chore(ci): document #192 root cause — workspace-template repos public per OSS-first #133

Merged

claude-ceo-assistant merged 2 commits from chore/192-retrigger-harness-replays-after-public-flip into main 2026-05-08 19:12:54 +00:00

Conversation 0 Commits 2 Files Changed 3 +26 -19

claude-ceo-assistant commented 2026-05-08 18:51:11 +00:00

Owner

Copy Link

Closes #192. Doc-only touch on harness-replays.yml to (a) inline the root-cause narrative, (b) trigger fresh CI to verify Harness Replays now clones successfully after flipping the 5 private workspace-template repos to public. See commit message for full context. Filed Layer-3 RFC at internal#102 for customer-private + marketplace cases.

Closes #192. Doc-only touch on harness-replays.yml to (a) inline the root-cause narrative, (b) trigger fresh CI to verify Harness Replays now clones successfully after flipping the 5 private workspace-template repos to public. See commit message for full context. Filed Layer-3 RFC at internal#102 for customer-private + marketplace cases.

claude-ceo-assistant added 1 commit 2026-05-08 18:51:11 +00:00

chore(ci): document #192 root cause — workspace-template repos public per OSS-first ... 558e4fee48

5 of 9 workspace-template repos (openclaw, codex, crewai, deepagents,
gemini-cli) had been marked private with no team grant for AUTO_SYNC_TOKEN
bearer (devops-engineer persona). Pre-clone manifest deps step 404'd on
the first private repo encountered, failing every Harness Replays run.

Resolution path taken:
1. Flipped the 5 to public per `feedback_oss_first_repo_visibility_default`
   — runtime/template/plugin repos default public; that's what makes them
   OSS surface.
2. Scoped existing `ci-readonly` org team to legitimately-internal repos
   only (compliance docs, RFCs-in-flight). Workspace templates removed
   from it.
3. Filed internal#102 RFC for Layer-3 (customer-owned + marketplace
   third-party private repos) — that's a different shape entirely;
   needs per-tenant credential-resolver, not org-team grants.

This commit is a documentation-only touch on the workflow file to (a)
record the root cause inline next to the existing pre-clone-fail
narrative, (b) trigger a fresh Harness Replays run that should now pass
the clone step.

Closes #192.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

claude-ceo-assistant scheduled this pull request to auto merge when all checks succeed 2026-05-08 18:51:12 +00:00

hongming added 1 commit 2026-05-08 18:58:12 +00:00

chore(manifest): drop reno-stars + 5 org-templates flipped public; document OSS-surface contract ... 15935143c8

Follow-up to the workspace-template visibility flip in 558e4fee. After
flipping the 5 private workspace-templates public (#192 root cause),
the harness-replays clone moved one step deeper to the org-templates
list, where 6 of 7 were also private. Hongming-confirmed flip plan:

- 5 of 6 (molecule-dev, free-beats-all, medo-smoke, molecule-worker-gemini,
  ux-ab-lab) — flipped public per `feedback_oss_first_repo_visibility_default`.
  These are unambiguously OSS-template-shape: generic README, no
  customer-shaped names, no creds in content.
- 1 of 6 (reno-stars) — name itself is customer-shaped (would expose
  customer/tenant identity). Kept private; removed from manifest.json
  per Hongming. Will be handled at provision-time via the per-tenant
  credential resolver designed in internal#102 (Layer-3 RFC).

Documents the OSS-surface contract in two places:
- manifest.json _comment: every entry MUST be public; Layer-3 lives elsewhere
- clone-manifest.sh comment block: rationale + the explicit ci-readonly
  team-grant escape hatch (review-gated, not default).

Closes the second clone-fail layer of #192. Combined with 558e4fee +
the workspace-template visibility flips, the Pre-clone manifest deps
step should now succeed anonymously for the full registered set.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

claude-ceo-assistant merged commit 2fa79ea462 into main 2026-05-08 19:12:54 +00:00

claude-ceo-assistant deleted branch chore/192-retrigger-harness-replays-after-public-flip 2026-05-08 19:12:54 +00:00

claude-ceo-assistant referenced this issue from a commit 2026-05-08 19:12:56 +00:00

Merge pull request 'chore(ci): document #192 root cause — workspace-template repos public per OSS-first' (#133) from chore/192-retrigger-harness-replays-after-public-flip into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

tier:high

High risk per dev-sop §SOP-6 — ceo only, 24h cooldown

  

tier:low

Low risk per dev-sop §SOP-6 — engineers/managers/ceo can approve

  

tier:medium

Medium risk per dev-sop §SOP-6 — managers/ceo can approve

No Label

tier:high

tier:low

tier:medium

Milestone

Clear milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

No Assignees

2 Participants

Notifications

Subscribe

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: molecule-ai/molecule-core#133

No description provided.