.md) — current security chapter index.
|
||||||
- [SSO providers](ADMIN-GUIDE/security/sso-providers.md) — Authentik, WorkOS, and Keycloak configuration and discovery.
|
- [SSO providers](ADMIN-GUIDE/security/sso-providers.md) — Authentik, WorkOS, and Keycloak configuration and discovery.
|
||||||
@@ -56,6 +58,7 @@ These paths remain canonical because current source/tests consume them or becaus
|
|||||||
- [Lease-broker security](DEVELOPER-GUIDE/architecture/lease-broker-security.md) — identity, ancestry, filesystem, observer, and residual boundaries.
|
- [Lease-broker security](DEVELOPER-GUIDE/architecture/lease-broker-security.md) — identity, ancestry, filesystem, observer, and residual boundaries.
|
||||||
- [Whole mutator-class gate](DEVELOPER-GUIDE/architecture/mutator-class-gate.md) — default-deny tool authorization and launch choke point.
|
- [Whole mutator-class gate](DEVELOPER-GUIDE/architecture/mutator-class-gate.md) — default-deny tool authorization and launch choke point.
|
||||||
- [Compaction revocation](DEVELOPER-GUIDE/architecture/compaction-revocation.md) — lifecycle observers, generation fencing, and residual stale window.
|
- [Compaction revocation](DEVELOPER-GUIDE/architecture/compaction-revocation.md) — lifecycle observers, generation fencing, and residual stale window.
|
||||||
|
- [Fleet first-start identity](DEVELOPER-GUIDE/architecture/fleet-first-start-identity.md) — roster authority and atomic no-clobber identity seeding.
|
||||||
- [Architecture decisions](DEVELOPER-GUIDE/architecture/decisions/README.md) — implemented and accepted boundaries.
|
- [Architecture decisions](DEVELOPER-GUIDE/architecture/decisions/README.md) — implemented and accepted boundaries.
|
||||||
- [Mos runtime portability M1](DEVELOPER-GUIDE/architecture/decisions/mos-runtime-portability-m1.md) — logical identity, connector lease, grants, audit, and fencing.
|
- [Mos runtime portability M1](DEVELOPER-GUIDE/architecture/decisions/mos-runtime-portability-m1.md) — logical identity, connector lease, grants, audit, and fencing.
|
||||||
- [Architecture RFCs](DEVELOPER-GUIDE/architecture/rfcs/README.md) — draft proposals without operational authority.
|
- [Architecture RFCs](DEVELOPER-GUIDE/architecture/rfcs/README.md) — draft proposals without operational authority.
|
||||||
@@ -75,6 +78,7 @@ These paths remain canonical because current source/tests consume them or becaus
|
|||||||
- [Archived planning](archive/planning/README.md) — historical briefs, board reviews, and work-package specifications.
|
- [Archived planning](archive/planning/README.md) — historical briefs, board reviews, and work-package specifications.
|
||||||
- [Archived work records](archive/work-records/README.md) — historical task scratchpads without live consumers.
|
- [Archived work records](archive/work-records/README.md) — historical task scratchpads without live consumers.
|
||||||
- [P8-003 performance report](reports/qa/p8-003-performance-optimization.md) — historical implementation evidence, not a current SLO.
|
- [P8-003 performance report](reports/qa/p8-003-performance-optimization.md) — historical implementation evidence, not a current SLO.
|
||||||
|
- [Issue #1264 unattended fleet first-start verification](reports/qa/2026-08-16-1264-unattended-first-start.md) — RED/GREEN no-TTY CLI evidence and explicit untested bounds.
|
||||||
- [Plans index](plans/README.md) — approved intent and implementation/audit plans.
|
- [Plans index](plans/README.md) — approved intent and implementation/audit plans.
|
||||||
- [Documentation information-architecture design](plans/2026-08-10-docs-information-architecture-design.md) — approved documentation structure decision.
|
- [Documentation information-architecture design](plans/2026-08-10-docs-information-architecture-design.md) — approved documentation structure decision.
|
||||||
- [Documentation catalog-audit plan](plans/2026-08-10-docs-catalog-audit.md) — evidence method and migration acceptance criteria.
|
- [Documentation catalog-audit plan](plans/2026-08-10-docs-catalog-audit.md) — evidence method and migration acceptance criteria.
|
||||||
|
|||||||
@@ -11,6 +11,7 @@ This book is the canonical home for end-user workflows, user-visible behavior, p
|
|||||||
- [Quickstart](getting-started/quickstart.md) — install Mosaic, complete setup, and launch a session.
|
- [Quickstart](getting-started/quickstart.md) — install Mosaic, complete setup, and launch a session.
|
||||||
- [Web dashboard](product/web-dashboard.md) — current routes, navigation, chat persistence, projects/tasks views, settings, and admin behavior.
|
- [Web dashboard](product/web-dashboard.md) — current routes, navigation, chat persistence, projects/tasks views, settings, and admin behavior.
|
||||||
- [Discord conversations](workflows/discord-conversations.md) — current authorized parent-channel, thread, attachment, and control workflow.
|
- [Discord conversations](workflows/discord-conversations.md) — current authorized parent-channel, thread, attachment, and control workflow.
|
||||||
|
- [Fleet unattended first start](workflows/fleet-unattended-first-start.md) — no-TTY identity bootstrap, exact roster identity, and separate runtime prerequisites.
|
||||||
|
|
||||||
## Chapter map
|
## Chapter map
|
||||||
|
|
||||||
@@ -18,7 +19,7 @@ This book is the canonical home for end-user workflows, user-visible behavior, p
|
|||||||
| ------------------ | ------------------------------------------------------------- | ---------------------------------------------------- |
|
| ------------------ | ------------------------------------------------------------- | ---------------------------------------------------- |
|
||||||
| `getting-started/` | First-use setup, orientation, and quickstarts. | Quickstart is current; additional pages are planned. |
|
| `getting-started/` | First-use setup, orientation, and quickstarts. | Quickstart is current; additional pages are planned. |
|
||||||
| `concepts/` | User-facing terminology, product concepts, and mental models. | Scaffold only. |
|
| `concepts/` | User-facing terminology, product concepts, and mental models. | Scaffold only. |
|
||||||
| `workflows/` | Task-oriented procedures for using Mosaic Stack. | Discord conversation workflow is current. |
|
| `workflows/` | Task-oriented procedures for using Mosaic Stack. | Discord and fleet first-start workflows are current. |
|
||||||
| `product/` | Current product surfaces and visible behavior. | Web dashboard reference is current. |
|
| `product/` | Current product surfaces and visible behavior. | Web dashboard reference is current. |
|
||||||
| `troubleshooting/` | User-visible failures, diagnostics, and fixes. | Scaffold only. |
|
| `troubleshooting/` | User-visible failures, diagnostics, and fixes. | Scaffold only. |
|
||||||
|
|
||||||
@@ -27,6 +28,7 @@ This book is the canonical home for end-user workflows, user-visible behavior, p
|
|||||||
- [Quickstart](getting-started/quickstart.md) — the verified installed-CLI first-use path.
|
- [Quickstart](getting-started/quickstart.md) — the verified installed-CLI first-use path.
|
||||||
- [Web dashboard](product/web-dashboard.md) — verified current Next.js dashboard behavior and limitations.
|
- [Web dashboard](product/web-dashboard.md) — verified current Next.js dashboard behavior and limitations.
|
||||||
- [Discord conversations](workflows/discord-conversations.md) — verified current Discord user workflow.
|
- [Discord conversations](workflows/discord-conversations.md) — verified current Discord user workflow.
|
||||||
|
- [Fleet unattended first start](workflows/fleet-unattended-first-start.md) — verified no-TTY first-start behavior and prerequisite boundaries.
|
||||||
|
|
||||||
Every promoted page must be added to this index and to [`SITEMAP.md`](../SITEMAP.md) in the same migration slice.
|
Every promoted page must be added to this index and to [`SITEMAP.md`](../SITEMAP.md) in the same migration slice.
|
||||||
|
|
||||||
|
|||||||
@@ -0,0 +1,61 @@
|
|||||||
|
# Fleet Unattended First Start
|
||||||
|
|
||||||
|
> **Status:** Current for roster-owned local fleet launches after issue #1264 lands. Runtime
|
||||||
|
> installation and provider authentication remain separate prerequisites.
|
||||||
|
|
||||||
|
A fleet seat started by systemd has no operator at its pane. On its first launch, Mosaic must not
|
||||||
|
stop at the interactive identity wizard.
|
||||||
|
|
||||||
|
## What happens on first start
|
||||||
|
|
||||||
|
When `MOSAIC_AGENT_NAME` names an exact member of the installed fleet roster and top-level identity
|
||||||
|
contracts are absent, the launcher:
|
||||||
|
|
||||||
|
1. validates the exact roster member, its canonical class, and the installed fleet communications
|
||||||
|
helper;
|
||||||
|
2. reads the shipped generic contracts from
|
||||||
|
`~/.config/mosaic/defaults/SOUL.md` and `defaults/USER.md`;
|
||||||
|
3. creates only the missing top-level `SOUL.md` and `USER.md` as owner-private files;
|
||||||
|
4. preserves any existing top-level identity file byte-for-byte; and
|
||||||
|
5. launches the runtime with the roster member's exact agent/session name and role/class in composed
|
||||||
|
context.
|
||||||
|
|
||||||
|
The generic defaults do **not** make every seat the same identity. They provide a shared behavioral
|
||||||
|
base. The canonical roster row supplies each seat's exact name, class, peers, socket, and authority.
|
||||||
|
|
||||||
|
## Operator behavior
|
||||||
|
|
||||||
|
A normal standalone launch without a fleet identity retains its portable configuration path and still
|
||||||
|
uses the interactive wizard when `SOUL.md` is absent:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
mosaic pi
|
||||||
|
```
|
||||||
|
|
||||||
|
A roster-owned seat may be started without attaching to its pane:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
mosaic fleet start <exact-roster-name>
|
||||||
|
```
|
||||||
|
|
||||||
|
Mosaic refuses before runtime execution if the requested member is absent, its explicitly supplied
|
||||||
|
ambient class is blank or conflicts with the roster, a required default is missing or unsafe, or an existing identity contract
|
||||||
|
is not a safe regular file. Repair the named component and retry the same exact roster member; do not
|
||||||
|
copy another seat's personalized identity.
|
||||||
|
|
||||||
|
## Separate prerequisites
|
||||||
|
|
||||||
|
This behavior clears the Mosaic identity-wizard wall only. A clean host still needs:
|
||||||
|
|
||||||
|
- the declared runtime installed on the pane PATH;
|
||||||
|
- the fleet transport and generated unit assets; and
|
||||||
|
- runtime/provider authentication appropriate to that seat.
|
||||||
|
|
||||||
|
Those checks are separate so a successful identity bootstrap is not reported as a fully authenticated
|
||||||
|
agent session.
|
||||||
|
|
||||||
|
## Related
|
||||||
|
|
||||||
|
- [Administrator runbook](../../ADMIN-GUIDE/operations/fleet-unattended-first-start.md)
|
||||||
|
- [Developer architecture](../../DEVELOPER-GUIDE/architecture/fleet-first-start-identity.md)
|
||||||
|
- [Verification report](../../reports/qa/2026-08-16-1264-unattended-first-start.md)
|
||||||
@@ -1,186 +0,0 @@
|
|||||||
# Quality-Rails Probe Inventory — RI-3-001
|
|
||||||
|
|
||||||
- **Task:** RI-3-001 (SDLC-D-037 first half; PRD § Release Integrity Workstream, RI-N4)
|
|
||||||
- **Date:** 2026-08-18
|
|
||||||
- **Base:** `origin/next` @ `8199261c` (branch `docs/ri-050-qr-probe-inventory`)
|
|
||||||
- **Follow-up:** RI-3-002 consumes the dispositions here when building the single TS evaluator.
|
|
||||||
|
|
||||||
## 0. Scope and method
|
|
||||||
|
|
||||||
Every mechanism in this repository that verifies a quality, integrity, safety, or release
|
|
||||||
property — TypeScript checks, shell probes, pipeline steps, git hooks, and installer-side
|
|
||||||
assertions — gets one row. Each row's "what it actually verifies" was written from the
|
|
||||||
probe's **code**, not its name or docs. Framework tool unit/regression suites (git wrappers,
|
|
||||||
wake, tmux, orchestrator, …) are treated as one enforcement surface (`test:framework-shell`)
|
|
||||||
because they test tool behavior rather than repo quality; their wiring integrity is itself
|
|
||||||
guarded by `check-test-enumeration.sh`, and the quality-relevant members are rowed
|
|
||||||
individually.
|
|
||||||
|
|
||||||
**Kinds:** `ts` (TypeScript/Node check), `shell` (bash/python probe), `pipeline-step`
|
|
||||||
(exists only inside a Woodpecker pipeline).
|
|
||||||
|
|
||||||
**Enforcement points:** `local` (operator-invoked), `pre-commit`, `pre-push`,
|
|
||||||
`CI ci.yml#<step>`, `publish.yml#<step>` (CI on push to main/next), `turbo <task>`,
|
|
||||||
`agent-runtime` (framework hooks on an agent host), `installer` (host install path),
|
|
||||||
`unwired`.
|
|
||||||
|
|
||||||
**Dispositions** (recommendations for RI-3-002): `preserve` (keep as-is; already the
|
|
||||||
canonical or a correct guard-of-the-guard), `strengthen` (keep, but a concrete gap must
|
|
||||||
close — usually absorption into the TS evaluator), `strengthen (review)` (viable retirement
|
|
||||||
candidate once the evaluator absorbs it; do not retire yet). Note: RI-N4 requires that
|
|
||||||
effective shell probes be **absorbed before** their independent paths retire — no row here
|
|
||||||
is marked `retire` because no absorption exists yet.
