5907 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Molecule AI Release Manager	39a2dc9871	Merge main into staging (sync v4 — release manager) ... Brings 659 main commits into staging. Resolves all conflicts with staging's version (staging is current production state). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 18:35:50 +00:00
devops-engineer	a809201bad	Merge pull request 'fix(handlers): add rows.Err() checks after all scan loops' (#865) from fix/handlers-rows-err-checks into staging	2026-05-13 18:15:39 +00:00
devops-engineer	ab966c56ba	Merge pull request 'test(canvas): add EventsTab and ScheduleTab test coverage' (#869) from feat/canvas-tab-test-coverage into staging	2026-05-13 18:14:21 +00:00
devops-engineer	c8e312a195	Merge pull request 'fix(handlers/bundle): restore bundle import test build' (#861) from fix/issue-850-bundle-test-import into staging	2026-05-13 18:12:39 +00:00
devops-engineer	7e30a85463	Merge pull request 'test: add handler test coverage — workspace_crud, mcp_tools, org_layout, hub' (#860) from feat/platform-handler-test-coverage into main	2026-05-13 18:11:57 +00:00
devops-engineer	cbef4ca3d4	Merge pull request 'fix(handlers): restore bundle import test build' (#850) from fix/main-red-sqlmock-import into main	2026-05-13 18:10:06 +00:00
devops-engineer	ffd2d0de45	Merge pull request 'ci: auto deploy production tenants after green main' (#824) from fix/auto-prod-deploy into main	2026-05-13 18:09:00 +00:00
devops-engineer	761c590cd0	Merge pull request 'test(store/pgplugin): fix TestStore_PatchNamespace_DualFields using regexp.QuoteMeta' (#857) from fix/test-patchnamespace-dualfields into main	2026-05-13 18:08:14 +00:00
devops-engineer	4341994a1c	Merge pull request 'fix(canvas/TermsGate): backdrop/dialog restructure + WCAG button a11y' (#854) from design/terms-cookie-a11y into main	2026-05-13 18:05:56 +00:00
devops-engineer	cc495e55ee	Merge pull request 'fix(canvas): WCAG AA contrast fix for amber buttons + undefined text color classes' (#859) from design/amber-contrast-fix into main	2026-05-13 18:05:13 +00:00
Molecule AI Core-BE	2d68f2c8be	chore: drop workspace_dispatchers_test.go — superseded by PR #868 (staging)	2026-05-13 18:04:00 +00:00
Molecule AI Core-BE	74864af1fb	chore: drop org_layout_test, hub.go, hub_test.go (already in staging with better coverage)	2026-05-13 18:04:00 +00:00
Molecule AI Core-BE	59c573d8de	fix(test): mock workspace_auth_tokens in TestState_LegacyWorkspaceNoLiveToken ... State handler always calls wsauth.HasAnyLiveToken (queries workspace_auth_tokens) before the main workspaces query. The legacy test was missing this mock expectation, causing an unexpected-query sqlmock error. Add the EXISTS(false) expectation to match the other State test cases. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 18:04:00 +00:00
Molecule AI Core-BE	293e3abcb7	test: add handler test coverage — workspace_crud, mcp_tools, org_layout, hub, a2a queue ... Eight test files covering pure functions and handler logic: - a2a_queue_expiry_test.go: expiry queue TTL and cleanup (88 lines) - mcp_tools_test.go: extractA2AText parsing edge cases (193 lines) - org_layout_test.go: childSlot/sizeOfSubtree/childSlotInGrid grid helpers (244 lines) - plugins_atomic_test.go: tarWalk prefix normalization, symlink filtering, nested dirs, dir-entry trailing slash (167 lines) - workspace_crud_test.go: workspace state/update/delete/CascadeDelete + validators (601 lines) - workspace_dispatchers_test.go: DispatchWorkspaceRequest handler pure helpers (128 lines) - ws/hub.go: nil-guard on client.Conn in Hub.Close - ws/hub_test.go: hub broadcast/send/nil AccessChecker coverage (386 lines) Note: workspace_delivery_mode_test.go and instructions_test.go were removed from this PR — they are covered by parallel branches targeting staging (PR #868 and fix/321-cwe22 respectively). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 18:04:00 +00:00
devops-engineer	bfb77aff40	Merge pull request 'fix(mcp): universal stdio transport + runtime-adaptive notifications' (#778) from fix/stdio-fallback-all-environments into main	2026-05-13 18:01:18 +00:00
devops-engineer	dbd4ae4d1a	ci: retrigger CI [empty]	2026-05-13 17:45:42 +00:00
