jason.woltje f0e11cb342 feat(proxy): Console proxy setup page and CLI parity (#1873) ...

One Proxy setup panel on the Model proxy settings page takes an owner from
nothing to a running proxy: status with one next-step button per state, the
pinned fetch with hash checks, progress and a receipt, init with a
bus-generated key (a pasted key only over loopback or HTTPS, with a
confirmation), unit render/install/start/stop/restart with health, a fence
clear that the bus re-proves against a confirmed restart, and a stale init
lock clear that names its blockers. Own proxy per organization shows as not
built.

New Console routes under /api/proxy/admin/ use the existing owner proxy
checks; agents, testers and grant holders get human-required. New bus verbs
proxy.init {generate:true} and proxy.fence.clear. Receipts go to
<dataRoot>/state/proxy-admin.jsonl with labels and key ids only. Every new
refusal code has a refusal-table entry.

CLI: mosaic proxy status, unit render|status|install|start|stop|restart,
init --generate-key, fence clear --restart, init-lock status|clear; proxy
fetch keeps its stdout and adds progress and the receipt.

Page fix found in the end-to-end run: a stopped proxy hides the account
panels until the service answers. (The catalogue switch label fix found in
the same run landed upstream as D3 P0-4.)

2026-11-11 16:32:31 -06:00

..

fixtures

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

access-boot.test.mjs

fix(organization,cli,discord,seat,control-board): refusals name the field or file by label, never a host path (#1873)

2026-11-11 08:53:31 -06:00

access.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

accounts.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

agent-copies.test.mjs

fix(agents): A3 hidden checkouts cover every left-out project and refuse links, final admission binds the organization revision (#1873)

2026-11-10 20:27:33 -06:00

agent-guard.test.mjs

fix(cli): agent-guard re-check: delete revision error first, real-org archive and delete proof (#1873)

2026-11-11 16:15:51 -06:00

agent-levels-cli.test.mjs

fix(agents): A2 review round: config check, name rule, drafts and test gaps (#1873)

2026-11-10 18:25:54 -06:00

app.test.mjs

cli: terminal app follow-up, narrow-terminal guard test, hidden-box way out and width tests (#1562)

2026-10-12 18:36:52 -05:00

boot-status.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

business-imports.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

case1-accept.test.mjs

fix: preserve tester session identity through cleanup (#1873)

2026-11-11 08:22:31 -06:00

case1-hostcheck.test.mjs

fix(installer): allow scoped Claude paths and leave unreadable cwd (#1816, Vikunja 614). Untested

2026-10-23 16:37:24 -05:00

case2-install.test.mjs

feat(org): add per-class autonomy and guarded reversals (#1873)

2026-11-11 10:27:41 -06:00

case2-persona-import.test.mjs

selector: --org and --business in case2 persona-import and precheck

2026-11-08 21:25:49 -06:00

case2-unit.test.mjs

fix: preserve tester session identity through cleanup (#1873)

2026-11-11 08:22:31 -06:00

case-cleanup-time-fixture.mjs

test(cli): bound supervisor cleanup with a fixed process inventory (#1873)

2026-11-11 03:20:27 -06:00

case-cleanup-time.test.mjs

fix: preserve tester session identity through cleanup (#1873)

2026-11-11 08:22:31 -06:00

case-inner-timing-fixture.mjs

test(cli): bound supervisor cleanup with a fixed process inventory (#1873)

2026-11-11 03:20:27 -06:00

case-inner-timing.test.mjs

test(cli): measure legacy and query inner timers at the supervisor (#1873)

2026-11-11 02:11:48 -06:00

case-p10-timing-fixture.mjs

test(cli): band the P10 inner timer at the supervisor, not around cleanup (#1873)

2026-11-11 00:30:10 -06:00

case-session-identity.test.mjs

fix: preserve tester session identity through cleanup (#1873)

2026-11-11 08:22:31 -06:00

case-sudo-fixture.mjs

fix: redact remaining file and config refusal echoes (#1873)

2026-11-10 17:06:54 -06:00

case-sudo-fixture.test.mjs

fix: redact remaining file and config refusal echoes (#1873)

2026-11-10 17:06:54 -06:00

case-supervisor-cost.test.mjs

fix: preserve tester session identity through cleanup (#1873)

