jason.woltje d0cfebe286 fix(cli): M3 re-check: provider denials answer 403; A2 test owner carries rootOwner (#1873) ...

The rehearsal provider matches routes on the parsed pathname, so a
query string no longer turns authorize or token into a 404. Authorize
and token answer 403 to any method before the GET check, and only
discovery and the JWKS answer 405 to another method. R20 now sends a
POST to token and a GET to authorize with a query, and expects 403 for
both.

The upstream A2 agent-levels write test stubbed an owner session
without rootOwner. M3 sets the hook's owner flag from rootOwner, as
sso.mjs grants it, so the stub now carries rootOwner: true, as
system-types-http does. No check changes.

2026-11-10 21:38:17 -06:00

..

case2

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

foundation

feat(foundation): offline synthetic scope/permission inspector (FI-FILBERT-8 APPROVED r6)

2026-09-07 14:06:35 -05:00

git-hooks

feat(queue): queue as data A1, journal, lock, CLI and verify (#1508)

2026-09-26 19:07:48 -05:00

land-work

bus, business: agents land approved merges into the business working repository (row 137, #1631)

2026-10-16 15:56:00 -05:00

testing

Hold closed fixture ports for the test's life (Vikunja #781)

2026-11-02 18:25:27 -06:00

agent-host-dev.sh

feat(harness): meta-harness and PM launching off T3 (#1523, row 41)

2026-10-11 12:22:50 -05:00

agent.sh

fix(worker): limit legacy mounts to selected inputs and outputs (#156)

2026-10-29 00:19:26 -05:00

auth.sh

fix(auth): mosaic-managed auth lives under the data root, never ~/.pi (#48)

2026-09-03 22:53:33 -05:00

bootstrap.sh

stack: several Mosaic Stack instances on one host (row 190, #1688)

2026-10-20 17:49:06 -05:00

build.sh

feat(release): RELEASE identity + image tag single-sourcing (#10)

2026-09-02 20:18:17 -05:00

bus-service.sh

row329: finish pinned model proxy P1 and record final gate (#1827)

2026-10-24 18:30:11 -05:00

case1-accept.sh

selector: --org and --business in case1-accept's three scopes

2026-11-08 21:56:02 -06:00

case1-hostcheck.sh

fix(installer): allow scoped Claude paths and leave unreadable cwd (#1816, Vikunja 614). Untested

2026-10-23 16:37:24 -05:00

case1-pins.sh

row 240: installer I4, root's host check, its pins and the boot unit; I3's N1, N4 and N5 (#1746, Vikunja #432)

2026-10-21 01:56:47 -05:00

case2-install.sh

feat(cli): M3 reconciliation: accounts units, stamped renders, rehearsal (#1873)

2026-11-10 21:38:17 -06:00

case2-persona-import.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

case2-precheck.sh

fix: redact remaining file and config refusal echoes (#1873)

2026-11-10 17:06:54 -06:00

case2-unit.sh

fix(cli): M3 review round: re-pin migration, rehearsal provider (#1873)

2026-11-10 21:38:17 -06:00

common.sh

processing: inspectable per-run stop seam for lifecycle fire

2026-10-21 22:42:12 -05:00

conductor-apply.sh

refactor(layout): role contracts move to roles/ - root is bootstrap-only

2026-09-03 10:56:07 -05:00

discord-service.sh

stack: several Mosaic Stack instances on one host (row 190, #1688)

2026-10-20 17:49:06 -05:00

discord.sh

feat(discord): binding reload without a restart, and a per-user channel allowlist (#1509)

2026-09-13 18:59:31 -05:00

e2e-orgs-cli.sh

Verify scoped Console and concurrent broker writes

2026-11-07 14:56:16 -06:00

e2e-orgs-proxy.mjs

Verify shared proxy and organization integration

2026-11-07 13:50:39 -06:00

foundation-inspect.mjs

feat(foundation): offline synthetic scope/permission inspector (FI-FILBERT-8 APPROVED r6)

2026-09-07 14:06:35 -05:00

git-credential-mosaic.mjs

chore: baseline container POC and atomic foundation plan

2026-09-02 18:24:36 -05:00

gitea-api.sh

feat(queue): Piece D, reviews as issue comments, raw per-seat token helper (row 12, #1508)

2026-09-27 10:07:29 -05:00

goal-dev.sh

feat(extensions): establish canonical goal source (#54, #55)

2026-09-06 02:32:32 -05:00

hello.sh

processing: inspectable per-run stop seam for lifecycle fire

2026-10-21 22:42:12 -05:00

instance.sh

WIP row329: preserve P1 draft before required base rebase (#1827)

2026-10-24 18:30:11 -05:00

land-work.sh

selector: --org and --business in land-work

2026-11-08 22:35:24 -06:00

mosaic

cli, organization: org config and org instances commands, old business spelling kept (rename r2 stage B2)

2026-11-09 12:00:29 -06:00

mosaic-config.mjs

fix(redaction): omit remaining configuration values from refusals (#1873)

2026-11-10 19:56:05 -06:00

mosaic-task.mjs

fix(redaction): omit remaining configuration values from refusals (#1873)