devops-engineer	a01ae27dad	ci: retrigger CI [empty]	2026-05-13 17:45:12 +00:00
devops-engineer	0b4d584aef	ci: retrigger CI [empty]	2026-05-13 17:44:27 +00:00
devops-engineer	c2c20f7e44	ci: retrigger CI [empty]	2026-05-13 17:44:04 +00:00
devops-engineer	f773881b82	ci: retrigger CI [empty]	2026-05-13 17:43:30 +00:00
devops-engineer	2cf2744fb9	ci: retrigger CI [empty]	2026-05-13 17:42:56 +00:00
devops-engineer	fc44d865c3	Merge remote-tracking branch 'origin/main' into fix/auto-prod-deploy	2026-05-13 17:09:44 +00:00
devops-engineer	c74d7c13d7	Merge remote-tracking branch 'origin/main' into fix/main-red-sqlmock-import	2026-05-13 17:09:35 +00:00
devops-engineer	b930223a78	Merge remote-tracking branch 'origin/main' into design/terms-cookie-a11y	2026-05-13 17:09:26 +00:00
devops-engineer	f578b6c4de	Merge remote-tracking branch 'origin/main' into design/amber-contrast-fix	2026-05-13 17:09:02 +00:00
devops-engineer	7c5b3e89f9	Merge remote-tracking branch 'origin/main' into fix/test-patchnamespace-dualfields	2026-05-13 17:08:57 +00:00
devops-engineer	e1bf973d91	Merge pull request 'test(models+handlers): add delivery mode + workspace status coverage' (#868) from fix/issue-860-delivery-mode-tests into staging	2026-05-13 17:05:41 +00:00
devops-engineer	a709609a3c	Merge remote-tracking branch 'origin/main' into fix/stdio-fallback-all-environments	2026-05-13 17:04:44 +00:00
devops-engineer	22839034ef	Merge pull request 'fix(ci): close burn-in — remove continue-on-error mask from sop-tier-check' (#825) from ci/burn-in-remove-sop-tier-check-coe into main	2026-05-13 17:02:51 +00:00
devops-engineer	62b150308c	Merge pull request 'test(canvas): add ExternalConnectModal pure-helper coverage — 31 cases' (#847) from feat/canvas-external-connect-modal-coverage into staging	2026-05-13 16:39:05 +00:00
Molecule AI Fullstack Engineer	d2041df571	test(canvas): add EventsTab and ScheduleTab test coverage ... EventsTab.test.tsx — formatTime (ago strings), EVENT_COLORS, loading/empty/error states, event list rendering, expand/collapse, refresh button (12 cases). ScheduleTab.test.tsx — cronToHuman (7 cases), relativeTime ("Last: never"), empty state, schedule list rendering (11 cases). Both files use the vi.hoisted() mock pattern for @/lib/api. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 16:37:44 +00:00
core-be	946e12afaf	test(canvas): freeze time in formatTTL tests — eliminate CI timing flake ... Same fix as applied to fix/stdio-fallback-all-environments (#778). vi.useFakeTimers()/vi.useRealTimers() pin Date.now() so the flake (expected '5m', got '4m' on slow runners) cannot occur. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-13 09:33:10 -07:00
core-be	ac675237fb	Merge branch 'main' into ci/burn-in-remove-sop-tier-check-coe	2026-05-13 09:32:48 -07:00
core-be	27431fa852	test(canvas): freeze time in formatTTL tests — eliminate CI timing flake ... formatTTL calls Date.now() internally; tests were computing the expected timestamp with a separate Date.now() call. On a slow CI runner the delta exceeded a bucket boundary (4m instead of 5m). vi.useFakeTimers()/vi.useRealTimers() in beforeEach/afterEach pins Date.now() to a single value for the duration of each test so the comparison is always exact. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-13 09:29:14 -07:00
devops-engineer	c451b96db8	Merge pull request 'fix(runtime): accept kimi/kimi-cli as BYO-compute external runtime' (#771) from fix/kimi-external-runtime into main	2026-05-13 16:15:54 +00:00
Molecule AI Fullstack Engineer	e86f3bbda6	test(models+handlers): add delivery mode + workspace status coverage ... Add two test files covering the delivery-mode and workspace-status enforcement contracts: - models/workspace_delivery_mode_test.go: - IsValidDeliveryMode: true for "push"/"poll", false for all other inputs (empty, typos, case variants, trailing space) - WorkspaceStatus.String(): returns the underlying string for all 10 status constants - AllWorkspaceStatuses: correct length (10) and membership of all named constants, no empty strings - handlers/workspace_dispatchers_test.go: - resolveDeliveryMode: payloadMode wins without DB query, existing DB mode returned when present, external runtime defaults to poll, self-hosted defaults to push, not-found defaults to push, DB errors propagate, empty-string existing mode falls through to runtime check Refs #860	2026-05-13 16:14:09 +00:00