2026-11-11 08:22:31 -06:00

case-supervisor-session-fixture.mjs

fix: preserve tester session identity through cleanup (#1873)

2026-11-11 08:22:31 -06:00

channel-cli.test.mjs

plugins: channel kind for the CLI and Console chat paths (row 164, #1661)

2026-10-18 14:24:42 -05:00

channel-fixture.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

channel-recovery.test.mjs

plugins: channel kind for the CLI and Console chat paths (row 164, #1661)

2026-10-18 14:24:42 -05:00

cli.test.mjs

fix(tasks): U4a review fixes for the built-in task store (#1873)

2026-11-09 19:55:25 -06:00

compactions-launch.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

config.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

console-actions.test.mjs

feat(console): dev-local-owner Console writes autonomy and restarts when detached (#1873)

2026-11-11 14:16:09 -06:00

credentials.test.mjs

host access: agent host sudo through the credential store, host.run over broker.sock (row 210, #1707)

2026-10-20 21:47:11 -05:00

definition-scan.test.mjs

fix(organization): bus start and launch check org definitions against the held credentials (#1873)

2026-11-11 08:49:15 -06:00

deployment-boundary.test.mjs

feat(cli): require dedicated host uid for accounts system units (#1873)

2026-11-10 21:38:17 -06:00

dev-fixture.test.mjs

dev fixture: take a stale record atomically so a concurrent init keeps a live record

2026-11-08 23:07:48 -06:00

federation-acceptance.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

follow.test.mjs

bus, cli, webui: every message to the human, read state, Messages page (#1588)

2026-10-13 07:58:36 -05:00

format.test.mjs

feat(tasks): U4a, a task store built into each organization (#1873)

2026-11-09 19:25:44 -06:00

gate-lane-auth.test.mjs

row 244: gate runs mount a 0600 fixture pi auth file, test-release activates on the mock adapter, and real-model test-task cases sit behind MOSAIC_LIVE_PROVIDER=1 (#1757)

2026-10-21 16:44:37 -05:00

gate-lane-fixtures.test.mjs

Hold closed fixture ports for the test's life (Vikunja #781)

2026-11-02 18:25:27 -06:00

gate-lane-image-base.test.mjs

fix(testing): bind image receipts to pinned build base (#470)

2026-10-29 00:33:01 -05:00

gate-lane-image.test.mjs

fix(testing): bind image receipts to pinned build base (#470)

2026-10-29 00:33:01 -05:00

gate-lane-state.test.mjs

test: resolve the real Docker binary inside lane fixtures

2026-10-21 13:28:40 -05:00

gate-lane.test.mjs

test: resolve the real Docker binary inside lane fixtures

2026-10-21 13:28:40 -05:00

git-socket.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

grants-scope.test.mjs

row 298: Untested scope evidence, exact commands, spent narrowing and CLI coverage (#1804)

2026-10-23 17:40:20 -05:00

grants.test.mjs

bus, cli: #436b Gitea grant path, schema 3j-3k (row 236, #1742)

2026-10-22 03:42:05 -05:00

helpers.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

host.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

hosts.test.mjs

row 235: machine grant row b, raise binding, executor, reconcile, revoke and sweep, creative roles refused at raise, recheck and host.run, N10 (#1741)

2026-10-21 05:42:52 -05:00

idle-stop-race.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

instances.test.mjs

feat(organization): enforce arbiter domain resolve rights (#1873)

2026-11-10 16:33:21 -06:00

json-redaction.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873)

2026-11-11 08:53:31 -06:00

last-values.test.mjs

fix(organization,cli,discord,seat,control-board): refusals name the field or file by label, never a host path (#1873)

2026-11-11 08:53:31 -06:00

launch-account.test.mjs

fix(row 332): proxy first check runs every key-independent refusal; testProxy test option (Vikunja #774)

2026-11-02 20:51:51 -06:00

launch-limit-checks.test.mjs

Keep launch recovery evidence when broker end is unconfirmed

2026-11-06 23:12:02 -06:00

launch-limits.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

launch-routes.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873)

2026-11-11 08:53:31 -06:00

launcher-final-race-probe.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

launcher-manifest-race-probe.test.mjs

fix: close project archive admission races (#797)

