fix(provisioner): skip symlinks in collectCPConfigFiles WalkDir (OFFSEC-010) #1074

Closed

core-devops wants to merge 51 commits from fix/offsec-010-clean into staging

Author	SHA1	Message	Date
Molecule AI Core-DevOps	69d5eb4cd2	Resolve conflict: keep OFFSEC-010 collectCPConfigFiles with `ce542cb26` nil-return fix Some checks failed lint-mask-pr-atomicity / lint-mask-pr-atomicity (pull_request) Successful in 1m57s Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 2m0s Details Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 20s Details Ops Scripts Tests / Ops scripts (unittest) (pull_request) Successful in 1m24s Details E2E Staging SaaS (full lifecycle) / E2E Staging SaaS (pull_request) Has been skipped Details CI / Detect changes (pull_request) Successful in 34s Details Harness Replays / detect-changes (pull_request) Successful in 15s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 36s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 33s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 12s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 26s Details qa-review / approved (pull_request) Successful in 13s Details security-review / approved (pull_request) Successful in 12s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 22s Details E2E Staging SaaS (full lifecycle) / pr-validate (pull_request) Successful in 48s Details audit-force-merge / audit (pull_request) Has been skipped Details sop-checklist / all-items-acked (pull_request) Successful in 11s Details sop-tier-check / tier-check (pull_request) Successful in 12s Details gate-check-v3 / gate-check (pull_request) Failing after 14s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m8s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 9s Details Harness Replays / Harness Replays (pull_request) Successful in 8s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 13s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 18s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 6m33s Details CI / Platform (Go) (pull_request) Failing after 2m28s Details CI / Canvas (Next.js) (pull_request) Failing after 8m43s Details CI / Python Lint & Test (pull_request) Failing after 6m36s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 2m56s Details	2026-05-14 21:18:13 +00:00
devops-engineer	1df0e378b6	Merge pull request 'fix(workspace): OFFSEC-003 — escaped boundary markers + closer truncation (main)' (#1073 ) from fix/offsec-003-escaped-markers-main into main Some checks failed Block internal-flavored paths / Block forbidden paths (push) Waiting to run Details CI / Detect changes (push) Waiting to run Details CI / Platform (Go) (push) Blocked by required conditions Details CI / Canvas (Next.js) (push) Blocked by required conditions Details CI / Shellcheck (E2E scripts) (push) Blocked by required conditions Details CI / Canvas Deploy Reminder (push) Blocked by required conditions Details CI / Python Lint & Test (push) Blocked by required conditions Details CI / all-required (push) Blocked by required conditions Details E2E API Smoke Test / detect-changes (push) Waiting to run Details E2E API Smoke Test / E2E API Smoke Test (push) Blocked by required conditions Details E2E Staging Canvas (Playwright) / detect-changes (push) Waiting to run Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Blocked by required conditions Details Handlers Postgres Integration / detect-changes (push) Waiting to run Details Handlers Postgres Integration / Handlers Postgres Integration (push) Blocked by required conditions Details publish-workspace-server-image / build-and-push (push) Waiting to run Details publish-workspace-server-image / Production auto-deploy (push) Blocked by required conditions Details Runtime PR-Built Compatibility / detect-changes (push) Waiting to run Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Blocked by required conditions Details Secret scan / Scan diff for credential-shaped strings (push) Waiting to run Details publish-runtime-autobump / pr-validate (push) Successful in 46s Details publish-runtime-autobump / bump-and-tag (push) Failing after 44s Details	2026-05-14 21:17:38 +00:00
Molecule AI Core-QA	25866ec200	fix(workspace/OFFSEC-003): correct boundary wrapping + add closer truncation Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 19s Details CI / Detect changes (pull_request) Successful in 1m17s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 1m20s Details publish-runtime-autobump / bump-and-tag (pull_request) Has been skipped Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 1m18s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 1m2s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 18s Details qa-review / approved (pull_request) Failing after 19s Details sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details security-review / approved (pull_request) Failing after 20s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 37s Details publish-runtime-autobump / pr-validate (pull_request) Successful in 55s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m31s Details sop-checklist / all-items-acked (pull_request) Successful in 27s Details sop-tier-check / tier-check (pull_request) Successful in 29s Details CI / Platform (Go) (pull_request) Successful in 9s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 10s Details CI / all-required (pull_request) Blocked by required conditions Details CI / Canvas (Next.js) (pull_request) Successful in 15s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 18s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 19s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 9s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 3m7s Details audit-force-merge / audit (pull_request) Successful in 18s Details gate-check-v3 / gate-check (pull_request) Failing after 13m24s Details CI / Python Lint & Test (pull_request) Successful in 7m31s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details Two bugs fixed in tool_delegate_task wrapping logic: 1. Wrapping used raw _A2A_BOUNDARY_START/_END markers, which appeared in the output alongside the escaped form of the peer content (e.g. "[A2A_RESULT_FROM_PEER]\n[/ A2A_RESULT...]"). Fixed: wrap with _A2A_BOUNDARY_START_ESCAPED/_END_ESCAPED so the output contains no raw closer that could confuse downstream parsers. 