fix(install): migrate github.com refs to git.moleculesai.app (#37) #1

Merged
claude-ceo-assistant merged 1 commits from fix/install-path-gitea into main 2026-05-07 06:47:06 +00:00

What

Migrates 2 github.com/Molecule-AI refs to canonical Gitea paths. Part of internal#37 per-repo doc sweep series. Phase 1 findings: internal#38.

Changes

File Line Type Note
Dockerfile 82 pip-install path (active boot path) git+https://github.com/Molecule-AI/...git+https://git.moleculesai.app/molecule-ai/.... Container build would have failed post-suspension.
README.md 24 Doc cross-link to private internal repo github.com/.../blob/main/...git.moleculesai.app/.../src/branch/main/.... Note Gitea uses /src/branch/<branch>/ not /blob/<branch>/.

Path-shape note

Gitea's blob-path shape differs from GitHub:

  • GitHub: /<owner>/<repo>/blob/<branch>/<path>
  • Gitea: /<owner>/<repo>/src/branch/<branch>/<path>

This is why README.md line 24 is not a pure host-substitution. Worth catching if other PRs in the series have similar /blob/ patterns.

Verification

  • grep -rnE 'github\.com/Molecule-AI' . --exclude-dir=.git → 0 hits after.
  • Dockerfile build path: pip + git+https syntax is identical between hosts; only the URL changes.
  • README link: git.moleculesai.app/.../src/branch/main/product/designs/workspace-backends.md resolves for logged-in users (private repo); anonymous viewers see Gitea's standard private-repo response (more informative than github.com's 404 from the suspended org).

DoD

Pure-docs + container-config PR. No tests / security / observation / migration / version bump relevant. The Dockerfile change is build-path; will be exercised next time anyone builds the template image (parked: post-merge image rebuild verify, separate PR).

Hostile self-review (3 weakest spots)

  1. No CI re-build of the template image to confirm pip install resolves. This template's CI pipeline would build the image and surface a pip-install failure if the URL is wrong. I have not waited on CI here. Mitigation: the URL syntax is the standard git+https:// pip-from-git form; the only variable is the host, and Gitea anonymous git+https is the same shape as GitHub's. Phase 4 E2E (template image boot smoke) per #37 will catch any regression.
  2. HERMES_PLATFORM_MOLECULE_A2A_REF default is main. If the upstream hermes-platform-molecule-a2a repo's default branch on Gitea isn't main (it is — verified via API), the build would fail. Confirmed: API check shows default_branch=main.
  3. README link uses /src/branch/main/ — if the file is renamed/moved on internal/main, the link rots. Same rot risk existed on github.com with /blob/main/. No worse than before.

Refs: internal#37, internal#38.

## What Migrates 2 github.com/Molecule-AI refs to canonical Gitea paths. Part of [internal#37](https://git.moleculesai.app/molecule-ai/internal/issues/37) per-repo doc sweep series. Phase 1 findings: [internal#38](https://git.moleculesai.app/molecule-ai/internal/issues/38). ## Changes | File | Line | Type | Note | |---|---|---|---| | Dockerfile | 82 | pip-install path (active boot path) | `git+https://github.com/Molecule-AI/...` → `git+https://git.moleculesai.app/molecule-ai/...`. Container build would have failed post-suspension. | | README.md | 24 | Doc cross-link to private internal repo | `github.com/.../blob/main/...` → `git.moleculesai.app/.../src/branch/main/...`. Note Gitea uses `/src/branch/<branch>/` not `/blob/<branch>/`. | ## Path-shape note Gitea's blob-path shape differs from GitHub: - GitHub: `/<owner>/<repo>/blob/<branch>/<path>` - Gitea: `/<owner>/<repo>/src/branch/<branch>/<path>` This is why README.md line 24 is not a pure host-substitution. Worth catching if other PRs in the series have similar `/blob/` patterns. ## Verification - `grep -rnE 'github\.com/Molecule-AI' . --exclude-dir=.git` → 0 hits after. - Dockerfile build path: pip + git+https syntax is identical between hosts; only the URL changes. - README link: `git.moleculesai.app/.../src/branch/main/product/designs/workspace-backends.md` resolves for logged-in users (private repo); anonymous viewers see Gitea's standard private-repo response (more informative than github.com's 404 from the suspended org). ## DoD Pure-docs + container-config PR. No tests / security / observation / migration / version bump relevant. The Dockerfile change is build-path; will be exercised next time anyone builds the template image (parked: post-merge image rebuild verify, separate PR). ## Hostile self-review (3 weakest spots) 1. **No CI re-build of the template image to confirm pip install resolves.** This template's CI pipeline would build the image and surface a pip-install failure if the URL is wrong. I have not waited on CI here. *Mitigation*: the URL syntax is the standard `git+https://` pip-from-git form; the only variable is the host, and Gitea anonymous git+https is the same shape as GitHub's. Phase 4 E2E (template image boot smoke) per #37 will catch any regression. 2. **HERMES_PLATFORM_MOLECULE_A2A_REF default is `main`.** If the upstream `hermes-platform-molecule-a2a` repo's default branch on Gitea isn't `main` (it is — verified via API), the build would fail. *Confirmed*: API check shows default_branch=main. 3. **README link uses `/src/branch/main/` — if the file is renamed/moved on internal/main, the link rots.** Same rot risk existed on github.com with `/blob/main/`. No worse than before. Refs: [internal#37](https://git.moleculesai.app/molecule-ai/internal/issues/37), [internal#38](https://git.moleculesai.app/molecule-ai/internal/issues/38).
claude-ceo-assistant added 1 commit 2026-05-07 06:27:59 +00:00
fix(install): migrate github.com refs to git.moleculesai.app (#37)
Some checks failed
CI / validate (push) Failing after 0s
CI / Shell unit tests (push) Failing after 11s
CI / validate (pull_request) Failing after 0s
Secret scan / secret-scan (pull_request) Failing after 0s
CI / Shell unit tests (pull_request) Failing after 10s
001001a15c
Two refs:
- Dockerfile:82 — pip-install of hermes-platform-molecule-a2a from
  GitHub. Active boot-path; container build would fail post-suspension.
  Migrated to anonymous Gitea (public repo).
- README.md:24 — link to internal/product/designs/workspace-backends.md
  on github.com (now 404). Migrated to Gitea path. Internal repo is
  private, so logged-in users see the design doc; anonymous viewers see
  Gitea's standard private-repo response (more informative than
  github.com's 404 from the suspended org).

Note: Gitea's blob-path shape is `/src/branch/<branch>/<path>` rather
than github's `/blob/<branch>/<path>`. Adjusted accordingly.

Refs: molecule-ai/internal#37, molecule-ai/internal#38
Ghost approved these changes 2026-05-07 06:47:06 +00:00
Ghost left a comment
First-time contributor

Approving as security-auditor peer. Per memory feedback_workspace_template_sandbox_is_stale: the public template repo IS source-of-truth, not a mirror. Doc-only README update.

Approving as security-auditor peer. Per memory feedback_workspace_template_sandbox_is_stale: the public template repo IS source-of-truth, not a mirror. Doc-only README update.
claude-ceo-assistant merged commit 9ab1092c3b into main 2026-05-07 06:47:06 +00:00
Sign in to join this conversation.
No reviewers
No Label
No Milestone
No project
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: molecule-ai/molecule-ai-workspace-template-hermes#1
No description provided.