stack/docs/tess/TASKS.md

Tasks — Tess Interaction Agent

Mission: tess-20260712 · Issue: #706 · PRD requirements: TESS-* Orchestrator is sole writer. Workers must not modify this file. repo contains one or more comma-separated repository-relative roots; every listed root must exist before dispatch. BASE CONVENTION (Mos-locked 2026-07-12): EVERY M1 dispatch targets base=main and branches from fresh origin/main. Do NOT base on feat/tess-interaction-agent — that is the STALE planning branch (merged via #712); basing on it yields mergeable=False + intervening-commit noise (cf. #723/SEC-005 re-base). Every dispatch brief must state base=main + branch-from-origin/main.

id	status	description	issue	agent	repo	branch	depends_on	estimate	notes
TESS-PLAN-001	done	Finalize PRD, architecture, authority boundary, threat model, migration inventory, and verification matrix	#706	sonnet	docs, packages/types, apps/gateway	feat/tess-interaction-agent	—	22K	Independent gate PASS after two remediation rounds; completion effective when planning PR merges
TESS-M1-SEC-001	done	Enforce command scopes/roles and durable exact-action approval for privileged/destructive commands	#707	codex	apps/gateway	fix/tess-command-authz	TESS-PLAN-001	25K	TESS-SEC-002; diskhygiene-terra; PR #718 head e3d98d73 MERGED (ROR 16829)
TESS-M1-SEC-002	done	Enforce owner/tenant binding on session list/read/attach/send/terminate across REST and WS	#707	codex	apps/gateway	fix/tess-session-ownership	TESS-PLAN-001	30K	TESS-SEC-003; coder0; PR #715 head 43ffbe7b MERGED (ROR 16808)
TESS-M1-SEC-003	done	Bind MCP actor/tenant to authenticated context and add per-tool scopes	#707	codex	apps/gateway	fix/tess-mcp-identity	TESS-PLAN-001	22K	TESS-SEC-004; coder1; PR #717 head 9ab776f9 MERGED (ROR 16819)
TESS-M1-SEC-004	done	Add authenticated Discord service ingress, allowlists, correlation and replay protection	#707	codex	plugins/discord, apps/gateway	fix/tess-discord-ingress	TESS-PLAN-001	28K	TESS-SEC-005; coder4; PR #716 head 55ae77b6 MERGED (ROR 16830)
TESS-M1-SEC-005	done	Redact/classify secret and PII before persistence/egress; harden provider login flow	#707	codex	apps/gateway, packages/log	fix/tess-redaction	TESS-PLAN-001	28K	TESS-SEC-006; coder1 (Mos-routed from blocked wrapfix-terra); mis-based #723 CLOSED superseded. MERGED to main: PR #725 head 726f7ab7 (ROR 16880). Verified chat persistence + egress redaction hooks; canary tests split-secret/private-key/overflow/persistence classification; provider login no auth URL/raw token in chat output
TESS-M1-SEC-006	done	Scope session GC/retention or separate authorized global retention job	#707	codex	apps/gateway, packages/log	fix/tess-session-gc-scope	TESS-PLAN-001	18K	TESS-SEC-009; coder4; PR #720 base=main. MERGED to main: head 37be090e (ROR 16861). Both blockers fixed: glob metachar sessionIds escaped+regression; durable approval survives GC pass (create→GC→key remains→authz succeeds); /gc disabled, per-session log demotion, no fullCollect/sweepOrphans entry, legacy repeatable GC schedule removed
TESS-M1-001	done	Define AgentRuntimeProvider, capabilities, session tree, normalized stream events/errors, attach semantics	#707	codex	packages/types, packages/agent	feat/tess-runtime-contract	TESS-PLAN-001	25K	TESS-ARP-001, TESS-TRN-001; wrapfix-terra; PR #719 head 5c42e67f MERGED (ROR 16813)
TESS-M1-002	done	Implement provider registry/service with immutable actor scope, approval, audit and correlation boundaries	#707	codex	apps/gateway, packages/agent	feat/tess-provider-registry	TESS-M1-001,TESS-M1-SEC-001,TESS-M1-SEC-002,TESS-M1-SEC-003	30K	TESS-SEC-001..004,007; coder0; PR #722 head c529022d MERGED (ROR 16849)
TESS-M1-003	done	Implement tmux/fleet runtime provider and safe attach/message/terminate capability policy	#707	codex	packages/mosaic, packages/agent	feat/tess-fleet-provider	TESS-M1-002	30K	TESS-FLT-001; coder0; PR #724 base=main. MERGED to main: head 355d814f (ROR 16868). HARD BOUNDARY verified: writes/control default-deny before tmux probing unless write authority permits; final exact-target authz after roster/socket/runtime verification; exact target/prefix/runtime-drift tests; read-only attach with immutable scope handles; empty-msg/default-deny/unverified-target tests; no credential material