2. A malicious peer could inject a fake closer ([/A2A_RESULT_FROM_PEER]) to make legitimate content appear truncated. Fixed: truncate at the raw closer BEFORE sanitization (truncation loses the raw form, so escaping afterward cannot retroactively remove it). Also fixes 10 regressions in test_a2a_offsec003_sanitization.py: tests were written expecting ZWSP (U+200B) escaping but implementation uses "[/ " prefix. Updated test invariants to match actual behavior. Also fixed 5 tests using [A2A_ERROR] in summary fields (not a boundary marker — no escaping applied) and updated test assertions in test_a2a_tools_impl.py and test_delegation_sync_via_polling.py to expect escaped wrapper forms. Cherry-picked fix/test-stdio-function-name (`e478b5b2`) from main: renamed _warn_if_stdio_not_pipe → _assert_stdio_is_pipe_compatible and added deprecated alias, fixing dangling monkeypatch targets that caused 5 test failures (issue #957). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 21:01:34 +00:00
devops-engineer	c1d23380b6	Merge pull request 'fix(canvas): load chat history in MobileChat' (#1062 ) from fix/mobile-chat-history into main Some checks failed CI / Platform (Go) (push) Blocked by required conditions Details CI / Canvas (Next.js) (push) Blocked by required conditions Details CI / Shellcheck (E2E scripts) (push) Blocked by required conditions Details CI / Canvas Deploy Reminder (push) Blocked by required conditions Details CI / Python Lint & Test (push) Blocked by required conditions Details CI / all-required (push) Blocked by required conditions Details E2E API Smoke Test / E2E API Smoke Test (push) Blocked by required conditions Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Blocked by required conditions Details Handlers Postgres Integration / Handlers Postgres Integration (push) Blocked by required conditions Details publish-workspace-server-image / Production auto-deploy (push) Blocked by required conditions Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Blocked by required conditions Details Block internal-flavored paths / Block forbidden paths (push) Successful in 24s Details Harness Replays / detect-changes (push) Successful in 22s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 22s Details E2E API Smoke Test / detect-changes (push) Successful in 1m28s Details CI / Detect changes (push) Successful in 1m33s Details Handlers Postgres Integration / detect-changes (push) Successful in 1m30s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 1m34s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 1m29s Details publish-canvas-image / Build & push canvas image (push) Successful in 7m21s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 47s Details publish-workspace-server-image / build-and-push (push) Failing after 12m16s Details Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Successful in 5m7s Details Harness Replays / Harness Replays (push) Successful in 14s Details gate-check-v3 / gate-check (push) Successful in 1m49s Details Sweep stale Cloudflare DNS records / Sweep CF orphans (push) Successful in 27s Details ci-required-drift / drift (push) Successful in 1m38s Details main-red-watchdog / watchdog (push) Compensated by status-reaper (workflow has no push: trigger; Gitea 1.22.6 hardcoded-suffix bug — see .gitea/scripts/status-reaper.py) Details	2026-05-14 20:53:21 +00:00
hongming	679ed9a697	Merge branch 'main' into fix/mobile-chat-history Some checks are pending sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 30s Details Harness Replays / detect-changes (pull_request) Successful in 16s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 20s Details CI / Detect changes (pull_request) Successful in 1m3s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 59s Details qa-review / approved (pull_request) Successful in 19s Details CI / all-required (pull_request) Blocked by required conditions Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 1m3s Details security-review / approved (pull_request) Successful in 19s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 1m0s Details gate-check-v3 / gate-check (pull_request) Successful in 40s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 44s Details sop-checklist / all-items-acked (pull_request) Successful in 16s Details sop-tier-check / tier-check (pull_request) Successful in 17s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m22s Details audit-force-merge / audit (pull_request) Successful in 35s Details Harness Replays / Harness Replays (pull_request) Successful in 12s Details CI / Platform (Go) (pull_request) Successful in 6s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 8s Details CI / Python Lint & Test (pull_request) Successful in 9s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 17s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 18s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 22s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 9m2s Details CI / Canvas (Next.js) (pull_request) Successful in 15m54s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details	2026-05-14 20:51:35 +00:00
devops-engineer	785112955f	Merge pull request 'fix(workspace): rename _warn_if_stdio_not_pipe → _assert_stdio_is_pipe_compatible' (#1063 ) from fix/stdio-v2 into main Some checks failed Block internal-flavored paths / Block forbidden paths (push) Waiting to run Details CI / Detect changes (push) Waiting to run Details CI / Platform (Go) (push) Blocked by required conditions Details CI / Canvas (Next.js) (push) Blocked by required conditions Details CI / Shellcheck (E2E scripts) (push) Blocked by required conditions Details CI / Canvas Deploy Reminder (push) Blocked by required conditions Details CI / Python Lint & Test (push) Blocked by required conditions Details CI / all-required (push) Blocked by required conditions Details E2E API Smoke Test / detect-changes (push) Waiting to run Details E2E API Smoke Test / E2E API Smoke Test (push) Blocked by required conditions Details E2E Staging Canvas (Playwright) / detect-changes (push) Waiting to run Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Blocked by required conditions Details Handlers Postgres Integration / detect-changes (push) Waiting to run Details Handlers Postgres Integration / Handlers Postgres Integration (push) Blocked by required conditions Details publish-workspace-server-image / build-and-push (push) Waiting to run Details publish-workspace-server-image / Production auto-deploy (push) Blocked by required conditions Details Runtime PR-Built Compatibility / detect-changes (push) Waiting to run Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Blocked by required conditions Details Secret scan / Scan diff for credential-shaped strings (push) Waiting to run Details publish-runtime-autobump / pr-validate (push) Successful in 59s Details publish-runtime-autobump / bump-and-tag (push) Failing after 1m12s Details MCP Stdio Transport Regression / MCP stdio with regular-file stdout (push) Successful in 1m38s Details	2026-05-14 20:50:43 +00:00