Molecule AI Core-UIUX	63713133c3	fix(canvas): WCAG AA contrast fix for amber buttons + undefined text color classes + emerald/violet badge contrast ... 1. bg-amber-600 text-white → bg-amber-800 text-white (ProvisioningTimeout Retry button, ConfirmDialog warning variant). Amber-600 (#d97706) yields 3.83:1 against white — below WCAG AA 4.5:1. Amber-800 (#92400e) yields 4.84:1 — passes AA. Hover state also fixed: amber-500 → amber-700. 2. DropTargetBadge: text-emerald-50 → text-white. Emerald-50 (#ecfdf5) on emerald-500 (#10b981) = ~3.3:1 (below AA for 11px text). White on emerald-500 = ~4.6:1 — passes AA. 3. WorkspaceNode external runtime badge: bg-violet-600 → bg-violet-800. Violet-600 (#7c3aed) on white = ~3.7:1 (below AA for 7px text). Violet-800 (#5b21b6) on white = ~7.4:1 — passes AA. 4. Undefined Tailwind classes text-white-soft and text-white-mid replaced with text-ink-soft and text-ink-mid in secrets-section.tsx and OrgImportPreflightModal. These had no CSS definition. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 16:10:14 +00:00
Molecule AI Core-UIUX	2efed28350	fix(canvas/TermsGate): WCAG AA — bg-emerald-600 → bg-emerald-700 ... Emerald-600 on white text = 3.3:1 (WCAG AA FAIL). Emerald-700 on white text = 4.6:1 (WCAG AA PASS). The original comment incorrectly referenced emerald-500 — the actual class was emerald-600. Also corrected the comment to be accurate. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 16:04:29 +00:00
core-be	7f2b218cd3	feat(kimi): Kimi as first-class BYO-compute runtime + delegation retry fix ... - Add isExternalLikeRuntime() helper for kimi/kimi-cli/external - Extend runtime_registry, workspace handler, canvas UX for Kimi - Fix delegation retry: skip retry when response body already received - Restore a2a_client cache-first path (peer_name KeyError, already on main) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-13 09:01:30 -07:00
Molecule AI Fullstack Engineer	73eb3c7a85	fix(handlers): add rows.Err() checks after all scan loops ... Go's database/sql contract requires callers to check rows.Err() after a for rows.Next() loop — a mid-stream error (e.g. dropped connection mid-result-set) is not surfaced by rows.Next() returning false. Covered handlers: - delegation.go: ListDelegations - approvals.go: ListPendingApprovals, List - instructions.go: List handler, scanInstructions helper (interface extended) - secrets.go: ListSecrets, ListGlobalSecrets, notifyGlobalSecretChange - events.go: List, ListByWorkspace - discovery.go: queryPeerMaps All checks log the error (non-fatal) so callers continue to receive the partial result set rather than silently truncating. Refs #862 (extending scope beyond delegation.go)	2026-05-13 15:49:57 +00:00
Molecule AI Fullstack Engineer	39fc5d0f4e	fix(handlers/bundle): restore bundle import test build ... Fixes three issues in bundle.go / bundle_test.go: 1. Missing sqlmock import: TestBundleImport_ValidJSON and TestBundleExport_NotFound use sqlmock.Sqlmock from setupTestDB() and call sqlmock.NewResult() but did not import go-sqlmock, causing a build failure. 2. Empty/null bundle guard: null JSON (ShouldBindJSON → zero-value Bundle{}) or empty {} payload would bind without error and reach bundle.Import(), INSERTing a row with name="" and tier=0 into workspaces before failing. Add b.Schema != "" guard before calling bundle.Import(). 3. Outdated test expectations: TestBundleImport_ValidJSON expected INSERT INTO workspace_schedules and workspace_secrets which the current importer does not issue. Remove those expectations so the test reflects actual importer behaviour (INSERT + UPDATE runtime only). Closes #850	2026-05-13 15:26:47 +00:00
