topher
2435e74b8e
ci/woodpecker/pr/ci Pipeline was successful
B1 (rev-code-02): fleet/bin/** made keep-mode update prune existing estate executables absent from the package source. Replaced with exact entries (fleet/bin/mosaic, fleet/bin/test-mosaic-launcher.sh); parity spec gains a dedicated ownership probe asserting the two shipped files are framework-owned while seat-up.sh, launch-seat.sh and the directory itself stay operator-owned, on both resolvers. B2: a relative HOME bypassed the fallback guard (component probes were absolute-prefixed, so a relative candidate walked nonexistent absolute paths and a planted cwd-relative CLI executed). The untrusted fallback candidate is now refused unless absolute, with parent-escape (..) components refused as well; the symlink walk then applies. B3: A6 planted the executable off the resolved candidate path, so a guard-bypass mutant stayed green (nothing executable at the candidate). The symlink now points at $PLANT/.npm-global so the candidate resolves exactly to the planted binary, and the suite gains two mutation controls: a guard-bypassed copy MUST execute both the absolute-symlink plant and the new relative-HOME plant (sentinels asserted present), while the real launcher refuses both (rc 127, diagnostics, sentinels absent). Marker T110-DISPATCH-TOPHER-1N2O / ORCH-T110-REWORK-M5N6.
96 lines
3.7 KiB
Plaintext
96 lines
3.7 KiB
Plaintext
# Mosaic framework path-ownership manifest — SSOT for the updater.
|
|
#
|
|
# This single file is the source of truth consumed by BOTH the bash installer
|
|
# (packages/mosaic/framework/install.sh) and the TypeScript config adapter
|
|
# (packages/mosaic/src/config/file-adapter.ts). A parity test asserts both
|
|
# paths resolve the same ownership from this file, so the two can never drift
|
|
# (the failure mode that #631 patched by hand in two places).
|
|
#
|
|
# Format: one glob per line, relative to the mosaic home (~/.config/mosaic).
|
|
# - Lines starting with '#' and blank lines are ignored.
|
|
# - '[framework]' / '[operator]' switch the active section.
|
|
# - '**' matches any depth; '*' matches within a single path segment.
|
|
#
|
|
# Ownership resolution for a path P (deny-wins / fail-safe):
|
|
# 1. P matches an [operator] glob -> operator-owned.
|
|
# 2. else P matches a [framework] glob -> framework-owned.
|
|
# 3. else (matches neither) -> OPERATOR-OWNED BY DEFAULT.
|
|
#
|
|
# Rule 3 is the root-cause fix for #791: a path the manifest authors never
|
|
# anticipated is protected because UNKNOWN defaults to operator. The updater
|
|
# may only ever create/overwrite framework-owned paths, and may only prune a
|
|
# framework-owned path that lives inside a shipped framework subtree and is
|
|
# absent from the current framework source (a genuinely retired file).
|
|
# Operator-owned and unknown paths are structurally unreachable by pruning.
|
|
|
|
[framework]
|
|
# Top-level framework contract files (also reconciled from defaults/ on upgrade).
|
|
CONSTITUTION.md
|
|
AGENTS.md
|
|
STANDARDS.md
|
|
# Shipped framework subtrees — pruning is scoped to these roots.
|
|
adapters/**
|
|
constitution/**
|
|
CONTRIBUTING.md
|
|
defaults/**
|
|
examples/**
|
|
guides/**
|
|
# Shipped framework subtree — canonical skills are upgrade-reconciled.
|
|
skills/**
|
|
install.sh
|
|
install.ps1
|
|
LICENSE
|
|
profiles/**
|
|
runtime/**
|
|
systemd/**
|
|
templates/**
|
|
tools/**
|
|
# Fleet: only the framework-seeded fleet subtrees are framework-owned.
|
|
# fleet/bin is exact-entry on purpose (T110 B1): the estate's fleet/bin carries
|
|
# operator-owned executables this package does not ship; a subtree glob here
|
|
# would make keep-mode update prune them.
|
|
fleet/README.md
|
|
fleet/bin/mosaic
|
|
fleet/bin/test-mosaic-launcher.sh
|
|
fleet/examples/**
|
|
fleet/profiles/**
|
|
fleet/roles/**
|
|
fleet/roster.schema.json
|
|
fleet/services/**
|
|
# The manifest itself is framework-owned.
|
|
framework-manifest.txt
|
|
|
|
[operator]
|
|
# Identity / user-seeded contract files — generated by the wizard or seeded
|
|
# once from defaults/, then owned by the operator. Never overwritten on upgrade.
|
|
SOUL.md
|
|
USER.md
|
|
TOOLS.md
|
|
# Local overlays (tighten-only) authored by the operator.
|
|
*.local.md
|
|
# Operator-owned trees the updater must never write over or prune.
|
|
agents/**
|
|
policy/**
|
|
memory/**
|
|
sources/**
|
|
credentials/**
|
|
# Operator-authored/customized skills live separately from canonical skills/ and
|
|
# must remain structurally unprunable even as skills/** is framework-owned.
|
|
skills-local/**
|
|
# Secret-bearing operator file INSIDE the framework-owned tools/ subtree.
|
|
# Listed explicitly so the deny-wins rule carves it out of tools/**.
|
|
tools/_lib/credentials.json
|
|
# Operator-owned fleet state (roster SSOT, per-agent env, heartbeats, backlog,
|
|
# persona overrides). Losing these silently downgrades a running fleet (#791).
|
|
fleet/roster.yaml
|
|
fleet/roster.json
|
|
fleet/agents/**
|
|
# Runtime state, incl. the #797 Runtime Session Ledger at fleet/run/sessions/
|
|
# (events.ndjson journal + ledger.json projection). This carve-out is the
|
|
# mechanism that makes the ledger upgrade-safe: an upgrade that wiped it would
|
|
# defeat its reason to exist. The HARD GATE (test-upgrade-manifest-guard.sh)
|
|
# proves a populated ledger survives byte-identical + mtime-unchanged.
|
|
fleet/run/**
|
|
fleet/backlog/**
|
|
fleet/roles.local/**
|