|
|
||||||
|
|
||||||
## 1. Inventory
|
|
||||||
|
|
||||||
### 1.1 Repo-level gate tasks (pnpm / turbo)
|
|
||||||
|
|
||||||
| check | location | kind | what it actually verifies | enforcement point | canonical check | disposition | rationale |
|
|
||||||
| ------------------------------------- | ------------------------------------------------------------------------------------ | ---- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------ | ------------------------- | ----------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
||||||
| `pnpm preflight` (checkout preflight) | `scripts/preflight.mjs` | ts | Six gate binaries (eslint, husky, prettier, tsc, turbo, vitest) exist and are executable in `node_modules/.bin` (exit 42 if not); no stale `.mosaic-test-work/web-build.lock` (exit 43); `apps/web/.next` is a real directory (not a symlink), every entry owned by the current uid, and its `.mosaic-source-hash` fingerprint + `.mosaic-symlink-manifest` hash match the certified build written by `scripts/build-web.mjs` | `pre-push`; inside `pnpm typecheck` (→ `CI ci.yml#typecheck`, verify-release `typecheck` stage) | QC-1 Checkout integrity | preserve | Blocks a poisoned/stale generated `.next` from faking a green typecheck (the five-month-stale-`.next` class); trust chain is self-contained per-checkout. |
|
|
||||||
| `pnpm typecheck` | root `package.json` → `turbo run typecheck` | ts | Per-package `tsc --noEmit` (all 20 packages); turbo `typecheck` depends on `^build`, so package builds must succeed first; prefixed by checkout preflight | `CI ci.yml#typecheck`; `pre-push`; verify-release `typecheck` stage; `turbo typecheck` | QC-2 Workspace typecheck | preserve | The single workspace-wide type gate; CI and hooks invoke the same task, no divergent checklist. |
|
|
||||||
| `pnpm lint` | root `package.json` → `turbo run lint` | ts | Per-package `eslint src` under root `eslint.config.mjs` (ignores `dist`, `.next`, `framework/**`, etc.) | `CI ci.yml#lint`; `pre-push`; verify-release `lint` stage; `turbo lint` | QC-3 Workspace lint | preserve | Same-task invocation from every surface; no second lint definition. |
|
|
||||||
| `pnpm format:check` | root `package.json` → `prettier --check` | ts | Prettier parse/format equality over `**/*.{ts,tsx,js,jsx,json,md}` minus `.prettierignore` (generated trees, `docs/scratchpads/`, venvs, …) | `CI ci.yml#format`; `pre-push`; verify-release `format` stage | QC-4 Format check | preserve | Single formatter, single ignore list, enforced identically everywhere. |
|
|
||||||
| `pnpm test` | root `package.json` `test` = `test:checkout` && `turbo run test` && `test:installer` | ts | (a) `node --test scripts/*.test.mjs` — checkout-tool units; (b) per-package `vitest run` (mosaic appends the 47-command `test:framework-shell` chain); (c) `tools/install-next-lane.test.sh`; turbo `test` declares DB env vars and depends on `^build` | `CI ci.yml#test` (with `DATABASE_URL` + `db:migrate` first); verify-release `test` stage; `turbo test` | QC-5 Test suite execution | preserve | One composed test command; the chain property (any link red ⇒ step red) is the gate. |
|
|
||||||
| `pnpm build` | root `package.json` → `turbo run build` | ts | Per-package build (`tsc`/Next) with `^build` dependency and `dist/**` outputs | `publish.yml#build`; verify-release `build` stage; `turbo build` | QC-6 Workspace build | preserve | Publish artifacts derive from the same build task CI verifies. |
|
|
||||||
|
|
||||||
### 1.2 Framework quality shell probes (`packages/mosaic/framework/tools/quality/`)
|
|
||||||
|
|
||||||
| check | location | kind | what it actually verifies | enforcement point | canonical check | disposition | rationale |
|
|
||||||
| ------------------------------------------- | ----------------------------------------------------------------------- | ----- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------- |
|
|
||||||
| Sanitization gate | `scripts/verify-sanitized.sh` | shell | Built-in self-test first (planted identity/structural/YAML+service fixtures; exit 2 if the regexes or extension coverage break), then: (1) identity denylist grep (`jarvis\|jason\|woltje\|brain.woltje.com\|/home/jwoltje\|\bPDA\b`) over all shipped text files **including** `examples/`; (2) structural grep for private `$HOME/src` defaults in shipped scripts **excluding** `examples/`. Any hit ⇒ exit 1 | `CI ci.yml#sanitization`; verify-release `sanitization` stage | QC-7 Framework sanitization | preserve | Labeled one-time regression guard with a self-test that prevents silent no-op; correctly scoped (identity vs structural) and documented as not a general PII detector. |
|
|
||||||
| Resident-context budget | `scripts/check-resident-budget.sh` (+ `--self-test`) | shell | Self-test of the comparator, then `wc -l` vs per-file ceilings (CONSTITUTION 120, AGENTS 120, each RUNTIME.md 90); missing file ⇒ fail; over ceiling ⇒ exit 1 | `CI ci.yml#sanitization` (both modes); verify-release `sanitization` stage | QC-8 Resident-context budget | preserve | Caps the container (lines), never the wording — the deliberate anti-drift design (DESIGN §7); CI-enforceable half only, by design. |
|
|
||||||
| Test-membership enumeration guard (#1017) | `scripts/check-test-enumeration.sh` + `test-enumeration-exclusions.txt` | shell | Parses surface S1 (`packages/mosaic` `test:framework-shell` via JSON+shlex) and S2 (every `framework/tools/\*.sh | .py`token in`ci.yml`, comment lines stripped); population = `_test_.sh`under`framework/tools`; FAILS on: suite-shaped file on disk neither enumerated nor signed-excluded; surface naming a path missing on disk (both directions); exclusion without reason / stale / outside population / contradicting enumeration. Proves **naming, not reachability** (stated in-file) | `CI ci.yml#sanitization` (direct line); link [0] of `test:framework-shell` (thus `CI ci.yml#test`); verify-release `sanitization` stage | QC-9 Test-membership enumeration | preserve | Makes silent under-run impossible; invoked from both surfaces it audits so severing the chain cannot silence it. |
|
|
||||||
| Enumeration-guard needles | `scripts/test-check-test-enumeration.sh` | shell | Needle/control fixtures driven through `--root`: every promised failure mode must trip the guard **on its own words**, plus controls that must pass (null-case defense); covers commented-out ci.yml lines (F1) and line-range parsing (n2b) | `test:framework-shell` → `CI ci.yml#test`; verify-release `test` stage | QC-9 Test-membership enumeration | preserve | Guard-of-the-guard with both polarities; same canonical check by design. |
|
|
||||||
| Upgrade manifest guard (#791 HARD GATE) | `scripts/test-upgrade-manifest-guard.sh` | shell | Keep-mode `install.sh` upgrade against seeded throwaway `MOSAIC_HOME`: every operator sentinel — including an **unanticipated** one — survives byte-identical with unchanged mtime; framework files still update; retired framework files pruned; matrix run with rsync present AND absent (keep path must be rsync-independent); fail-closed matrix (empty/operator-only/malformed/missing manifest aborts loudly, operator files untouched); operator secret never appears in installer output | `CI ci.yml#upgrade-guard`; verify-release `upgrade-guard` stage | QC-10 Upgrade/install safety | preserve | The operator-data hard gate for the `mosaic update` path; negative controls are load-bearing and documented. |
|
|
||||||
| Upgrade rollback gate (#791 B1) | `scripts/test-upgrade-rollback.sh` | shell | Mid-sync failure (PATH-shadowing `cp` shim) must trigger snapshot restore: restore message fires, corrupted file restored, target byte-identical to pre-upgrade; control installer with `set -E` stripped must NOT roll back (proves errtrace is load-bearing); plus signal/exit-guard controls | `CI ci.yml#upgrade-guard`; verify-release `upgrade-guard` stage | QC-10 Upgrade/install safety | preserve | Proves the rollback trap actually fires; the `-E`-stripped control keeps Part A honest. |
|
|
||||||
| Durable-snapshot gate (#791 PR2) | `scripts/test-upgrade-durable-snapshot.sh` | shell | Pre-update snapshot taken before any mutation (0700/0600 perms, secret never logged, retention-pruned); post-sync verify net restores operator files a manifest bug lets the sync touch; CWE-59 symlink-leaf guard proven with a portable cp shim in both polarities (write-through-link must not happen); v1→v2 migration semantics (intended `bin/` removal not healed) | `CI ci.yml#upgrade-guard`; verify-release `upgrade-guard` stage | QC-10 Upgrade/install safety | preserve | Covers tampering and leak vectors the manifest guard cannot see; the shim rationale (busybox vs GNU cp) is documented in-file. |
|
|
||||||
| Install migration matrix (v2→v3) | `scripts/test-install-migration.sh` | shell | Fixture matrix running the real installer with `MOSAIC_SYNC_ONLY=1`: fresh install seeds + stamps version 3; legacy user-edited AGENTS overwritten with `.pre-constitution.bak` preserved (and idempotent); tuned STANDARDS overwritten; operator files (SOUL, credentials) preserved. Mirrors the TS suite `packages/mosaic/src/config/file-adapter.test.ts` — both installers must behave identically | `CI ci.yml#upgrade-guard`; verify-release `upgrade-guard` stage | QC-10 Upgrade/install safety | preserve | Pins the shell/TS installer parity contract; removal would orphan that parity requirement. |
|
|
||||||
| Enforcement verification probe (bash) | `scripts/verify.sh` | shell | Attempts **real commits** in the target repo: planted type error must produce a commit blocked with `error`; planted `any` must trip `no-explicit-any`; planted lint error must trip `prettier`; gitleaks binary must exist (3a) and detect a planted AWS key via `gitleaks git --pre-commit --staged --redact` (3b). Verdicts are output-grep matches on hook stderr | `local` via installed `mosaic-quality-verify` on scaffolded target projects; **not run in this repo's CI** | QC-20 Downstream enforcement verification | strengthen (review) | Mechanism is genuinely behavioral (stronger than file presence) but verdict logic is grep-on-output and it is unwired here; absorb as the evaluator's enforcement-probe check (the RI-N4 evaluator invokes it or reimplements it) before retiring the shell path. |
|
|
||||||
| Enforcement verification probe (PowerShell) | `scripts/verify.ps1` | shell | Windows port of `verify.sh`: same planted-commit tests with `$output -match` matching; no gitleaks self-test parity beyond the same checks | `local` (Windows operator); no Windows CI runner exists | QC-20 Downstream enforcement verification | strengthen (review) | A hand-maintained twin of `verify.sh` with no CI coverage — exactly the drift shape the single evaluator removes; retire after the TS evaluator owns the probe. |
|
|
||||||
| Quality template installer (bash) | `scripts/install.sh` | shell | Copies template files (`.husky/pre-commit` incl. mandatory gitleaks, `.lintstagedrc.js`, `.eslintrc.js`, `tsconfig.json`, `.woodpecker.yml`, `.gitleaks.toml`) into a target project; **warns** (does not verify) about `package.json` snippet merge; no post-condition check | `local` / via `mosaic-quality-apply` | QC-21 Downstream rails scaffolding | strengthen (review) | Duplicates the TS `quality-rails init` scaffolder for a different template set; converging on one scaffolder (with post-scaffold verification) is prerequisite to retiring this path. |
|
|
||||||
| Quality template installer (PowerShell) | `scripts/install.ps1` | shell | Windows twin of the template copy above | `local` (Windows operator) | QC-21 Downstream rails scaffolding | strengthen (review) | Same twin-drift risk as `verify.ps1`; no runner exercises it. |
|
|
||||||
| `mosaic-quality-verify` adapter | `framework/tools/_scripts/mosaic-quality-verify` | shell | Thin adapter: validates target dir exists, asserts `verify.sh` present+executable, `cd` target, exec it. No verdict logic of its own | `local` (installed framework bin) | QC-20 Downstream enforcement verification | preserve | Already the thin-adapter shape RI-N4 prescribes for shell surfaces. |
|
|
||||||
| `mosaic-quality-apply` adapter | `framework/tools/_scripts/mosaic-quality-apply` | shell | Thin adapter: arg validation then exec of quality `install.sh --template … --target …` | `local` (installed framework bin) | QC-21 Downstream rails scaffolding | preserve | Thin adapter, no separate verdict; disposition follows its target script's convergence. |
|
|
||||||
| Roster schema regression | `scripts/test-roster-schema.py` | shell | jsonschema `Draft202012Validator` over `fleet/roster.schema.json` with valid/invalid connector-kind fixtures (tmux/discord/matrix conditional fields) | **unwired** — not on S1 or S2, not signed-excluded; also outside the enumeration guard's `*.sh` population, so the guard cannot see it | QC-5 Test suite execution | strengthen (review) | A real regression suite that currently runs nowhere; wire it into a CI surface or sign an exclusion — leaving it invisible re-arms the exact gap #1017 closed. |
|
|
||||||
| Framework shell chain (S1) | `packages/mosaic/package.json` `test:framework-shell` | shell | 47-command `&&` chain: enumeration guard + needles, 14 lease-broker/mutator-gate python unitests, `check-runtime-launches.py`, and ~30 framework-tool shell suites (git wrappers, wake, woodpecker, tmux, glpi, orchestrator, `_scripts`). Quality-relevant members rowed separately below | `turbo test` → `CI ci.yml#test`; verify-release `test` stage | QC-5 Test suite execution | preserve | The chain is the execution surface the enumeration guard audits; known residuals: a failing link stops later suites (measured in #1270 — suites after position 44 had not run), and the guard proves naming, not reachability. |
|
|
||||||
|
|
||||||
### 1.3 Framework runtime hooks and their harnesses (agent-host enforcement)
|
|
||||||
|
|
||||||
| check | location | kind | what it actually verifies | enforcement point | canonical check | disposition | rationale |
|
|
||||||
| ------------------------------------- | ----------------------------------------------------------------------------------------- | ----- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------- | --------------------------------------- | ------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
||||||
| QA edit hook seam | `framework/tools/qa/qa-hook-stdin.sh` (+ `qa-hook-handler.sh`) | shell | PostToolUse stdin hook: extracts edited file from the tool JSON (jq or grep fallback), skips non-JS/TS, then the deps-preflight gate — exits 1 with the legible sentinel `deps not installed — run pnpm install` when `node_modules/.bin` is missing/empty (the #856 false-red class); the downstream handler only files QA remediation **report templates** (no verification logic) | `agent-runtime` (framework `runtime/claude/settings.json` PostToolUse); never CI | QC-16 Agent-runtime edit-time checks | strengthen (review) | The sentinel gate is real enforcement; the handler's report-filing adds no verdict and its name promises more than the code does — evaluator absorption should keep the sentinel, drop the report theater. |
|
|
||||||
| Typecheck-on-edit hook | `framework/tools/qa/typecheck-hook.sh` | shell | PostToolUse: for edited `.ts/.tsx`, finds nearest `tsconfig.json` and runs `tsc --noEmit`, surfacing errors nonzero to the agent immediately | `agent-runtime` (framework `runtime/claude/settings.json` PostToolUse) | QC-16 Agent-runtime edit-time checks | strengthen (review) | Edit-time duplicate of QC-2 with independent invocation logic; keep behavior, converge invocation through the evaluator adapter. |
|
|
||||||
| Deps-preflight harness | `framework/tools/qa/test-deps-preflight.sh` | shell | Five assertions against the seam incl. a documented RED control (raw `not found`), sentinel behavior for missing and empty `.bin`, and no-false-positive once populated | `test:framework-shell` → `CI ci.yml#test` | QC-16 Agent-runtime edit-time checks | preserve | Guard-of-the-check with a red control; keeps the sentinel from regressing. |
|
|
||||||
| Prompt-helper RCE regression | `framework/tools/_scripts/test-mosaic-init-rce.sh` | shell | Sources the prompt helpers and proves a literal `$(touch /tmp/pwned)` answer round-trips verbatim and never executes (no `/tmp/pwned` created) | `test:framework-shell` → `CI ci.yml#test` | QC-5 Test suite execution | preserve | Cheap, load-bearing security regression on the installer's input path. |
|
|
||||||
| Install-ordering harness (#869 C2) | `framework/tools/_scripts/test-install-ordering-guard.sh` | shell | Drives `mosaic-link-runtime-assets` with a fake `mosaic` on PATH: probe ok ⇒ settings copied + exit 0; probe fail ⇒ exit 1 with degraded outcome but all other runtime files still copied; `--allow-inactive-enforcement` forwarded; no-mosaic-on-PATH ⇒ python3 fallback strips enforcement hooks and exits 1; fallback + flag ⇒ wires as-is, exit 0 | `test:framework-shell` → `CI ci.yml#test` | QC-17 Lease-enforcement wiring safety | preserve | Exercises the shell wiring seam independently of the TS guard's own spec suite (complementary coverage, by design). |
|
|
||||||
| Fleet-transport harness (#1240) | `framework/tools/_scripts/test-fleet-transport-check.sh` | shell | Extracts the shipped `check_fleet_transport`/`fleet_declared_transport` functions **from the shipped scripts** (fails loud if extraction yields nothing) and drives both implementations (mosaic-doctor + `tools/install.sh`) from one case table | `test:framework-shell` → `CI ci.yml#test` | QC-18 Operator-host drift audit | preserve | The anti-drift harness for the one rule shipped twice; extraction-from-source keeps it from testing a stale copy. |
|
|
||||||
| Terminal-green contract (RM-61/#1000) | `framework/tools/woodpecker/test-terminal-green-contract.sh` + `verify-terminal-green.py` | shell | Red-first fixtures: pipeline JSON variants (service failure, step failure, cancelled, etc.) must produce the correct terminal-green verdict; controls must pass | `test:framework-shell` → `CI ci.yml#test` | QC-5 Test suite execution | preserve | Keeps the CI-wait wrapper's green-detection honest; a false green here would poison every merge gate that trusts `pr-ci-wait.sh`. |
|
|
||||||
| Lease-gate launch invariant | `framework/tools/lease-broker/check-runtime-launches.py` | shell | Scans production roots (`packages/`, `apps/`, `plugins/`, `tools/`) across sh/py/ts/yaml suffixes for Claude/Pi process launches **outside** the lease gate; allowlist-based; fails CI on violation | `test:framework-shell` → `CI ci.yml#test` | QC-15 Lease-gate architecture invariant | preserve | The only architectural "no ungated launches" rail; grep+allowlist is the right cost/benefit for this invariant. |
|
|
||||||
|
|
||||||
### 1.4 TypeScript quality logic (`@mosaicstack/quality-rails` + mosaic CLI)
|
|
||||||
|
|
||||||
| check | location | kind | what it actually verifies | enforcement point | canonical check | disposition | rationale |
|
|
||||||
| ---------------------------------------- | ---------------------------------------------------------------------------------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------- | ------------------------------------- | ------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
||||||
| `quality-rails check` | `packages/quality-rails/src/cli.ts` (`mosaic quality-rails check --project`) | ts | **Expected-file presence only**: loops `expectedFilesForKind` (node: `.eslintrc`, `biome.json`, `.githooks/pre-commit`, `PR-CHECKLIST.md`; python: `pyproject.toml`+hooks+checklist; rust: `rustfmt.toml`+…) and exits 1 listing missing paths. Does not execute any linter, formatter, hook, or scanner | `local` (operator CLI); **no CI wiring in this repo** | QC-19 Downstream rails presence check | strengthen | This is the RI-N4 evaluator seed. Today presence ≠ parity (explicitly called out by RI-N4): it must grow typed verdicts (`passed/failed/blocked/error/not-applicable`), check versioning/subject/reason, digested definitions, and absorb the effective shell probes (QC-20 first). |
|
|
||||||
| `quality-rails doctor` | `packages/quality-rails/src/cli.ts` | ts | Same presence data as `check`, printed with ok/missing lines; **cannot fail** (no nonzero exit on missing files) | `local` (operator CLI) | QC-19 Downstream rails presence check | strengthen | A doctor that cannot fail is advisory; fold into `check` (or return typed states) when the evaluator lands. |
|
|
||||||
| `quality-rails init` | `packages/quality-rails/src/cli.ts` + `scaffolder.ts`/`templates.ts` | ts | Scaffolds rails files per detected kind/profile (linters/formatters lists are advisory strings; hooks flag always true); writes files, prints follow-ups — no post-condition verification | `local` (operator CLI) | QC-21 Downstream rails scaffolding | strengthen (review) | Second scaffolding path alongside quality `install.sh` (§1.2); converge on one with post-scaffold verification before retiring either. |
|
|
||||||
| Lease activation probe (#869 C1, hidden) | `packages/mosaic/src/commands/lease-activation-probe.ts` | ts | Real capability probe, not file presence: resolves the installed mosaic CLI and requires it to advertise the exact `{name, version}` activation contract; all deps injectable; registered as hidden CLI command and consumed by C2/C5 | `local` (hidden CLI + consumed by C2/C5); spec-tested via `lease-activation-probe.spec.ts` in `turbo test` | QC-17 Lease-enforcement wiring safety | preserve | The versioned-contract probe is precisely the fail-closed capability check RI-N2 generalizes; already typed and injectable. |
|
|
||||||
| Install-ordering guard (#869 C2, hidden) | `packages/mosaic/src/commands/install-ordering-guard.ts` | ts | Decides whether enforcement hook entries are written into the `~/.claude/settings.json` the framework reseed ships: not activatable ⇒ strip hooks + nonzero loud outcome (default); explicit per-invocation `--allow-inactive-enforcement` opt-out wires-with-warning. Never touches the runtime gate's own fail-closed behavior | `installer` (framework reseed via `mosaic-link-runtime-assets`); spec + shell harness coverage in `turbo test` | QC-17 Lease-enforcement wiring safety | preserve | Correct default-deny with an explicit, non-env opt-out; test-locked from both the TS and shell sides. |
|
|
||||||
| Lease doctor check (#869 C5) | `packages/mosaic/src/commands/lease-doctor-check.ts` | ts | Combines hook-wiring detection in `~/.claude/settings.json` with C1 activatable and C3 broker-supervisor health: wired ∧ (¬activatable ∨ ¬healthy) ⇒ loud `[ERROR]` that forces `mosaic doctor` exit 1 regardless of the bash audit's own exit | `local` (inside `mosaic doctor`); spec coverage in `turbo test` | QC-17 Lease-enforcement wiring safety | preserve | Closes the "bricked host looks green" hole; cannot be masked by the bash script — that composition is the point. |
|
|
||||||
| `mosaic doctor` (framework drift audit) | `packages/mosaic/src/commands/launch.ts` (`doctor`) + `framework/tools/_scripts/mosaic-doctor` | shell+ts | Bash audit of the installed framework home: ~40 expected files/dirs present; runtime files are copies (not symlinks) matching source (`cmp`) or composed runtime-contract markers; hard-gates block present in AGENTS.md; sequential-thinking MCP configured; fleet transport binary present per roster (warn); legacy symlink trees gone; skills synced — **warn-based, exit 1 only with `--fail-on-warn`**, plus C5's forced error | `local` (operator audit) | QC-18 Operator-host drift audit | preserve | Host-state audit CI cannot see (user files by design, DESIGN §7); advisory exit is the documented contract — do not silently change it. |
|
|
||||||
| `mosaic gateway doctor` | `packages/mosaic/src/commands/gateway-doctor.ts` | ts | Probes per-service health (PostgreSQL, Valkey, pgvector) via `@mosaicstack/storage`, reports tier and JSON; exit 1 only when at least one **required** service fails (yellow stays 0) | `local` (operator) | QC-18 Operator-host drift audit | preserve | Service health with correct red/yellow exit semantics; JSON mode exists for scripting. |
|
|
||||||
| `mosaic gateway verify` | `packages/mosaic/src/commands/gateway/verify.ts` | ts | Post-install liveness: daemon meta via HTTP with retries, admin token on file, bootstrap endpoint reachable; aggregated pass/fail | `local`; consumed by `tools/e2e-install-test.sh` | QC-18 Operator-host drift audit | preserve | The first-run proof the installer E2E relies on; retry-aware so startup races don't false-red. |
|
|
||||||
| `mosaic fleet doctor` | `packages/mosaic/src/commands/fleet-reconciler-command.ts` | ts | Classifies local roster-owned drift (no mutation) from the parsed v2 roster | `local` (operator) | QC-18 Operator-host drift audit | preserve | Dry-run classification is the correct non-mutating audit shape. |
|
|
||||||
|
|
||||||
### 1.5 Git hooks (developer machine)
|
|
||||||
|
|
||||||
| check | location | kind | what it actually verifies | enforcement point | canonical check | disposition | rationale |
|
|
||||||
| ------------------------- | --------------------------------------------------------- | ----- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- | --------------------------- | ----------- | ----------------------------------------------------------------------------------------------------------------- |
|
|
||||||
| Pre-commit staged hygiene | `.husky/pre-commit` → `npx lint-staged` (`.lintstagedrc`) | shell | On staged files only: `prettier --write` + `eslint --fix` for ts/tsx/js/jsx; `prettier --write` for json/md/yaml/yml. **Mutating** (fixes and re-stages); commit blocks only if a fixer itself fails | `pre-commit` (every local commit; hooks activated by `install-hooks.mjs` via `core.hooksPath .husky/_`) | QC-13 Staged-change hygiene | preserve | Correct scoped fast gate; note it auto-fixes rather than rejects (deliberate). Gap: no secret scan here — see §3. |
|
|
||||||
| Pre-push gate | `.husky/pre-push` | shell | `pnpm preflight && pnpm typecheck && pnpm lint && pnpm format:check` (no test run — documented in AGENTS.md) | `pre-push` | QC-14 Pre-push gate | preserve | Composes QC-1..4 exactly as specified in AGENTS.md; tests intentionally left to CI. |
|
|
||||||
| Hook installer | `scripts/install-hooks.mjs` (`pnpm prepare`) | ts | Stages husky hooks into a scratch repo first, asserts husky produced its `h` shim, quarantines incomplete previous sets, verifies idempotence via full directory snapshot comparison, then sets `core.hooksPath`; skips cleanly with `HUSKY=0` or no git | `installer` (runs on `pnpm install`) | QC-13 Staged-change hygiene | preserve | Self-verifying wiring for the hook gates — a corrupted half-install cannot silently disable them. |
|
|
||||||
|
|
||||||
### 1.6 CI pipeline steps (`.woodpecker/`)
|
|
||||||
|
|
||||||
Step-to-probe mapping for container steps: `ci.yml#sanitization` = QC-7+QC-8+QC-9 (rows §1.2, plus `apk add bash` env prep); `ci.yml#upgrade-guard` = QC-10 (rows §1.2, plus `apk add rsync`); `ci.yml#typecheck`/`#lint`/`#format`/`#test` = QC-2/3/4/5 (rows §1.1). Rows below are mechanisms that exist only in a pipeline.