hongming	af90c80e52	Merge branch 'main' into fix/mobile-chat-history Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 17s Details CI / Detect changes (pull_request) Successful in 24s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 19s Details Harness Replays / detect-changes (pull_request) Successful in 20s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 33s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 29s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 9s Details gate-check-v3 / gate-check (pull_request) Successful in 10s Details qa-review / approved (pull_request) Failing after 10s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 13s Details security-review / approved (pull_request) Failing after 7s Details sop-checklist / all-items-acked (pull_request) Successful in 7s Details sop-tier-check / tier-check (pull_request) Successful in 7s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m16s Details CI / Platform (Go) (pull_request) Successful in 15s Details CI / Python Lint & Test (pull_request) Successful in 13s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 14s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 15s Details Harness Replays / Harness Replays (pull_request) Successful in 9s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 14s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 14s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 8m30s Details CI / Canvas (Next.js) (pull_request) Successful in 17m43s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details CI / all-required (pull_request) Successful in 21s Details	2026-05-14 20:41:29 +00:00
Molecule AI Core-DevOps	e51f7004b3	fix(workspace): rename _warn_if_stdio_not_pipe → _assert_stdio_is_pipe_compatible Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 21s Details publish-runtime-autobump / bump-and-tag (pull_request) Has been skipped Details CI / Detect changes (pull_request) Successful in 1m12s Details publish-runtime-autobump / pr-validate (pull_request) Successful in 57s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 1m16s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 1m20s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 1m16s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 23s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m24s Details MCP Stdio Transport Regression / MCP stdio with regular-file stdout (pull_request) Successful in 1m39s Details qa-review / approved (pull_request) Failing after 23s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 49s Details security-review / approved (pull_request) Failing after 21s Details CI / Platform (Go) (pull_request) Successful in 6s Details CI / Canvas (Next.js) (pull_request) Successful in 9s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 6s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 10s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 11s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 7s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 2m21s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details CI / Python Lint & Test (pull_request) Successful in 7m6s Details CI / all-required (pull_request) Successful in 5s Details sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details sop-checklist / all-items-acked (pull_request) Successful in 20s Details gate-check-v3 / gate-check (pull_request) Successful in 22s Details sop-tier-check / tier-check (pull_request) Successful in 23s Details audit-force-merge / audit (pull_request) Successful in 23s Details Rename the canonical function to `_assert_stdio_is_pipe_compatible` with a deprecated alias `_warn_if_stdio_not_pipe` for backward compat. Updates all 5 test import sites. Fixes dangling monkeypatch targets in test_a2a_mcp_server_http.py (which patches `_assert_stdio_is_pipe_compatible`; main's source defined the old name, causing patches to silently no-op). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 20:05:56 +00:00
devops-engineer	8868cbe1a4	Merge pull request 'fix(ci): kill stale platform-server before binding port' (#1048 ) from sre/fix-stale-platform-server-port into main Some checks failed Secret scan / Scan diff for credential-shaped strings (push) Successful in 14s Details CI / Detect changes (push) Successful in 36s Details E2E API Smoke Test / detect-changes (push) Successful in 37s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 42s Details Handlers Postgres Integration / detect-changes (push) Successful in 42s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 36s Details CI / Platform (Go) (push) Successful in 9s Details CI / Canvas (Next.js) (push) Successful in 9s Details CI / Shellcheck (E2E scripts) (push) Successful in 9s Details CI / Python Lint & Test (push) Successful in 9s Details CI / Canvas Deploy Reminder (push) Successful in 5s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 8s Details CI / all-required (push) Successful in 13s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (push) Successful in 1m36s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (push) Successful in 1m49s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 1m48s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 2m23s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Successful in 4m5s Details publish-workspace-server-image / build-and-push (push) Successful in 8m26s Details main-red-watchdog / watchdog (push) Successful in 53s Details gitea-merge-queue / queue (push) Successful in 