2026-11-10 19:56:05 -06:00

onboard.sh

feat(onboard): user onboarding - no default USER.md, guided creation (#37)

2026-09-03 12:30:42 -05:00

prepare-concept-tests.mjs

docs: concept annexation, provider/reference docs, ACT-1 groundwork

2026-09-07 14:07:05 -05:00

proxy-service.sh

WIP row329: preserve P1 draft before required base rebase (#1827)

2026-10-24 18:30:11 -05:00

push-check.sh

Detect binaries despite git attributes and reject unconfirmed reviews (#1825)

2026-10-24 01:40:50 -05:00

queue-commit.sh

fix(queue): genesis owner-not-reviewer check, assign wording, queue-commit HEAD-moved message, calendar dates (row 33, #1508)

2026-10-04 01:25:06 -05:00

release.sh

feat(release): recursion guard for the health gate; run-task drift warning; M20 packages/* decision recorded (#39)

2026-09-03 15:58:46 -05:00

reset.sh

feat(config): wire launcher scripts and compose to config.json (#2)

2026-09-02 18:30:08 -05:00

run-task.sh

processing: inspectable per-run stop seam for lifecycle fire

2026-10-21 22:42:12 -05:00

selector.sh

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

skill.sh

feat(release): recursion guard for the health gate; run-task drift warning; M20 packages/* decision recorded (#39)

2026-09-03 15:58:46 -05:00

stack-copy.sh

feat(cli): enforce stamped-copy and deployed-instance boundaries (#1873)

2026-11-10 21:38:17 -06:00

stack-release.sh

fix(cli): M3 re-check: provider denials answer 403; A2 test owner carries rootOwner (#1873)

2026-11-10 21:38:17 -06:00

stack-upgrade.sh

fix(cli): M3 review round: re-pin migration, rehearsal provider (#1873)

2026-11-10 21:38:17 -06:00

sync-dev-extensions.sh

feat(extensions): establish canonical goal source (#54, #55)

2026-09-06 02:32:32 -05:00

test-auth.sh

Add packages/mosaic registry schemas, validation, read-only CLI; pin pi 0.85.1 (#1499)

2026-09-10 15:18:15 -05:00

test-case2.sh

Row 227 R3 (#1728): restore the executable bit on scripts/test-case2.sh

2026-11-02 16:35:54 -06:00

test-conductor.sh

refactor(layout): role contracts move to roles/ - root is bootstrap-only

2026-09-03 10:56:07 -05:00

test-config.sh

fix(redaction): omit remaining configuration values from refusals (#1873)

2026-11-10 19:56:05 -06:00

test-darkwing-launch.mjs

fix: preserve read error codes and launcher fixtures (#1873)

2026-11-10 17:54:33 -06:00

test-discord.sh

test: resolve the real Docker binary inside lane fixtures

2026-10-21 13:28:40 -05:00

test-extension-package.sh

feat(extensions): establish canonical goal source (#54, #55)

2026-09-06 02:32:32 -05:00

test-federation-acceptance.sh

Untested: row 296 scratch two-instance acceptance (#1802)

2026-10-24 05:39:13 -05:00

test-fleet-goal-native.py

fix(goal): quiet waits and unify fleet NG ownership (#56, #57, #58)

2026-09-06 04:07:09 -05:00

test-fleet-goal-ownership.py

fix(goal): quiet waits and unify fleet NG ownership (#56, #57, #58)

2026-09-06 04:07:09 -05:00

test-foundation.sh

test: resolve the real Docker binary inside lane fixtures

2026-10-21 13:28:40 -05:00

test-goal-discovery.mjs

fix(goal): quiet waits and unify fleet NG ownership (#56, #57, #58)

2026-09-06 04:07:09 -05:00

test-goal-native.py

fix(goal): quiet waits and unify fleet NG ownership (#56, #57, #58)

2026-09-06 04:07:09 -05:00

test-land-work.sh

selector: --org and --business in land-work

2026-11-08 22:35:24 -06:00

test-push-check.sh

Detect binaries despite git attributes and reject unconfirmed reviews (#1825)

2026-10-24 01:40:50 -05:00

test-queue.sh

test: resolve the real Docker binary inside lane fixtures

2026-10-21 13:28:40 -05:00

test-release.sh

row 305 (#1812): each suite's network check also requires the network present under the run's project before the remove (mos-1445)

2026-10-23 06:49:49 -05:00

test-rocko-launch.mjs

fix: preserve read error codes and launcher fixtures (#1873)

2026-11-10 17:54:33 -06:00

test-task.sh

fix(redaction): omit remaining configuration values from refusals (#1873)

2026-11-10 19:56:05 -06:00

unify-fleet-goal.py

fix(goal): quiet waits and unify fleet NG ownership (#56, #57, #58)

2026-09-06 04:07:09 -05:00

verify.sh

processing: inspectable per-run stop seam for lifecycle fire

2026-10-21 22:42:12 -05:00

webui-service.sh

feat(cli): require dedicated host uid for accounts system units (#1873)

2026-11-10 21:38:17 -06:00