|
|
||||||
|
|
||||||
| check | location | kind | what it actually verifies | enforcement point | canonical check | disposition | rationale |
|
|
||||||
| -------------------------------------- | -------------------------------------------------------------------------------------- | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------- | ----------------------------------- | --------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- | -------- | ------------------------------------------------------------------------------------------------------------- |
|
|
||||||
| Frozen install | `ci.yml#install` | pipeline-step | `pnpm install --frozen-lockfile --prefer-offline` against the baked ci-base store — lockfile supply integrity; a drifted lockfile fails the build before any gate runs | `CI ci.yml#install` | QC-1 Checkout integrity | preserve | Lockfile-pinned dep resolution is the supply-chain floor under every later gate. |
|
|
||||||
| Test-step readiness prelude | `ci.yml#test` prologue | pipeline-step | Installs pinned `@earendil-works/[email protected]` (Invariant R suite requires the real binary) + openssl; waits up to 60×1s on `pg_isready` for the `ci-postgres` service and fails fast if it never comes up; runs `db:migrate` before tests | `CI ci.yml#test` | QC-5 Test suite execution | preserve | Fail-fast environment preconditions — a missing service produces a legible failure, not a wall of red tests. |
|
|
||||||
| Publish verify step (pending RI-1-001) | `publish.yml#verify` (branch `feat/ri-050-publish-gate` @ `46784c8d`, not yet on next) | pipeline-step | (a) Commit identity: fails closed if `CI_COMMIT_SHA` empty, `git rev-parse HEAD` empty, or the two differ; (b) runs the canonical `pnpm verify:release`. **Every publish effect depends on this step; it carries no path filter** | `publish.yml#verify` | QC-11 Terminal release verification | preserve | The RI-N1 exact-commit binding; until it merges, publish steps on next depend on `build` only (see §3 gap 1). |
|
|
||||||
| Publish error classification | `publish.yml#publish-npm` | pipeline-step | Publishes `@mosaicstack/*` (minus web) and classifies outcome: success, or the **only tolerated failure** = already-published (EPUBLISHCONFLICT / "cannot publish over" / "previously published"); explicit fatal on npm `E404/E401/ENEEDAUTH/ECONNREFUSED/ETIMEDOUT/ENOTFOUND` and on any unrecognized failure (replacing the old ` | | echo` that hid a registry 404) | `publish.yml#publish-npm` (main/tags, path-filtered on `packages/**`) | QC-12 Publish-effect integrity | preserve | Converts silent publish fall-on-floor into loud failure; allowlist-of-one error tolerance is the right shape. |
|
|
||||||
| Next-lane publish assertions | `publish.yml#publish-next-npm` | pipeline-step | Guards: branch must be `next`, `CI_PIPELINE_NUMBER` required; registry dist-tags JSON must be usable; walks all manifests, strictly parses stable semver, rewrites `X.Y.(Z+1)-next.<N>`; publishes with `--tag next` (never latest); post-publish asserts `npm view @mosaicstack/mosaic@next` resolves to the exact expected version | `publish.yml#publish-next-npm` (push/manual on next) | QC-12 Publish-effect integrity | preserve | Durable prerelease lane with end-to-end resolution proof — the published artifact is verified, not assumed. |
|
|
||||||
| Image destination policy | `publish.yml#build-gateway` / `#build-appservice` / `#build-web` | pipeline-step | Kaniko builds with destination policy: `next` ⇒ sha-tag only (fatal if a tag event sneaks in); `main` ⇒ sha + `latest`; tag events ⇒ sha + `<tag>`; anything else fatal. Path filters only skip **effects**, never the verify step | `publish.yml#build-*` | QC-12 Publish-effect integrity | preserve | Fail-closed tagging matrix; the exclude-list default-safe design keeps stale images impossible. |
|
|
||||||
|
|
||||||
Adjacent pipeline surface (not a probe): `.woodpecker/ci-image.yml` rebuilds the ci-base image on `pnpm-lock.yaml`/`Dockerfile.ci` change with an immutable `lock-<hash>` tag; pipelines consume `:latest`. Recorded for completeness — no code-quality property is checked.
|
|
||||||
|
|
||||||
### 1.7 Root installer tooling (`tools/`)
|
|
||||||
|
|
||||||
| check | location | kind | what it actually verifies | enforcement point | canonical check | disposition | rationale |
|
|
||||||
| --------------------------- | --------------------------------------------------------- | ----- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------- | ------------------------------- | ------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
||||||
| Next-lane installer test | `tools/install-next-lane.test.sh` (`pnpm test:installer`) | shell | Drives `tools/install.sh --next` with faked `node`/`npm` binaries (no network): Node 20 must be rejected; installs must pin **exact** versions (mutable `@next` forbidden); fast path must not unexpectedly fall back to source; gateway-install failure takes the documented fallback | `turbo`-external tail of `pnpm test` → `CI ci.yml#test` | QC-5 Test suite execution | preserve | Hermetic (shimmed) regression net for the installer lane; runs as part of the standard test command. |
|
|
||||||
| Clean-container install E2E | `tools/e2e-install-test.sh` | shell | Full first-run flow in a node:22-alpine container: `install.sh --yes` → `mosaic wizard` (non-interactive) → `mosaic gateway install` → `mosaic gateway verify` exit check (with EXPECTED-SKIP if the installed CLI predates `gateway verify`); skips gracefully without Docker | `local` (manual; requires Docker); **not wired in CI** | QC-5 Test suite execution | strengthen (review) | The only end-to-end proof of the install→verify path; currently operator-initiated only — wire into a periodic/manual CI lane or sign its exclusion explicitly. |
|
|
||||||
| Host installer advisories | `tools/install.sh` (`--check`; `check_fleet_transport`) | shell | `--check` = version comparison only, no install; `check_fleet_transport` warns (non-blocking, by design — tmux is the fleet's dependency, not mosaic's) when the roster-declared transport binary is absent, naming exactly what it blocks; PATH-persistence warnings | `installer` (operator-run) | QC-18 Operator-host drift audit | preserve | Advisory-by-design warnings; the parallel doctor check is drift-tested by §1.3's harness. |
|
|
||||||
|
|
||||||
### 1.8 Pending workstream additions (branch `feat/ri-050-publish-gate` @ `46784c8d`)
|
|
||||||
|
|
||||||
| check | location | kind | what it actually verifies | enforcement point | canonical check | disposition | rationale |
|
|
||||||
| ------------------------------- | ---------------------------------------------------- | ---- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------- | ----------------------------------- | ----------- | ---------------------------------------------------------------------------------------------- |
|
|
||||||
| Canonical terminal verification | `scripts/verify-release.mjs` (`pnpm verify:release`) | ts | One command replaying the full mandatory set as stages — sanitization, upgrade-guard, typecheck (incl. preflight), lint, format, test, build — mirroring `ci.yml` step-for-step; fail-fast on first failing command; requires `bash`+`rsync` on PATH; `--stage <name>` for wiring smoke-tests only | `publish.yml#verify` (pending); `local` (`pnpm verify:release`) | QC-11 Terminal release verification | preserve | The RI-N1 canonical command — CI and publication share one semantic checklist by construction. |
|
|
||||||
| Verify-parity contract test | `scripts/verify-release.test.mjs` | ts | Parses the real `ci.yml`/`publish.yml`: stage table must match ci.yml step-for-step; every publish-effect step (name `publish*` or image-pushing) must transitively depend on `verify`; commit-identity assertion must be present; `verify` must carry no path filter | `test:checkout` → `CI ci.yml#test` (once merged) | QC-11 Terminal release verification | preserve | Guard-of-the-guard at checkout time — the two surfaces cannot drift apart silently. |
|
|
||||||
|
|
||||||
## 2. Canonical check set
|
|
||||||
|
|
||||||
The deduplicated checks every row above maps onto. IDs are stable for RI-3-002 to consume.
|
|
||||||
|
|
||||||
- **QC-1 Checkout integrity.** Owns: the checkout can run its gates — frozen-lockfile dependency resolution, required gate binaries present, no stale build lock, and the `apps/web/.next` generated-state trust chain (real directory, uid ownership, certified source fingerprint, certified symlink manifest). Implemented by `scripts/preflight.mjs` + frozen install steps.
|
|
||||||
- **QC-2 Workspace typecheck.** Owns workspace-wide TypeScript soundness: per-package `tsc --noEmit` over built dependencies (`turbo typecheck`). The single definition invoked by CI, pre-push, and terminal verification.
|
|
||||||
- **QC-3 Workspace lint.** Owns static-analysis policy: per-package ESLint under the root config. One config, one task, every surface.
|
|
||||||
- **QC-4 Format check.** Owns formatting uniformity: Prettier check with the repo ignore list. (The pre-commit variant additionally fixes; the verdict form is this check.)
|
|
||||||
- **QC-5 Test suite execution.** Owns execution of all test surfaces: checkout script units (`node --test`), per-package Vitest suites (including the framework shell chain and its python unitests), the installer-lane shim test, and — once wired — `test-roster-schema.py` and container E2E. Also owns guards-of-the-gate that live inside the chain (terminal-green contract, RCE regression).
|
|
||||||
- **QC-6 Workspace build.** Owns artifact buildability: `turbo build` producing the artifacts publication consumes.
|
|
||||||
- **QC-7 Framework sanitization.** Owns the open-source guarantee for the shipped framework package: no operator-identity tokens anywhere (examples included), no private `$HOME` defaults in shipped scripts, with a self-test that keeps the regexes honest.
|
|
||||||
- **QC-8 Resident-context budget.** Owns the line-count ceilings on framework files injected into every agent's context (Constitution, dispatcher, RUNTIME.md slices) — the CI-enforceable half of the resident-prompt budget.
|
|
||||||
- **QC-9 Test-membership enumeration.** Owns the property that no test suite can silently fall out of CI: disk population vs parsed enumeration surfaces, both-directions staleness, and signed exclusions with reasons. Includes its needle/control harness.
|
|
||||||
- **QC-10 Upgrade/install safety.** Owns the #791 family: operator-path byte-identity across keep-mode upgrades (manifest guard), mid-failure rollback (errtrace-proven), durable pre-update snapshot + verify net + CWE-59 leaf guard, and the v2→v3 migration matrix with shell/TS parity.
|
|
||||||
- **QC-11 Terminal release verification.** Owns the RI-N1 exact-commit binding: commit-identity assertion plus one canonical command (`pnpm verify:release`) replaying the complete mandatory set, with every publish effect depending on it; plus the checkout-time parity/DAG contract test that keeps pipeline and command in sync.
|
|
||||||
- **QC-12 Publish-effect integrity.** Owns publication correctness: npm publish error classification (only already-published tolerated), next-lane versioning and post-publish resolution proof, and image destination/tag policy.
|
|
||||||
- **QC-13 Staged-change hygiene.** Owns commit-time hygiene on staged files (prettier/eslint fix-and-restage) and the self-verifying hook wiring that guarantees the gates are actually installed.
|
|
||||||
- **QC-14 Pre-push gate.** Owns the local push composition: preflight + typecheck + lint + format:check (tests deliberately deferred to CI).
|
|
||||||
- **QC-15 Lease-gate architecture invariant.** Owns "no ungated runtime launches in production code": the scan + allowlist over `packages/`, `apps/`, `plugins/`, `tools/`.
|
|
||||||
- **QC-16 Agent-runtime edit-time checks.** Owns edit-time feedback on agent hosts: the deps-preflight legibility sentinel and typecheck-on-edit, plus their regression harnesses.
|
|
||||||
- **QC-17 Lease-enforcement wiring safety.** Owns the #869 C1/C2/C5 trio: activation capability probe (versioned contract), enforcement-hook wiring gate (default-deny with explicit opt-out), and the doctor check that surfaces a bricked host — with their shell/TS harnesses.
|
|
||||||
- **QC-18 Operator-host drift audit.** Owns host-state health CI cannot see: `mosaic doctor` drift audit (+ fleet transport, both implementations), `fleet doctor` roster classification, `gateway doctor`/`gateway verify` service health, and installer advisories. Advisory exits are part of the contract.
|
|
||||||
- **QC-19 Downstream rails presence check.** Owns "does a scaffolded project still carry its rails files" — today the TS `quality-rails check/doctor` presence loop; per RI-N4 this is the seed that must become the typed evaluator (presence alone is explicitly not parity).
|
|
||||||
- **QC-20 Downstream enforcement verification.** Owns "do the rails actually block" on scaffolded projects: the behavioral planted-commit probe (type error, `any`, lint, gitleaks secret) currently in `verify.sh`/`verify.ps1` behind the `mosaic-quality-verify` adapter.
|
|
||||||
- **QC-21 Downstream rails scaffolding.** Owns putting rails files into a target project: the shell template installer (+ PowerShell twin) and the TS `quality-rails init` scaffolder — currently two paths that must converge.
|
|
||||||
|
|
||||||
## 3. Coverage gaps
|
|
||||||
|
|
||||||
Enforced nowhere but implied, or named in docs/tooling but not wired:
|
|
||||||
|
|
||||||
1. **Publication not yet bound to verification on `next`.** At this base (`8199261c`), `publish.yml` publish steps depend on `build` only; the `verify` step and `scripts/verify-release.mjs` exist on `feat/ri-050-publish-gate` (`46784c8d`) but are not merged. Until RI-1-001 lands, AC-RI-1's negative control cannot hold on the real pipeline.
|
|
||||||
2. **Playwright E2E unwired.** `apps/web` ships `test:e2e` (`playwright test`) with real suites (`admin/auth/chat/navigation.spec.ts`); neither `pnpm test` nor any CI step invokes it. The web UI's user flows are verified only when an operator runs them manually.
|
|
||||||
3. **No secret scanning on this repo.** The framework's own template pre-commit makes gitleaks **required**, and `verify.sh` proves detection with a planted key — but this repository's `.husky/pre-commit` (lint-staged only) and CI run no secret scan. The repo ships the control it does not use.
|
|
||||||
4. **No dependency audit.** The quality `.woodpecker.yml` templates and `docs/CI-SETUP.md` specify `npm audit --audit-level=high` as a pipeline stage; nothing equivalent runs for this repo.
|
|
||||||
5. **No coverage thresholds.** Templates enforce 80% Jest coverage thresholds; this repo's Vitest configs collect coverage with no thresholds — coverage is measured nowhere and enforced nowhere.
|
|
||||||
6. **`test-roster-schema.py` invisible.** A real jsonschema regression suite wired to no surface and invisible to the enumeration guard (its population is `*.sh`; the suite is `.py`). Either enumerate it or sign an exclusion — silence here is the #1017 defect shape.
|
|
||||||
7. **Presence-checker expectations ≠ this repo.** `quality-rails check` expects `.eslintrc`, `biome.json`, `.githooks/pre-commit`, `PR-CHECKLIST.md` for node projects — none describe this monorepo (husky, flat eslint config, no biome, no PR-CHECKLIST.md). The evaluator's check set must be per-subject (versioned, digested), not one global file list.
|
|
||||||
8. **Chain-ordering residual (documented).** `test:framework-shell` is one `&&` chain: a failing link skips every later suite while the step still fails (measured in #1270 — four suites after position 44 had not run since a prior merge). The enumeration guard proves naming, not reachability; both residuals are in-file documented but structurally unfixed.
|
|
||||||
9. **Signed-exclusion burndown open.** 16 signed exclusions remain in `test-enumeration-exclusions.txt`; several are "unmeasured in CI image" or blocked on missing CI tooling (tmux, setsid) — tracked under #1017/#1271. Each is an enforcement promise deferred, not delivered.
|
|
||||||
10. **Windows twins unexercised.** `verify.ps1`, `install.ps1`, `mosaic-doctor.ps1` have no runner anywhere (no Windows CI); behavioral drift from their bash twins is undetectable by construction.
|
|
||||||
11. **QA hook name vs behavior.** `qa-hook-handler.sh` files remediation report templates but performs no verification; the seam's actual gate value is only the deps-preflight sentinel. Anything relying on "QA automation hook" as a check is relying on report-filing.
|
|
||||||
12. **Two test paths, one gated.** CI runs tests against ci-postgres (`DATABASE_URL` set); the local PGlite path is the documented default (AGENTS.md) until KBN-101-02/101-05. Only the CI path is enforced by pipeline.
|
|
||||||
|
|
||||||
## 4. Disposition summary
|
|
||||||
|
|
||||||
| disposition | rows | checks |
|
|
||||||
| ------------------- | ---- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
||||||
| preserve | 43 | Every canonical owner (QC-1..QC-18) plus correct guards-of-the-guard and thin adapters: all of §1.1, the CI-invoked framework probes and adapters in §1.2, all of §1.3, the C1/C2/C5 trio and doctors in §1.4, all of §1.5, all pipeline-only steps in §1.6, §1.7 rows 1 and 3, and §1.8. |
|
|
||||||
| strengthen | 2 | `quality-rails check` and `quality-rails doctor` (QC-19) — the RI-N4 evaluator seed: typed verdicts, versioned/digested check definitions, per-subject check sets. |
|
|
||||||
| strengthen (review) | 9 | `verify.sh` + `verify.ps1` (QC-20), quality `install.sh`/`install.ps1` + `quality-rails init` (QC-21 — scaffold-path convergence), `test-roster-schema.py` (QC-5 — wire or sign), `qa-hook-stdin.sh` seam + `typecheck-hook.sh` (QC-16), `tools/e2e-install-test.sh` (QC-5 — CI lane). |
|
|
||||||
| retire | 0 | None meet the bar: RI-N4 requires effective shell probes be **absorbed before** their paths retire, and no absorption exists yet. The `strengthen (review)` rows are the retirement candidates for RI-3-002 once the evaluator owns their behavior. |
|
|
||||||
|
|
||||||
Row total: 54. Canonical checks: 21 (QC-1..QC-21).
