2026-05-06T06:13:59Z - 2026-05-09T06:13:59Z
Overview
4 Releases published by 2 users
Published
runtime-v1.0.0
Published
runtime-v0.0.35
Published
runtime-v0.0.34
Published
runtime-v0.0.33
96 Pull requests merged by 4 users
Merged
#150 ci(audit-force-merge): fan §SOP-6 force-merge audit to molecule-core
Merged
#53 fix(canvas): boot-time matched-pair guard for ADMIN_TOKEN env vars (#175)
Merged
#147 refactor(sop-tier-check): extract bash to .gitea/scripts/ + SOP_DEBUG gate
Merged
#146 fix(sop-tier-check): use pull_request_target — pull_request leaks SOP_TIER_CHECK_TOKEN
Merged
#144 ci(sop-tier-check): deploy workflow (soft-launch, no protection change)
Merged
#142 fix(org-import): started event emits after YAML parse so name is populated
Merged
#139 refactor(handlers): Delete() delegates to CascadeDelete helper
Merged
#137 fix(org-import): reconcile mode + audit-event emission
Merged
#136 fix(workspace_provision): preserve MODEL secret over MODEL_PROVIDER slug on restart
Merged
#135 feat(org-import): add spawning:false field to skip workspace + descendants
Merged
#134 fix(org-import): use ws.FilesDir as persona-dir lookup + docker-cli-buildx in dev image
Merged
#133 chore(ci): document #192 root cause — workspace-template repos public per OSS-first
Merged
#131 feat(local-dev): containerize platform + canvas stack via docker-compose
Merged
#54 fix(canvas): consolidate platform-auth headers via shared helper (#178)
Merged
#132 chore(canary): workflow_dispatch input keep_on_failure for log capture
Merged
#130 fix(ci): canary alerting — drop Gitea-incompatible actions API call
Merged
#127 feat(local-dev): bind-mount ~/.molecule-ai/personas into platform container
Merged
#124 feat(workspaces): update_tier column for canary vs production fan-out
Merged
#122 feat(plugins): workspace_plugins tracking table (version-subscription foundation)
Merged
#121 feat(plugins): hot-reload classifier — skip restart on SKILL-content-only updates
Merged
#119 chore(workflows): delete obsolete promote/sync workflows (Phase 3C of internal#81)
Merged
#120 feat(plugins): atomic install — stage→snapshot→swap→marker (docker path)
Merged
#108 chore: promote 5 staging-only feature PRs to main (Phase 3 of internal#81)
Merged
#111 fix(pendinguploads): wait for error metric before test exit
Merged
#110 feat(org-import): inject per-role persona env from operator-host bootstrap dir
Merged
#118 feat(local-dev): air-based hot-reload for workspace-server in docker-compose dev mode
Merged
#109 chore(workflows): drop staging-branch triggers (Phase 3b of internal#81)
Merged
#107 harden(org-external): token via http.extraHeader, .complete cache marker, ref '..' deny, naming cleanup
Merged
#106 test(org-external): integration + e2e for !external resolver (PR-B + PR-C)
Merged
#105 feat(org-import): !external cross-repo subtree resolver (Phase 3a, task #222)
Merged
#104 fix(provisioner)+test: EvalSymlinks templatePath; stage-2 e2e for files_dir consumption
Merged
#103 test(local-e2e): verify dev-department extraction end-to-end via real resolveYAMLIncludes
Merged
#102 test(org-include): pin symlink-based subtree composition contract
Merged
#99 chore: promote accumulated staging fixes to main (vitest timeout, postgres host-net, +others)
Merged
#84 fix(plugins): SaaS (EC2-per-workspace) install/uninstall via EIC SSH
Merged
#100 fix(ci): e2e-api — parallel-safe postgres/redis containers (closes #94)
Merged
#98 fix(ci): handlers-postgres — sidestep port collision under host-network runner
