ship a framework-owned Pi /goal controller under runtime/pi/ with branch-persisted state, per-turn/compaction checks, safe continuation, two-pass evidence verification, and bounded stop states
load Mosaic Pi extensions deterministically from ~/.config/mosaic/runtime/pi/ without installing extension assets under ~/.pi
add credential-pattern defense-in-depth, framework installer/adapter/launcher coverage, operator/developer docs, and a deterministic tmux fixture readiness barrier discovered during baseline testing
Mosaic Vitest: 1,539 passed; full framework shell harness passed
installer migration: 24 passed
gateway safe baseline excluding the prohibited PostgreSQL-only fixture: 600 passed
preflight, typecheck (45/45), lint (25/25), format, build, and standalone Pi 0.84.1 type check passed
live RPC smoke loaded the exact Mosaic path and reached achieved with 2/2 verification passes and zero extension errors
Review
independent code review approved
OWASP/security re-review: risk none, zero findings
focused remediation and tmux-race re-reviews approved
Local database constraint
Root pnpm test cannot safely run the unchanged PostgreSQL-only cross-user fixture in this checkout; local PostgreSQL access/startup is explicitly prohibited. All changed-package tests and the gateway suite excluding that fixture passed; terminal-green PR CI remains the merge gate.
## Summary
- ship a framework-owned Pi `/goal` controller under `runtime/pi/` with branch-persisted state, per-turn/compaction checks, safe continuation, two-pass evidence verification, and bounded stop states
- load Mosaic Pi extensions deterministically from `~/.config/mosaic/runtime/pi/` without installing extension assets under `~/.pi`
- add credential-pattern defense-in-depth, framework installer/adapter/launcher coverage, operator/developer docs, and a deterministic tmux fixture readiness barrier discovered during baseline testing
## Verification
- focused controller/launcher/adapter: 67 passed; extension coverage 99.17% statements/lines, 93.78% branches, 100% functions
- Mosaic Vitest: 1,539 passed; full framework shell harness passed
- installer migration: 24 passed
- gateway safe baseline excluding the prohibited PostgreSQL-only fixture: 600 passed
- preflight, typecheck (45/45), lint (25/25), format, build, and standalone Pi 0.84.1 type check passed
- live RPC smoke loaded the exact Mosaic path and reached `achieved` with 2/2 verification passes and zero extension errors
## Review
- independent code review approved
- OWASP/security re-review: risk none, zero findings
- focused remediation and tmux-race re-reviews approved
## Local database constraint
Root `pnpm test` cannot safely run the unchanged PostgreSQL-only cross-user fixture in this checkout; local PostgreSQL access/startup is explicitly prohibited. All changed-package tests and the gateway suite excluding that fixture passed; terminal-green PR CI remains the merge gate.
Closes #1150
Fixes #1150
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
/goalcontroller underruntime/pi/with branch-persisted state, per-turn/compaction checks, safe continuation, two-pass evidence verification, and bounded stop states~/.config/mosaic/runtime/pi/without installing extension assets under~/.piVerification
achievedwith 2/2 verification passes and zero extension errorsReview
Local database constraint
Root
pnpm testcannot safely run the unchanged PostgreSQL-only cross-user fixture in this checkout; local PostgreSQL access/startup is explicitly prohibited. All changed-package tests and the gateway suite excluding that fixture passed; terminal-green PR CI remains the merge gate.Closes #1150
Fixes #1150