6288 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
fullstack-engineer	a3f3ac361e	fix(e2e-chat): set CORS_ORIGINS for dynamic canvas port in CI	2026-05-15 22:12:57 -07:00
fullstack-engineer	48a1a604ac	chore: retrigger CI after operator maintenance and auto-heal race condition	2026-05-15 21:42:20 -07:00
fullstack-engineer	97cb104667	chore: retrigger CI after fixing runner-queue-janitor per-workflow supersession bug	2026-05-15 20:35:10 -07:00
fullstack-engineer	6c72aee1d9	chore: retrigger CI after system mass cancellation event	2026-05-15 20:28:15 -07:00
fullstack-engineer	873b522f10	chore: retrigger CI after mass cancellation ... All workflows for PR #1242 were simultaneously cancelled around 2026-05-16T00:02Z. Canvas, Python Lint, Shellcheck, and Detect changes had already succeeded; Platform Go and all-required were in-flight. Empty commit to re-queue the full check suite.	2026-05-15 18:28:27 -07:00
fullstack-engineer	ab99ea54ad	fix(e2e-chat): dynamic canvas port to avoid conflict with Gitea :3000 ... The operator host runs Gitea on 127.0.0.1:3000. With act_runner using container.network: host, the E2E Chat job's Next.js dev server (also port 3000) collides and crashes with EADDRINUSE. Changes: - Pick an ephemeral host port for the canvas dev server (same pattern already used for the platform port). - Pass the port to next dev via -p flag (overrides package.json -p 3000). - Update the health-check loop to probe the dynamic port. - Export PLAYWRIGHT_BASE_URL so Playwright tests connect to the right URL. - Make playwright.config.ts read baseURL from PLAYWRIGHT_BASE_URL env var with fallback to localhost:3000 (preserves local dev workflow). This is an infrastructure compatibility fix, not a test logic change.	2026-05-15 17:14:40 -07:00
fullstack-engineer	e21898f7a5	fix(ci): restore main-style all-required sentinel ... During staging→main merge conflict resolution the all-required job accidentally inherited staging's + + shape while keeping main's Python polling script. This creates a broken hybrid: the job is killed after 1 minute before the 40-minute polling deadline, and + re-introduces the Gitea 1.22 skipped-sentinel bug that main deliberately avoids. Restore main's proven shape: no , no , , Python polling. Per core-devops review on PR #1242.	2026-05-15 16:23:06 -07:00
fullstack-engineer	b5c8b235ab	fix(e2e-chat): correct actions/setup-node SHA ... The pinned SHA 60edb5dd...d6f5 was invalid (typo in last 4 chars). act_runner failed to resolve it with 'reference not found' after ~14s, causing the E2E Chat job to fail before any test step could run. Switch to the v6.4.0 SHA (48b55a01...4041e) already verified in ci.yml and e2e-staging-canvas.yml. mc#774 tracker: this was a pre-existing failure mode, not introduced by PR #1142 / promotion #1242.	2026-05-15 16:16:09 -07:00
fullstack-engineer	896c680eb4	chore: retrigger CI after adding Paired reference to PR body	2026-05-15 15:39:37 -07:00
fullstack-engineer	0e13a80121	chore: promote staging→main (chat E2E + accumulated fixes) ... Promotes the following staging-only changes to main: - feat(e2e): stabilize Playwright chat tests for desktop + mobile (PR #1142) - feat(workspace): broadcast and talk-to-user platform abilities - feat(adapter-base): ProviderRegistry type + resolve_provider_routing - fix(staging): OFFSEC-010 CP config wiring + CWE-78 rows.Err fixes - fix(staging): restore goAsync tracking in dispatch calls - fix(ci): needs-based all-required sentinel - fix(canvas): load chat history in MobileChat (closes #1062) Merge-conflict resolutions: - ThemeToggle.tsx: take staging (INDEX_SIZE_ERR test fix) - MobileChat.tsx + test: take staging (shared hooks refactor) - workspace_broadcast.go: take main (OFFSEC-015 org isolation) - org_helpers.go + tests: combine both (CWE-78 guard + rows.Err) - secrets.go: take staging (descriptive rows.Err log messages) - workspace.go: combine (goAsync tracking + SaaS tier hard-gate) - cp_provisioner.go: combine (OFFSEC-010 comments + main formatting) - ci.yml: combine (mc#774 trackers + all-required needs cleanup) - test_a2a_offsec003_sanitization.py: delete (redundant per mc#62d38667)	2026-05-15 15:20:52 -07:00
