5920 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Molecule AI Core-DevOps	4e886c91ae	fix(ci): add canvas-deploy-reminder to staging all-required.needs (mc#923) ... mc#923 ci-drift root fix for staging branch. canvas-deploy-reminder exists in staging ci.yml. Although the job is gated by `if: github.event_name == 'push' ...` and ci_job_names() should exclude it from F1 drift, the drift detector is flagging it. Apply the same fix as mc#922 for main: add to all-required.needs:. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 02:35:09 +00:00
devops-engineer	3a30b07309	Merge pull request 'test(handlers): add 14 additional pure-function cases to org_helpers_pure_test.go' (#840) from feat/709-org-helpers-additional-tests into staging	2026-05-13 22:04:27 +00:00
devops-engineer	23f53ed361	Merge pull request 'fix(main): heal ADMIN_TOKEN placeholder in global_secrets on startup (#831)' (#893) from fix/831-go-only into staging	2026-05-13 21:46:30 +00:00
Molecule AI Fullstack Engineer	5aa747241a	fix(main): heal ADMIN_TOKEN placeholder in global_secrets on startup (#831) ... Issue #831: integration-tester workspace (33bb2f71) has ADMIN_TOKEN="placeholder-will-ask-for-real" in its container env because loadWorkspaceSecrets reads ALL rows from global_secrets and injects them into every workspace container. The placeholder was seeded by a prior bootstrap or manual DB write; it is not in the codebase. The correct ADMIN_TOKEN lives in the platform's host environment (os.Getenv) but was never propagated to global_secrets. The fix adds fixAdminTokenPlaceholder() which runs once at platform startup (SaaS tenants only, cpProv != nil): 1. Reads the real ADMIN_TOKEN from the host environment. 2. Reads the current global_secrets value and decrypts it. 3. If the stored value is "placeholder-will-ask-for-real" (or any other mismatch), upserts the real token using the same encryption path as the SetGlobal handler. 4. Logs the action taken so operators can audit the fix. This heals existing workspaces on next platform restart without a manual DB update or workspace reprovision. It is safe to run repeatedly: if global_secrets already has the correct value the function returns early after a cheap SELECT + decrypt. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 21:09:47 +00:00
Molecule AI Fullstack Engineer	8ad125d0cf	test(handlers): add 14 additional pure-function cases to org_helpers_pure_test.go ... Extends the staging org_helpers_pure_test.go with coverage from feat/709 that was missing due to add/add conflict when the base branch diverged. New test cases: - expandWithEnv: BracedVar, DollarVar, Mixed, MissingVar, EmptyMap, LiteralDollar, PartiallyPresent - mergeCategoryRouting: WorkspaceAddsCategory, EmptyListDropsCategory, EmptyDefaultKeySkipped, EmptyWorkspaceKeySkipped, DoesNotMutateInputs - renderCategoryRoutingYAML: SingleCategory, MultipleCategoriesSorted, EmptyListCategory (join existing coverage) - appendYAMLBlock: BothEmpty, ExistingHasNewline, ExistingNoNewline, ExistingEmpty, NilExisting - mergePlugins: DefaultsOnly, WorkspaceAdds, DeduplicationOrder, ExclusionThenAddSameName - isSafeRoleName: SpecialCharsRejected Closes #709 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 18:57:33 +00:00
devops-engineer	6993859c45	Merge pull request 'chore: sync staging from main (v4 — merge 659 main commits)' (#876) from staging-sync-v4 into staging	2026-05-13 18:51:41 +00:00
molecule-operator	70fa2051d4	Merge branch 'sync-v4-local' into staging-local	2026-05-13 18:48:48 +00:00
devops-engineer	38f9f56ef7	Merge pull request 'test(handlers/org_import): add org_import_helpers_test.go — 22 cases for pure helpers' (#838) from feat/698-org-import-helpers-test-coverage into staging	2026-05-13 18:46:04 +00:00