2026-11-06 02:54:04 -06:00

launcher.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873)

2026-11-11 08:53:31 -06:00

lifecycle.test.mjs

fix(organization,cli,discord,seat,control-board): refusals name the field or file by label, never a host path (#1873)

2026-11-11 08:53:31 -06:00

limits-tokens.test.mjs

limits: a daily token quota for the account the stack uses, and bus schema 3h to 3i (row 126, #1620)

2026-10-18 20:35:02 -05:00

limits.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

mark-read.test.mjs

cli, webui: the human marks skipped messages read, and the Console says what talk prints (row 150, #1644)

2026-10-16 15:46:40 -05:00

model-event-guard.test.mjs

fix(harness): mark first streamed model output (#797)

2026-11-06 02:02:43 -06:00

model-managed-launch-fixture.mjs

feat(plugins): model providers as plugin modules, cliproxy catalogue on Routing (#1858)

2026-11-06 19:11:13 -06:00

model-managed-launch.test.mjs

feat: integrate reviewed proxy page and managed model keys

2026-10-26 12:04:21 -05:00

model-proxy-guards.test.mjs

feat: integrate reviewed proxy page and managed model keys

2026-10-26 12:04:21 -05:00

model-proxy.test.mjs

Protect shared proxy organization keys

2026-11-07 11:42:56 -06:00

model-stall.test.mjs

feat: integrate reviewed proxy page and managed model keys

2026-10-26 12:04:21 -05:00

model-turn-clock.test.mjs

feat: integrate reviewed proxy page and managed model keys

2026-10-26 12:04:21 -05:00

model-turn-reader.test.mjs

feat: integrate reviewed proxy page and managed model keys

2026-10-26 12:04:21 -05:00

names.test.mjs

bus, cli: tester reads and the W1-W7 tester writes, recorded as tester; scripts/mosaic sends plugins, name and names to the CLI (row 175, #1673)

2026-10-19 19:04:50 -05:00

north-star.test.mjs

feat(project,cli): onboarding interview template and north-star approval (F2)

2026-11-09 12:58:29 -06:00

notifier.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

optional-tracker.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-archive-race.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-bus.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-console.test.mjs

fix(cli): bus and Console lifecycle verbs refuse inside an agent run (#1873)

2026-11-11 16:15:51 -06:00

org-definitions.test.mjs

fix(organization): bus start and launch check org definitions against the held credentials (#1873)

2026-11-11 08:49:15 -06:00

org-delete.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-paths.test.mjs

Bind organization identity into bus boot

2026-11-07 12:36:27 -06:00

org-recovery.test.mjs

fix(org): D2 security review: live identity refuses, clear only inspected entries, no revive from an agent run

2026-11-11 14:03:18 -06:00

org-revive.test.mjs

fix(org): D2 security review: live identity refuses, clear only inspected entries, no revive from an agent run

2026-11-11 14:03:18 -06:00

org-selector.test.mjs

selector: --org and --business in each CLI parser's own scope

2026-11-08 21:14:11 -06:00

org.test.mjs

feat(plugins,organization): system types as a plug-in kind (REQ-SYS-1, #1873)

2026-11-09 18:46:35 -06:00

organization-imports.mjs

feat(plugins): install pinned instance packages and declared tools (#1873)

2026-11-11 00:11:13 -06:00

organization-imports.test.mjs

feat(plugins): install pinned instance packages and declared tools (#1873)

2026-11-11 00:11:13 -06:00

other-tree.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

owned-child.test.mjs

test: reap owned copy children on external gate termination

2026-10-26 10:44:35 -05:00

path-redaction-labels.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873)

2026-11-11 08:53:31 -06:00

path-redaction.test.mjs

fix(organization,cli): review round: raw fs and git errors, console entry, config, document and --vars refusals name labels

2026-11-11 01:04:15 -06:00

processing-cli.test.mjs

processing: inspectable per-run stop seam for lifecycle fire

2026-10-21 22:42:12 -05:00

project-name-repo.test.mjs

bus, cli, webui: a thread project named like a business-file repo refuses project-name-is-repo unless --repo matches, with a clearer CLI refusal (row 171, #1668)

2026-10-19 14:31:36 -05:00

project.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

proxy-context-join.test.mjs

Row 332 R2 (#1830): hermetic pi launches in cli tests, pi bundle default, review F2 and F3