|
|
||||||
@@ -12,11 +12,13 @@ Use the canonical guide, API contract, source, and tests to determine current be
|
|||||||
- [Issue #756 documentation checklist](documentation/756-discord-plugin-checklist.md) — historical completion checklist for the official Discord plugin workstream.
|
- [Issue #756 documentation checklist](documentation/756-discord-plugin-checklist.md) — historical completion checklist for the official Discord plugin workstream.
|
||||||
- [Framework consistency audit — 2026-02-17](documentation/AUDIT-2026-02-17-framework-consistency.md) — historical framework consistency and remediation snapshot.
|
- [Framework consistency audit — 2026-02-17](documentation/AUDIT-2026-02-17-framework-consistency.md) — historical framework consistency and remediation snapshot.
|
||||||
- [Compaction-refresh #830 checklist](compaction-refresh/830-documentation-checklist.md) — historical incomplete-at-snapshot documentation checklist.
|
- [Compaction-refresh #830 checklist](compaction-refresh/830-documentation-checklist.md) — historical incomplete-at-snapshot documentation checklist.
|
||||||
|
- [Issue #1264 documentation checklist](documentation/1264-documentation-checklist.md) — current in-repo user/admin/developer/report coverage and review gate.
|
||||||
|
|
||||||
## Code-review evidence
|
## Code-review evidence
|
||||||
|
|
||||||
- [Issue #756 independent code review](code-review/756-code-review.md) — historical exact-scope review of the official Discord plugin workstream.
|
- [Issue #756 independent code review](code-review/756-code-review.md) — historical exact-scope review of the official Discord plugin workstream.
|
||||||
- [Gateway security-hardening code review — 2026-03-13](code-review/gateway-security-20260313.md) — historical no-blocker review snapshot.
|
- [Gateway security-hardening code review — 2026-03-13](code-review/gateway-security-20260313.md) — historical no-blocker review snapshot.
|
||||||
|
- [Issue #1264 independent code and security review](code-review/1264-code-review.md) — initial finding, remediation, clean re-review, and remaining formal PR-review gate.
|
||||||
|
|
||||||
## Security evidence
|
## Security evidence
|
||||||
|
|
||||||
@@ -26,6 +28,7 @@ Use the canonical guide, API contract, source, and tests to determine current be
|
|||||||
|
|
||||||
- [P8-003 performance optimization report](qa/p8-003-performance-optimization.md) — historical implementation evidence; not a current SLO or production benchmark.
|
- [P8-003 performance optimization report](qa/p8-003-performance-optimization.md) — historical implementation evidence; not a current SLO or production benchmark.
|
||||||
- [Gateway security-hardening QA report — 2026-03-13](qa/gateway-security-20260313.md) — historical test report with its original live-smoke-test limitation.
|
- [Gateway security-hardening QA report — 2026-03-13](qa/gateway-security-20260313.md) — historical test report with its original live-smoke-test limitation.
|
||||||
|
- [Issue #1264 unattended fleet first-start verification](qa/2026-08-16-1264-unattended-first-start.md) — RED/GREEN no-TTY CLI evidence, baseline gates, and explicit real-provider limitation.
|
||||||
|
|
||||||
## Native Kanban/SOT evidence
|
## Native Kanban/SOT evidence
|
||||||
|
|
||||||
|
|||||||
@@ -0,0 +1,97 @@
|
|||||||
|
# Issue #1264 Code and Security Review
|
||||||
|
|
||||||
|
> Branch: `fix/1264-fleet-unattended-first-start` | Base:
|
||||||
|
> `origin/next@476db12b92971634b67fd2057b7577ee5894e449`
|
||||||
|
|
||||||
|
## Initial automated review
|
||||||
|
|
||||||
|
Codex reviewed the pre-PR uncommitted delta with:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
~/.config/mosaic/tools/codex/codex-code-review.sh --uncommitted \
|
||||||
|
-o /tmp/1264-codex-code-review.json
|
||||||
|
```
|
||||||
|
|
||||||
|
Result: `request-changes`, confidence `0.93`, 20 files, one should-fix. `checkSoul()` trimmed
|
||||||
|
`MOSAIC_AGENT_NAME` for pre-seed resolution while composition used the original value, so a padded
|
||||||
|
name could seed files before later refusal.
|
||||||
|
|
||||||
|
Remediation rejected blank/leading/trailing-whitespace values before roster lookup or writes and
|
||||||
|
added three built-CLI no-side-effect regressions. Automated re-review approved that delta with no
|
||||||
|
findings (confidence `0.86`). Initial security review reported risk `none` (confidence `0.91`).
|
||||||
|
|
||||||
|
## Formal exact-head review
|
||||||
|
|
||||||
|
Daphne reviewed PR #1268 at exact head `43fa0477877e0d0f110da8d11c3033b40ddeb191` and filed Gitea
|
||||||
|
review ID 168 as `REQUEST_CHANGES`. The review was source/PR-only; the canary remained untouched.
|
||||||
|
|
||||||
|
Blocking groups:
|
||||||
|
|
||||||
|
1. class mismatch was validated after first-start mutation;
|
||||||
|
2. secure `USER.md` validation was discarded before ordinary path-following composition;
|
||||||
|
3. `existsSync()` treated a dangling destination symlink as missing, allowing counterpart partial
|
||||||
|
publication; and
|
||||||
|
4. the built-CLI/evidence chain allowed stale ignored `dist/`, cited an unshipped canary object, and
|
||||||
|
carried conflicting test totals/pane wording.
|
||||||
|
|
||||||
|
The diagnostic's defaults-only repair advice was also inaccurate for roster/class/destination
|
||||||
|
failures.
|
||||||
|
|
||||||
|
## Formal-review remediation
|
||||||
|
|
||||||
|
All four blocking groups received regressions before production changes. The RED run produced four
|
||||||
|
failures while 1,568 existing tests passed. Remediation then:
|
||||||
|
|
||||||
|
- validates canonical name and class before seeding;
|
||||||
|
- preflights destination directory entries with `lstatSync()` so target and dangling symlinks fail
|
||||||
|
before publication;
|
||||||
|
- securely reads `USER.md` through an `O_NOFOLLOW` descriptor at composition time;
|
||||||
|
- adds a Mosaic build before package Vitest and a dependency build in the clean-checkout command;
|
||||||
|
- replaces defaults-only advice with neutral named-component repair guidance; and
|
||||||
|
- reconciles shipping canary provenance, pane chronology, commands, and totals.
|
||||||
|
|
||||||
|
Remediation code review:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
~/.config/mosaic/tools/codex/codex-code-review.sh --uncommitted \
|
||||||
|
-o /tmp/1264-remediation-code-review.json
|
||||||
|
```
|
||||||
|
|
||||||
|
Result: `approve`, confidence `0.88`, 6 files, no findings. Summary: the fail-closed destination
|
||||||
|
checks, class-validation order, secure composition, and build-before-Vitest path are coherent.
|
||||||
|
|
||||||
|
Remediation security review:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
~/.config/mosaic/tools/codex/codex-security-review.sh --uncommitted \
|
||||||
|
-o /tmp/1264-remediation-security-review.json
|
||||||
|
```
|
||||||
|
|
||||||
|
Result: risk `none`, confidence `0.93`, 9 files, no critical/high/medium/low findings. The sandbox
|
||||||
|
could not run Vitest because Vite attempted to create a temporary config artifact on its read-only
|
||||||
|
mount (`EROFS`); executor-owned focused and full results are recorded in the QA report.
|
||||||
|
|
||||||
|
## Second exact-head review
|
||||||
|
|
||||||
|
Daphne reviewed exact head `9dc90be7e13b1cd609f6df97d43d890ef5392ca0` and filed Gitea review
|
||||||
|
ID 169 as `REQUEST_CHANGES`. Review 169 confirmed all review-168 closures, then found:
|
||||||
|
|
||||||
|
1. the new point-of-use reader was Linux-only but had been applied to every standalone USER read,
|
||||||
|
breaking supported non-fleet macOS composition; and
|
||||||
|
2. explicit blank/whitespace `MOSAIC_AGENT_CLASS` was treated as absent and could seed before
|
||||||
|
runtime, while only undefined should mean absent.
|
||||||
|
|
||||||
|
Red-first remediation preserves legacy `readOptional()` for standalone composition, keeps descriptor
|
||||||
|
no-follow consumption fleet-only, moves the replacement-symlink case under a valid fleet identity,
|
||||||
|
and rejects defined blank/whitespace classes before seeding. Three blank-class CLI cases and one
|
||||||
|
tolerant standalone composition case failed before the source change and pass after it.
|
||||||
|
|
||||||
|
Review-169 remediation code review approved at confidence `0.90` (4 files, no findings). Security
|
||||||
|
review reported risk `none` at confidence `0.90` (4 files, no findings). The review sandbox retained
|
||||||
|
its known Vite `EROFS` limitation; executor-owned tests are in the QA report.
|
||||||
|
|
||||||
|
## Remaining review gate
|
||||||
|
|
||||||
|
Daphne must re-review the next exact pushed head. This report cannot record that future verdict
|
||||||
|
without changing the reviewed head, so the authoritative terminal verdict belongs to PR #1268's
|
||||||
|
Gitea review record. Fred and goals are excluded as reviewers.
|
||||||
@@ -0,0 +1,32 @@
|
|||||||
|
# #1264 Documentation Completion Checklist
|
||||||
|
|
||||||
|
## Required artifacts
|
||||||
|
|
||||||
|
- [x] `docs/PRD.md` updated with `FCM-REQ-12` and `AC-FCM-10`.
|
||||||
|
- [x] User workflow documents unattended fleet first start and separate prerequisites.
|
||||||
|
- [x] Administrator operations page documents source/destination ownership, failure handling, and an
|
||||||
|
exact-source build-before-Vitest verification gate.
|
||||||
|
- [x] Developer architecture page documents control flow, identity authority, concurrency, and non-goals.
|
||||||
|
- [x] `docs/SITEMAP.md` and book indexes updated.
|
||||||
|
- [x] QA evidence is under `docs/reports/qa/`; working notes are under `docs/scratchpads/`.
|
||||||
|
- [x] Framework defaults README reflects fleet-versus-standalone behavior.
|
||||||
|
|
||||||
|
## API coverage
|
||||||
|
|
||||||
|
- [x] No HTTP/API endpoint or DTO changed; OpenAPI and endpoint indexes are not applicable.
|
||||||
|
|
||||||
|
## Structural standards
|
||||||
|
|
||||||
|
- [x] User, administrator, developer, report, and sitemap indexes link the new pages.
|
||||||
|
- [x] No noncanonical file was added at the `docs/` root.
|
||||||
|
- [x] Canonical documentation remains in-repo; no external publication was requested or performed.
|
||||||
|
|
||||||
|
## Review gate
|
||||||
|
|
||||||
|
- [x] Initial padded-name finding remediated and automated re-review approved.
|
||||||
|
- [x] Daphne formal review ID 168 completed on exact first head `43fa0477` and requested changes.
|
||||||
|
- [x] Four review-168 groups reproduced red and remediated; automated reviews are clean.
|
||||||
|
- [x] Daphne review ID 169 completed on exact head `9dc90be7` and confirmed review-168 closures.
|
||||||
|
- [x] Review-169 standalone-portability and blank-class blockers reproduced red and remediated;
|
||||||
|
automated reviews are clean.
|
||||||
|
- [ ] Daphne exact-second-remediation-head re-review completed after push (Fred/goals excluded).
|
||||||
@@ -0,0 +1,220 @@
|
|||||||
|
# #1264 Unattended Fleet First-Start Verification
|
||||||
|
|
||||||
|
> Status: **IN PROGRESS — review-169 remediation complete locally; push/re-review pending** |
|
||||||
|
> Executor: goals | Date: 2026-08-16 | Target: isolated local fixtures only
|
||||||
|
|
||||||
|
## Objective
|
||||||
|
|
||||||
|
Verify that a named fleet seat launched through a systemd-equivalent, no-TTY environment on a clean
|
||||||
|
host reaches its runtime boundary without an interactive Mosaic identity wizard. Preserve standalone
|
||||||
|
wizard behavior and canonical-roster ownership of exact seat identity.
|
||||||
|
|
||||||
|
## Source evidence accepted for local verification
|
||||||
|
|
||||||
|
Daphne's canary Run-7 report is reachable from jarvis-brain `origin/main` at
|
||||||
|
`8bf94afeb8c7d5df96cdd4a4508e75a1d2999710`,
|
||||||
|
`docs/reports/2026-08-16_sbx-canary-greenfield-e2e.md`. The earlier local object
|
||||||
|
`6c0b6fc70ae6a179a1b7ff9dedfc54e9adccd19a` is not reachable from an origin ref and is not used as
|
||||||
|
shipping provenance. Run 7 measured:
|
||||||
|
|
||||||
|
```text
|
||||||
|
systemd -> start-agent-session.sh -> mosaic yolo pi (PID 3726)
|
||||||
|
-> child mosaic wizard (PID 3762)
|
||||||
|
```
|
||||||
|
|
||||||
|
The pane was preserved when Run 7 was captured. Formal review ID 168 records that an authorized
|
||||||
|
rollback occurred later. This task never accessed or altered the canary VM, pane, snapshot, or
|
||||||
|
rollback state. Product behavior is independently tested here with temporary roots and fake runtime
|
||||||
|
executables.
|
||||||
|
|
||||||
|
## Controls
|
||||||
|
|
||||||
|
- Original base: `origin/next@476db12b92971634b67fd2057b7577ee5894e449`.
|
||||||
|
- PR: #1268, first pushed head `43fa0477877e0d0f110da8d11c3033b40ddeb191`.
|
||||||
|
- `DATABASE_URL` remains unset for local tests.
|
||||||
|
- No runtime/provider credential or token value, VM, installed Mosaic tree, unit, timer, PATH profile,
|
||||||
|
or live tmux session is read or mutated. Standard Gitea/Woodpecker wrappers authenticate metadata
|
||||||
|
reads/writes without exposing credential values.
|
||||||
|
- Tiny's runtime-preflight and `start-agent-session.sh` PATH work remain out of scope.
|
||||||
|
- Held PR #1213 is not a dependency.
|
||||||
|
|
||||||
|
## Requirements-to-evidence map
|
||||||
|
|
||||||
|
| Acceptance criterion | Method | Evidence |
|
||||||
|
| ---------------------------------------------------------------------- | --------------------------------------------------------------- | ----------------------------- |
|
||||||
|
| No-TTY fleet first start avoids wizard and reaches runtime | Exact-source built CLI with piped stdin | CLI GREEN |
|
||||||
|
| Missing top-level identity files are initialized from shipped defaults | Exact-byte and `0600` assertions | CLI + filesystem GREEN |
|
||||||
|
| Exact seat identity remains roster-owned | Captured argv; mismatched/blank class no-side-effect refusals | CLI GREEN |
|
||||||
|
| Existing operator identity is never overwritten | Custom bytes/mode with defaults removed | CLI + filesystem GREEN |
|
||||||
|
| Concurrent/repeated first start is safe | Four parallel CLIs plus repeated launch | CLI GREEN |
|
||||||
|
| Missing/unsafe defaults and destinations fail before partial mutation | Missing, target/dangling symlink, oversized, invalid-root cases | Filesystem/CLI GREEN |
|
||||||
|
| Validated `USER.md` cannot be replaced by an external symlink | Seed, replace, compose at point of use | Composition GREEN |
|
||||||
|
| Standalone launch retains wizard | Same built CLI without fleet identity | CLI GREEN |
|
||||||
|
| Built-CLI evidence cannot use stale ignored `dist/` | Build-with-dependencies gate before Vitest | Package script + command gate |
|
||||||
|
|
||||||
|
## Initial RED
|
||||||
|
|
||||||
|
Production source remained unchanged after adding the first reproducer. The CLI was built from
|
||||||
|
`origin/next@476db12` before the test.
|
||||||
|
|
||||||
|
```bash
|
||||||
|
env -u DATABASE_URL pnpm --filter @mosaicstack/mosaic exec vitest run \
|
||||||
|
src/commands/launch-first-start.spec.ts
|
||||||
|
```
|
||||||
|
|
||||||
|
Exit `1`; one file and one test failed. Output included:
|
||||||
|
|
||||||
|
```text
|
||||||
|
[mosaic] SOUL.md not found. Running setup wizard...
|
||||||
|
◆ What would you like to do?
|
||||||
|
[mosaic] Setup failed. Run: mosaic wizard
|
||||||
|
AssertionError: expected 1 to be +0
|
||||||
|
```
|
||||||
|
|
||||||
|
The fake runtime-boundary capture was not created. Complete stdout/stderr was retained at
|
||||||
|
`/tmp/1264-red.out` during that work session.
|
||||||
|
|
||||||
|
## Formal-review remediation RED
|
||||||
|
|
||||||
|
Daphne's exact-head review ID 168 requested changes at `43fa0477`. Before changing production code,
|
||||||
|
new regressions were run against an exact-source build. Four tests failed while the existing 1,568
|
||||||
|
passed:
|
||||||
|
|
||||||
|
1. valid roster name plus mismatched ambient class seeded both files before refusal;
|
||||||
|
2. dangling `SOUL.md` allowed `USER.md` to be published before refusal;
|
||||||
|
3. dangling `USER.md` allowed `SOUL.md` to be published before refusal; and
|
||||||
|
4. replacing a securely validated `USER.md` with an external symlink was followed by composition.
|
||||||
|
|
||||||
|
This establishes that all four review-168 findings were observable on the pushed implementation.
|
||||||
|
|
||||||
|
Daphne's review ID 169 then found two more exact-head failures at `9dc90be7`. Before production
|
||||||
|
changes, four new assertions failed:
|
||||||
|
|
||||||
|
1. standalone composition routed an unreadable optional `USER.md` through the Linux-only descriptor
|
||||||
|
reader instead of the legacy portable tolerant path; and
|
||||||
|
2. explicit `MOSAIC_AGENT_CLASS` values `""`, `" "`, and tab were treated as absent, seeded both
|
||||||
|
identity files, and reached runtime.
|
||||||
|
|
||||||
|
The replacement-symlink case was also moved under a valid roster identity so it tests the fleet-only
|
||||||
|
security boundary rather than standalone behavior.
|
||||||
|
|
||||||
|
## Final GREEN
|
||||||
|
|
||||||
|
The production-kind command builds Mosaic and all workspace dependencies before invoking Vitest,
|
||||||
|
because `dist/` is ignored and may otherwise be absent or stale:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
env -u DATABASE_URL sh -c '
|
||||||
|
pnpm --filter @mosaicstack/mosaic... build &&
|
||||||
|
pnpm --filter @mosaicstack/mosaic exec vitest run \
|
||||||
|
src/commands/fleet-first-start-identity.spec.ts \
|
||||||
|
src/commands/launch-first-start.spec.ts \
|
||||||
|
src/commands/launch.spec.ts \
|
||||||
|
src/commands/compose-contract.spec.ts \
|
||||||
|
src/config/file-adapter.test.ts \
|
||||||
|
src/cli-smoke.spec.ts
|
||||||
|
'
|
||||||
|
```
|
||||||
|
|
||||||
|
Exit `0`: `6/6` files, `128/128` tests.