devops-engineer	bea48f904b	Merge pull request 'fix(handlers): correct two test-file bugs blocking the build' (#870) from fix/handlers-test-build-fixes into staging	2026-05-13 18:39:04 +00:00
Molecule AI Fullstack Engineer	aaa51dd7c9	fix(handlers): add database/sql import to workspace_dispatchers_test.go ... workspace_dispatchers_test.go uses sql.ErrNoRows but did not import "database/sql". Also resolves merge conflict in plugins_helpers_pure_test.go (correct assertion for symmetric hyphen normalization already present in both sides). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 18:37:09 +00:00
Molecule AI Fullstack Engineer	a131282fb9	fix(handlers/plugins_helpers_pure_test): correct copy-paste assertion bug ... TestSupportsRuntime_HyphenUnderscoreNormalized line 33 asserted supportsRuntime("anthropic_claude") == true on a plugin declaring ["claude-code"] — impossible to match. Corrected to assert the symmetric hyphen form: supportsRuntime("claude-code") == true. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 18:36:21 +00:00
Molecule AI Fullstack Engineer	8e4cd43824	fix(handlers/a2a_proxy_helpers_test): remove unused in/out variables in two tests ... Fixes build failure introduced by bb5e0bb5 where readUsageMap return values were captured but not used in TestReadUsageMap_MissingUsage and TestReadUsageMap_MalformedUsageJSON. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 18:36:21 +00:00
Molecule AI Release Manager	39a2dc9871	Merge main into staging (sync v4 — release manager) ... Brings 659 main commits into staging. Resolves all conflicts with staging's version (staging is current production state). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 18:35:50 +00:00
devops-engineer	a809201bad	Merge pull request 'fix(handlers): add rows.Err() checks after all scan loops' (#865) from fix/handlers-rows-err-checks into staging	2026-05-13 18:15:39 +00:00
devops-engineer	ab966c56ba	Merge pull request 'test(canvas): add EventsTab and ScheduleTab test coverage' (#869) from feat/canvas-tab-test-coverage into staging	2026-05-13 18:14:21 +00:00
devops-engineer	c8e312a195	Merge pull request 'fix(handlers/bundle): restore bundle import test build' (#861) from fix/issue-850-bundle-test-import into staging	2026-05-13 18:12:39 +00:00
devops-engineer	7e30a85463	Merge pull request 'test: add handler test coverage — workspace_crud, mcp_tools, org_layout, hub' (#860) from feat/platform-handler-test-coverage into main	2026-05-13 18:11:57 +00:00
devops-engineer	cbef4ca3d4	Merge pull request 'fix(handlers): restore bundle import test build' (#850) from fix/main-red-sqlmock-import into main	2026-05-13 18:10:06 +00:00
devops-engineer	ffd2d0de45	Merge pull request 'ci: auto deploy production tenants after green main' (#824) from fix/auto-prod-deploy into main	2026-05-13 18:09:00 +00:00
devops-engineer	761c590cd0	Merge pull request 'test(store/pgplugin): fix TestStore_PatchNamespace_DualFields using regexp.QuoteMeta' (#857) from fix/test-patchnamespace-dualfields into main	2026-05-13 18:08:14 +00:00
devops-engineer	4341994a1c	Merge pull request 'fix(canvas/TermsGate): backdrop/dialog restructure + WCAG button a11y' (#854) from design/terms-cookie-a11y into main	2026-05-13 18:05:56 +00:00
devops-engineer	cc495e55ee	Merge pull request 'fix(canvas): WCAG AA contrast fix for amber buttons + undefined text color classes' (#859) from design/amber-contrast-fix into main	2026-05-13 18:05:13 +00:00
Molecule AI Core-BE	2d68f2c8be	chore: drop workspace_dispatchers_test.go — superseded by PR #868 (staging)	2026-05-13 18:04:00 +00:00
Molecule AI Core-BE	74864af1fb	chore: drop org_layout_test, hub.go, hub_test.go (already in staging with better coverage)	2026-05-13 18:04:00 +00:00