Merged
#97 fix(canvas): bump vitest testTimeout to 30s on CI for v8-coverage cold start (#96)
Merged
#90 docs(hermes): hermes-agent fork moved to Gitea (post-suspension)
Merged
#79 fix(ci): rewrite retarget-main-to-staging for Gitea REST API (closes #74, #196)
Merged
#92 fix(ci): close 3 chronic Gitea-Actions workflow flakes (closes #88)
Merged
#89 fix(ci): pin actions/upload-artifact + download-artifact to @v3 for Gitea compatibility
Merged
#77 ci: add AUTO_SYNC_TOKEN rotation drift canary (#72)
Merged
#83 fix(ci): replace gh run list with Gitea commit-status query (#75 class F)
Merged
#80 fix(ci): replace gh pr CLI with Gitea v1 REST in workflows + scripts (#75 class A)
Merged
#70 feat(workspace-server): local-dev provisioner builds from Gitea source (#63, Task #194)
Merged
#78 fix(ci): rewrite auto-promote staging→main for Gitea REST API (closes #73, #195)
Merged
#76 feat(canvas): ActivityTab → ACTIVITY_LOGGED subscriber (#61 stage 3, final)
Merged
#71 feat(canvas): A2ATopologyOverlay → ACTIVITY_LOGGED subscriber (#61 stage 2)
Merged
#69 feat(canvas): CommunicationOverlay → ACTIVITY_LOGGED subscriber (#61 stage 1)
Merged
#60 fix(ratelimit): tenant-aware bucket keying — close canvas 429 storm (#59)
Merged
#85 chore(observability): edge-429 probe + ratelimit runbook (unblocks #62, #64)
Merged
#56 ci(branch-protection): check-name parity gate (#144)
Merged
#50 fix(ci): pre-clone manifest deps in harness-replays workflow (#173 followup)
Merged
#68 chore: second auto-sync verification (post-#66/#67)
Merged
#67 chore: verify auto-sync main→staging post-#66 (empty trigger commit)
Merged
#66 fix(ci): rewrite auto-sync main→staging for Gitea direct push (closes #65)
Merged
#51 fix(ci): convert CodeQL workflow to no-op stub on Gitea (#156)
Merged
#48 chore: reconcile main → staging post-suspension divergence (Task #165 followup)
Merged
#47 chore(ci): retrigger publish-workspace-server-image after ECR repo create (#173)
Merged
#46 fix(ci): inline aws ecr get-login-password + docker login (followup #173)
Merged
#45 fix(ci): replace buildx with plain docker build+push (followup #173)
Merged
#44 chore: retrigger Harness Replays after Class G + clone-manifest fixes (#168)
Merged
#43 fix(ci): use docker driver for buildx + drop type=gha cache (followup #173)
Merged
#42 fix(post-suspension): redirect clone-manifest to Gitea (Class G #168 followup)
Merged
#39 fix(test): drain coalesceRestart goroutines before t.Cleanup (Class H, #170)
Merged
#41 fix(ci): apply pre-clone fix to platform Dockerfile too (followup #173)
Merged
#40 fix(post-suspension): migrate github.com/Molecule-AI refs to git.moleculesai.app (Class G #168)
Merged
#38 fix(ci): pre-clone manifest deps in workflow, drop in-image clone (closes #173)
Merged
#37 fix(workspace-server): a2a-proxy preflight container check (closes #36)
Merged
#35 fix(ci): mark CodeQL continue-on-error (advisory only) — closes #156
Merged
#26 fix(ci): use AUTO_SYNC_TOKEN for auto-sync main->staging (Class D)
Merged
#34 feat: mock runtime + mock-bigorg 200-workspace org (demo Mock #3)
Merged
#33 feat(canvas): demo Mock #1 — purchase-success modal
Merged
#32 fix(ci): add scripts/** to publish-workspace-server-image path filter
Merged
#31 fix(scripts): clone-manifest.sh — use Gitea + lowercase org slug (Class G)
Merged
#30 chore(ci): trigger publish-workspace-server-image (path-filter satisfaction)
Merged