|
||||||
|
|
||||||
|
- 15 real-CLI/no-TTY tests cover exact roster name/class, byte-equal `0600` seeds, no-clobber,
|
||||||
|
partial seed, missing/symlink defaults, unknown/padded/blank name, mismatched or explicitly blank
|
||||||
|
class, standalone wizard preservation, and four concurrent starts.
|
||||||
|
- 12 direct filesystem tests cover complete publication, existing operators, idempotence, source
|
||||||
|
prevalidation, target and dangling destination links, invalid roots, oversized input, and
|
||||||
|
unexpected link errors.
|
||||||
|
- Composition coverage deterministically replaces a valid fleet seat's validated `USER.md` with an
|
||||||
|
external symlink and requires refusal at point of use. A separate standalone case proves tolerant
|
||||||
|
optional composition remains outside the Linux-only fleet reader.
|
||||||
|
|
||||||
|
Full package gate (which rebuilds Mosaic itself after the clean-checkout dependency build):
|
||||||
|
|
||||||
|
```bash
|
||||||
|
env -u DATABASE_URL pnpm --filter @mosaicstack/mosaic run test:vitest
|
||||||
|
```
|
||||||
|
|
||||||
|
Exit `0`: `88/88` files, `1,577/1,577` tests.
|
||||||
|
|
||||||
|
Focused helper + point-of-use coverage:
|
||||||
|
|
||||||
|
```text
|
||||||
|
2 files, 53/53 tests
|
||||||
|
Statements 97.84% | Branches 91.66% | Functions 100% | Lines 97.84%
|
||||||
|
Exit 0
|
||||||
|
```
|
||||||
|
|
||||||
|
Final repository gates after remediation:
|
||||||
|
|
||||||
|
```text
|
||||||
|
pnpm preflight exit 0
|
||||||
|
pnpm typecheck 45/45 tasks, exit 0
|
||||||
|
pnpm lint 25/25 tasks, exit 0
|
||||||
|
pnpm build 25/25 tasks, exit 0
|
||||||
|
pnpm format:check exit 0
|
||||||
|
git diff --check exit 0
|
||||||
|
```
|
||||||
|
|
||||||
|
Pre-PR targeted shell runs on the unchanged shell surfaces also passed:
|
||||||
|
|
||||||
|
```text
|
||||||
|
bash framework/tools/fleet/test-start-agent-session.sh exit 0 locally
|
||||||
|
bash framework/tools/quality/scripts/test-install-migration.sh 21 passed, 0 failed
|
||||||
|
bash framework/tools/_scripts/test-mosaic-init-rce.sh PASS
|
||||||
|
```
|
||||||
|
|
||||||
|
The aggregate local `test:framework-shell` run stopped at `invariant_r_unittest.py`: installed
|
||||||
|
operator-global Pi is `0.84.2`, while the invariant is measured for `0.84.1`. Later aggregate stages
|
||||||
|
remain unmeasured except the targeted suites above. Root `pnpm test` remains locally **UNTESTED**
|
||||||
|
because this checkout prohibits the PostgreSQL-dependent gateway isolation path.
|
||||||
|
|
||||||
|
## Review and security evidence
|
||||||
|
|
||||||
|
- Initial Codex review found padded-name mutation-before-refusal; it was fixed with three
|
||||||
|
no-side-effect regressions.
|
||||||
|
- Codex review of the formal-review remediation: `approve`, confidence `0.88`, 6 files, no findings.
|
||||||
|
- Codex security review of the remediation: risk `none`, confidence `0.93`, 9 files, no findings.
|
||||||
|
Its sandbox could not execute Vitest because Vite attempted a write on a read-only mount; the
|
||||||
|
executor-owned results above are the test evidence.
|
||||||
|
- Daphne formal review ID 168 at exact head `43fa0477`: `REQUEST_CHANGES`, four blocking groups; all
|
||||||
|
closed by review 169.
|
||||||
|
- Daphne formal review ID 169 at exact head `9dc90be7`: `REQUEST_CHANGES`, two blocking groups
|
||||||
|
(standalone portability and explicit blank class). Both now have red-first regressions and local
|
||||||
|
green remediation.
|
||||||
|
- Codex review of review-169 remediation: `approve`, confidence `0.90`, 4 files, no findings.
|
||||||
|
- Codex security review of review-169 remediation: risk `none`, confidence `0.90`, 4 files, no
|
||||||
|
findings. Exact-new-head Daphne re-review is pending until that head is pushed.
|
||||||
|
|
||||||
|
## CI evidence and external blocker
|
||||||
|
|
||||||
|
Pipeline 2445 ran against exact first head `43fa0477`:
|
||||||
|
|
||||||
|
- install, sanitization, upgrade guard, typecheck, lint, and format passed;
|
||||||
|
- Mosaic Vitest passed `88/88`, `1,568/1,568`; and
|
||||||
|
- the test step emitted exactly one `FAIL:` line:
|
||||||
|
|
||||||
|
```text
|
||||||
|
FAIL: host provides 'pi' in the system path; missing-binary cases are not measurable here
|
||||||
|
```
|
||||||
|
|
||||||
|
That line comes from the inherited `test-start-agent-session.sh` CI-fit guard, not #1264. Fred filed
|
||||||
|
the correction as PR #1270. Its pipeline 2448 is terminal green and proves the four formerly masked
|
||||||
|
suites execute, but #1270 is not merged, so `next` still carries the failing chain. A new #1268
|
||||||
|
pipeline 2449 at `9dc90be7` reproduced the same single inherited `FAIL:` after Mosaic passed
|
||||||
|
`1,573/1,573`. A new pipeline is pending the review-169 remediation push. Terminal-green #1268 CI is
|
||||||
|
not claimed.
|
||||||
|
|
||||||
|
PR #1268's envelope was read back as `user.login=mos-dt-0`; its commit is explicitly authored and
|
||||||
|
committed by `goals <[email protected]>`. No goals Gitea login exists on this host, and no
|
||||||
|
other principal was borrowed. The cross-wrapper principal defect is tracked in #1272.
|
||||||
|
|
||||||
|
## Explicitly untested
|
||||||
|
|
||||||
|
- Canary VM remediation/restart: **UNTESTED and prohibited**.
|
||||||
|
- Real Pi authentication/provider prompt and task execution: **UNTESTED**.
|
||||||
|
- PR #1213 composition layer: **UNTESTED and not required**.
|
||||||
|
- Deployment/published npm behavior: **UNTESTED until merge/release**.
|
||||||
|
- Local PostgreSQL execution/migration: **UNTESTED and prohibited**.
|
||||||
|
|
||||||
|
The local gate proves Mosaic crosses its identity boundary and reaches a fake lease-runtime boundary;
|
||||||
|
it does not claim provider readiness, deployment, or a currently running canary seat.
|
||||||
@@ -0,0 +1,104 @@
|
|||||||
|
# #1264 — Unattended fleet first start
|
||||||
|
|
||||||
|
## Tracking
|
||||||
|
|
||||||
|
- Issue: `mosaicstack/stack#1264`
|
||||||
|
- PR: `mosaicstack/stack#1268`
|
||||||
|
- Branch: `fix/1264-fleet-unattended-first-start`
|
||||||
|
- Base: `origin/next@476db12b92971634b67fd2057b7577ee5894e449`
|
||||||
|
- First pushed head: `43fa0477877e0d0f110da8d11c3033b40ddeb191`
|
||||||
|
- Current remediation worktree: `/var/home/jason.woltje/agent-work/1264-review2-remediation`
|
||||||
|
- Coordinator: Fred; reviewer must be neither Fred nor this implementation seat.
|
||||||
|
- `docs/TASKS.md` is orchestrator-owned and is not modified by this worker.
|
||||||
|
|
||||||
|
The original `/var/home/jason.woltje/agent-work/1264-unattended-first-start` and first remediation
|
||||||
|
worktrees were removed without force after each pushed head and clean state were verified. The
|
||||||
|
Fred-authorized plain-Git worktree exception was reused for exact-head review remediation because
|
||||||
|
`/src` remains unavailable.
|
||||||
|
|
||||||
|
## Objective
|
||||||
|
|
||||||
|
A roster-owned fleet seat launched from systemd on a clean host must cross Mosaic's first-run identity
|
||||||
|
gate without a human or TTY, while retaining exact name/class from the canonical roster and
|
||||||
|
preserving the standalone interactive wizard.
|
||||||
|
|
||||||
|
## Intake and boundaries
|
||||||
|
|
||||||
|
- Shipping canary provenance is jarvis-brain `origin/main` commit
|
||||||
|
`8bf94afeb8c7d5df96cdd4a4508e75a1d2999710`. The earlier local `6c0b6fc...` object is not used.
|
||||||
|
- The Run-7 pane was preserved when evidence was captured; formal review records a later authorized
|
||||||
|
rollback. This task never accessed or altered the canary.
|
||||||
|
- Tiny's concurrent runtime-preflight, `start-agent-session.sh`, and #1258 PATH seam remain untouched.
|
||||||
|
- Held PR #1213 is not a dependency.
|
||||||
|
- No runtime/provider credential values or provider calls, installed-host changes, PostgreSQL, unit,
|
||||||
|
timer, or profile mutation. Tests use temporary roots and fake executables only; Gitea/Woodpecker
|
||||||
|
metadata operations use standard wrappers without exposing credentials.
|
||||||
|
|
||||||
|
## Requirements and design
|
||||||
|
|
||||||
|
- PRD IDs: `FCM-REQ-12`, `AC-FCM-10`; `FCM-REQ-11` is reserved by #1256.
|
||||||
|
- A present fleet name must be nonblank, whitespace-exact, and resolve through the canonical roster.
|
||||||
|
- Any defined ambient class, including blank/whitespace, must canonicalize to the roster class before
|
||||||
|
mutation; only undefined means absent.
|
||||||
|
- Preflight all destination directory entries with no-follow existence semantics so dangling links
|
||||||
|
fail before counterpart publication.
|
||||||
|
- Seed only missing top-level files from bounded regular defaults with owner-private, atomic,
|
||||||
|
no-clobber hard links.
|
||||||
|
- Generic defaults are behavior, not identity or authority.
|
||||||
|
- Securely consume fleet `USER.md` through a Linux descriptor at composition time.
|
||||||
|
- Standalone composition retains the portable tolerant USER read and missing identity retains the
|
||||||
|
wizard.
|
||||||
|
|
||||||
|
## Progress
|
||||||
|
|
||||||
|
- [x] Issue, canary report, Tiny collision state, and PRD read/amended.
|
||||||
|
- [x] Initial production-kind RED captured with a real built CLI and no TTY.
|
||||||
|
- [x] Implementation, tests, user/admin/developer docs, QA, and indexes delivered.
|
||||||
|
- [x] Initial automated review finding (padded name before write) remediated.
|
||||||
|
- [x] Commit `43fa0477` pushed; PR #1268 opened against `next`; original worktree removed cleanly.
|
||||||
|
- [x] Daphne formal review ID 168 completed on exact first head: `REQUEST_CHANGES` with four groups.
|
||||||
|
- [x] All four review-168 groups reproduced red before remediation and passed at `9dc90be7`.
|
||||||
|
- [x] Daphne review ID 169 completed on `9dc90be7`: review-168 closures confirmed; two new blockers.
|
||||||
|
- [x] Review-169 portability and blank-class blockers reproduced red and now pass locally.
|
||||||
|
- [x] Review-169 Codex review approved; security review risk `none`.
|
||||||
|
- [ ] Commit/push second remediation with explicit goals author/committer; verify remote object/content.
|
||||||
|
- [ ] Daphne exact-new-head re-review.
|
||||||
|
- [ ] Terminal #1268 CI. Pipeline 2445's only `FAIL:` was the inherited Pi-PATH CI-fit guard; PR
|
||||||
|
#1270's pipeline 2448 is green, but #1270 is not merged.
|
||||||
|
- [ ] Remove the clean remediation worktree after push.
|
||||||
|
|
||||||
|
## Test evidence
|
||||||
|
|
||||||
|
### Initial RED
|
||||||
|
|
||||||
|
The built `origin/next` CLI entered `mosaic wizard`, rendered `What would you like to do?`, exited 1,
|
||||||
|
and never created the fake runtime-boundary capture.
|
||||||
|
|
||||||
|
### Formal-review RED
|
||||||
|
|
||||||
|
Against exact first-head production code, four new tests failed while 1,568 existing tests passed:
|
||||||
|
class mismatch mutated before refusal; each dangling destination left its counterpart; and a
|
||||||
|
replacement `USER.md` symlink was consumed by composition. Review-169 RED then proved standalone
|
||||||
|
composition hit the Linux-only reader and three explicit blank/whitespace class cases seeded and
|
||||||
|
launched.
|
||||||
|
|
||||||
|
### Final local GREEN
|
||||||
|
|
||||||
|
- Exact-source focused gate: `6/6` files, `128/128` tests.
|
||||||
|
- Full exact-source Mosaic Vitest: `88/88` files, `1,577/1,577` tests.
|
||||||
|
- Helper + point-of-use coverage: `53/53`; 97.84% statements/lines, 91.66% branches, 100% functions.
|
||||||
|
- Root preflight passed; typecheck `45/45`, lint `25/25`, build `25/25`.
|
||||||
|
- Initial targeted shell gates passed: start-agent-session, install migration `21/21`, init-RCE.
|
||||||
|
- Local aggregate framework shell stops at operator-global Pi `0.84.2` versus measured `0.84.1`.
|
||||||
|
- Local root `pnpm test` remains unrun because the checkout prohibits its PostgreSQL-dependent path.
|
||||||
|
|
||||||
|
The full evidence and command boundaries are in
|
||||||
|
`docs/reports/qa/2026-08-16-1264-unattended-first-start.md`.
|
||||||
|
|
||||||
|
## Review / delivery notes
|
||||||
|
|
||||||
|
- Review-168 remediation Codex review: approve `0.88`; security risk `none` `0.93`.
|
||||||
|
- Review-169 remediation Codex review: approve `0.90`; security risk `none` `0.90`.
|
||||||
|
- PR envelope reads `mos-dt-0`; the commit reads goals/goals. No goals Gitea principal exists on this
|
||||||
|
host, so no other principal will be borrowed. Tracked in #1272.
|
||||||
|
- PR #1270 is pushed, not merged. Do not represent `next` or #1268 CI as green until measured.
|
||||||
@@ -7,6 +7,10 @@
|
|||||||
- [DOCS-IA-001 — information architecture](DOCS-IA-001.md) — completed structure-design and documentation-contract record.
|
- [DOCS-IA-001 — information architecture](DOCS-IA-001.md) — completed structure-design and documentation-contract record.
|
||||||
- [DOCS-IA-002 — catalog audit and migration](DOCS-IA-002-catalog-audit.md) — active coordinator progress, autonomous lane state, verification evidence, and authority blockers.
|
- [DOCS-IA-002 — catalog audit and migration](DOCS-IA-002-catalog-audit.md) — active coordinator progress, autonomous lane state, verification evidence, and authority blockers.
|
||||||
|
|
||||||
|
## Active implementation records
|
||||||
|
|
||||||
|
- [Issue #1264 — unattended fleet first start](1264-unattended-first-start.md) — plan, RED/GREEN evidence, collision boundaries, and PR lifecycle state.
|
||||||
|
|
||||||
Completed scratchpads may remain here when they provide useful delivery provenance. Their conclusions must be reflected in the owning canonical page before the scratchpad is treated as complete.
|
Completed scratchpads may remain here when they provide useful delivery provenance. Their conclusions must be reflected in the owning canonical page before the scratchpad is treated as complete.
|
||||||
|
|
||||||
## Related
|
## Related
|
||||||
|
|||||||
@@ -102,7 +102,7 @@ mosaic yolo pi # Launch Pi in yolo mode
|
|||||||
The launcher:
|
The launcher:
|
||||||
|
|
||||||
1. Verifies `~/.config/mosaic` exists
|
1. Verifies `~/.config/mosaic` exists
|
||||||
2. Verifies `SOUL.md` exists (auto-runs `mosaic init` if missing)
|
2. Resolves identity: standalone launches auto-run `mosaic init` when `SOUL.md` is missing; exact roster-owned fleet launches validate name/class, atomically seed only missing `SOUL.md`/`USER.md` from generic `defaults/`, securely consume `USER.md`, and never prompt
|
||||||
3. Injects `AGENTS.md` into the runtime
|
3. Injects `AGENTS.md` into the runtime
|
||||||
4. Forwards all arguments to the runtime CLI
|
4. Forwards all arguments to the runtime CLI
|
||||||
|
|
||||||
|
|||||||
@@ -39,20 +39,3 @@ packages/mosaic/framework/tools/tmux/test-send-message-verdict.sh | requires rea
|
|||||||
# recorded judgement. These lines ARE that judgement, signed.)
|
# recorded judgement. These lines ARE that judgement, signed.)
|
||||||
packages/mosaic/framework/tools/orchestrator/smoke-test.sh | behavior smoke checks for coord continue/run workflows, run manually by orchestrator seats; unmeasured in CI; #1017 burndown
|
packages/mosaic/framework/tools/orchestrator/smoke-test.sh | behavior smoke checks for coord continue/run workflows, run manually by orchestrator seats; unmeasured in CI; #1017 burndown
|
||||||
packages/mosaic/framework/tools/wake/validate-973/microtest-wake-assert.sh | #973 instrument self-test, run as a precondition of the validate-973 evidence procedure rather than as a standing CI suite; #1017 burndown candidate
|
packages/mosaic/framework/tools/wake/validate-973/microtest-wake-assert.sh | #973 instrument self-test, run as a precondition of the validate-973 evidence procedure rather than as a standing CI suite; #1017 burndown candidate