20s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 2m7s Details gate-check-v3 / gate-check (push) Successful in 2m34s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Has started running Details Sweep stale Cloudflare DNS records / Sweep CF orphans (push) Successful in 23s Details status-reaper / reap (push) Has started running Details Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Successful in 5m25s Details Sweep stale Cloudflare Tunnels / Sweep CF tunnels (push) Successful in 5s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 15s Details ci-required-drift / drift (push) Compensated by status-reaper (workflow has no push: trigger; Gitea 1.22.6 hardcoded-suffix bug — see .gitea/scripts/status-reaper.py) Details fix(ci): kill stale platform-server before binding port Kills zombie platform-server processes left by cancelled/timeout runs before binding :8080. Auto-merged by orchestrator. tier:low, required checks green, core-devops APPROVED.	2026-05-14 19:58:53 +00:00
core-be	0cf2fa6297	fix(canvas): load chat history in MobileChat Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 18s Details Harness Replays / detect-changes (pull_request) Successful in 17s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 14s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 53s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 52s Details CI / Detect changes (pull_request) Successful in 55s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 51s Details qa-review / approved (pull_request) Failing after 12s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 33s Details security-review / approved (pull_request) Failing after 16s Details Harness Replays / Harness Replays (pull_request) Successful in 4s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 4s Details CI / Platform (Go) (pull_request) Successful in 5s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 7s Details CI / Python Lint & Test (pull_request) Successful in 8s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 6s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m18s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 7s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 7m41s Details CI / Canvas (Next.js) (pull_request) Successful in 11m7s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details CI / all-required (pull_request) Successful in 4s Details sop-tier-check / tier-check (pull_request) Successful in 25s Details gate-check-v3 / gate-check (pull_request) Successful in 30s Details sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details sop-checklist / all-items-acked (pull_request) Compensating — DB/action_run confirms success; emitter/concurrency-cancel artefact MobileChat previously only read from the canvas store's agentMessages buffer, which is populated by desktop ChatTab (never runs on mobile) and live WebSocket events (only new messages). This meant opening chat on a phone / WebView showed an empty 'Send a message to start chatting' state even when history existed. - Load history via GET /workspaces/{id}/chat-history?limit=50 on mount - Consume live agentMessages from the store while the panel is open - Show loading spinner while fetching and surface errors - Update tests to mock api.get and consumeAgentMessages	2026-05-14 12:52:42 -07:00
hongming	39f2dd99aa	ci: refire (fix gate-check: review 3237 dismissed, sop-n/a security-review added) Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 25s Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 16s Details CI / Detect changes (pull_request) Successful in 1m0s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 1m1s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 58s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 1m1s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 22s Details qa-review / approved (pull_request) Failing after 23s Details security-review / approved (pull_request) Failing after 22s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 49s Details sop-tier-check / tier-check (pull_request) Successful in 18s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m20s Details CI / Platform (Go) (pull_request) Successful in 9s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 1m57s Details CI / Canvas (Next.js) (pull_request) Successful in 10s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 8s Details CI / Python Lint & Test (pull_request) Successful in 7s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m42s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 12s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 11s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 10s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 2m7s Details CI / all-required (pull_request) Successful in 5s Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 2m18s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 1m52s Details sop-checklist / na-declarations (pull_request) N/A: qa-review, security-review Details gate-check-v3 / gate-check (pull_request) Successful in 43s Details sop-checklist / all-items-acked (pull_request) Successful in 36s Details audit-force-merge / audit (pull_request) Successful in 9s Details	2026-05-14 18:46:10 +00:00
hongming	51f5aa82ee	ci: refire CI run Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 21s Details CI / Detect changes (pull_request) Successful in 45s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 36s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 33s Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 14s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 32s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 16s Details gate-check-v3 / gate-check (pull_request) Failing after 35s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 43s Details qa-review / approved (pull_request) Failing after 28s Details security-review / approved (pull_request) Failing after 19s Details sop-checklist / na-declarations (pull_request) N/A: qa-review Details sop-checklist / all-items-acked (pull_request) Successful in 23s Details sop-tier-check / tier-check (pull_request) Successful in 18s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m23s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m43s Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 1m59s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 2m20s Details CI / Platform (Go) (pull_request) Successful in 8s Details CI / Canvas (Next.js) (pull_request) Successful in 7s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 6s Details CI / Python Lint & Test (pull_request) Successful in 11s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 13s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 17s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 13s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details CI / all-required (pull_request) Successful in 7s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 1m44s Details	2026-05-14 18:30:29 +00:00