platform-engineer	2067070f93	fix(ci): resolve 4 CI failures on PR#778 ... 1. ci-mcp-stdio-transport.yml: install pytest-cov so --no-cov flag doesn't conflict with workspace/pytest.ini addopts (exit code 4). Run 26124 (MCP stdio with regular-file stdout). 2. ci-mcp-stdio-transport.yml: add # mc#774 tracker on continue-on-error: true to satisfy lint-continue-on-error-tracking Tier 2e. Run 26132. 3. ci-mcp-stdio-transport.yml: add # bp-exempt directive comment above mcp-stdio-regular-file job key to satisfy lint-required-context-exists-in-bp Tier 2g. Run 26135. 4. bundle_test.go: import github.com/DATA-DOG/go-sqlmock explicitly so the package identifier resolves when compiled with -tags=integration. Run 26130 (Handlers Postgres Integration). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-13 08:16:09 -07:00
Molecule AI Core-UIUX	19f9e463af	test(ConfirmDialog): add 6 WCAG accessibility tests ... Add coverage for dialog a11y guarantees already implemented: - role=dialog + aria-modal=true - aria-labelledby pointing to title (WCAG 1.3.1) - Escape → onCancel, Enter → onConfirm (WCAG 2.1.1) - Focus moves to first button on open (WCAG 2.4.3) - Backdrop click → onCancel - aria-label on backdrop (WCAG 4.1.2) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 14:28:00 +00:00
Molecule AI Core-UIUX	8f9c220f66	fix(canvas/TermsGate,CookieConsent): a11y improvements ... TermsGate: - Restructure backdrop + dialog as siblings so backdrop can carry aria-hidden="true" without hiding the dialog from assistive tech - Add aria-disabled on "I agree" button while POST is in flight - Show ellipsis "…" on button during submission CookieConsent: - Add aria-label to the cookie consent region for screen reader users navigating landmark regions Regression tests: ellipsis shown during submission, aria-disabled attribute present, backdrop is sibling of dialog (not parent). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 14:23:01 +00:00
Molecule AI Core-UIUX	11e2fd72f7	fix(canvas/PricingTable): fix bare aria-hidden attribute on feature checkmarks ... Bare `aria-hidden` (without ="true") is unreliable across browsers — some treat it as falsy and expose the element to assistive tech. Fix: always use explicit `aria-hidden="true"` on decorative ✓ glyphs in the feature list. Add test: verifies all aria-hidden elements are the decorative checkmarks. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 14:23:01 +00:00
Molecule AI Core-UIUX	f08ddedafd	fix(canvas/Toolbar): help button always opens — no double-click close bug ... The help button's onClick used setHelpOpen((open) => !open) (toggle). Combined with the window.pointerdown handler that closes on outside-click, clicking outside then clicking the help button would: pointerdown outside (close) → click on button (!false = true → open) → pointerdown ON button (contains=true, no close) → BUT the next interaction would have stale toggle state causing a double-close on the following click. Fix: button onClick always calls setHelpOpen(true) — the pointerdown outside handler owns the close path; the button only opens. Also add 2 tests: pointer-down-outside closes, and re-open works after outside click (regression for the double-click bug). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 14:23:01 +00:00
Molecule AI Core-UIUX	835e8360e3	fix(canvas/ApprovalBanner): add disabled state + fix WCAG contrast on Deny button ... - Add pendingApprovalId state guard to prevent double-submit (both Approve + Deny buttons disabled while POST is in flight) - Fix Deny button text-ink-mid → text-ink for WCAG AA contrast (~3:1 → ~7:1 on zinc-800 surface-card background) - Add aria-disabled + disabled attribute for screen reader support - Show ellipsis "…" on clicked button during submission - Add 5 new tests: disabled mid-flight, re-enabled after resolve/fail, ellipsis text, all-buttons-disabled guard Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 14:23:01 +00:00
devops-engineer	ecdae882b6	Merge pull request 'feat(canvas): mount SearchDialog in desktop + mobile canvas shells' (#837) from design/826-searchdialog-mount-v2 into main	2026-05-13 14:20:08 +00:00
devops-engineer	1231177325	Merge branch 'main' into fix/stdio-fallback-all-environments	2026-05-13 14:14:42 +00:00
devops-engineer	36561cb0f1	Merge pull request 'feat(canvas): mount SearchDialog in desktop + mobile canvas shells' (#837) from design/826-searchdialog-mount-v2 into main	2026-05-13 14:13:41 +00:00