TESS-M1-OBS-001	done	Implement correlation propagation, structured runtime/provider/tool audit, health/readiness and safe effective-policy status	#707	codex	apps/gateway, packages/agent, packages/log	feat/tess-observability-terra	TESS-M1-002	24K	TESS-OBS-001; SOLE owner=diskhygiene-terra. MERGED to main at REBASED head: PR #726 head 53f5414 (re-ROR comment 16886, prior 16881@adfa5c06 discarded after head move), CI 1723 green. Both @mosaicstack/log barrel exports coexist (redaction + runtime-audit), metadata-only/SHA-256 audit intact, fail-closed audit-before-side-effects intact, safe status/effective-policy/readiness
TESS-M1-V	done	Independent architecture/security review and complete contract/abuse-suite verification	#707	mos-reviewer	apps/gateway, packages/agent, packages/log, plugins/discord	review/tess-m1	TESS-M1-SEC-001,TESS-M1-SEC-002,TESS-M1-SEC-003,TESS-M1-SEC-004,TESS-M1-SEC-005,TESS-M1-SEC-006,TESS-M1-003,TESS-M1-OBS-001	20K	Gate M2 = PASS (Mos-owned independent non-author reviewer, 2026-07-12): all 5 priority seams verified live, 60+ tests green. M2 (#708) OPEN. Orchestrator did NOT run a competing lane (prior reviewer-lane dispatch recalled). Non-gating follow-up from this review captured as TESS-M1-FUP-001 (execute() authz-error mis-classification), scheduled to land before/with TESS-M3-001 — not now
TESS-M1-FUP-001	not-started	RuntimeProviderService.execute() records provider-thrown authorization errors as failed/provider_error instead of denied/policy_denied	#707	—	apps/gateway, packages/agent	—	—	6K	NON-GATING follow-up from M1-V review (2026-07-12). Provider-thrown authz errors (e.g. FleetRuntimeProviderError 'forbidden' from M1-003 write-authority) mis-classify as outcome:'failed'/'provider_error' rather than 'denied'/'policy_denied'. Low-priority. Land BEFORE/WITH TESS-M3-001 fleet-provider registry wiring (#709), NOT now
TESS-M2-001	done	Add Tess roster/profile/service pinned to GPT-5.6 Sol high with fail-fast config and observable effective policy	#708	coder0	packages/mosaic	feat/tess-pi-service	TESS-M1-V	22K	TESS-PI-001; AC-TESS-03. Mos-dispatched directly to coder0. MERGED to main by Mos (2026-07-12): PR #728 head c58e86e2, ROR comment 16905, CI 1728 green. NAME-AS-CONFIG invariant VERIFIED — identity via MOSAIC_AGENT_NAME/%i/roster data, no hardcoded tess identity in impl/service/schema/tool, Tess example-only; Nova distinct-name zero-code-change provisioning test; GPT-5.6 Sol high fail-fast; credential-safe effective-policy output; no live credential material
TESS-M2-002	in-progress	Implement durable session identity, inbox/outbox, approval, checkpoint, handoff, compaction and restart recovery	#708	coder0	apps/gateway, packages/agent, packages/db	feat/tess-durable-state	TESS-M2-001	38K	TESS-STA-001, TESS-SEC-007..008; recovery TDD. Mos-dispatched directly to coder0 (2026-07-12) — orchestrator tracks, no competing lane. Branch feat/tess-durable-state from fresh origin/main e3b5113b; first recovery TDD packages/agent/src/tess-durable-session.test.ts; reuses existing provider registry + durable approval store. base=main, PR-open-STOP, independent non-author ROR then Mos merges. Next gate after merge = TESS-M2-V (M2→M3 review). PR #729 OPEN (feat(tess): persist durable session state; base=main, mergeable=true, head 102a7b606b); coder0 pnpm turbo typecheck/lint/test --force 88/88 cold-cache + format green + Codex code/security remediated; scope = durable identity/inbox-outbox idempotency/immutable checkpoints/portable handoffs/PGlite close-reopen recovery/exact one-time approvals/sealed-redacted payloads/scoped dispatch. ROR routed to reviewer lane (non-author) at exact head 102a7b60 — awaiting VERIFIED APPROVE + CI, then Mos merges.