#29 chore(ci): retrigger publish-workspace-server-image post AWS secrets registration
Merged
#28 fix(ci): cherry-pick PR#23 — drop github-app-auth plugin checkout (unblocks workspace-server publish)
Merged
#25 chore(ci): retrigger staging CI on new runner image
Merged
#23 chore: drop github-app-auth + swap GHCR→ECR (closes #157, #161)
Merged
#5 docs(README): comprehensive refresh — landing-page icon (light/dark SVG) + 8 runtimes + Canvas v4 + Memory v2 + SaaS + channel plugin
Merged
#6 chore(canvas/chat): delete historyHydration.ts now that PR-C-2 migrated callers (RFC #2945 PR-C-3)
Merged
#4 feat(canvas/chat-server): canvas consumes /chat-history + server-side row-aware reverse (RFC #2945 PR-C-2)
Merged
#2 fix(workspace-server): CP orphan sweeper closes deprovision split-write race (#2989)
Merged
#12 fix(workspace-server): SSOT-route container check + 422 on external runtimes (closes #10)
Merged
#8 fix(workspace-server): default-bind to 127.0.0.1 in dev-mode fail-open (closes #7)
Merged
#13 perf(workspace-server,canvas): EIC tunnel pool + canvas Promise.all (closes core#11)
Merged
#17 fix(ci): lowercase 'molecule-ai/' in cross-repo workflow refs
Merged
#20 fix(ci): port publish-runtime cascade to Gitea repo-dispatch API (closes #14)
Merged
#15 docs(workspace-runtime): migrate github.com refs at source (#41)
Merged
#16 fix(scripts): migrate ghcr.io→ECR + raw.githubusercontent.com→Gitea (#46)
Merged
#19 docs: bulk-sed molecule-core .md docs → Gitea (#37 final molecule-core sweep)
Merged
#18 chore(ci): pin artifact actions to @v3 for Gitea act_runner compatibility
Merged
#3 test(org_import): tighten sqlmock regex on lookupExistingChild (#2872 PR-B)
Merged
#1 feat(provisioner): env-driven RegistryPrefix() for workspace template images (#6)
2 Pull requests proposed by 2 users
Proposed
#140 [infra-lead-agent] feat(workspace): add /configs/.github-token static-token fallback
Proposed
#149 fix(canvas): cap maxWorkers:1 to prevent jsdom pool worker startup timeouts
28 Issues closed from 4 users
Closed
#129 canary-staging.yml: 38h+ chronic red — A2A agent error + teardown leak + Gitea-incompatible alerting
Closed
#126 feat(workspace): extend read-at-boundary hot-reload to config.model field
Closed
#117 feat(workspace): agent config-watcher for hot-reload of config.yaml without container restart
Closed
#115 feat(plugins): canary tier filter for /admin/plugin-updates/:id/apply
Closed
#113 feat(plugins): version subscription (track: tag:vX.Y.Z) + queue-on-drift, no auto-apply
Closed
#112 feat(plugins): hot-reload path for SKILL-content-only updates (bypass restart)
Closed
#114 feat(plugins): atomic install — stage → snapshot → swap → rollback
Closed
#116 feat(local-dev): air-based hot-reload for workspace-server in docker-compose dev mode
Closed
#94 [bug] [test-infra] E2E API Smoke Test: brittle service-readiness windows + missing alpine:latest + missing Docker network
Closed
#96 [bug] [test-infra] Canvas vitest timeouts on CI: 3 first-tests flap on 5000ms default cold-start
Closed
#95 [bug] [ci-config] Harness Replays: AUTO_SYNC_TOKEN secret empty + nginx.conf mount error
Closed
#74 Retarget main→staging fails on Gitea: gh api PATCH + gh pr close go via GraphQL/GitHub-shape paths (#196 Phase 1)
Closed
#88 CI: 3 chronic Gitea-Actions workflow flakes (pr-guards / Harness Replays / handlers-postgres-integration)
Closed
#72 ci: synthetic-check cron for AUTO_SYNC_TOKEN rotation drift detection (post-#66 hostile-self-review #3)
Closed