|
||||||
|
|
||||||
# --- tools/fleet: precondition is unsatisfiable in the CI image (#1271) ---
|
|
||||||
# Signed by fred (sb-it-1-dt, 2026-08-16) at origin/next 476db12.
|
|
||||||
# This suite asserts the launcher's behaviour when `mosaic` and `pi` are MISSING.
|
|
||||||
# It shims fakes into $FAKE_BIN, but the constructed PANE_PATH always ends in the
|
|
||||||
# real system path, so on a host that installs those binaries the missing-binary
|
|
||||||
# cases cannot be measured at all. The suite's own guard (line 103) says so and
|
|
||||||
# fails rather than reporting a pass it cannot back. That guard is correct.
|
|
||||||
# The error was wiring the suite into CI: #1017 (c56483eb) enumerated it and
|
|
||||||
# dropped this exclusion, and the CI image provides `pi` in the system path, so
|
|
||||||
# it has failed on every pipeline since. Measured 2026-08-16 across pipelines
|
|
||||||
# 2444 (#1256), 2438 (#1240) and 2441 (#1017-quality): exactly one FAIL line in
|
|
||||||
# each full log, identical, this assertion; control `zzz-not-present-zzz` -> 0.
|
|
||||||
# Burn-down and the full measurement are tracked in #1271; unwired by PR #1270.
|
|
||||||
# Because test:framework-shell is one && chain and this sat at position 44 of 48,
|
|
||||||
# the four suites after it had not run at all since the merge.
|
|
||||||
packages/mosaic/framework/tools/fleet/test-start-agent-session.sh | precondition unsatisfiable in the CI image: asserts missing-binary behaviour, but PANE_PATH always ends in the system path and the image provides `pi` there; guard at line 103 fails by design rather than passing unmeasured. Burn down by controlling the tail of PANE_PATH inside the test. NOT by removing `pi` from the image: the CI image installs @earendil-works/[email protected] deliberately (measured in pipeline 2444's test-step log), and other suites depend on that pin. Burn-down tracked in #1271
|
|
||||||
|
|||||||
@@ -24,8 +24,9 @@
|
|||||||
"build": "tsc",
|
"build": "tsc",
|
||||||
"lint": "eslint src",
|
"lint": "eslint src",
|
||||||
"typecheck": "tsc --noEmit",
|
"typecheck": "tsc --noEmit",
|
||||||
"test": "vitest run --passWithNoTests && pnpm run test:framework-shell",
|
"test": "pnpm run test:vitest && pnpm run test:framework-shell",
|
||||||
"test:framework-shell": "bash framework/tools/quality/scripts/check-test-enumeration.sh && bash framework/tools/quality/scripts/test-check-test-enumeration.sh && python3 src/lease-broker/daemon_deadline_unittest.py && python3 src/lease-broker/normative_fragments_unittest.py && python3 src/lease-broker/promotion_binding_unittest.py && python3 src/lease-broker/promotion_trigger_unittest.py && python3 src/lease-broker/receipt_challenge_unittest.py && python3 src/lease-broker/context_recovery_unittest.py && python3 src/lease-broker/recovery_runtime_unittest.py && python3 src/lease-broker/recovery_b1_adversarial_unittest.py && python3 src/lease-broker/receipt_observer_client_unittest.py && python3 src/lease-broker/invariant_r_unittest.py && python3 src/lease-broker/framework_skill_portability_unittest.py && python3 src/mutator-gate/runtime_tools_unittest.py && python3 src/mutator-gate/runtime_launch_guard_unittest.py && python3 src/mutator-gate/version_coupling_unittest.py && python3 framework/tools/lease-broker/check-runtime-launches.py --root ../.. && bash framework/tools/codex/test-pr-diff-context.sh && bash framework/tools/qa/test-deps-preflight.sh && bash framework/tools/git/test-pr-review-gitea-comment.sh && bash framework/tools/git/test-pr-review-repo-host-override.sh && bash framework/tools/git/test-ci-queue-wait-branch-absent.sh && bash framework/tools/git/test-ci-queue-wait-tristate.sh && bash framework/tools/git/test-ci-queue-wait-github-checks.sh && bash framework/tools/git/test-pr-merge-queue-branch.sh && bash framework/tools/git/test-pr-merge-head-pin.sh && bash framework/tools/git/test-pr-merge-message-field.sh && bash framework/tools/git/test-git-credential-mosaic.sh && bash framework/tools/git/test-gitea-token-identity.sh && bash framework/tools/woodpecker/test-terminal-green-contract.sh && bash framework/tools/_scripts/test-install-ordering-guard.sh && bash framework/tools/_scripts/test-mosaic-init-rce.sh && bash framework/tools/tmux/agent-send.test.sh && bash framework/tools/wake/test-wake-store-ack.sh && bash framework/tools/wake/test-wake-store-enqueue-race.sh && bash framework/tools/wake/test-wake-digest-hmac.sh && bash framework/tools/wake/test-wake-digest-quarantine.sh && bash framework/tools/wake/test-wake-detector.sh && bash framework/tools/wake/test-wake-fn-oracle.sh && bash framework/tools/wake/test-wake-reconcile.sh && bash framework/tools/wake/test-wake-beacon.sh && bash framework/tools/wake/test-wake-preimage.sh && bash framework/tools/wake/test-wake-install.sh && bash framework/tools/glpi/test-list-http-status.sh && bash framework/tools/orchestrator/test-board-roll.sh && bash framework/tools/woodpecker/test-ci-wait-exit-matrix.sh && bash framework/tools/_scripts/test-fleet-transport-check.sh"
|
"test:vitest": "pnpm run build && vitest run --passWithNoTests",
|
||||||
|
"test:framework-shell": "bash framework/tools/quality/scripts/check-test-enumeration.sh && bash framework/tools/quality/scripts/test-check-test-enumeration.sh && python3 src/lease-broker/daemon_deadline_unittest.py && python3 src/lease-broker/normative_fragments_unittest.py && python3 src/lease-broker/promotion_binding_unittest.py && python3 src/lease-broker/promotion_trigger_unittest.py && python3 src/lease-broker/receipt_challenge_unittest.py && python3 src/lease-broker/context_recovery_unittest.py && python3 src/lease-broker/recovery_runtime_unittest.py && python3 src/lease-broker/recovery_b1_adversarial_unittest.py && python3 src/lease-broker/receipt_observer_client_unittest.py && python3 src/lease-broker/invariant_r_unittest.py && python3 src/lease-broker/framework_skill_portability_unittest.py && python3 src/mutator-gate/runtime_tools_unittest.py && python3 src/mutator-gate/runtime_launch_guard_unittest.py && python3 src/mutator-gate/version_coupling_unittest.py && python3 framework/tools/lease-broker/check-runtime-launches.py --root ../.. && bash framework/tools/codex/test-pr-diff-context.sh && bash framework/tools/qa/test-deps-preflight.sh && bash framework/tools/git/test-pr-review-gitea-comment.sh && bash framework/tools/git/test-pr-review-repo-host-override.sh && bash framework/tools/git/test-ci-queue-wait-branch-absent.sh && bash framework/tools/git/test-ci-queue-wait-tristate.sh && bash framework/tools/git/test-ci-queue-wait-github-checks.sh && bash framework/tools/git/test-pr-merge-queue-branch.sh && bash framework/tools/git/test-pr-merge-head-pin.sh && bash framework/tools/git/test-pr-merge-message-field.sh && bash framework/tools/git/test-git-credential-mosaic.sh && bash framework/tools/git/test-gitea-token-identity.sh && bash framework/tools/woodpecker/test-terminal-green-contract.sh && bash framework/tools/_scripts/test-install-ordering-guard.sh && bash framework/tools/_scripts/test-mosaic-init-rce.sh && bash framework/tools/tmux/agent-send.test.sh && bash framework/tools/wake/test-wake-store-ack.sh && bash framework/tools/wake/test-wake-store-enqueue-race.sh && bash framework/tools/wake/test-wake-digest-hmac.sh && bash framework/tools/wake/test-wake-digest-quarantine.sh && bash framework/tools/wake/test-wake-detector.sh && bash framework/tools/wake/test-wake-fn-oracle.sh && bash framework/tools/wake/test-wake-reconcile.sh && bash framework/tools/wake/test-wake-beacon.sh && bash framework/tools/wake/test-wake-preimage.sh && bash framework/tools/wake/test-wake-install.sh && bash framework/tools/fleet/test-start-agent-session.sh && bash framework/tools/glpi/test-list-http-status.sh && bash framework/tools/orchestrator/test-board-roll.sh && bash framework/tools/woodpecker/test-ci-wait-exit-matrix.sh && bash framework/tools/_scripts/test-fleet-transport-check.sh"
|
||||||
},
|
},
|
||||||
"dependencies": {
|
"dependencies": {
|
||||||
"@mosaicstack/brain": "workspace:*",
|
"@mosaicstack/brain": "workspace:*",
|
||||||
|
|||||||
@@ -15,6 +15,7 @@ import { tmpdir } from 'node:os';
|
|||||||
import { join } from 'node:path';
|
import { join } from 'node:path';
|
||||||
import { fileURLToPath } from 'node:url';
|
import { fileURLToPath } from 'node:url';
|
||||||
import { FileConfigAdapter } from '../config/file-adapter.js';
|
import { FileConfigAdapter } from '../config/file-adapter.js';
|
||||||
|
import { seedFleetIdentityDefaults } from './fleet-first-start-identity.js';
|
||||||
import { composeContract } from './launch.js';
|
import { composeContract } from './launch.js';
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@@ -319,6 +320,7 @@ describe('composeContract — overlay composer', () => {
|
|||||||
].join('\n'),
|
].join('\n'),
|
||||||
);
|
);
|
||||||
process.env['MOSAIC_AGENT_NAME'] = 'exact-self';
|
process.env['MOSAIC_AGENT_NAME'] = 'exact-self';
|
||||||
|
expect(seedFleetIdentityDefaults(installedHome)).toEqual(['SOUL.md', 'USER.md']);
|
||||||
|
|
||||||
const composed = composeContract('pi', installedHome);
|
const composed = composeContract('pi', installedHome);
|
||||||
expect(composed).toContain(sourceTools);
|
expect(composed).toContain(sourceTools);
|
||||||
@@ -332,6 +334,49 @@ describe('composeContract — overlay composer', () => {
|
|||||||
}
|
}
|
||||||
});
|
});
|
||||||
|
|
||||||
|
it('refuses a fleet USER.md replacement symlink at the point of composition', () => {
|
||||||
|
mkdirSync(join(fixture.home, 'fleet'), { recursive: true });
|
||||||
|
writeFileSync(
|
||||||
|
join(fixture.home, 'fleet', 'roster.yaml'),
|
||||||
|
[
|
||||||
|
'version: 1',
|
||||||
|
'transport: tmux',
|
||||||
|
'agents:',
|
||||||
|
' - name: exact-user-seat',
|
||||||
|
' runtime: pi',
|
||||||
|
' class: worker',
|
||||||
|
'',
|
||||||
|
].join('\n'),
|
||||||
|
);
|
||||||
|
process.env['MOSAIC_AGENT_NAME'] = 'exact-user-seat';
|
||||||
|
process.env['MOSAIC_AGENT_CLASS'] = 'worker';
|
||||||
|
writeFileSync(join(fixture.home, 'defaults', 'SOUL.md'), '# Generic soul\n');
|
||||||
|
writeFileSync(join(fixture.home, 'defaults', 'USER.md'), '# Generic user\n');
|
||||||
|
expect(seedFleetIdentityDefaults(fixture.home)).toEqual(['SOUL.md']);
|
||||||
|
|
||||||
|
const userPath = join(fixture.home, 'USER.md');
|
||||||
|
const external = join(fixture.root, 'attacker-user.md');
|
||||||
|
writeFileSync(external, 'UNSAFE-REPLACEMENT-USER-CONTENT\n');
|
||||||
|
rmSync(userPath);
|
||||||
|
symlinkSync(external, userPath);
|
||||||
|
|
||||||
|
expect(() => composeContract('pi', fixture.home)).toThrow(
|
||||||
|
`fleet identity installed is unavailable or unsafe: ${userPath}`,
|
||||||
|
);
|
||||||
|
expect(readFileSync(external, 'utf8')).toBe('UNSAFE-REPLACEMENT-USER-CONTENT\n');
|
||||||
|
});
|
||||||
|
|
||||||
|
it('preserves tolerant standalone composition when optional USER.md is unreadable', () => {
|
||||||
|
const userPath = join(fixture.home, 'USER.md');
|
||||||
|
rmSync(userPath);
|
||||||
|
mkdirSync(userPath);
|
||||||
|
|
||||||
|
const out = composeContract('pi', fixture.home);
|
||||||
|
|
||||||
|
expect(out).toContain(AGENTS);
|
||||||
|
expect(out).not.toContain('# User Profile');
|
||||||
|
});
|
||||||
|
|
||||||
it.each(['claude', 'codex', 'opencode', 'pi'] as const)(
|
it.each(['claude', 'codex', 'opencode', 'pi'] as const)(
|
||||||
'never injects installed TOOLS.md through a target symlink for %s',
|
'never injects installed TOOLS.md through a target symlink for %s',
|
||||||
(runtime) => {
|
(runtime) => {
|
||||||
|
|||||||
@@ -0,0 +1,182 @@
|
|||||||
|
import {
|
||||||
|
chmodSync,
|
||||||
|
existsSync,
|
||||||
|
mkdirSync,
|
||||||
|
mkdtempSync,
|
||||||
|
lstatSync,
|
||||||
|
readFileSync,
|
||||||
|
readdirSync,
|
||||||
|
rmSync,
|
||||||
|
statSync,
|
||||||
|
symlinkSync,
|
||||||
|
writeFileSync,
|
||||||
|
} from 'node:fs';
|
||||||
|
import { tmpdir } from 'node:os';
|
||||||
|
import { dirname, join } from 'node:path';
|
||||||
|
import { afterEach, describe, expect, it } from 'vitest';
|
||||||
|
import {
|
||||||
|
linkIdentityContractNoClobber,
|
||||||
|
seedFleetIdentityDefaults,
|
||||||
|
} from './fleet-first-start-identity.js';
|
||||||
|
|
||||||
|
const roots: string[] = [];
|
||||||
|
const DEFAULT_SOUL = '# Generic soul\n';
|
||||||
|
const DEFAULT_USER = '# Generic user\n';
|
||||||
|
|
||||||
|
function writeFixture(path: string, content: string | Buffer, mode: number = 0o600): void {
|
||||||
|
mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
|
||||||
|
writeFileSync(path, content, { mode });
|
||||||
|
chmodSync(path, mode);
|
||||||
|
}
|
||||||
|
|
||||||
|
function createMosaicHome(): string {
|
||||||
|
const root = mkdtempSync(join(tmpdir(), 'mosaic-identity-seed-'));
|
||||||
|
roots.push(root);
|
||||||
|
const mosaicHome = join(root, 'home', '.config', 'mosaic');
|
||||||
|
writeFixture(join(mosaicHome, 'defaults', 'SOUL.md'), DEFAULT_SOUL);
|
||||||
|
writeFixture(join(mosaicHome, 'defaults', 'USER.md'), DEFAULT_USER);
|
||||||
|
return mosaicHome;
|
||||||
|
}
|
||||||
|
|
||||||
|
function temporarySeeds(mosaicHome: string): string[] {
|
||||||
|
return readdirSync(mosaicHome).filter((entry) => entry.includes('.fleet-seed-'));
|
||||||
|
}
|
||||||
|
|
||||||
|
afterEach((): void => {
|
||||||
|
for (const root of roots.splice(0)) rmSync(root, { recursive: true, force: true });
|
||||||
|
});
|
||||||
|
|
||||||
|
describe('linkIdentityContractNoClobber', () => {
|
||||||
|
it('returns false and preserves a destination that already exists', () => {
|
||||||
|
const mosaicHome = createMosaicHome();
|
||||||
|
const source = join(mosaicHome, 'source.tmp');
|
||||||
|
const destination = join(mosaicHome, 'destination.md');
|
||||||
|
writeFixture(source, 'candidate\n');
|
||||||
|
writeFixture(destination, 'operator\n');
|
||||||
|
|
||||||
|
expect(linkIdentityContractNoClobber(source, destination)).toBe(false);
|
||||||
|
expect(readFileSync(destination, 'utf8')).toBe('operator\n');
|
||||||
|
});
|
||||||
|
|
||||||
|
it('does not misclassify an unexpected link failure as a concurrent winner', () => {
|
||||||
|
const mosaicHome = createMosaicHome();
|
||||||
|
const missingSource = join(mosaicHome, 'missing.tmp');
|
||||||
|
|
||||||
|
expect(() =>
|
||||||
|
linkIdentityContractNoClobber(missingSource, join(mosaicHome, 'destination.md')),
|
||||||
|
).toThrow();
|
||||||
|
});
|
||||||
|
});
|
||||||
|
|
||||||
|
describe('seedFleetIdentityDefaults', () => {
|
||||||
|
it('publishes complete owner-private default snapshots', () => {
|