2026-11-02 15:22:17 -06:00

proxy-launch-order.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873)

2026-11-11 08:53:31 -06:00

proxy-setup-cli.test.mjs

feat(proxy): Console proxy setup page and CLI parity (#1873)

2026-11-11 16:32:31 -06:00

publish-socket.test.mjs

feat(organization): enforce arbiter domain resolve rights (#1873)

2026-11-10 16:33:21 -06:00

refusal-redaction.test.mjs

fix: preserve read error codes and launcher fixtures (#1873)

2026-11-10 17:54:33 -06:00

rename-b-commands.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873)

2026-11-11 08:53:31 -06:00

reply-limits.test.mjs

row 217: citation runner retry and acceptance draft (Untested)

2026-10-24 05:39:26 -05:00

request-host-ops.mjs

fix: close project archive admission races (#797)

2026-11-06 02:54:04 -06:00

request-launch.test.mjs

fix(bus): retry chief after processing resumes

2026-11-06 06:51:39 -06:00

request-lifecycle-fixture.mjs

feat(cli): require dedicated host uid for accounts system units (#1873)

2026-11-10 21:38:17 -06:00

request-lifecycle-live.test.mjs

test(lifecycle): cover three delivery paths and crash recovery (#1839)

2026-11-04 14:47:45 -06:00

request-lifecycle.test.mjs

test(lifecycle): cover three delivery paths and crash recovery (#1839)

2026-11-04 14:47:45 -06:00

revoke-window.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

run-evidence.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

session-clear.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

session-cli.test.mjs

row 272: fix session fixture authority and initial chat render

2026-10-23 08:53:07 -05:00

session-launch.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

stack-copy.test.mjs

feat(cli): M3 reconciliation: accounts units, stamped renders, rehearsal (#1873)

2026-11-10 21:38:17 -06:00

stack-instances.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873)

2026-11-11 08:53:31 -06:00

stack-release-external.test.mjs

stack-release: activate --send and --no-sso (row 273, #1778)

2026-10-21 22:15:36 -05:00

stack-release-fixture.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

stack-release.test.mjs

fix(cli): M3 re-check: provider denials answer 403; A2 test owner carries rootOwner (#1873)

2026-11-10 21:38:17 -06:00

stack-upgrade.test.mjs

fix(cli): M3 review round: re-pin migration, rehearsal provider (#1873)

2026-11-10 21:38:17 -06:00

system-type.test.mjs

fix(sys1): count project system types in the restore guard and admit the CLI verbs

2026-11-09 18:46:36 -06:00

tester-http.test.mjs

row 196: human boundary on peer credentials, interpreter receipt and the Console tester socket (#1694)

2026-10-21 15:55:39 -05:00

tester-reads.test.mjs

feat(organization): enforce arbiter domain resolve rights (#1873)

2026-11-10 16:33:21 -06:00

tester-threads.test.mjs

feat(organization): enforce arbiter domain resolve rights (#1873)

2026-11-10 16:33:21 -06:00

tester.test.mjs

Update tester fixtures for organization transport

2026-11-07 13:18:34 -06:00

thread-cli.test.mjs

row 264a (#1769, T1 item 7): bus schema 3k to 3l, sessions below a thread

2026-10-22 08:07:43 -05:00

thread-launch.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

thread-revoke.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

trackers-boot.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

transport.test.mjs

row 239 (#1745) b1: the fire's and the delete's revoke runs inside writer.write under the lock, after the revision check and the validations; an error after it carries revoked and the bus names it revision-conflict-revoked or outcome-unknown-revoked, with CLI, Console (OPEN, duckworth-0165 C1) and fire-notice texts; the mark sits in a catch around withLock (C2); tests T1-T6, channel-proof re-pins transport.mjs and webui bus.mjs; BUILD.md with mutants M1-M3g and the gate plan; untested, waits for a CLEAR (sage-2792)

2026-10-23 17:00:42 -05:00

usage.test.mjs

bus, cli, webui: token accounting per run, schema 3h usage_records (row 124, #1618)

2026-10-18 11:08:17 -05:00

verbs.test.mjs

Restore scoped dev-owner launch checks

2026-11-07 12:45:13 -06:00