mosaicstack/stack
1
0
Fork 0
Code Issues 42 Pull Requests Actions Packages Projects Releases 15 Wiki Activity

feat(tess): add roster-bound tmux fleet provider #724

Merged
jason.woltje merged 1 commits from feat/tess-fleet-provider into main 2026-07-13 00:59:25 +00:00
Conversation 1 Commits 1 Files Changed 8 +1073
jason.woltje commented 2026-07-13 00:31:30 +00:00
Owner
Copy Link

Summary

  • add roster-bound tmux transport with exact socket, pane, and runtime identity checks
  • add capability-limited Tess fleet runtime provider with read-only attach and default-deny Mos authority seams
  • cover target abuse, identity drift, attachment scope, write authority, and empty-message validation

Verification

  • pnpm typecheck
  • pnpm lint
  • pnpm format:check
  • pnpm test
  • Codex code and security reviews: approved, no findings

Refs #707

## Summary - add roster-bound tmux transport with exact socket, pane, and runtime identity checks - add capability-limited Tess fleet runtime provider with read-only attach and default-deny Mos authority seams - cover target abuse, identity drift, attachment scope, write authority, and empty-message validation ## Verification - pnpm typecheck - pnpm lint - pnpm format:check - pnpm test - Codex code and security reviews: approved, no findings Refs #707
jason.woltje added 1 commit 2026-07-13 00:31:31 +00:00
feat(tess): add roster-bound tmux fleet provider
All checks were successful
ci/woodpecker/pr/ci Pipeline was successful
Details
355d814f5c
jason.woltje commented 2026-07-13 00:46:27 +00:00
Author
Owner
Copy Link

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer] head 355d814f5c

Evidence:

  • Exact PR/branch head verified: 355d814f5c8d7097ebc80b21f04ab63a1f8c4a5e.
  • PR CI green: ci/woodpecker/pr/ci pipeline 1716 success.
  • Reviewed TESS-FLT-001 authority boundary: fleet writes/control default-deny before tmux probing unless a write authority permits, then exact-target assertAuthorized runs after roster/socket/runtime verification and before sendMessage/terminate.
  • Target and identity checks are enforced through roster lookup, exact session target (=<agent>:0.0 / =<agent>), configured roster socket, live pane check, and runtime command match; prefix/unrostered target, unavailable pane, and runtime drift tests fail closed.
  • Attach is read-only only; control attach is denied before transport, handles are short-lived and immutable-scope-bound, and replay from another actor scope is denied.
  • Message/terminate cannot escape policy: empty messages are rejected before authority/transport, default writes do not call transport, unverified targets fail before Mos final authorization, and authorized calls use the maintained sender/exact tmux target only.
  • Gateway registry remains the audit/correlation boundary from M1-002; this PR does not bypass it or introduce a direct raw socket/target path.
  • git diff --check clean; no credential material or secret values in the PR diff.
VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer] head 355d814f5c8d7097ebc80b21f04ab63a1f8c4a5e Evidence: - Exact PR/branch head verified: `355d814f5c8d7097ebc80b21f04ab63a1f8c4a5e`. - PR CI green: `ci/woodpecker/pr/ci` pipeline 1716 success. - Reviewed TESS-FLT-001 authority boundary: fleet writes/control default-deny before tmux probing unless a write authority permits, then exact-target `assertAuthorized` runs after roster/socket/runtime verification and before `sendMessage`/`terminate`. - Target and identity checks are enforced through roster lookup, exact session target (`=<agent>:0.0` / `=<agent>`), configured roster socket, live pane check, and runtime command match; prefix/unrostered target, unavailable pane, and runtime drift tests fail closed. - Attach is read-only only; control attach is denied before transport, handles are short-lived and immutable-scope-bound, and replay from another actor scope is denied. - Message/terminate cannot escape policy: empty messages are rejected before authority/transport, default writes do not call transport, unverified targets fail before Mos final authorization, and authorized calls use the maintained sender/exact tmux target only. - Gateway registry remains the audit/correlation boundary from M1-002; this PR does not bypass it or introduce a direct raw socket/target path. - `git diff --check` clean; no credential material or secret values in the PR diff.
jason.woltje merged commit 9a8a572fcf into main 2026-07-13 00:59:25 +00:00
jason.woltje deleted branch feat/tess-fleet-provider 2026-07-13 00:59:25 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
fleet-enhancement
Fleet-wide reliability/speed/cost improvements surfaced by the nightly enhance pass
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jason.woltje
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#724
Delete Branch "feat/tess-fleet-provider"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?