||||||
|
const mosaicHome = createMosaicHome();
|
||||||
|
|
||||||
|
expect(seedFleetIdentityDefaults(mosaicHome)).toEqual(['SOUL.md', 'USER.md']);
|
||||||
|
|
||||||
|
for (const [entry, expected] of [
|
||||||
|
['SOUL.md', DEFAULT_SOUL],
|
||||||
|
['USER.md', DEFAULT_USER],
|
||||||
|
] as const) {
|
||||||
|
const path = join(mosaicHome, entry);
|
||||||
|
expect(readFileSync(path, 'utf8')).toBe(expected);
|
||||||
|
expect(statSync(path).mode & 0o777).toBe(0o600);
|
||||||
|
}
|
||||||
|
expect(temporarySeeds(mosaicHome)).toEqual([]);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('preserves an existing regular contract byte-for-byte and mode-for-mode', () => {
|
||||||
|
const mosaicHome = createMosaicHome();
|
||||||
|
const customSoul = '# Operator-owned soul\n';
|
||||||
|
writeFixture(join(mosaicHome, 'SOUL.md'), customSoul, 0o640);
|
||||||
|
|
||||||
|
expect(seedFleetIdentityDefaults(mosaicHome)).toEqual(['USER.md']);
|
||||||
|
expect(readFileSync(join(mosaicHome, 'SOUL.md'), 'utf8')).toBe(customSoul);
|
||||||
|
expect(statSync(join(mosaicHome, 'SOUL.md')).mode & 0o777).toBe(0o640);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('is idempotent after both installed contracts exist', () => {
|
||||||
|
const mosaicHome = createMosaicHome();
|
||||||
|
|
||||||
|
expect(seedFleetIdentityDefaults(mosaicHome)).toEqual(['SOUL.md', 'USER.md']);
|
||||||
|
expect(seedFleetIdentityDefaults(mosaicHome)).toEqual([]);
|
||||||
|
expect(temporarySeeds(mosaicHome)).toEqual([]);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('validates every required source before publishing any destination', () => {
|
||||||
|
const mosaicHome = createMosaicHome();
|
||||||
|
const missing = join(mosaicHome, 'defaults', 'USER.md');
|
||||||
|
rmSync(missing);
|
||||||
|
|
||||||
|
expect(() => seedFleetIdentityDefaults(mosaicHome)).toThrow(
|
||||||
|
`fleet identity default is unavailable or unsafe: ${missing}`,
|
||||||
|
);
|
||||||
|
expect(existsSync(join(mosaicHome, 'SOUL.md'))).toBe(false);
|
||||||
|
expect(existsSync(join(mosaicHome, 'USER.md'))).toBe(false);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('fails closed when the configured Mosaic home is not a directory', () => {
|
||||||
|
const root = mkdtempSync(join(tmpdir(), 'mosaic-identity-invalid-home-'));
|
||||||
|
roots.push(root);
|
||||||
|
const mosaicHome = join(root, 'mosaic-home');
|
||||||
|
writeFixture(mosaicHome, 'not a directory\n');
|
||||||
|
|
||||||
|
expect(() => seedFleetIdentityDefaults(mosaicHome)).toThrow(
|
||||||
|
`fleet identity installed is unavailable or unsafe: ${join(mosaicHome, 'SOUL.md')}`,
|
||||||
|
);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('refuses a symlinked default instead of following it', () => {
|
||||||
|
const mosaicHome = createMosaicHome();
|
||||||
|
const source = join(mosaicHome, 'defaults', 'SOUL.md');
|
||||||
|
rmSync(source);
|
||||||
|
symlinkSync(join(mosaicHome, 'defaults', 'USER.md'), source);
|
||||||
|
|
||||||
|
expect(() => seedFleetIdentityDefaults(mosaicHome)).toThrow(
|
||||||
|
`fleet identity default is unavailable or unsafe: ${source}`,
|
||||||
|
);
|
||||||
|
expect(existsSync(join(mosaicHome, 'SOUL.md'))).toBe(false);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('refuses an existing symlinked destination without replacing it', () => {
|
||||||
|
const mosaicHome = createMosaicHome();
|
||||||
|
const destination = join(mosaicHome, 'SOUL.md');
|
||||||
|
symlinkSync(join(mosaicHome, 'defaults', 'SOUL.md'), destination);
|
||||||
|
|
||||||
|
expect(() => seedFleetIdentityDefaults(mosaicHome)).toThrow(
|
||||||
|
`fleet identity installed is unavailable or unsafe: ${destination}`,
|
||||||
|
);
|
||||||
|
expect(lstatSync(destination).isSymbolicLink()).toBe(true);
|
||||||
|
expect(existsSync(join(mosaicHome, 'USER.md'))).toBe(false);
|
||||||
|
});
|
||||||
|
|
||||||
|
it.each(['SOUL.md', 'USER.md'] as const)(
|
||||||
|
'rejects a dangling %s destination before publishing its counterpart',
|
||||||
|
(entry) => {
|
||||||
|
const mosaicHome = createMosaicHome();
|
||||||
|
const destination = join(mosaicHome, entry);
|
||||||
|
const counterpart = join(mosaicHome, entry === 'SOUL.md' ? 'USER.md' : 'SOUL.md');
|
||||||
|
symlinkSync(join(mosaicHome, 'missing-identity-target'), destination);
|
||||||
|
|
||||||
|
expect(existsSync(destination)).toBe(false);
|
||||||
|
expect(lstatSync(destination).isSymbolicLink()).toBe(true);
|
||||||
|
expect(() => seedFleetIdentityDefaults(mosaicHome)).toThrow(
|
||||||
|
`fleet identity installed is unavailable or unsafe: ${destination}`,
|
||||||
|
);
|
||||||
|
expect(lstatSync(destination).isSymbolicLink()).toBe(true);
|
||||||
|
expect(existsSync(counterpart)).toBe(false);
|
||||||
|
},
|
||||||
|
);
|
||||||
|
|
||||||
|
it('rejects an oversized source before publishing a partial identity', () => {
|
||||||
|
const mosaicHome = createMosaicHome();
|
||||||
|
const source = join(mosaicHome, 'defaults', 'USER.md');
|
||||||
|
writeFixture(source, Buffer.alloc(256 * 1024 + 1, 0x61));
|
||||||
|
|
||||||
|
expect(() => seedFleetIdentityDefaults(mosaicHome)).toThrow(
|
||||||
|
`fleet identity default is unavailable or unsafe: ${source}`,
|
||||||
|
);
|
||||||
|
expect(existsSync(join(mosaicHome, 'SOUL.md'))).toBe(false);
|
||||||
|
expect(existsSync(join(mosaicHome, 'USER.md'))).toBe(false);
|
||||||
|
});
|
||||||
|
});
|
||||||
@@ -0,0 +1,120 @@
|
|||||||
|
import { randomBytes } from 'node:crypto';
|
||||||
|
import { linkSync, lstatSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
|
||||||
|
import { join } from 'node:path';
|
||||||
|
import { readRegularFileSecure } from '../fleet/secure-file.js';
|
||||||
|
|
||||||
|
const MAX_IDENTITY_CONTRACT_BYTES = 256 * 1024;
|
||||||
|
export const FLEET_IDENTITY_DEFAULTS = ['SOUL.md', 'USER.md'] as const;
|
||||||
|
|
||||||
|
function isFilesystemError(error: unknown, code: string): boolean {
|
||||||
|
return error instanceof Error && 'code' in error && error.code === code;
|
||||||
|
}
|
||||||
|
|
||||||
|
/** @internal Publish a complete temporary file without replacing any path. */
|
||||||
|
export function linkIdentityContractNoClobber(source: string, destination: string): boolean {
|
||||||
|
try {
|
||||||
|
linkSync(source, destination);
|
||||||
|
return true;
|
||||||
|
} catch (error: unknown) {
|
||||||
|
if (isFilesystemError(error, 'EEXIST')) return false;
|
||||||
|
throw error;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function unsafeIdentityError(kind: 'default' | 'installed', path: string, error: unknown): Error {
|
||||||
|
const reason = error instanceof Error ? error.message : String(error);
|
||||||
|
return new Error(`fleet identity ${kind} is unavailable or unsafe: ${path} (${reason})`);
|
||||||
|
}
|
||||||
|
|
||||||
|
function readIdentityContract(
|
||||||
|
mosaicHome: string,
|
||||||
|
path: string,
|
||||||
|
kind: 'default' | 'installed',
|
||||||
|
): Buffer {
|
||||||
|
try {
|
||||||
|
return readRegularFileSecure(path, {
|
||||||
|
root: mosaicHome,
|
||||||
|
maxBytes: MAX_IDENTITY_CONTRACT_BYTES,
|
||||||
|
}).content;
|
||||||
|
} catch (error: unknown) {
|
||||||
|
throw unsafeIdentityError(kind, path, error);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function installedEntryExists(path: string): boolean {
|
||||||
|
try {
|
||||||
|
lstatSync(path);
|
||||||
|
return true;
|
||||||
|
} catch (error: unknown) {
|
||||||
|
if (isFilesystemError(error, 'ENOENT')) return false;
|
||||||
|
throw unsafeIdentityError('installed', path, error);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/** Secure fleet point-of-use read for a top-level identity contract. */
|
||||||
|
export function readInstalledIdentityContractAtPointOfUse(
|
||||||
|
mosaicHome: string,
|
||||||
|
entry: (typeof FLEET_IDENTITY_DEFAULTS)[number],
|
||||||
|
): Buffer {
|
||||||
|
const configuredPath = join(mosaicHome, entry);
|
||||||
|
try {
|
||||||
|
// Preserve the launcher's established support for a symlinked Mosaic home,
|
||||||
|
// while pinning this read to the resolved directory. O_NOFOLLOW still
|
||||||
|
// rejects replacement of the identity file itself (or any child ancestor).
|
||||||
|
const canonicalHome = realpathSync(mosaicHome);
|
||||||
|
return readRegularFileSecure(join(canonicalHome, entry), {
|
||||||
|
root: canonicalHome,
|
||||||
|
maxBytes: MAX_IDENTITY_CONTRACT_BYTES,
|
||||||
|
}).content;
|
||||||
|
} catch (error: unknown) {
|
||||||
|
throw unsafeIdentityError('installed', configuredPath, error);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Seed the generic identity base required by unattended fleet launches.
|
||||||
|
*
|
||||||
|
* Exact seat identity remains roster-owned and is injected later by the
|
||||||
|
* runtime composer. Each destination appears atomically through a hard link to
|
||||||
|
* a complete owner-private temporary file; a concurrent first seat may win the
|
||||||
|
* link without allowing either process to overwrite operator content.
|
||||||
|
*/
|
||||||
|
export function seedFleetIdentityDefaults(mosaicHome: string): string[] {
|
||||||
|
const snapshots = new Map<(typeof FLEET_IDENTITY_DEFAULTS)[number], Buffer>();
|
||||||
|
|
||||||
|
for (const entry of FLEET_IDENTITY_DEFAULTS) {
|
||||||
|
const destination = join(mosaicHome, entry);
|
||||||
|
if (installedEntryExists(destination)) {
|
||||||
|
readIdentityContract(mosaicHome, destination, 'installed');
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
const source = join(mosaicHome, 'defaults', entry);
|
||||||
|
snapshots.set(entry, readIdentityContract(mosaicHome, source, 'default'));
|
||||||
|
}
|
||||||
|
|
||||||
|
const seeded: string[] = [];
|
||||||
|
for (const [entry, content] of snapshots) {
|
||||||
|
const destination = join(mosaicHome, entry);
|
||||||
|
const temporary = join(
|
||||||
|
mosaicHome,
|
||||||
|
`.${entry}.fleet-seed-${process.pid.toString()}-${randomBytes(6).toString('hex')}`,
|
||||||
|
);
|
||||||
|
let temporaryCreated = false;
|
||||||
|
try {
|
||||||
|
writeFileSync(temporary, content, { flag: 'wx', mode: 0o600 });
|
||||||
|
temporaryCreated = true;
|
||||||
|
if (linkIdentityContractNoClobber(temporary, destination)) {
|
||||||
|
seeded.push(entry);
|
||||||
|
} else {
|
||||||
|
readIdentityContract(mosaicHome, destination, 'installed');
|
||||||
|
}
|
||||||
|
} finally {
|
||||||
|
if (temporaryCreated) rmSync(temporary, { force: true });
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
for (const entry of FLEET_IDENTITY_DEFAULTS) {
|
||||||
|
readIdentityContract(mosaicHome, join(mosaicHome, entry), 'installed');
|
||||||
|
}
|
||||||
|
return seeded;
|
||||||
|
}
|
||||||
@@ -0,0 +1,393 @@
|
|||||||
|
import { spawn, spawnSync, type SpawnSyncReturns } from 'node:child_process';
|
||||||
|
import {
|
||||||
|
chmodSync,
|
||||||
|
existsSync,
|
||||||
|
mkdirSync,
|
||||||
|
mkdtempSync,
|
||||||
|
readFileSync,
|
||||||
|
readdirSync,
|
||||||
|
rmSync,
|
||||||
|
statSync,
|
||||||
|
symlinkSync,
|
||||||
|
writeFileSync,
|
||||||
|
} from 'node:fs';
|
||||||
|
import { tmpdir } from 'node:os';
|
||||||
|
import { dirname, join } from 'node:path';
|
||||||
|
import { fileURLToPath } from 'node:url';
|
||||||
|
import { afterEach, describe, expect, it } from 'vitest';
|
||||||
|
|
||||||
|
const CLI_PATH = fileURLToPath(new URL('../../dist/cli.js', import.meta.url));
|
||||||
|
const DEFAULT_SOUL_PATH = fileURLToPath(
|
||||||
|
new URL('../../framework/defaults/SOUL.md', import.meta.url),
|
||||||
|
);
|
||||||
|
const DEFAULT_USER_PATH = fileURLToPath(
|
||||||
|
new URL('../../framework/defaults/USER.md', import.meta.url),
|
||||||
|
);
|
||||||
|
|
||||||
|
interface GreenfieldFixture {
|
||||||
|
readonly root: string;
|
||||||
|
readonly home: string;
|
||||||
|
readonly mosaicHome: string;
|
||||||
|
readonly binDir: string;
|
||||||
|
readonly capturePath: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
interface AsyncLaunchResult {
|
||||||
|
readonly status: number | null;
|
||||||
|
readonly signal: NodeJS.Signals | null;
|
||||||
|
readonly stdout: string;
|
||||||
|
readonly stderr: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
const fixtures: string[] = [];
|
||||||
|
|
||||||
|
function writeFixture(path: string, content: string, mode: number = 0o600): void {
|
||||||
|
mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
|
||||||
|
writeFileSync(path, content, { encoding: 'utf8', mode });
|
||||||
|
chmodSync(path, mode);
|
||||||
|
}
|
||||||
|
|
||||||
|
function createGreenfieldFixture(): GreenfieldFixture {
|
||||||
|
const root = mkdtempSync(join(tmpdir(), 'mosaic-first-start-'));
|
||||||
|
fixtures.push(root);
|
||||||
|
const home = join(root, 'home');
|
||||||
|
const mosaicHome = join(home, '.config', 'mosaic');
|
||||||
|
const binDir = join(root, 'bin');
|
||||||
|
const capturePath = join(root, 'runtime-boundary.json');
|
||||||
|
|
||||||
|
mkdirSync(binDir, { recursive: true, mode: 0o700 });
|
||||||
|
writeFixture(join(mosaicHome, 'AGENTS.md'), '# Agent dispatcher\n');
|
||||||
|
writeFixture(join(mosaicHome, 'runtime', 'pi', 'RUNTIME.md'), '# Pi runtime\n');
|
||||||
|
writeFixture(join(mosaicHome, 'defaults', 'SOUL.md'), readFileSync(DEFAULT_SOUL_PATH, 'utf8'));
|
||||||
|
writeFixture(join(mosaicHome, 'defaults', 'USER.md'), readFileSync(DEFAULT_USER_PATH, 'utf8'));
|
||||||
|
writeFixture(
|
||||||
|
join(mosaicHome, 'fleet', 'roster.yaml'),
|
||||||
|
`version: 1
|
||||||
|
transport: tmux
|
||||||
|
tmux:
|
||||||
|
socket_name: mosaic-fleet
|
||||||
|
holder_session: _holder
|
||||||
|
defaults:
|
||||||
|
working_directory: ~
|
||||||
|
runtimes:
|
||||||
|
pi:
|
||||||
|
reset_command: /new
|
||||||
|
agents:
|
||||||
|
- name: unattended-seat
|
||||||
|
runtime: pi
|
||||||
|
class: worker
|
||||||
|
`,
|
||||||
|
);
|
||||||
|
writeFixture(
|
||||||
|
join(mosaicHome, 'tools', 'tmux', 'agent-send.sh'),
|
||||||
|
'#!/usr/bin/env bash\nexit 0\n',
|
||||||
|
0o755,
|
||||||
|
);
|
||||||
|
writeFixture(
|
||||||
|
join(mosaicHome, 'tools', 'lease-broker', 'launch-runtime.py'),
|
||||||
|
`#!/usr/bin/env python3
|
||||||
|
import json
|
||||||
|
import os
|
||||||
|
import pathlib
|
||||||
|
import sys
|
||||||
|
pathlib.Path(os.environ["MOSAIC_TEST_RUNTIME_CAPTURE"]).write_text(
|
||||||
|
json.dumps({"argv": sys.argv[1:]}), encoding="utf-8"
|
||||||
|
)
|
||||||
|
`,
|
||||||
|
0o755,
|
||||||
|
);
|
||||||
|
// checkRuntime() must find Pi, while the fake broker boundary prevents this
|
||||||
|
// executable from running or making a provider call.