Molecule AI Core-BE	59c573d8de	fix(test): mock workspace_auth_tokens in TestState_LegacyWorkspaceNoLiveToken ... State handler always calls wsauth.HasAnyLiveToken (queries workspace_auth_tokens) before the main workspaces query. The legacy test was missing this mock expectation, causing an unexpected-query sqlmock error. Add the EXISTS(false) expectation to match the other State test cases. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 18:04:00 +00:00
Molecule AI Core-BE	293e3abcb7	test: add handler test coverage — workspace_crud, mcp_tools, org_layout, hub, a2a queue ... Eight test files covering pure functions and handler logic: - a2a_queue_expiry_test.go: expiry queue TTL and cleanup (88 lines) - mcp_tools_test.go: extractA2AText parsing edge cases (193 lines) - org_layout_test.go: childSlot/sizeOfSubtree/childSlotInGrid grid helpers (244 lines) - plugins_atomic_test.go: tarWalk prefix normalization, symlink filtering, nested dirs, dir-entry trailing slash (167 lines) - workspace_crud_test.go: workspace state/update/delete/CascadeDelete + validators (601 lines) - workspace_dispatchers_test.go: DispatchWorkspaceRequest handler pure helpers (128 lines) - ws/hub.go: nil-guard on client.Conn in Hub.Close - ws/hub_test.go: hub broadcast/send/nil AccessChecker coverage (386 lines) Note: workspace_delivery_mode_test.go and instructions_test.go were removed from this PR — they are covered by parallel branches targeting staging (PR #868 and fix/321-cwe22 respectively). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 18:04:00 +00:00
devops-engineer	bfb77aff40	Merge pull request 'fix(mcp): universal stdio transport + runtime-adaptive notifications' (#778) from fix/stdio-fallback-all-environments into main	2026-05-13 18:01:18 +00:00
devops-engineer	dbd4ae4d1a	ci: retrigger CI [empty]	2026-05-13 17:45:42 +00:00
devops-engineer	a01ae27dad	ci: retrigger CI [empty]	2026-05-13 17:45:12 +00:00
devops-engineer	0b4d584aef	ci: retrigger CI [empty]	2026-05-13 17:44:27 +00:00
devops-engineer	c2c20f7e44	ci: retrigger CI [empty]	2026-05-13 17:44:04 +00:00
devops-engineer	f773881b82	ci: retrigger CI [empty]	2026-05-13 17:43:30 +00:00
devops-engineer	2cf2744fb9	ci: retrigger CI [empty]	2026-05-13 17:42:56 +00:00
devops-engineer	fc44d865c3	Merge remote-tracking branch 'origin/main' into fix/auto-prod-deploy	2026-05-13 17:09:44 +00:00
devops-engineer	c74d7c13d7	Merge remote-tracking branch 'origin/main' into fix/main-red-sqlmock-import	2026-05-13 17:09:35 +00:00
devops-engineer	b930223a78	Merge remote-tracking branch 'origin/main' into design/terms-cookie-a11y	2026-05-13 17:09:26 +00:00
devops-engineer	f578b6c4de	Merge remote-tracking branch 'origin/main' into design/amber-contrast-fix	2026-05-13 17:09:02 +00:00
devops-engineer	7c5b3e89f9	Merge remote-tracking branch 'origin/main' into fix/test-patchnamespace-dualfields	2026-05-13 17:08:57 +00:00
devops-engineer	e1bf973d91	Merge pull request 'test(models+handlers): add delivery mode + workspace status coverage' (#868) from fix/issue-860-delivery-mode-tests into staging	2026-05-13 17:05:41 +00:00
devops-engineer	a709609a3c	Merge remote-tracking branch 'origin/main' into fix/stdio-fallback-all-environments	2026-05-13 17:04:44 +00:00
devops-engineer	22839034ef	Merge pull request 'fix(ci): close burn-in — remove continue-on-error mask from sop-tier-check' (#825) from ci/burn-in-remove-sop-tier-check-coe into main	2026-05-13 17:02:51 +00:00
devops-engineer	62b150308c	Merge pull request 'test(canvas): add ExternalConnectModal pure-helper coverage — 31 cases' (#847) from feat/canvas-external-connect-modal-coverage into staging	2026-05-13 16:39:05 +00:00
Molecule AI Fullstack Engineer	d2041df571	test(canvas): add EventsTab and ScheduleTab test coverage ... EventsTab.test.tsx — formatTime (ago strings), EVENT_COLORS, loading/empty/error states, event list rendering, expand/collapse, refresh button (12 cases). ScheduleTab.test.tsx — cronToHuman (7 cases), relativeTime ("Last: never"), empty state, schedule list rendering (11 cases). Both files use the vi.hoisted() mock pattern for @/lib/api. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 16:37:44 +00:00