Molecule AI Infra-SRE	15c058071a	chore: trigger fresh CI run to clear stale statuses Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 19s Details CI / Detect changes (pull_request) Successful in 1m10s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 1m2s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 1m1s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 59s Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 15s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 15s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 30s Details gate-check-v3 / gate-check (pull_request) Failing after 16s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m19s Details qa-review / approved (pull_request) Failing after 15s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 2m7s Details security-review / approved (pull_request) Failing after 17s Details Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 1m57s Details sop-checklist / na-declarations (pull_request) N/A: qa-review Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m34s Details sop-checklist / all-items-acked (pull_request) Successful in 26s Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 2m8s Details sop-tier-check / tier-check (pull_request) Successful in 23s Details CI / Platform (Go) (pull_request) Successful in 9s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 8s Details CI / Canvas (Next.js) (pull_request) Successful in 9s Details CI / Python Lint & Test (pull_request) Successful in 7s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 7s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 9s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 11s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 1m58s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details CI / all-required (pull_request) Successful in 3s Details	2026-05-14 18:15:15 +00:00
Molecule AI Infra-SRE	c7ffa43166	fix(ci): kill stale platform-server before binding port Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 14s Details CI / Detect changes (pull_request) Successful in 35s Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 18s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 44s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 48s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 56s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 19s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 56s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m19s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m43s Details Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 1m55s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 2m25s Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 2m16s Details sop-checklist / na-declarations (pull_request) N/A: qa-review Details security-review / approved (pull_request) Failing after 52s Details sop-checklist / all-items-acked (pull_request) Successful in 48s Details gate-check-v3 / gate-check (pull_request) Failing after 1m7s Details qa-review / approved (pull_request) Failing after 1m0s Details sop-tier-check / tier-check (pull_request) Successful in 40s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 9s Details CI / Platform (Go) (pull_request) Successful in 11s Details CI / Canvas (Next.js) (pull_request) Successful in 11s Details CI / Python Lint & Test (pull_request) Successful in 9s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 12s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 13s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 10s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 2m1s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details CI / all-required (pull_request) Successful in 5s Details Cancelling or timing out a workflow run leaves the platform-server process alive — the "Stop platform" step is skipped. The next run's ephemeral port probe (socket.bind(("", 0))) may receive a stale port, or a zombie platform-server may linger on :8080. Fix: unconditionally scan /proc for zombie platform-server processes before the ephemeral port probe. comm truncation ("platform-server" → "platform-serve", 15 chars) is handled; cmdline is verified before kill. Uses only shell builtins + grep + kill — available on any Ubuntu runner. Refs: internal#374, issue #1046 ## Comprehensive testing performed <!-- comprehensive-testing -->CI: Lint workflow YAML (Gitea-1.22.6-hostile shapes) ✅, sop-tier-check ✅, Block internal-flavored paths ✅. YAML validated with python3 yaml.safe_load before commit. ## Local-postgres E2E run <!-- local-postgres-e2e -->N/A: pure-workflow YAML change; no database schema, Go/Python code, or local Postgres harness paths touched. ## Staging-smoke verified or pending <!-- staging-smoke -->scheduled post-merge canary; no server-side changes. ## Root-cause not symptom <!-- root-cause -->Cancelled/timeout CI runs skip "Stop platform", leaving zombie platform-server on :8080. Ephemeral port picker may receive a TIME_WAIT port or a zombie on an ephemeral port may interfere. ## Five-Axis review walked <!-- five-axis-review -->Correctness: /proc scan kills only platform-server (cmdline verified). Readability: self-contained with inline comments. Architecture: no server code change. Security: read-only scan, kill only exact binary match. Performance: O(n_procs), negligible. ## No backwards-compat shim / dead code added <!-- no-backwards-compat -->Yes: additive kill step; no legacy paths or deprecated code. ## Memory/saved-feedback consulted <!-- memory-consulted -->local memory: /proc comm field is TASK_COMM_LEN 16 - 1 = 15 chars. "platform-server" (16) → "platform-serve" (15). Must grep truncated form, verify with cmdline. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 17:52:42 +00:00