core-devops	843092db7d	feat(e2e): stabilize Playwright chat tests for desktop + mobile ... Comprehensive Playwright E2E coverage for the unified chat stack. - chat-seed.ts: external workspace creation with psql bypass for loopback URLs, heartbeat keeper, platform_inbound_secret pre-seed, and DB cleanup - echo-runtime.ts: minimal A2A JSON-RPC server with workspace-side /internal/chat/uploads/ingest endpoint for file-attachment round-trips - panel load, send/receive echo, history persistence - file attachment round-trip (desktop + mobile) - composer auto-grow (mobile) - markdown rendering: code blocks and tables (desktop) - activity log visibility (desktop) - Extract shared hooks: useChatHistory, useChatSend, useChatSocket - MobileChat: add file attachments, markdown rendering, history context - ChatTab: migrate to shared hooks - data-testid: chat-panel, workspace-card, mobile-chat-cta - .gitea/workflows/e2e-chat.yml: ephemeral Postgres/Redis, workspace-server build, canvas dev server, Playwright run, artifact upload on failure	2026-05-15 14:20:04 -07:00
devops-engineer	02a37a360c	Merge pull request 'chore: promote #1121 (broadcast + talk-to-user abilities) to main' (#1224) from promote/1121-broadcast-talk-to-user-to-main into main	2026-05-15 19:52:03 +00:00
hongming-codex-laptop	5a05302cd6	fix(broadcast): OFFSEC-015 — scope recipients to sender's org ... Previously POST /workspaces/:id/broadcast collected every non-removed workspace in the database, allowing a workspace in Org-A to broadcast to every workspace in Org-B, Org-C, etc. Fix: walk parent_id chain with a recursive CTE to find the sender's org root, then filter recipients to workspaces sharing that root. Same isolation pattern as hotfix #1157 (staging) — port to this main-target PR so the cherry-pick doesn't ship the vulnerable original. Adds workspace_broadcast_test.go from #1157 with: - TestBroadcast_OrgScopedRecipients (cross-org isolation regression) - TestBroadcast_OrgScoped_OrgRootSender - TestBroadcast_OrgScoped_ChildWorkspaceSender - + NotFound / Disabled / EmptyOrg / InvalidID coverage Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-15 12:30:03 -07:00
hongming-codex-laptop	59b4f44224	fix(mcp): add broadcast_message dispatch arm to a2a_mcp_server ... test_dispatcher_schema_drift caught that broadcast_message was registered in platform_tools.registry but had no elif branch in handle_tool_call, so every MCP call would fall through to "Unknown tool". Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 12:03:08 -07:00
hongming-codex-laptop	ee55473812	test(e2e): workspace broadcast and talk-to-user abilities ... 20-assertion shell E2E covering the full abilities contract: - talk_to_user_enabled=true (default) → POST /notify succeeds - PATCH /abilities to disable → /notify returns 403 with error code and delegate_task hint; re-enabling restores delivery - broadcast_enabled=false (default) → POST /broadcast returns 403 - PATCH /abilities to enable → fan-out succeeds, delivered count >= 1 - Receiver activity log has broadcast_receive row (activity_type) with correct summary and source_id pointing at sender workspace - Sender activity log has broadcast_sent row; sender has no self-receive - Empty broadcast message returns 400 - Partial PATCH leaves unmentioned flags unchanged Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 12:03:08 -07:00