core-be	946e12afaf	test(canvas): freeze time in formatTTL tests — eliminate CI timing flake ... Same fix as applied to fix/stdio-fallback-all-environments (#778). vi.useFakeTimers()/vi.useRealTimers() pin Date.now() so the flake (expected '5m', got '4m' on slow runners) cannot occur. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-13 09:33:10 -07:00
core-be	ac675237fb	Merge branch 'main' into ci/burn-in-remove-sop-tier-check-coe	2026-05-13 09:32:48 -07:00
core-be	27431fa852	test(canvas): freeze time in formatTTL tests — eliminate CI timing flake ... formatTTL calls Date.now() internally; tests were computing the expected timestamp with a separate Date.now() call. On a slow CI runner the delta exceeded a bucket boundary (4m instead of 5m). vi.useFakeTimers()/vi.useRealTimers() in beforeEach/afterEach pins Date.now() to a single value for the duration of each test so the comparison is always exact. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-13 09:29:14 -07:00
devops-engineer	c451b96db8	Merge pull request 'fix(runtime): accept kimi/kimi-cli as BYO-compute external runtime' (#771) from fix/kimi-external-runtime into main	2026-05-13 16:15:54 +00:00
Molecule AI Fullstack Engineer	e86f3bbda6	test(models+handlers): add delivery mode + workspace status coverage ... Add two test files covering the delivery-mode and workspace-status enforcement contracts: - models/workspace_delivery_mode_test.go: - IsValidDeliveryMode: true for "push"/"poll", false for all other inputs (empty, typos, case variants, trailing space) - WorkspaceStatus.String(): returns the underlying string for all 10 status constants - AllWorkspaceStatuses: correct length (10) and membership of all named constants, no empty strings - handlers/workspace_dispatchers_test.go: - resolveDeliveryMode: payloadMode wins without DB query, existing DB mode returned when present, external runtime defaults to poll, self-hosted defaults to push, not-found defaults to push, DB errors propagate, empty-string existing mode falls through to runtime check Refs #860	2026-05-13 16:14:09 +00:00
Molecule AI Core-UIUX	63713133c3	fix(canvas): WCAG AA contrast fix for amber buttons + undefined text color classes + emerald/violet badge contrast ... 1. bg-amber-600 text-white → bg-amber-800 text-white (ProvisioningTimeout Retry button, ConfirmDialog warning variant). Amber-600 (#d97706) yields 3.83:1 against white — below WCAG AA 4.5:1. Amber-800 (#92400e) yields 4.84:1 — passes AA. Hover state also fixed: amber-500 → amber-700. 2. DropTargetBadge: text-emerald-50 → text-white. Emerald-50 (#ecfdf5) on emerald-500 (#10b981) = ~3.3:1 (below AA for 11px text). White on emerald-500 = ~4.6:1 — passes AA. 3. WorkspaceNode external runtime badge: bg-violet-600 → bg-violet-800. Violet-600 (#7c3aed) on white = ~3.7:1 (below AA for 7px text). Violet-800 (#5b21b6) on white = ~7.4:1 — passes AA. 4. Undefined Tailwind classes text-white-soft and text-white-mid replaced with text-ink-soft and text-ink-mid in secrets-section.tsx and OrgImportPreflightModal. These had no CSS definition. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 16:10:14 +00:00
Molecule AI Core-UIUX	2efed28350	fix(canvas/TermsGate): WCAG AA — bg-emerald-600 → bg-emerald-700 ... Emerald-600 on white text = 3.3:1 (WCAG AA FAIL). Emerald-700 on white text = 4.6:1 (WCAG AA PASS). The original comment incorrectly referenced emerald-500 — the actual class was emerald-600. Also corrected the comment to be accurate. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 16:04:29 +00:00