Molecule AI Infra-SRE	9b445366f6	fix(ci): kill stale platform-server before binding port Cancelling or timing out a workflow run leaves the platform-server process alive — the "Stop platform" step is skipped. The next run's ephemeral port probe (socket.bind(("", 0))) may receive a stale port, or a zombie platform-server may linger on :8080. Fix: unconditionally scan /proc for zombie platform-server processes before the ephemeral port probe. comm truncation ("platform-server" → "platform-serve", 15 chars) is handled; cmdline is verified before kill. Uses only shell builtins + grep + kill — available on any Ubuntu runner. Refs: internal#374, issue #1046 ## Comprehensive testing performed <!-- comprehensive-testing -->CI: Lint workflow YAML (Gitea-1.22.6-hostile shapes) ✅, sop-tier-check ✅, Block internal-flavored paths ✅. YAML validated with python3 yaml.safe_load before commit. ## Local-postgres E2E run <!-- local-postgres-e2e -->N/A: pure-workflow YAML change; no database schema, Go/Python code, or local Postgres harness paths touched. ## Staging-smoke verified or pending <!-- staging-smoke -->scheduled post-merge canary; no server-side changes. ## Root-cause not symptom <!-- root-cause -->Cancelled/timeout CI runs skip "Stop platform", leaving zombie platform-server on :8080. Ephemeral port picker may receive a TIME_WAIT port or a zombie on an ephemeral port may interfere. ## Five-Axis review walked <!-- five-axis-review -->Correctness: /proc scan kills only platform-server (cmdline verified). Readability: self-contained with inline comments. Architecture: no server code change. Security: read-only scan, kill only exact binary match. Performance: O(n_procs), negligible. ## No backwards-compat shim / dead code added <!-- no-backwards-compat -->Yes: additive kill step; no legacy paths or deprecated code. ## Memory/saved-feedback consulted <!-- memory-consulted -->local memory: /proc comm field is capped at 15 chars ( TASK_COMM_LEN 16 - 1). "platform-server" (16) → "platform-serve" (15). Must grep truncated form, verify with cmdline. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 17:52:42 +00:00
Molecule AI Infra-SRE	3fadf89e43	fix(ci): kill stale platform-server before binding port Cancelling or timing out a workflow run leaves the platform-server process alive — the "Stop platform" step (line 335) is skipped. If the stale process is still on an ephemeral port, the next run's socket.bind(("", 0)) can receive a port still in TIME_WAIT, or the stale process may interfere with the /health probe. Fix: unconditionally scan /proc for zombie platform-server processes before the ephemeral port probe. Only kills processes whose cmdline contains "platform-server" (safe — ignores other Go binaries). Uses only shell builtins + grep + kill — available on any Ubuntu runner. The /proc comm field is truncated to 15 chars, so the binary named "platform-server" appears as "platform-serve" in /proc/*/comm. cmdline is verified before kill to avoid false positives. Refs: internal#374, issue #1046 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 17:52:42 +00:00
hongming	f06afb18e3	chore: trigger workspace-server image rebuild Some checks failed Block internal-flavored paths / Block forbidden paths (push) Successful in 19s Details CI / Detect changes (push) Successful in 39s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 13s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 52s Details E2E API Smoke Test / detect-changes (push) Successful in 56s Details Handlers Postgres Integration / detect-changes (push) Successful in 47s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 47s Details CI / Platform (Go) (push) Successful in 7s Details CI / Canvas (Next.js) (push) Successful in 8s Details CI / Shellcheck (E2E scripts) (push) Successful in 7s Details CI / Python Lint & Test (push) Successful in 16s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 14s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 13s Details CI / Canvas Deploy Reminder (push) Successful in 10s Details CI / all-required (push) Successful in 4s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 2m28s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Failing after 4m19s Details publish-workspace-server-image / build-and-push (push) Successful in 7m11s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 1m51s Details main-red-watchdog / watchdog (push) Successful in 1m22s Details gate-check-v3 / gate-check (push) Successful in 2m50s Details Sweep stale Cloudflare DNS records / Sweep CF orphans (push) Successful in 32s Details ci-required-drift / drift (push) Successful in 1m46s Details Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Successful in 5m3s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 15s Details Sweep stale Cloudflare Tunnels / Sweep CF tunnels (push) Successful in 23s Details gitea-merge-queue / queue (push) Successful in 14s Details status-reaper / reap (push) Successful in 1m24s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Successful in 4m55s Details Rebuild bakes updated openclaw config.yaml (adds MiniMax M2.7 and Kimi K2.6 entries) into /workspace-configs-templates.	2026-05-14 17:35:03 +00:00
devops-engineer	45fb96e475	Merge pull request 'fix(queue): catch ApiError in main() so transient failures dont crash workflow' (#1045 ) from fix/queue-script-error-handling into main Some checks failed Block internal-flavored paths / Block forbidden paths (push) Successful in 4s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 7s Details CI / Detect changes (push) Successful in 17s Details E2E API Smoke Test / detect-changes (push) Successful in 17s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 18s Details Handlers Postgres Integration / detect-changes (push) Successful in 18s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 18s Details CI / Platform (Go) (push) Successful in 3s Details CI / Canvas (Next.js) (push) Successful in 2s Details CI / Shellcheck (E2E scripts) (push) Successful in 2s Details CI / Python Lint & Test (push) Successful in 3s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 4s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 4s Details CI / Canvas Deploy Reminder (push) Successful in 2s Details CI / all-required (push) Successful in 1s Details Ops Scripts Tests / Ops scripts (unittest) (push) Successful in 1m14s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Successful in 2m31s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 2m35s Details publish-workspace-server-image / build-and-push (push) Successful in 3m50s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 1m47s Details Sweep stale Cloudflare DNS records / Sweep CF orphans (push) Successful in 31s Details ci-required-drift / drift (push) Successful in 58s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 12s Details gitea-merge-queue / queue (push) Successful in 20s Details Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Successful in 5m8s Details status-reaper / reap (push) Successful in 2m34s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Successful in 6m7s Details	2026-05-14 17:09:13 +00:00
Molecule AI Infra-SRE	8ec2f4f33d	chore: trigger CI re-eval All checks were successful CI / Platform (Go) (pull_request) Successful in 3m12s E2E API Smoke Test / detect-changes (pull_request) Successful in 17s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 20s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 20s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 22s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 4s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 5s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 4s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 3s Details Ops Scripts Tests / Ops scripts (unittest) (pull_request) Successful in 1m11s Details CI / all-required (pull_request) Successful in 3m45s Details CI / Detect changes (pull_request) Successful in 4s Details CI / Canvas (Next.js) (pull_request) Successful in 2m18s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 22s Details CI / Python Lint & Test (pull_request) Successful in 1m5s Details CI / Canvas Deploy Reminder (pull_request) Successful in 8s Details gate-check-v3 / gate-check (pull_request) No blocking conditions Details Block internal-flavored paths / Block forbidden paths (pull_request) No forbidden paths Details lint-required-no-paths / lint-required-no-paths (pull_request) No paths filter on required workflows Details Secret scan / Scan diff for credential-shaped strings (pull_request) No credentials found Details sop-checklist / all-items-acked (pull_request) [info tier:low] acked: 7/7 Details sop-checklist / na-declarations (pull_request) N/A: n/a Details sop-tier-check / tier-check (pull_request) tier:low Details qa-review / approved (pull_request) Approved Details security-review / approved (pull_request) Approved Details audit-force-merge / audit (pull_request) Successful in 4s Details	2026-05-14 10:06:18 -07:00
Molecule AI Infra-SRE	6baeb1f7e2	fix(queue): catch ApiError in main() so transient failures don't crash the workflow The queue script exits with code 1 when any api() call raises ApiError (e.g. 401/403 from missing/wrong AUTO_SYNC_TOKEN, or network errors). Since the queue runs every 5 minutes, returning non-zero permanently fails the workflow run and blocks all future ticks. Fix: wrap process_once() call in main() with try/except catching ApiError, URLError, and TimeoutError. Log via ::error:: annotation and return 0 so the workflow is marked success and the next tick can retry. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 10:06:18 -07:00
devops-engineer	c6023e45d1	Merge pull request 'test: satisfy staticcheck on PR regression tests' (#1043 ) from fix/staticcheck-pr-regression-tests into main Some checks failed Block internal-flavored paths / Block forbidden paths (push) Successful in 4s Details Harness Replays / detect-changes (push) Successful in 8s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 7s Details E2E API Smoke Test / detect-changes (push) Successful in 16s Details CI / Detect changes (push) Successful in 16s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 16s Details Handlers Postgres Integration / detect-changes (push) Successful in 17s Details Harness Replays / Harness Replays (push) Successful in 5s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 18s Details CI / Canvas (Next.js) (push) Successful in 5s Details CI / Shellcheck (E2E scripts) (push) Successful in 6s Details CI / Python Lint & Test (push) Successful in 6s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 7s Details CI / Canvas Deploy Reminder (push) Successful in 5s Details E2E Staging SaaS (full lifecycle) / pr-validate (push) Successful in 37s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 1m56s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 3m0s Details E2E Staging SaaS (full lifecycle) / E2E Staging SaaS (push) Successful in 5m23s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Successful in 5m14s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 14s Details publish-workspace-server-image / build-and-push (push) Successful in 8m19s Details gitea-merge-queue / queue (push) Successful in 3s Details CI / Platform (Go) (push) Successful in 11m11s Details CI / all-required (push) Successful in 1s Details Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Successful in 5m14s Details main-red-watchdog / watchdog (push) Successful in 23s Details status-reaper / reap (push) Successful in 58s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 4m55s Details gate-check-v3 / gate-check (push) Successful in 3s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Successful in 6m33s Details	2026-05-14 16:53:52 +00:00
