jason.woltjeandClaude Opus 5.5
fe5c68fa03
Slice 1 S6. packages/harness runs a role session under the pi or claude
adapter behind a tool gate, and packages/seat holds the session and its
process. The bus host gains a launch socket: `mosaic bus start
<business> --pm <harness>:<model>` runs the PM without a window, the PM
launches role sessions through the broker within the business file's
`launch.max`, and every launch, refusal and end is a launch-log line and
a broker event. `mosaic talk`, `mosaic launches off|on|list` and
`mosaic stop <run>` are new CLI verbs. packages/bus gains the IPC ops
identity, authorize, refuse, endLaunch and credentialStatus, plus
Broker.endLaunch (decision 77); no socket verb, event kind or schema
changed. The session environment is an allowlist, and the runner exits
before claiming if a founder credential reaches it.
Filbert built it (agents/filbert/work/s6). Darkwing reviewed on #1523:
round 1 changes (26991/26995), round 2 changes (27004/27010), round 3
changes (27012/27032), round 4 approve (27033/27034) on manifest
08a78972, 42 paths.
Sage's gate on 64b0f9f1 (12:32Z), sequential and teed: node suites
business 60, bus 74, cli 83, control-board 124, conversation 182,
discord 178, harness 56, ledger 78, mosaic 69, queue 149, runs 41,
seat 27, tasks 51, webui 39, every one 0 failed; test-auth 15,
test-conductor 17, test-config 24, test-discord 66,
test-extension-package 18, test-foundation 44, test-queue 27,
test-release 14, test-task 98 and 26 without Docker, all 0 failed.
64b0f9f1..ee7f909b touches none of the 42 paths. It landed after the
Q14 hold ended at 2026-10-11T17:19:23.857Z. The recorded PM-to-coder
run on a scratch data root is still owed before row 41 moves to done.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
26 lines
949 B
JavaScript
26 lines
949 B
JavaScript
// Claude Code PreToolUse command hook for a managed session. The bundle's
|
|
// settings.json runs it as
|
|
// timeout -k 2 10 <node> claude-gate.mjs <policy.json> || exit 2
|
|
// with hook timeout 20 (S0 lines 1-4): exit 0 lets the tool run, exit 2
|
|
// blocks it with the reason on stderr, and the wrapper turns a crash, a
|
|
// missing file or a timeout into exit 2.
|
|
|
|
import { readFileSync } from "node:fs";
|
|
import { decide } from "./gate.mjs";
|
|
|
|
function block(reason) {
|
|
process.stderr.write(`${reason}\n`);
|
|
process.exit(2);
|
|
}
|
|
|
|
try {
|
|
const policy = JSON.parse(readFileSync(process.argv[2], "utf8"));
|
|
if (policy.harness !== "claude-code") block("mosaic gate: policy file is not a claude-code policy");
|
|
const event = JSON.parse(readFileSync(0, "utf8"));
|
|
const verdict = decide(policy, event.tool_name, event.tool_input);
|
|
if (!verdict.allow) block(verdict.reason);
|
|
process.exit(0);
|
|
} catch (error) {
|
|
block(`mosaic gate: ${error.message}`);
|
|
}
|