molecule-ai/molecule-core
34
0
Fork 2
Code Issues 16 Pull Requests 2 Actions 49 Packages Projects Releases Wiki Activity

Merge pull request 'feat(local-dev): bind-mount ~/.molecule-ai/personas into platform container' (#127) from feat/persona-bind-mount-local-dev into main
Some checks failed
CodeQL / Analyze (${{ matrix.language }}) (go) (push) Successful in 2s
Details
CodeQL / Analyze (${{ matrix.language }}) (javascript-typescript) (push) Successful in 1s
Details
CodeQL / Analyze (${{ matrix.language }}) (python) (push) Successful in 3s
Details
Block internal-flavored paths / Block forbidden paths (push) Successful in 10s
Details
CI / Detect changes (push) Successful in 12s
Details
E2E API Smoke Test / detect-changes (push) Successful in 11s
Details
Secret scan / Scan diff for credential-shaped strings (push) Successful in 10s
Details
Handlers Postgres Integration / detect-changes (push) Successful in 11s
Details
E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 12s
Details
Runtime PR-Built Compatibility / detect-changes (push) Successful in 12s
Details
CI / Shellcheck (E2E scripts) (push) Successful in 3s
Details
CI / Canvas (Next.js) (push) Successful in 5s
Details
CI / Platform (Go) (push) Successful in 6s
Details
CI / Python Lint & Test (push) Successful in 4s
Details
Handlers Postgres Integration / Handlers Postgres Integration (push) Successful in 4s
Details
E2E API Smoke Test / E2E API Smoke Test (push) Successful in 4s
Details
CI / Canvas Deploy Reminder (push) Has been skipped
Details
Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 5s
Details
E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 6s
Details
Canary — staging SaaS smoke (every 30 min) / Canary smoke (push) Failing after 4m49s
Details

Browse Source
This commit is contained in:
claude-ceo-assistant 2026-05-08 16:53:05 +00:00
commit 32773fd566
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
docker-compose.yml
View File

@ -195,6 +195,19 @@ services:
# App private key — read-only bind-mount. The host-side path is
# gitignored per .gitignore rules (/.secrets/ + *.pem).
- ./.secrets/github-app.pem:/secrets/github-app.pem:ro
# Per-role persona credentials (molecule-core#242 local surface).
# Sourced at workspace creation time by org_import.go::loadPersonaEnvFile
# when a workspace.yaml carries `role: <name>`. The host-side dir is
# populated by the operator-host bootstrap kit (28 dev-tree personas);
# /etc/molecule-bootstrap/personas is the in-container path the
# platform expects (matches the prod tenant-EC2 path so the same code
# works in both modes).
#
# Read-only mount — workspace-server only reads, never writes here.
# If the host dir is empty/missing the platform's loadPersonaEnvFile
# silently no-ops per its existing semantics, so this mount is safe
# even on a fresh machine that hasn't run the bootstrap kit yet.
- ${MOLECULE_PERSONA_ROOT_HOST:-${HOME}/.molecule-ai/personas}:/etc/molecule-bootstrap/personas:ro
ports:
- "${PLATFORM_PUBLISH_PORT:-8080}:${PLATFORM_PORT:-8080}"
networks: