mosaicstack/stack
1
0
Fork 0
Code Issues 42 Pull Requests Actions Packages Projects Releases 15 Wiki Activity

feat(tess): add Mos coordination boundary #735

Merged
jason.woltje merged 2 commits from feat/tess-mos-coordination into main 2026-07-13 11:59:17 +00:00
Conversation 2 Commits 2 Files Changed 12 +1307 -15
jason.woltje commented 2026-07-13 11:25:53 +00:00
Owner
Copy Link

Summary

  • add transport-neutral handoff / observe / result Mos coordination contract and deterministic native in-process adapter
  • enforce configured requester/target identity, server-derived actor/tenant scope, target/correlation drift detection, and scoped idempotent handoffs in the gateway
  • add contract/boundary denial coverage and Tess architecture, contract, verification, and scratchpad documentation

Constraints

  • no Mos consumer or fleet/tmux transport added
  • no changes to apps/gateway/src/commands/command-authorization.service.ts

Verification

  • TURBO_FORCE=true pnpm typecheck
  • TURBO_FORCE=true pnpm lint
  • TURBO_FORCE=true pnpm format:check
  • TURBO_FORCE=true pnpm test (42 tasks; 0 cached)
  • Codex security review: no findings

Closes #710

## Summary - add transport-neutral `handoff` / `observe` / `result` Mos coordination contract and deterministic native in-process adapter - enforce configured requester/target identity, server-derived actor/tenant scope, target/correlation drift detection, and scoped idempotent handoffs in the gateway - add contract/boundary denial coverage and Tess architecture, contract, verification, and scratchpad documentation ## Constraints - no Mos consumer or fleet/tmux transport added - no changes to `apps/gateway/src/commands/command-authorization.service.ts` ## Verification - `TURBO_FORCE=true pnpm typecheck` - `TURBO_FORCE=true pnpm lint` - `TURBO_FORCE=true pnpm format:check` - `TURBO_FORCE=true pnpm test` (42 tasks; 0 cached) - Codex security review: no findings Closes #710
jason.woltje added 1 commit 2026-07-13 11:25:54 +00:00
feat(tess): add Mos coordination boundary
All checks were successful
ci/woodpecker/pr/ci Pipeline was successful
Details
7936e15d3a
jason.woltje commented 2026-07-13 11:31:41 +00:00
Author
Owner
Copy Link

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer-gpt5.5] head 7936e15d3a

Findings: MosCoordinationPort exposes only handoff / observe / result; no dispatch/assign/review/merge/cancel verbs are present in the exported coordination port. Gateway scope derives actor/tenant/requester from trusted runtime context/config, uses divergent Nova→Conductor identities, and fail-closed tests cover unconfigured requester, self-delegation, target drift, cross-tenant observe/result, and public-contract verb absence.
Transport is the native in-process InMemoryMosCoordinationPort with no fleet/tmux dependency or Mos-side consumer; contract remains transport-neutral. command-authorization.service.ts is byte-identical to origin/main (hash a9f829e7ecec721c6c585fe0da56fb5d6a6441e9), no live creds found, and no source hardcoded Tess agent identity introduced. CI pipeline 1752 is currently running/pending; merge on green.

Marker: ROR-735-APPROVE-7936e15d

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer-gpt5.5] head 7936e15d3ae137c91c88efdab4bb09b863a2195d Findings: `MosCoordinationPort` exposes only `handoff` / `observe` / `result`; no dispatch/assign/review/merge/cancel verbs are present in the exported coordination port. Gateway scope derives actor/tenant/requester from trusted runtime context/config, uses divergent Nova→Conductor identities, and fail-closed tests cover unconfigured requester, self-delegation, target drift, cross-tenant observe/result, and public-contract verb absence. Transport is the native in-process `InMemoryMosCoordinationPort` with no fleet/tmux dependency or Mos-side consumer; contract remains transport-neutral. `command-authorization.service.ts` is byte-identical to `origin/main` (hash `a9f829e7ecec721c6c585fe0da56fb5d6a6441e9`), no live creds found, and no source hardcoded Tess agent identity introduced. CI pipeline `1752` is currently running/pending; merge on green. Marker: ROR-735-APPROVE-7936e15d
jason.woltje added 1 commit 2026-07-13 11:33:29 +00:00
docs(tess): record M4 verification
All checks were successful
ci/woodpecker/pr/ci Pipeline was successful
Details
5022911f84
jason.woltje commented 2026-07-13 11:45:45 +00:00
Author
Owner
Copy Link

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer-gpt5.5] head 5022911f84

Fast re-ROR after head move: 5022911f84dd7ac30f40df31a53f6cd31a51728f is a direct child of the previously reviewed 7936e15d3ae137c91c88efdab4bb09b863a2195d; the only two-dot delta is docs/scratchpads/tess-m4-001-mos-coordination.md (3-line scratchpad doc change), so the approved code/test content is unchanged.
Prior M4-001 findings still hold: handoff/observe/result-only contract, trusted config/context-derived identity, fail-closed self/drift/cross-tenant coverage, native in-process adapter, byte-identical command authorization digest, no live creds/no hardcoded Tess identity. CI pipeline 1754 is green; Mos merges on green.

Marker: ROR-735-APPROVE-5022911f

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer-gpt5.5] head 5022911f84dd7ac30f40df31a53f6cd31a51728f Fast re-ROR after head move: `5022911f84dd7ac30f40df31a53f6cd31a51728f` is a direct child of the previously reviewed `7936e15d3ae137c91c88efdab4bb09b863a2195d`; the only two-dot delta is `docs/scratchpads/tess-m4-001-mos-coordination.md` (3-line scratchpad doc change), so the approved code/test content is unchanged. Prior M4-001 findings still hold: handoff/observe/result-only contract, trusted config/context-derived identity, fail-closed self/drift/cross-tenant coverage, native in-process adapter, byte-identical command authorization digest, no live creds/no hardcoded Tess identity. CI pipeline `1754` is green; Mos merges on green. Marker: ROR-735-APPROVE-5022911f
jason.woltje merged commit 76325ca3f2 into main 2026-07-13 11:59:17 +00:00
jason.woltje deleted branch feat/tess-mos-coordination 2026-07-13 11:59:18 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
fleet-enhancement
Fleet-wide reliability/speed/cost improvements surfaced by the nightly enhance pass
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jason.woltje
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#735
Delete Branch "feat/tess-mos-coordination"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?