5660 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
core-devops	8e1d12e563	fix(ci): add labeled/unlabeled to sop-checklist-gate pull_request_target types ... Closes mc#817. The gate was not re-running when a tier label was added after initial PR open, leaving a stale failure status. Adding labeled/unlabeled triggers a fresh evaluation whenever tier label changes, eliminating need for manual compensating statuses.	2026-05-13 08:41:40 +00:00
devops-engineer	3db93d3d44	Merge pull request '[core-be-agent] test(handlers/bundle): add bundle_test.go — 5 cases + fix nil broadcaster panic' (#801) from feat/workspace-dispatchers-test-coverage into main	2026-05-13 08:29:41 +00:00
devops-engineer	f547ff99a2	Merge PR #813: bound Playwright browser install ... Merge via devops-engineer after SOP, QA, security, and manual workflow-only CI validation passed.	2026-05-13 08:22:14 +00:00
hongming-codex-laptop	eafb5b4ac0	fix(ci): bound Playwright browser install	2026-05-13 01:10:34 -07:00
devops-engineer	871f8f52b5	Merge pull request 'fix(lint): resolve 64 pre-existing golangci-lint violations in workspace-server' (#803) from fix/golangci-lint-preexisting-violations into main	2026-05-13 07:55:29 +00:00
devops-engineer	e2d49a56e7	Merge pull request 'fix(ci): remove || true guards from jq pipelines in audit-force-merge.sh' (#792) from ci/audit-force-merge-silent-fail-fix into main	2026-05-13 07:47:42 +00:00
devops-engineer	463afaf7d9	Merge PR #811: harden Cloudflare sweep and disable AWS janitor schedule ... Merge via devops-engineer after SOP, QA, and security gates passed.	2026-05-13 07:47:02 +00:00
devops-engineer	f06a8e76fc	Merge pull request 'fix(platform): install docker-cli-buildx in workspace-server image (mc#765 follow-up)' (#796) from fix/workspace-server-docker-cli-buildx-mc765-followup into main	2026-05-13 07:42:04 +00:00
hongming-codex-laptop	334b748492	fix(ci): harden Cloudflare sweep API errors	2026-05-13 00:35:15 -07:00
devops-engineer	cf473aac69	Merge pull request 'ci: hard-fail unfilled SOP checklist body' (#797) from fix/sop-checklist-body-hard-gate into main	2026-05-13 07:22:39 +00:00
Molecule AI Core-DevOps	a8f2c46c87	fix(ci): remove || true guards from jq pipelines in audit-force-merge.sh ... Silent-failure regression from 8c343e3a. The || true guards on jq pipelines masked parse errors and allowed empty strings to propagate into the force-merge audit event (e.g. missing title, merge_sha, or merged_by). With set -euo pipefail already in place, jq failures now propagate as hard errors — the correct behavior. Use jq's // operator for graceful defaults instead: MERGE_SHA=$(jq -r '.merge_commit_sha // empty') # exits 5 on missing field MERGED_BY=$(jq -r '.merged_by.login // "unknown"') # exits 5 on missing field Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 07:08:30 +00:00
hongming-codex-laptop	c2e462ca26	fix(lint): resolve 64 pre-existing golangci-lint violations in workspace-server ... Fixes all ineffassign (7), staticcheck (31), and unused (26) violations reported by golangci-lint in workspace-server/ so the linter gate is clean. Key changes by linter: - ineffassign: remove 7 variables assigned then immediately overwritten - QF1001 (De Morgan): rewrite 4 negated compound conditions - QF1006 (loop lift): 2 for{if break} → for !cond{} - QF1008 (embedded field): drop .Resources. from hostCfg/hc selectors (provisioner + tests) - QF1012 (Fprintf): 3 sb.WriteString(fmt.Sprintf) → fmt.Fprintf - S1009 (nil+len): remove redundant nil check before len() - S1016 (type conv): 2 struct-literal copies → direct type conversion - S1017 (TrimPrefix): 2 if+HasPrefix/slice → strings.TrimPrefix - S1023 (redundant return): remove 2 trailing returns in middleware - SA1012 (nil context): nil → context.TODO() in resolver_test - SA1019 (deprecated): ImageInspectWithRaw → ImageInspect; RetryAfter direct field - SA5011 (nil deref): t.Error → t.Fatal before dereference in client_test - ST1005 (error string): lowercase 3 error strings starting with proper nouns - ST1013 (HTTP constant): 405 literal → http.StatusMethodNotAllowed - unused: delete 26 unused consts/types/funcs/fields across 12 files All three checks pass after this commit: go build ./... → success go vet ./... → success golangci-lint run --timeout 3m ./... → 0 issues Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-12 23:47:36 -07:00
devops-engineer	3df44d9fb1	Merge PR #809: surface E2E diagnose detail ... Merge diagnostic hardening after CI and SOP gates passed.	2026-05-13 06:46:48 +00:00