TESS-M2-V	not-started	Clean-host Pi launch plus model/policy status and restart/compaction/duplicate-side-effect verification	#708	sonnet	apps/gateway/src/tests/integration, packages/mosaic/src	review/tess-m2	TESS-M2-002	18K	Gate M3; AC-TESS-03/06
TESS-M3-001	not-started	Bind dedicated Tess Discord channel with streaming, threads, attachments, pairing/RBAC and approvals	#709	codex	plugins/discord, apps/gateway	feat/tess-discord	TESS-M2-V,TESS-M1-SEC-004	35K	TESS-DSC-001
TESS-M3-002	not-started	Implement mosaic tess chat/status/sessions/tree/attach/send/stop/health/recover CLI	#709	codex	packages/mosaic	feat/tess-cli	TESS-M2-V	30K	TESS-CLI-001
TESS-M3-V	not-started	Discord+CLI same-session E2E, denial/approval tests, and operator-flow review	#709	sonnet	apps/gateway/src/tests/integration, plugins/discord, packages/mosaic/src	review/tess-m3	TESS-M3-001,TESS-M3-002	20K	Gate M4
TESS-M4-001	not-started	Implement Mos coordination handoff/observe/result contract with authority-boundary tests	#710	codex	packages/coord, apps/gateway	feat/tess-mos-coordination	TESS-M3-V	25K	TESS-MOS-001
TESS-M4-002	not-started	Implement transitional Hermes runtime/capability adapter	#710	codex	packages/agent, apps/gateway	feat/tess-hermes-adapter	TESS-M3-V	40K	TESS-HRM-001; no legacy schema in core contracts
TESS-M4-003	not-started	Implement memory/retrieval, state/inbox, runtime bootstrap, fleet diagnostics and GitOps plugin foundations	#710	codex	packages/memory, packages/agent, packages/mosaic	feat/tess-operator-plugins	TESS-M3-V	40K	TESS-MEM-001, TESS-PLG-001
TESS-M4-V	not-started	Cross-provider capability, privacy, authority and failure-path qualification	#710	sonnet	apps/gateway/src/tests/integration, packages/agent	review/tess-m4	TESS-M4-001,TESS-M4-002,TESS-M4-003	22K	Gate M5
TESS-M5-001	not-started	Implement Matrix/native runtime provider behind common contracts and parity suite	#711	codex	packages/mosaic, packages/agent	feat/tess-matrix-provider	TESS-M4-V	30K	TESS-TRN-001
TESS-M5-002	not-started	Complete migration inventory, cutover, rollback, retention and deprecation evidence	#711	sonnet	docs/tess	feat/tess-migration-docs	TESS-M4-V	18K	TESS-MIG-001
TESS-M5-003	not-started	Complete OpenAPI, user/admin/developer/plugin/operations docs and checklist	#711	codex	docs	feat/tess-docs	TESS-M5-001,TESS-M5-002	22K	Documentation hard gate
TESS-M5-V	not-started	Full baseline, contract, integration, Discord/CLI E2E, security review, recovery drill and rollback qualification	#711	sonnet	apps/gateway, packages/agent, plugins/discord, packages/mosaic	review/tess-final	TESS-M5-003	35K	Maps AC-TESS-01..11 to evidence