2 Commits

Author	SHA1	Message	Date
Dev Lead Agent	1440bd732e	fix(security): H3 github_pat_ redaction + M4 atomic token write (audit cycle 10) ... H3 (compliance.py): GitHub fine-grained PATs use the github_pat_ prefix with an 82-character alphanumeric+underscore suffix — different from classic tokens (36 chars). Add the missing pattern to _PII_PATTERNS so fine-grained PATs are redacted in compliance logs alongside classic tokens. M4 (platform_auth.py): Replace write_text()+chmod() in save_token() with os.open(O_WRONLY|O_CREAT|O_TRUNC, 0o600) + os.write(). The old approach had a TOCTOU window where a concurrent reader could access the token file before chmod restricted permissions. os.open with explicit mode creates the file with 0600 permissions atomically in a single syscall. H2 (a2a_client.py): Already fixed in commit bea0e96 (Cycle 5); no-op. Tests: 1136 passed, 2 skipped (workspace-template pytest suite) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-14 09:34:27 +00:00
Hongming Wang	24fec62d7f	initial commit — Molecule AI platform ... Forked clean from public hackathon repo (Starfire-AgentTeam, BSL 1.1) with full rebrand to Molecule AI under github.com/Molecule-AI/molecule-monorepo. Brand: Starfire → Molecule AI. Slug: starfire / agent-molecule → molecule. Env vars: STARFIRE_* → MOLECULE_*. Go module: github.com/agent-molecule/platform → github.com/Molecule-AI/molecule-monorepo/platform. Python packages: starfire_plugin → molecule_plugin, starfire_agent → molecule_agent. DB: agentmolecule → molecule. History truncated; see public repo for prior commits and contributor attribution. Verified green: go test -race ./... (platform), pytest (workspace-template 1129 + sdk 132), vitest (canvas 352), build (mcp). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-13 11:55:37 -07:00