#63 feat(workspace-server): local-dev provisioner builds from Gitea source when MOLECULE_IMAGE_REGISTRY is unset (Task #194)
Closed
#64 rfc(ratelimit): RATE_LIMIT default re-tune analysis post-#60 — keep 600, watch metrics (P3)
Closed
#62 audit(edge): layout-chunk 429s in DevTools — operator audit checklist (P3, likely auto-resolves with #60)
Closed
#73 Auto-promote staging→main fails on Gitea: gh CLI calls /api/graphql + workflow_dispatch endpoint missing (#195 Phase 1)
Closed
#61 rfc(canvas): poll-fan-out reduction — convert overlays to ACTIVITY_LOGGED subscribers (P3)
Closed
#59 bug(workspace-server): rate-limit per-IP keying collapses all canvas traffic to one bucket post-#179 — saw 429 storm on hongming.moleculesai.app today
Closed
#65 Auto-sync main → staging fails every push: gh CLI calls /api/graphql (Gitea returns 405)
Closed
#36 fix(workspace-server): a2a-proxy SSOT — proactive RunningContainerName check before optimistic forward
Closed
#24 [bug] [presence] poll-mode workspaces show awaiting_agent — platform-side presence tracker should count activity polls
Closed
#10 bug(workspace-server): plugin-install returns 503 container-not-running while status=online (split-state)
Closed
#7 fix(workspace-server): default-bind to 127.0.0.1 in dev mode + close S-8 LAN fail-open
Closed
#11 perf(workspace-server): config + filesystem loading takes ~20s in canvas detail panel
Closed
#14 cleanup: publish-runtime.yml dispatch cascade still hits api.github.com (post-2026-05-06)
Closed
#9 bug(workspace-server): plugin-install returns 503 container-not-running while status=online (split-state)
16 Issues created by 4 users
Opened
#21 fix(ci): CI / Canvas (Next.js) fails on actions/upload-artifact@v4 — not supported on Gitea Actions
Opened
#22 fix(test): pendinguploads sweeper test (sweeper_test.go:274) — flaky/broken on Go race detector
Opened
#49 bug(workspace-server): MCP delegate_task bypasses delegation lifecycle — canvas shows no bubble for peer-agent work
Opened
#55 Harness Replays: cf-proxy bind-mount fails on act runner (DinD path-translation)
Opened
#57 bug(workspace-server): rate-limit per-IP keying collapses all canvas traffic to one bucket post-#179 — saw 429 storm on hongming.moleculesai.app today
Opened
#58 bug(workspace-server): rate-limit per-IP keying collapses all canvas traffic to one bucket post-#179 — saw 429 storm on hongming.moleculesai.app today
Opened
#75 audit(ci): comprehensive gh-CLI → Gitea-REST sweep across workflows (post-#66)
Opened
#86 [bug] [test-infra] TestStartSweeper_RecordsMetricsOnSuccess fails in full-suite (suite-state contamination)
Opened
#87 [bug] [test-infra] TestLocalResolver_BubblesUpCopyFailure POSIX-mode assertion silently passes when test runs as root
Opened
#91 [follow-up] [internal#71] drop gh-identity allowlist + update workspace-server import after plugin#3 merges
Opened
#93 [tech-debt] Rename Docker network molecule-monorepo-net -> molecule-core-net (post-internal#71 cleanup)
Opened
#123 core#113 follow-up: plugin drift detector + queue + admin apply endpoint
Opened
#125 feat(workspace): preserve in-flight A2A messages across container restart
Opened
#128 core#242 PROD follow-up: tenant EC2 user-data must stage /etc/molecule-bootstrap/personas
Opened
#141 [infra-lead-agent] Harness Replays failing on main since e1214ca0 (PR #139 — Delete() → CascadeDelete refactor)
Opened
#148 fix(canvas): vitest pool workers fail to start for jsdom tests — 5 test files timeout