hongming-codex-laptop	29b4bffb13	feat(workspace): add broadcast and talk-to-user platform abilities ... Two new workspace-level ability flags (broadcast_enabled, talk_to_user_enabled) with full backend enforcement, MCP tool, and canvas UI: - Migration: adds broadcast_enabled (default false) and talk_to_user_enabled (default true) columns to workspaces table - PATCH /workspaces/:id/abilities (AdminAuth) toggles either flag independently - POST /workspaces/:id/broadcast (WorkspaceAuth) fans out a broadcast_receive activity_log entry + WS BROADCAST_MESSAGE event to all non-removed peers; requires broadcast_enabled=true on the sender - AgentMessageWriter checks talk_to_user_enabled; returns ErrTalkToUserDisabled which surfaces as HTTP 403 on /notify and the send_message_to_user MCP tool - broadcast_message MCP tool added to registry + a2a_tools_messaging.py - Canvas ChatTab shows "Agent is not enabled to chat with you" banner with Enable button when talkToUserEnabled=false on the workspace node Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 12:03:08 -07:00
devops-engineer	76609f4129	Merge pull request 'feat(workspace): broadcast and talk-to-user platform abilities' (#1121) from feat/workspace-abilities-broadcast-talk-to-user into staging	2026-05-15 07:42:19 +00:00
Molecule AI App-FE	5dc1e462de	fix(external-workspace): pin molecule-ai-workspace-runtime>=0.1.999 in OpenClaw snippet (#1143) ... fix(external-workspace): pin molecule-ai-workspace-runtime>=0.1.999 in OpenClaw snippet Ensures the molecule-mcp console script (heartbeat + register-on-startup) is present on install. Older versions only ship a2a_mcp_server which does not heartbeat, causing workspaces to go OFFLINE within 60s. Closes openclaw keepalive regression. Co-authored-by: Molecule AI App-FE <app-fe@agents.moleculesai.app> Co-committed-by: Molecule AI App-FE <app-fe@agents.moleculesai.app>	2026-05-15 07:35:57 +00:00
hongming-codex-laptop	8439a066b6	fix(mcp): add broadcast_message dispatch arm to a2a_mcp_server ... test_dispatcher_schema_drift caught that broadcast_message was registered in platform_tools.registry but had no elif branch in handle_tool_call, so every MCP call would fall through to "Unknown tool". Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 00:19:44 -07:00
hongming-codex-laptop	d7d376118d	test(e2e): workspace broadcast and talk-to-user abilities ... 20-assertion shell E2E covering the full abilities contract: - talk_to_user_enabled=true (default) → POST /notify succeeds - PATCH /abilities to disable → /notify returns 403 with error code and delegate_task hint; re-enabling restores delivery - broadcast_enabled=false (default) → POST /broadcast returns 403 - PATCH /abilities to enable → fan-out succeeds, delivered count >= 1 - Receiver activity log has broadcast_receive row (activity_type) with correct summary and source_id pointing at sender workspace - Sender activity log has broadcast_sent row; sender has no self-receive - Empty broadcast message returns 400 - Partial PATCH leaves unmentioned flags unchanged Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 00:19:44 -07:00
hongming-codex-laptop	026d1c5fae	feat(workspace): add broadcast and talk-to-user platform abilities ... Two new workspace-level ability flags (broadcast_enabled, talk_to_user_enabled) with full backend enforcement, MCP tool, and canvas UI: - Migration: adds broadcast_enabled (default false) and talk_to_user_enabled (default true) columns to workspaces table - PATCH /workspaces/:id/abilities (AdminAuth) toggles either flag independently - POST /workspaces/:id/broadcast (WorkspaceAuth) fans out a broadcast_receive activity_log entry + WS BROADCAST_MESSAGE event to all non-removed peers; requires broadcast_enabled=true on the sender - AgentMessageWriter checks talk_to_user_enabled; returns ErrTalkToUserDisabled which surfaces as HTTP 403 on /notify and the send_message_to_user MCP tool - broadcast_message MCP tool added to registry + a2a_tools_messaging.py - Canvas ChatTab shows "Agent is not enabled to chat with you" banner with Enable button when talkToUserEnabled=false on the workspace node Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 00:19:44 -07:00
devops-engineer	48ad38e795	Merge pull request 'feat(adapter-base): ProviderRegistry type + resolve_provider_routing utility' (#1138) from feat/provider-routing-base-v2 into staging	2026-05-15 06:52:15 +00:00