|
||||||
|
writeFixture(join(binDir, 'pi'), '#!/usr/bin/env bash\nexit 97\n', 0o755);
|
||||||
|
|
||||||
|
return { root, home, mosaicHome, binDir, capturePath };
|
||||||
|
}
|
||||||
|
|
||||||
|
function launchEnvironment(
|
||||||
|
fixture: GreenfieldFixture,
|
||||||
|
capturePath: string,
|
||||||
|
fleet: boolean = true,
|
||||||
|
agentName: string = 'unattended-seat',
|
||||||
|
agentClass: string = 'worker',
|
||||||
|
): NodeJS.ProcessEnv {
|
||||||
|
return {
|
||||||
|
HOME: fixture.home,
|
||||||
|
MOSAIC_HOME: fixture.mosaicHome,
|
||||||
|
...(fleet
|
||||||
|
? {
|
||||||
|
MOSAIC_AGENT_NAME: agentName,
|
||||||
|
MOSAIC_AGENT_CLASS: agentClass,
|
||||||
|
}
|
||||||
|
: {}),
|
||||||
|
MOSAIC_TEST_RUNTIME_CAPTURE: capturePath,
|
||||||
|
PATH: `${fixture.binDir}:/usr/bin:/bin`,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
function launchSync(
|
||||||
|
fixture: GreenfieldFixture,
|
||||||
|
options: {
|
||||||
|
readonly capturePath?: string;
|
||||||
|
readonly fleet?: boolean;
|
||||||
|
readonly agentName?: string;
|
||||||
|
readonly agentClass?: string;
|
||||||
|
} = {},
|
||||||
|
): SpawnSyncReturns<string> {
|
||||||
|
const capturePath = options.capturePath ?? fixture.capturePath;
|
||||||
|
return spawnSync(process.execPath, [CLI_PATH, 'yolo', 'pi'], {
|
||||||
|
cwd: fixture.root,
|
||||||
|
encoding: 'utf8',
|
||||||
|
input: '',
|
||||||
|
timeout: 10_000,
|
||||||
|
env: launchEnvironment(
|
||||||
|
fixture,
|
||||||
|
capturePath,
|
||||||
|
options.fleet ?? true,
|
||||||
|
options.agentName ?? 'unattended-seat',
|
||||||
|
options.agentClass ?? 'worker',
|
||||||
|
),
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
function launchAsync(fixture: GreenfieldFixture, capturePath: string): Promise<AsyncLaunchResult> {
|
||||||
|
return new Promise<AsyncLaunchResult>((resolve, reject): void => {
|
||||||
|
const child = spawn(process.execPath, [CLI_PATH, 'yolo', 'pi'], {
|
||||||
|
cwd: fixture.root,
|
||||||
|
env: launchEnvironment(fixture, capturePath),
|
||||||
|
stdio: ['pipe', 'pipe', 'pipe'],
|
||||||
|
});
|
||||||
|
let stdout = '';
|
||||||
|
let stderr = '';
|
||||||
|
child.stdout.setEncoding('utf8');
|
||||||
|
child.stderr.setEncoding('utf8');
|
||||||
|
child.stdout.on('data', (chunk: string): void => {
|
||||||
|
stdout += chunk;
|
||||||
|
});
|
||||||
|
child.stderr.on('data', (chunk: string): void => {
|
||||||
|
stderr += chunk;
|
||||||
|
});
|
||||||
|
child.on('error', reject);
|
||||||
|
child.on('close', (status: number | null, signal: NodeJS.Signals | null): void => {
|
||||||
|
resolve({ status, signal, stdout, stderr });
|
||||||
|
});
|
||||||
|
child.stdin.end();
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
function outputOf(result: { readonly stdout: string; readonly stderr: string }): string {
|
||||||
|
return `${result.stdout}${result.stderr}`;
|
||||||
|
}
|
||||||
|
|
||||||
|
function assertPrivateDefaultSeeds(fixture: GreenfieldFixture): void {
|
||||||
|
const soul = join(fixture.mosaicHome, 'SOUL.md');
|
||||||
|
const user = join(fixture.mosaicHome, 'USER.md');
|
||||||
|
expect(readFileSync(soul, 'utf8')).toBe(readFileSync(DEFAULT_SOUL_PATH, 'utf8'));
|
||||||
|
expect(readFileSync(user, 'utf8')).toBe(readFileSync(DEFAULT_USER_PATH, 'utf8'));
|
||||||
|
expect(statSync(soul).mode & 0o777).toBe(0o600);
|
||||||
|
expect(statSync(user).mode & 0o777).toBe(0o600);
|
||||||
|
}
|
||||||
|
|
||||||
|
function capturedArguments(path: string): string[] {
|
||||||
|
const capture = JSON.parse(readFileSync(path, 'utf8')) as { argv: string[] };
|
||||||
|
return capture.argv;
|
||||||
|
}
|
||||||
|
|
||||||
|
afterEach((): void => {
|
||||||
|
for (const root of fixtures.splice(0)) {
|
||||||
|
rmSync(root, { recursive: true, force: true });
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
describe('fleet unattended first start (#1264)', () => {
|
||||||
|
it('reaches the runtime boundary without a TTY or identity wizard on a clean install', () => {
|
||||||
|
const fixture = createGreenfieldFixture();
|
||||||
|
const result = launchSync(fixture);
|
||||||
|
const output = outputOf(result);
|
||||||
|
|
||||||
|
expect(result.error, output).toBeUndefined();
|
||||||
|
expect(result.status, output).toBe(0);
|
||||||
|
expect(output).toContain('Initialized unattended fleet identity defaults: SOUL.md, USER.md');
|
||||||
|
expect(output).not.toContain('Running setup wizard');
|
||||||
|
expect(output).not.toContain('What would you like to do?');
|
||||||
|
expect(existsSync(fixture.capturePath), output).toBe(true);
|
||||||
|
assertPrivateDefaultSeeds(fixture);
|
||||||
|
|
||||||
|
const argv = capturedArguments(fixture.capturePath);
|
||||||
|
expect(argv).toContain('--runtime');
|
||||||
|
expect(argv.join('\n')).toContain('Agent/session: `unattended-seat`');
|
||||||
|
expect(argv.join('\n')).toContain('Role/class: `worker`');
|
||||||
|
});
|
||||||
|
|
||||||
|
it('preserves existing operator identity bytes without requiring defaults', () => {
|
||||||
|
const fixture = createGreenfieldFixture();
|
||||||
|
const customSoul = '# Operator soul\nNever replace this.\n';
|
||||||
|
const customUser = '# Operator user\nNever replace this either.\n';
|
||||||
|
writeFixture(join(fixture.mosaicHome, 'SOUL.md'), customSoul, 0o640);
|
||||||
|
writeFixture(join(fixture.mosaicHome, 'USER.md'), customUser, 0o600);
|
||||||
|
rmSync(join(fixture.mosaicHome, 'defaults'), { recursive: true, force: true });
|
||||||
|
|
||||||
|
const first = launchSync(fixture);
|
||||||
|
const secondCapture = join(fixture.root, 'runtime-boundary-second.json');
|
||||||
|
const second = launchSync(fixture, { capturePath: secondCapture });
|
||||||
|
|
||||||
|
expect(first.status, outputOf(first)).toBe(0);
|
||||||
|
expect(second.status, outputOf(second)).toBe(0);
|
||||||
|
expect(readFileSync(join(fixture.mosaicHome, 'SOUL.md'), 'utf8')).toBe(customSoul);
|
||||||
|
expect(readFileSync(join(fixture.mosaicHome, 'USER.md'), 'utf8')).toBe(customUser);
|
||||||
|
expect(statSync(join(fixture.mosaicHome, 'SOUL.md')).mode & 0o777).toBe(0o640);
|
||||||
|
expect(existsSync(fixture.capturePath)).toBe(true);
|
||||||
|
expect(existsSync(secondCapture)).toBe(true);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('seeds only the missing identity contract and leaves a custom SOUL byte-exact', () => {
|
||||||
|
const fixture = createGreenfieldFixture();
|
||||||
|
const customSoul = '# Exact custom soul bytes\n';
|
||||||
|
writeFixture(join(fixture.mosaicHome, 'SOUL.md'), customSoul, 0o640);
|
||||||
|
|
||||||
|
const result = launchSync(fixture);
|
||||||
|
|
||||||
|
expect(result.status, outputOf(result)).toBe(0);
|
||||||
|
expect(outputOf(result)).toContain('Initialized unattended fleet identity defaults: USER.md');
|
||||||
|
expect(readFileSync(join(fixture.mosaicHome, 'SOUL.md'), 'utf8')).toBe(customSoul);
|
||||||
|
expect(statSync(join(fixture.mosaicHome, 'SOUL.md')).mode & 0o777).toBe(0o640);
|
||||||
|
expect(readFileSync(join(fixture.mosaicHome, 'USER.md'), 'utf8')).toBe(
|
||||||
|
readFileSync(DEFAULT_USER_PATH, 'utf8'),
|
||||||
|
);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('fails closed without a wizard or partial seed when a required default is missing', () => {
|
||||||
|
const fixture = createGreenfieldFixture();
|
||||||
|
const missingDefault = join(fixture.mosaicHome, 'defaults', 'USER.md');
|
||||||
|
rmSync(missingDefault);
|
||||||
|
|
||||||
|
const result = launchSync(fixture);
|
||||||
|
const output = outputOf(result);
|
||||||
|
|
||||||
|
expect(result.status, output).toBe(1);
|
||||||
|
expect(output).toContain('unattended fleet identity initialization failed');
|
||||||
|
expect(output).toContain(missingDefault);
|
||||||
|
expect(output).not.toContain('Running setup wizard');
|
||||||
|
expect(output).not.toContain('What would you like to do?');
|
||||||
|
expect(existsSync(fixture.capturePath)).toBe(false);
|
||||||
|
expect(existsSync(join(fixture.mosaicHome, 'SOUL.md'))).toBe(false);
|
||||||
|
expect(existsSync(join(fixture.mosaicHome, 'USER.md'))).toBe(false);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('rejects a symlinked identity default without following it or prompting', () => {
|
||||||
|
const fixture = createGreenfieldFixture();
|
||||||
|
const soulDefault = join(fixture.mosaicHome, 'defaults', 'SOUL.md');
|
||||||
|
rmSync(soulDefault);
|
||||||
|
symlinkSync(DEFAULT_SOUL_PATH, soulDefault);
|
||||||
|
|
||||||
|
const result = launchSync(fixture);
|
||||||
|
const output = outputOf(result);
|
||||||
|
|
||||||
|
expect(result.status, output).toBe(1);
|
||||||
|
expect(output).toContain(`fleet identity default is unavailable or unsafe: ${soulDefault}`);
|
||||||
|
expect(output).not.toContain('Running setup wizard');
|
||||||
|
expect(existsSync(fixture.capturePath)).toBe(false);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('refuses an unknown ambient fleet name before seeding or prompting', () => {
|
||||||
|
const fixture = createGreenfieldFixture();
|
||||||
|
|
||||||
|
const result = launchSync(fixture, { agentName: 'not-in-the-roster' });
|
||||||
|
const output = outputOf(result);
|
||||||
|
|
||||||
|
expect(result.status, output).toBe(1);
|
||||||
|
expect(output).toContain('canonical fleet identity is unavailable');
|
||||||
|
expect(output).toContain('Agent "not-in-the-roster" is not in the fleet roster');
|
||||||
|
expect(output).not.toContain('Running setup wizard');
|
||||||
|
expect(existsSync(fixture.capturePath)).toBe(false);
|
||||||
|
expect(existsSync(join(fixture.mosaicHome, 'SOUL.md'))).toBe(false);
|
||||||
|
expect(existsSync(join(fixture.mosaicHome, 'USER.md'))).toBe(false);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('refuses a mismatched ambient fleet class before seeding or prompting', () => {
|
||||||
|
const fixture = createGreenfieldFixture();
|
||||||
|
|
||||||
|
const result = launchSync(fixture, { agentClass: 'reviewer' });
|
||||||
|
const output = outputOf(result);
|
||||||
|
|
||||||
|
expect(result.status, output).toBe(1);
|
||||||
|
expect(output).toContain('Refusing split identity authority');
|
||||||
|
expect(output).not.toContain('Running setup wizard');
|
||||||
|
expect(existsSync(fixture.capturePath)).toBe(false);
|
||||||
|
expect(existsSync(join(fixture.mosaicHome, 'SOUL.md'))).toBe(false);
|
||||||
|
expect(existsSync(join(fixture.mosaicHome, 'USER.md'))).toBe(false);
|
||||||
|
});
|
||||||
|
|
||||||
|
it.each(['', ' ', '\t'])(
|
||||||
|
'refuses explicit blank ambient fleet class %j before seeding',
|
||||||
|
(agentClass: string) => {
|
||||||
|
const fixture = createGreenfieldFixture();
|
||||||
|
|
||||||
|
const result = launchSync(fixture, { agentClass });
|
||||||
|
const output = outputOf(result);
|
||||||
|
|
||||||
|
expect(result.status, output).toBe(1);
|
||||||
|
expect(output).toContain('Refusing split identity authority');
|
||||||
|
expect(output).not.toContain('Running setup wizard');
|
||||||
|
expect(existsSync(fixture.capturePath)).toBe(false);
|
||||||
|
expect(existsSync(join(fixture.mosaicHome, 'SOUL.md'))).toBe(false);
|
||||||
|
expect(existsSync(join(fixture.mosaicHome, 'USER.md'))).toBe(false);
|
||||||
|
},
|
||||||
|
);
|
||||||
|
|
||||||
|
it.each([' unattended-seat', 'unattended-seat ', ''])(
|
||||||
|
'refuses non-exact ambient fleet name %j before seeding',
|
||||||
|
(agentName: string) => {
|
||||||
|
const fixture = createGreenfieldFixture();
|
||||||
|
|
||||||
|
const result = launchSync(fixture, { agentName });
|
||||||
|
const output = outputOf(result);
|
||||||
|
|
||||||
|
expect(result.status, output).toBe(1);
|
||||||
|
expect(output).toContain(
|
||||||
|
'MOSAIC_AGENT_NAME must be a non-empty exact roster name with no surrounding whitespace',
|
||||||
|
);
|
||||||
|
expect(output).not.toContain('Running setup wizard');
|
||||||
|
expect(existsSync(fixture.capturePath)).toBe(false);
|
||||||
|
expect(existsSync(join(fixture.mosaicHome, 'SOUL.md'))).toBe(false);
|
||||||
|
expect(existsSync(join(fixture.mosaicHome, 'USER.md'))).toBe(false);
|
||||||
|
},
|
||||||
|
);
|
||||||
|
|
||||||
|
it('keeps the interactive wizard path for a standalone launch', () => {
|
||||||
|
const fixture = createGreenfieldFixture();
|
||||||
|
|
||||||
|
const result = launchSync(fixture, { fleet: false });
|
||||||
|
const output = outputOf(result);
|
||||||
|
|
||||||
|
expect(result.status, output).toBe(1);
|
||||||
|
expect(output).toContain('[mosaic] SOUL.md not found. Running setup wizard...');
|
||||||
|
expect(output).toContain('What would you like to do?');
|
||||||
|
expect(output).toContain('[mosaic] Setup failed. Run: mosaic wizard');
|
||||||
|
expect(existsSync(fixture.capturePath)).toBe(false);
|
||||||
|
expect(existsSync(join(fixture.mosaicHome, 'SOUL.md'))).toBe(false);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('allows concurrent no-TTY seats to initialize the same defaults without clobber or residue', async () => {
|
||||||
|
const fixture = createGreenfieldFixture();
|
||||||
|
const captures = Array.from({ length: 4 }, (_, index) =>
|
||||||
|
join(fixture.root, `runtime-boundary-${index.toString()}.json`),
|
||||||
|
);
|
||||||
|
|
||||||
|
const results = await Promise.all(
|
||||||
|
captures.map(
|
||||||
|
async (capturePath): Promise<AsyncLaunchResult> => launchAsync(fixture, capturePath),
|
||||||
|
),
|
||||||
|
);
|
||||||
|
|
||||||
|
for (const result of results) {
|
||||||
|
expect(result.status, outputOf(result)).toBe(0);
|
||||||
|
expect(result.signal, outputOf(result)).toBeNull();
|
||||||
|
expect(outputOf(result)).not.toContain('Running setup wizard');
|
||||||
|
}
|
||||||
|
assertPrivateDefaultSeeds(fixture);
|
||||||
|
expect(captures.every((capturePath) => existsSync(capturePath))).toBe(true);
|
||||||
|
expect(
|
||||||
|
readdirSync(fixture.mosaicHome).filter((entry) => entry.includes('.fleet-seed-')),
|
||||||
|
).toEqual([]);
|
||||||
|
});
|
||||||
|
});
|
||||||
@@ -30,6 +30,10 @@ import { readRegularFileSecure } from '../fleet/secure-file.js';
|
|||||||
import { readPersonaContractBlock } from '../fleet/persona-contract.js';
|
import { readPersonaContractBlock } from '../fleet/persona-contract.js';
|
||||||
import { canonicalizeRoleClass } from './fleet-personas.js';
|
import { canonicalizeRoleClass } from './fleet-personas.js';
|
||||||
import { launchClaudex, type ClaudexHarnessAdapter } from './claudex.js';
|
import { launchClaudex, type ClaudexHarnessAdapter } from './claudex.js';
|
||||||
|
import {
|
||||||
|
readInstalledIdentityContractAtPointOfUse,
|
||||||
|
seedFleetIdentityDefaults,
|
||||||
|
} from './fleet-first-start-identity.js';
|
||||||
import { runLeaseEnforcementDoctorCheck } from './lease-doctor-check.js';
|
import { runLeaseEnforcementDoctorCheck } from './lease-doctor-check.js';
|
||||||
|
|
||||||
const MOSAIC_HOME = process.env['MOSAIC_HOME'] ?? join(homedir(), '.config', 'mosaic');
|
const MOSAIC_HOME = process.env['MOSAIC_HOME'] ?? join(homedir(), '.config', 'mosaic');
|
||||||
@@ -230,8 +234,55 @@ function checkRuntime(cmd: string): void {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
function assertAmbientFleetClassMatches(canonicalName: string, canonicalClass: string): void {
|
||||||
|
const configuredClass = process.env['MOSAIC_AGENT_CLASS'];
|
||||||
|
if (configuredClass === undefined) return;
|
||||||
|
|
||||||
|
const ambientClass = canonicalizeRoleClass(configuredClass).canonicalClass;
|
||||||
|
if (ambientClass !== canonicalClass) {
|
||||||
|
throw new Error(
|
||||||
|
`Ambient MOSAIC_AGENT_CLASS resolves to "${ambientClass}" but canonical roster member "${canonicalName}" resolves to "${canonicalClass}". Refusing split identity authority.`,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
function checkSoul(): void {
|
function checkSoul(): void {
|
||||||
const soulPath = join(MOSAIC_HOME, 'SOUL.md');
|
const soulPath = join(MOSAIC_HOME, 'SOUL.md');
|
||||||
|
const fleetAgentName = process.env['MOSAIC_AGENT_NAME'];
|
||||||
|
if (fleetAgentName !== undefined) {
|
||||||
|
try {
|
||||||
|
if (fleetAgentName.length === 0 || fleetAgentName !== fleetAgentName.trim()) {
|
||||||
|
throw new Error(
|
||||||
|
'MOSAIC_AGENT_NAME must be a non-empty exact roster name with no surrounding whitespace',
|
||||||
|
);
|
||||||
|
}
|
||||||
|
const fleetIdentity = resolveFleetIdentity(MOSAIC_HOME, fleetAgentName);
|
||||||
|
if (!fleetIdentity.ok || !fleetIdentity.identity) {
|
||||||
|
throw new Error(
|
||||||
|
`canonical fleet identity is unavailable: ${fleetIdentity.error ?? 'exact roster member was not resolved'}`,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
assertAmbientFleetClassMatches(
|
||||||
|
fleetIdentity.identity.member.name,
|
||||||
|
fleetIdentity.identity.member.className,
|
||||||
|
);
|
||||||
|
const seeded = seedFleetIdentityDefaults(MOSAIC_HOME);
|
||||||
|
if (seeded.length > 0) {
|
||||||
|
console.log(
|
||||||
|
`[mosaic] Initialized unattended fleet identity defaults: ${seeded.join(', ')}. Exact seat identity remains roster-owned.`,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
return;
|
||||||
|
} catch (error: unknown) {
|
||||||
|
const reason = error instanceof Error ? error.message : String(error);
|
||||||
|
console.error(`[mosaic] ERROR: unattended fleet identity initialization failed: ${reason}`);
|
||||||
|
console.error(
|
||||||
|
'[mosaic] Repair the named fleet roster, launch identity, installed contract, or shipped default, then retry.',
|
||||||
|
);
|
||||||
|
process.exit(1);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
if (!existsSync(soulPath)) {
|
if (!existsSync(soulPath)) {
|
||||||
console.log('[mosaic] SOUL.md not found. Running setup wizard...');
|
console.log('[mosaic] SOUL.md not found. Running setup wizard...');
|
||||||
|
|
||||||
@@ -532,26 +583,27 @@ For required push/merge/issue-close/release actions, execute without routine con
|
|||||||
parts.push(readFileSync(join(mosaicHome, 'AGENTS.md'), 'utf-8'));
|
parts.push(readFileSync(join(mosaicHome, 'AGENTS.md'), 'utf-8'));
|
||||||
|
|
||||||
// USER.md (+ USER.local.md operator overlay, appended directly under the
|
// USER.md (+ USER.local.md operator overlay, appended directly under the
|
||||||
// profile its base owns).
|
// profile its base owns). Fleet first start is Linux/systemd-owned and uses
|
||||||
const user = readOptional(join(mosaicHome, 'USER.md'));
|
// the no-follow reader at point of use. Standalone launches retain the
|
||||||
|
// portable tolerant path used on macOS and other supported hosts.
|
||||||
|
const fleetAgentName = process.env['MOSAIC_AGENT_NAME'];
|
||||||
|
const user =
|
||||||
|
fleetAgentName === undefined
|
||||||
|
? readOptional(join(mosaicHome, 'USER.md'))
|
||||||
|
: readInstalledIdentityContractAtPointOfUse(mosaicHome, 'USER.md').toString('utf8');
|
||||||
if (user) parts.push('\n\n# User Profile\n\n' + user);
|
if (user) parts.push('\n\n# User Profile\n\n' + user);
|
||||||
const userLocal = readOptional(join(mosaicHome, 'USER.local.md'));
|
const userLocal = readOptional(join(mosaicHome, 'USER.local.md'));
|
||||||
if (userLocal.trim()) {
|
if (userLocal.trim()) {
|
||||||
parts.push('\n\n## Operator Overlay (USER.local.md)\n\n' + userLocal);
|
parts.push('\n\n## Operator Overlay (USER.local.md)\n\n' + userLocal);
|
||||||
}
|
}
|
||||||
|
|
||||||
const fleetIdentity = resolveFleetIdentity(mosaicHome, process.env['MOSAIC_AGENT_NAME']);
|
const fleetIdentity = resolveFleetIdentity(mosaicHome, fleetAgentName);
|
||||||
if (!fleetIdentity.ok) {
|
if (!fleetIdentity.ok) {
|
||||||
throw new Error(`Fleet communications contract unavailable: ${fleetIdentity.error}`);
|
throw new Error(`Fleet communications contract unavailable: ${fleetIdentity.error}`);
|
||||||
}
|
}
|
||||||
const canonicalMember = fleetIdentity.identity?.member;
|
const canonicalMember = fleetIdentity.identity?.member;
|
||||||
if (canonicalMember && process.env['MOSAIC_AGENT_CLASS']?.trim()) {
|
if (canonicalMember) {
|
||||||
const ambientClass = canonicalizeRoleClass(process.env['MOSAIC_AGENT_CLASS']).canonicalClass;
|
assertAmbientFleetClassMatches(canonicalMember.name, canonicalMember.className);
|
||||||
if (ambientClass !== canonicalMember.className) {
|
|
||||||
throw new Error(
|
|
||||||
`Ambient MOSAIC_AGENT_CLASS resolves to "${ambientClass}" but canonical roster member "${canonicalMember.name}" resolves to "${canonicalMember.className}". Refusing split identity authority.`,
|
|
||||||
);
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|
||||||
// TOOLS.md
|
// TOOLS.md
|
||||||
|
|||||||
Reference in New Issue
Block a user