cat/mosaic

plan: guards landed

2026-08-27T15:00:47-06:00

viewer: placeholders frame nothing (boxOf skips shapeless tiles)

2026-08-27T14:58:34-06:00

site: anti-cheat guards — per-machine health with once-per-cell credit and burst death, in-batch death cutoff, batch cap, session cap bound into the join proof, keyless joins refused, rejected values stripped, fogged live view (redact.ts), random day seed, keys released in the archive, name/model labels

2026-08-27T14:56:08-06:00

engine: X=15 fixture regenerated under gen-v7

2026-08-27T14:15:30-06:00

engine: tile commitments (mosaic-tile-v1) under a private day key; day seed committed, released at archive

2026-08-27T14:10:10-06:00

manifest.tiles[].hash was sha256 over the tile's solution, so an agent enumerating a revealed tile's m candidates could find the truth by hashing them. Now: seed_commit = sha256("mosaic-day-seed-v1|" + day_seed) is the manifest id; day_key = HMAC("mosaic-day-key-v1", day_seed) keys every tile hash and sha256(day_key) is published as hash_key_commit; the hash is HMAC-SHA256 over a versioned length-prefixed encoding of the game id, tile id, geometry, packed solution bits and packed givens mask (mosaic-tile-v1). day_seed and day_key live in the private output and are released with the archive. Fields rehash tiles after the merge with their final ids and coordinates. TestHashIsACommitment: no candidate matches without the key, exactly one with it; the checker verifies seed and key commitments from the released values. gen-v7; 2x2 fixture regenerated (X=15 follows).

plan: redacted live geometry under fog; random day seed and versioned commitments

2026-08-27T14:06:21-06:00

plan: session cap and session-bound proof

2026-08-27T14:05:13-06:00

plan: mid-batch death and once-per-cell health

2026-08-27T14:04:47-06:00

plan: guards against the oracle, the log leak and the hash oracle

2026-08-27T14:01:14-06:00

plan: item 15 proven live (shoo login and machine claim)

2026-08-27T13:50:06-06:00

plan: item 15 landed

2026-08-27T13:43:32-06:00

identity: session label with a bearer join; lint

2026-08-27T13:41:24-06:00

identity: public origin for claim links, the id_token audience and the cookie behind the proxy

2026-08-27T13:40:09-06:00

identity the tribes way: JWK identity file, key-auth bearer tokens, shoo login, claim links

2026-08-27T13:38:25-06:00

~/.config/mosaic/identity.json {v, publicKey, privateKey (JWK Ed25519), createdAt, name}; POST /api/keys/auth {publicKey, ts, sig} over mosaic-key-auth:: mints one msc_ bearer per key (TOFU registry in data/identity.sqlite); join takes the bearer from the MCP request (request scope) or the proof fields; /identity and /identity.md carry the spec with node, openssl, python and deno ways; shoo.js login with /api/session (jose against shoo's JWKS, audience origin:), HMAC session cookie, /api/me, /api/logout; /api/keys/link-token and /link claim a machine for the signed-in account; identity.ts --token/--link; solve.ts --bearer; tests incl. an openssl-made signature.

plan: auth follows the tribes convention; shoo login/logout; claim link

2026-08-27T13:28:49-06:00

plan: machine keys landed (item 15, first half)

2026-08-27T13:16:57-06:00

identity: a machine key per machine, verified joins, sessions, TOFU registry

2026-08-27T13:14:05-06:00

scripts/identity.ts (served at /identity.ts) makes an ed25519 key in ~/.config/mosaic/identity.json; join takes machine_id, public_key and a proof (signature over mosaic-join|game|key|minute, current or previous minute); the server checks the fingerprint and the signature, records the first key per machine id in data/machines.sqlite and refuses another; a verified agent is machine_id/session and the by-user leaderboard keys on the machine; unverified joins stay allowed as provisional a, marked and never honoured; the client signs with --identity; prompt and rules say so.

viewer: no coordinates at L3; death cross drawn above the stones

2026-08-27T13:05:17-06:00

calendar: say when no day has finished yet

2026-08-27T12:49:59-06:00

viewer: table first and default in the dock; user rows show the agent's name; model rows say how many timed out

2026-08-27T12:46:07-06:00

plan: the Kifu match screen landed (items 16-23), live on mosaic.dev.site

2026-08-27T12:40:32-06:00

viewer: a ?zoom= deep link for the initial view (used for screenshots and links)

2026-08-27T12:37:44-06:00

viewer: the Kifu match screen — board with stones, counting marks and board lines, player cards with clocks, move list, tournament table, result card, phone layout; identity tokens and pages

2026-08-27T12:26:25-06:00

plan: hosted at mosaic.dev.site

2026-08-27T12:22:53-06:00

fly: public URL mosaic.dev.site

2026-08-27T12:20:20-06:00

plan: current goal — implement the Kifu match screen (items 16-23)

2026-08-27T12:11:17-06:00

plan: visual identity — Kifu, field + dock, Go match screen

2026-08-27T11:54:50-06:00

viewer: no L3 detail for a tile nobody has revealed

2026-08-27T11:07:40-06:00

webmcp: the page exposes the /mcp tools to an agent driving the tab

2026-08-27T04:50:28-06:00

An island mirrors tools/list onto navigator.modelContext and proxies execute through tools/call, so the browser surface always matches the server surface (the daily host still hides start_mosaic). Both host shapes (registerTool, provideContext) are served; a late-injected host is caught by a short poll; a browser join defaults harness=webmcp.

plan: acceptance runs under health; rules were missing on the host, fixed

2026-08-27T04:41:42-06:00