core-devops	4bdb10b5e2	feat(adapter-base): add ProviderRegistry type + resolve_provider_routing utility ... Adds a shared resolver that maps `provider:model` strings to (api_key, base_url, model_id). Each adapter defines its own registry; the base only provides the type alias and the routing mechanism. URL override precedence: <PREFIX>_BASE_URL env > runtime_config["provider_url"] > registry default. Unknown prefixes fall back to OpenAI credentials. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-14 23:02:09 -07:00
devops-engineer	ec96a8f600	Merge pull request 'fix(ci): throttle SOP refire workflow fan-out' (#1134) from fix/ci-sop-refire-concurrency into main	2026-05-15 05:57:38 +00:00
claude-ceo-assistant (Claude Opus 4.7 on Hongming's MacBook)	3198a3ee5d	fix(ci): throttle SOP refire workflow fan-out	2026-05-14 22:39:05 -07:00
devops-engineer	6452456f75	Merge pull request 'fix(ci): needs-based all-required sentinel (fixes #1083)' (#1096) from fix/ci-allrequired-needs-v2 into staging	2026-05-15 04:03:53 +00:00
core-devops	4978601032	fix(sop-checklist): update parse_directives return type to (directives, na_directives) ... Tests in test_sop_checklist.py expect parse_directives to return a 2-tuple (directives, na_directives) for forward-compatible N/A directive handling. Update the return type and fix the internal call site to match. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-14 20:29:45 -07:00
core-devops	ec3e27a4ec	fix(ci): needs-based all-required sentinel + remove needs:changes from build jobs (fixes #1083) ... - platform-build: drop `needs: changes`; change per-step `if:` conditions from `needs.changes.outputs.platform == 'true'` to `if: always()` and the skip step from `!= 'true'` to `if: false`. Platform always builds; `changes` output was only needed when the job was conditionally skipped. - canvas-build: same as platform-build; also add `timeout-minutes: 20` to cap runaway Next.js builds. - fix(lint): apply De Morgan's law in TestRenderCategoryRoutingYAML_StableOrdering Staticcheck QF1001: !(ai < mi && mi < zi) → ai >= mi || mi >= zi. Rebased on staging 4cc0e32a. All-required sentinel already present in staging HEAD (Python toJSON approach from prior commit); this commit completes the remaining changes from mc#1096. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-14 20:10:51 -07:00
hongming-codex-laptop	85b93feacc	ci: prevent advisory workflow timeout flakes	2026-05-14 20:00:19 -07:00
hongming-codex-laptop	da2fefa398	ci: harden scheduled gate check against list timeouts	2026-05-14 19:31:31 -07:00
hongming-codex-laptop	8f4c00ba05	ci: rearm after runner disk gc	2026-05-14 19:06:22 -07:00
hongming-codex-laptop	106baadf2b	ci: fix platform staticcheck lint	2026-05-14 18:12:21 -07:00
hongming-codex-laptop	6b80dca1f4	fix: preserve Claude Code provider registry in generated configs	2026-05-14 17:33:22 -07:00
devops-engineer	4cc0e32a53	Merge pull request 'fix(staging): wire OFFSEC-010 CP config + CWE-78 rows.Err fixes' (#1078) from fix/staging-offsec010-cp-wiring into staging	2026-05-15 00:05:36 +00:00
hongming-codex-laptop	2f5b145c58	ci: rerun core pipeline after runner recovery	2026-05-14 16:40:30 -07:00
hongming-codex-laptop	420ac2f00d	ci: update instructions handler test expectations	2026-05-14 16:25:55 -07:00
Molecule AI Core-BE	e9693e12ff	fix(handlers): add rows.Err() checks across approvals, tokens, instructions ... Standard CWE-78 pattern (same class as CWE-78-rows-err hotfix #1071): iterating over sql.Rows without checking rows.Err() after the loop silently ignores connection errors. Add the deferred Err() check to: - approvals.go: ListPendingApprovals (GET /approvals) - approvals.go: List (GET /workspaces/:id/approvals) - tokens.go: List (GET /workspaces/:id/tokens) - instructions.go: Resolve handler (GET /workspaces/:id/instructions/resolve) - instructions.go: scanInstructions helper (used by List handler) 🤖 Generated with [Claude Code](https://claude.com/claude-code)	2026-05-14 23:22:18 +00:00