hongming-codex-laptop	6656e60e5e	fix(e2e): surface terminal diagnose detail	2026-05-12 23:43:03 -07:00
devops-engineer	2c8582937c	Merge PR #793: fix CI golangci-lint root failure ... Merge protected core CI root fix after required CI and SOP gates passed.	2026-05-13 06:14:42 +00:00
hongming-codex-laptop	ad7acd30db	fix(platform): clear golangci-lint findings	2026-05-12 22:53:22 -07:00
hongming-codex-laptop	f9261212bd	fix(sop-checklist): post success (not pending) for tier:low PRs ... tier:low PRs are low-risk changes that do not require peer acks. Posting 'pending' instead of 'success' caused a deadlock when sop-checklist/all-items-acked is a BP required context — pending does not satisfy the merge gate. Change: mode=soft → state always "success", description prefix changes from "[soft-fail]" to "[info tier:low]" for clarity. Fixes internal#376 (all molecule-core/main merges blocked).	2026-05-12 22:42:46 -07:00
Molecule AI Core-BE	0d74b1fa79	[core-be-agent] fix(bundle_test): TestBundleImport_ValidJSON nil broadcaster panic ... TestBundleImport_ValidJSON passed nil broadcaster to BundleHandler. bundle.Import calls broadcaster.RecordAndBroadcast unconditionally → panic when broadcaster is nil. Fix: add setupTestDB + newTestBroadcaster + 4 ExpectExec mocks covering the INSERT workspaces / UPDATE runtime / INSERT schedules / INSERT workspace_secrets calls. Recursive sub-workspace imports are not triggered (bundle has no SubWorkspaces), and prov is nil so the provision goroutine + markFailed are not reached. Also caught: the original test never called setupTestDB, so db.DB was uninitialized (nil) and the first INSERT would have panicked with "nil pointer" before reaching the broadcaster panic.	2026-05-13 05:37:43 +00:00
Molecule AI Core-BE	da3015c72e	test(handlers/bundle): add bundle_test.go — 5 cases covering Import + Export error paths ... Covers: - BundleHandler.Import: invalid JSON (7 sub-cases) → 400 - BundleHandler.Import: valid JSON → 201 - BundleHandler.Export: workspace not found (ErrNoRows) → 404 - BundleHandler.Export: DB query error → 404 Branch: feat/workspace-dispatchers-test-coverage Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-13 05:15:28 +00:00
hongming-codex-laptop	089980790f	ci: hard-fail unfilled SOP checklist body	2026-05-12 22:15:26 -07:00
hongming-pc2	1c17f0ff73	fix(platform): install docker-cli-buildx in workspace-server image (mc#765 follow-up) ... mc#765 added `docker-cli` to the workspace-server Alpine runtime, but the Alpine package is just the CLI binary — it does NOT include the buildx plugin. Modern Docker (26.x in this image) defaults BuildKit=on, so `docker build` immediately fails with: local-build: pre-flight OK (docker=/usr/bin/docker) Provisioner: workspace start failed for <id>: local-build mode: ensure image for runtime "claude-code": local-build: docker build molecule-local/workspace-template-claude-code:<sha>: exit status 1: ERROR: BuildKit is enabled but the buildx component is missing or broken. Caught immediately after the mc#765 platform-image deploy + recreate during the sdk-lead (360d42e4-8356-441c-80cf-16fcd5d5ce03) + CP-QA (ec6cf05b-2637-4b3c-b561-b33914849aa2) recovery POST /restart calls. Pre-flight passed (docker CLI present, confirmed by the line above), but the actual `docker build` aborted on buildx-missing. The fix mirrors mc#765's shape: add the matching Alpine package (`docker-cli-buildx`, in community/, verified 0.14.0-r3 on alpine:3.20) to the apk add line in workspace-server/Dockerfile. Diff is +1 word in the apk-add line and a comment block extension that explains the BuildKit/buildx requirement. Related: mc#765 (parent fix), Task #194 / Issue #63 (local-build path).	2026-05-12 22:14:46 -07:00
Molecule AI Core-DevOps	df9df5d328	fix(ci): remove invalid YAML double-quote wrapping on golangci-lint run ... The run value '"/Users/hongming/go/bin/golangci-lint" run ...' is invalid YAML: the parser treats the double-quoted portion as the complete scalar, leaving ' run --timeout 3m ./...' as unexpected trailing content. Use a plain scalar so the shell expands $(go env GOPATH) correctly.	2026-05-12 22:11:09 -07:00
hongming-codex-laptop	dc7907a446	fix(ci): install golangci-lint in platform job	2026-05-12 21:42:03 -07:00
hongming	738e54593c	Merge pull request 'fix(platform): install docker-cli in workspace-server image — unblocks RegistryModeLocal' (#765) from infra/dockerfile-add-docker-cli-for-local-build into main	2026-05-13 04:39:13 +00:00
hongming	b331747f1c	Merge pull request 'fix(ci): fail loud on platform Go vet and lint' (#781) from harden/platform-go-lint-fail-loud into main	2026-05-13 04:31:51 +00:00
hongming	03e7a2d8a5	Merge pull request 'test(handlers): drain preflight restart goroutine' (#780) from fix/core-main-red-race-20260512 into main	2026-05-13 04:30:05 +00:00
hongming	f3b01ceefb	Merge pull request 'test curl status capture workflow lint' (#764) from chore/curl-status-lint-script into main	2026-05-13 04:29:41 +00:00
hongming-codex-laptop (Molecule AI agent)	eee83dfb94	fix(ci): fail loud on platform Go vet and lint	2026-05-12 21:14:03 -07:00
hongming-codex-laptop	381c710f8a	test(handlers): drain preflight restart goroutine	2026-05-12 21:07:40 -07:00
hongming	06af0bbeb3	Merge pull request 'test(handlers/a2a_proxy_helpers): add a2a_proxy_helpers_test.go — 20 cases for pure helpers' (#700) from feat/a2a-proxy-helpers-test-coverage into main	2026-05-13 04:05:47 +00:00
Molecule AI Core-Security	40edbd3aae	Merge main into feat/a2a-proxy-helpers-test-coverage	2026-05-12 20:43:27 -07:00
hongming	ddba57e3f6	Merge pull request 'test(handlers/socket): add socket_test.go — 6 cases for Phase 30.1/30.2 auth gate' (#699) from feat/socket-handler-test-coverage into main	2026-05-13 03:43:05 +00:00
Molecule AI Core-Security	e5069012fb	Merge commit '806bbb464ee0df5f2537815ad9509aa28b51dbae' into mm2-700	2026-05-12 20:19:30 -07:00
Molecule AI Core-Security	181a8f9ca7	Merge commit '806bbb464ee0df5f2537815ad9509aa28b51dbae' into mm2-699	2026-05-12 20:19:24 -07:00
Molecule AI · dev-lead	806bbb464e	Merge pull request 'test(handlers/org_import): add org_import_helpers_test.go — 24 cases for pure helpers' (#698) from feat/org-import-helpers-test-coverage into main	2026-05-13 03:19:16 +00:00
Molecule AI Core-Security	2ec3f72857	Merge commit 'd332a854d545' into mm-700	2026-05-12 20:04:13 -07:00
Molecule AI Core-Security	6d98d84255	Merge commit 'd332a854d545' into mm-699	2026-05-12 20:04:05 -07:00
Molecule AI Core-Security	598e0471c4	Merge commit 'd332a854d545cb5a8157fb710688c6995c4811e6' into merge-main-698b	2026-05-12 20:03:18 -07:00
Molecule AI · dev-lead	d332a854d5	Merge pull request 'test(handlers/mcp): harden RecallMemory_GlobalScope test — assert OFFSEC-001 scrub contract (mc#681)' (#693) from fix/681-recall-memory-offsec-scrub into main	2026-05-13 03:02:48 +00:00
Molecule AI Core-Security	1601f341bc	Merge commit 'bc9c61ff47378a2c5b7af56a66ee36b6c442f062' into merge-main-700	2026-05-12 19:54:56 -07:00
Molecule AI Core-Security	9a9bebab0d	Merge commit 'bc9c61ff47378a2c5b7af56a66ee36b6c442f062' into merge-main-699	2026-05-12 19:48:11 -07:00
Molecule AI Core-Security	4f1758728b	Merge commit 'bc9c61ff47378a2c5b7af56a66ee36b6c442f062' into merge-main-698	2026-05-12 19:48:09 -07:00
Molecule AI Core-Security	d97973e90b	Merge commit 'bc9c61ff47378a2c5b7af56a66ee36b6c442f062' into merge-main-693	2026-05-12 19:48:08 -07:00
dev-lead	a65cea7b66	fix: handle json null and empty array in extractToolTrace ... JSON null unmarshals to []byte("null") (4 bytes), not nil, so len(trace)==0 missed it. Empty array []byte("[]")==2 bytes was also returned unchanged. Add explicit string checks for both cases. Also fix TestExtractToolTrace_ValidNonEmpty: json.Marshal compacts spacing, so byte-exact comparison against spaced literal fails on round-trip. Use compact literal instead. Fixes mc#669 (null tool_trace panic path).	2026-05-12 19:44:22 -07:00
hongming-codex-laptop	bc9c61ff47	Merge PR #777: avoid failing canvas publish on gha cache export ... Merges cache-export hardening after verified CI/review/SOP gates.	2026-05-13 02:41:06 +00:00
hongming-kimi-laptop (Molecule AI agent)	cefbc26005	fix(ci): avoid failing canvas publish on gha cache export	2026-05-12 19:36:57 -07:00
hongming-codex-laptop	e487b202a1	Merge PR #776: make canvas publish docker probe pipefail-safe ... Merges workflow health-check repair after verified CI/review/SOP gates.	2026-05-13 02:29:32 +00:00
hongming-kimi-laptop (Molecule AI agent)	baa5e3957a	fix(ci): make canvas docker probe pipefail-safe	2026-05-12 19:16:34 -07:00
Molecule AI Core-Security	a224740d4d	Merge remote-tracking branch 'dev-lead/main' into pr693-test	2026-05-12 19:12:23 -07:00
Molecule AI Core-Security	0c80a4a8ad	Merge remote-tracking branch 'dev-lead/main' into pr699-test	2026-05-12 19:12:13 -07:00