Molecule AI Core-BE	bcca139caa	fix(handlers): add rows.Err() checks to loadWorkspaceSecrets ... loadWorkspaceSecrets() iterates over global_secrets and workspace_secrets rows without checking rows.Err() after the loop. If the connection is interrupted mid-iteration, the error is silently ignored. Add the standard deferred Err() check (pattern from secrets.go, org_helpers.go) to both loops. 🤖 Generated with [Claude Code](https://claude.com/claude-code)	2026-05-14 23:18:12 +00:00
Molecule AI Core-BE	6cf6e608d8	fix(staging): add isCPTemplateConfigFile filter to collectCPConfigFiles ... Cherry-picks the filter from main commit 8fced202: only transport config.yaml and files under prompts/ from the template directory to the control plane. Arbitrary template files (adapter.py, Dockerfile, etc.) are now excluded regardless of size, reducing the transport surface. Also adds a test case verifying adapter.py is excluded even when within the size limit. 🤖 Generated with [Claude Code](https://claude.com/claude-code)	2026-05-14 23:18:12 +00:00
Molecule AI Core-BE	6947774e1b	fix(staging): wire collectCPConfigFiles into CPProvisioner.Start ... collectCPConfigFiles was added in PR #1075 (OFFSEC-010) but never called — the symlink guards were dead code. This patch wires the function into CPProvisioner.Start so the guards actually protect the CP request path. Changes: 1. cpProvisionRequest gains ConfigFiles map[string]string field (base64-encoded, same shape as Docker provisioner's WriteFilesToContainer) 2. Start calls collectCPConfigFiles(cfg) before building the request; errors propagate as hard failures (a workspace without its config files is not usable) 3. Two new tests: - TestStart_CollectsConfigFiles: verifies TemplatePath files AND ConfigFiles map appear in the CP request body, base64-encoded - TestStart_SymlinkTemplatePathError: verifies a symlink TemplatePath causes Start to fail, exercising the OFFSEC-010 root-symlink guard Without this wiring, a malicious operator could bypass the WalkDir symlink guards by passing TemplatePath as a symlink to the CP. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 23:18:12 +00:00
Molecule AI Core-DevOps	9afecfdfc7	Resolve conflict: keep OFFSEC-010 collectCPConfigFiles with ce542cb26 nil-return fix	2026-05-14 23:18:12 +00:00
devops-engineer	220ee57d0c	Merge pull request 'fix(staging): restore goAsync tracking in 5 dispatch calls + move config seeding pre-Start' (#1076) from fix/staging-goasync-configseed into staging ... Merge pull request #1076: fix(staging): restore goAsync tracking + config seeding order	2026-05-14 23:15:19 +00:00
Molecule AI Core-BE	2751861b04	fix(staging): add goAsync method + asyncWG field to WorkspaceHandler ... Cherry-picks the goAsync definition from main commit 1c3b4ff3 so that PR #1076's 5 goAsync(...) call sites compile on staging. core-devops correctly identified that h.goAsync was called at 5 sites but never defined on the staging branch. Without this, the build fails. fixes #1076 review feedback Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 22:37:56 +00:00
Molecule merge queue	8fced20267	fix: limit CP template config transport	2026-05-14 15:37:44 -07:00
Molecule merge queue	7b3e3fc189	ci: fix handlers instruction test compile	2026-05-14 15:25:09 -07:00
Molecule merge queue	51a0fd2688	Merge pull request #1047 from molecule-ai/fix/saas-t4-cp-config-seed ... # Conflicts: # .gitea/ci-refire # workspace-server/internal/provisioner/cp_provisioner.go	2026-05-14 15:00:11 -07:00
Molecule AI Infra Lead	d4bf57392e	chore: second CI retrigger attempt ... Refs: mc#1047 CI hang - second push	2026-05-14 21:47:39 +00:00
devops-engineer	369578e96a	Merge pull request 'fix(provisioner): skip symlinks in collectCPConfigFiles WalkDir (OFFSEC-010)' (#1075) from fix/offsec-010-clean into main	2026-05-14 21:36:33 +00:00
Molecule AI Core-DevOps	5888238147	Resolve conflict: keep OFFSEC-010 collectCPConfigFiles with ce542cb26 nil-return fix	2026-05-14 21:34:00 +00:00
Molecule AI Infra Lead	c704e96117	chore: retrigger CI pipeline — all-required aggregator stalled ... Retry trigger per infra-lead investigation. Refs: mc#1047 CI hang	2026-05-14 21:33:15 +00:00