hongming-codex-laptop	033c1b9bd4	test: satisfy staticcheck on PR regression tests All checks were successful E2E Staging SaaS (full lifecycle) / E2E Staging SaaS (pull_request) Has been skipped Details Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 8s Details Harness Replays / detect-changes (pull_request) Successful in 15s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 11s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 32s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 34s Details gate-check-v3 / gate-check (pull_request) Successful in 20s Details CI / Detect changes (pull_request) Successful in 38s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 36s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 37s Details E2E Staging SaaS (full lifecycle) / pr-validate (pull_request) Successful in 45s Details Harness Replays / Harness Replays (pull_request) Successful in 8s Details sop-tier-check / tier-check (pull_request) Successful in 12s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 7s Details CI / Canvas (Next.js) (pull_request) Successful in 11s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 8s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 9s Details CI / Python Lint & Test (pull_request) Successful in 7s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m21s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 1m59s Details qa-review / approved (pull_request) Manual refire: approved via agent tag/review, lint-only follow-up Details security-review / approved (pull_request) Manual refire: approved via agent tag/review, lint-only follow-up Details sop-checklist / na-declarations (pull_request) N/A: qa-review Details sop-checklist / all-items-acked (pull_request) [info tier:low] acked: 7/7 Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 4m41s Details CI / Platform (Go) (pull_request) Successful in 8m18s Details CI / all-required (pull_request) Successful in 3s Details audit-force-merge / audit (pull_request) Successful in 3s Details	2026-05-14 09:43:04 -07:00
devops-engineer	b1f740013d	Merge pull request 'fix(handlers): synchronize async DB users in race tests' (#1041 ) from fix/main-async-db-race into main Some checks failed Block internal-flavored paths / Block forbidden paths (push) Successful in 5s Details Harness Replays / detect-changes (push) Successful in 7s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 9s Details CI / Detect changes (push) Successful in 12s Details E2E API Smoke Test / detect-changes (push) Successful in 13s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 14s Details Harness Replays / Harness Replays (push) Successful in 3s Details Handlers Postgres Integration / detect-changes (push) Successful in 15s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 15s Details CI / Canvas (Next.js) (push) Successful in 4s Details CI / Shellcheck (E2E scripts) (push) Successful in 4s Details CI / Python Lint & Test (push) Successful in 5s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 4s Details CI / Canvas Deploy Reminder (push) Successful in 2s Details E2E Staging SaaS (full lifecycle) / pr-validate (push) Successful in 36s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 1m6s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 2m3s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Successful in 2m33s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 10s Details Sweep stale Cloudflare Tunnels / Sweep CF tunnels (push) Successful in 16s Details E2E Staging External Runtime / E2E Staging External Runtime (push) Successful in 5m10s Details E2E Staging SaaS (full lifecycle) / E2E Staging SaaS (push) Successful in 5m58s Details CI / Platform (Go) (push) Failing after 6m36s Details publish-workspace-server-image / build-and-push (push) Successful in 6m51s Details CI / all-required (push) Successful in 6s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 25s Details gitea-merge-queue / queue (push) Compensated by status-reaper (workflow has no push: trigger; Gitea 1.22.6 hardcoded-suffix bug — see .gitea/scripts/status-reaper.py) Details status-reaper / reap (push) Successful in 1m6s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Successful in 4m52s Details	2026-05-14 16:41:37 +00:00
hongming-codex-laptop	19fce4d400	fix(handlers): keep embedded missing env refs literal Some checks failed E2E Staging SaaS (full lifecycle) / E2E Staging SaaS (pull_request) Has been skipped Details Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 5s Details Harness Replays / detect-changes (pull_request) Successful in 11s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 15s Details CI / Detect changes (pull_request) Successful in 19s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 23s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 23s Details gate-check-v3 / gate-check (pull_request) Successful in 19s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 24s Details qa-review / approved (pull_request) Successful in 16s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 25s Details security-review / approved (pull_request) Successful in 18s Details Harness Replays / Harness Replays (pull_request) Successful in 6s Details sop-tier-check / tier-check (pull_request) Successful in 13s Details CI / Canvas (Next.js) (pull_request) Successful in 7s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 9s Details E2E Staging SaaS (full lifecycle) / pr-validate (pull_request) Successful in 40s Details CI / Python Lint & Test (pull_request) Successful in 9s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 9s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 8s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m14s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 1m9s Details sop-checklist / na-declarations (pull_request) N/A: qa-review Details sop-checklist / all-items-acked (pull_request) acked: 7/7 Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 2m6s Details CI / Platform (Go) (pull_request) Failing after 2m58s Details CI / all-required (pull_request) Successful in 1s Details audit-force-merge / audit (pull_request) Successful in 3s Details E2E Staging External Runtime / E2E Staging External Runtime (pull_request) Successful in 5m32s Details	2026-05-14 09:37:52 -07:00
hongming-codex-laptop	096faa2562	fix(provisioner): seed configs before container start	2026-05-14 09:37:52 -07:00
hongming-codex-laptop	1c3b4ff321	fix(handlers): synchronize async DB users in race tests	2026-05-14 09:37:52 -07:00
devops-engineer	3ddc8a0300	Merge pull request 'fix(handlers): add rows.Err() checks after all secrets scan loops' (#1039 ) from fix/secrets-rows-err-check into main Some checks failed Block internal-flavored paths / Block forbidden paths (push) Successful in 19s Details Harness Replays / detect-changes (push) Successful in 26s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 13s Details CI / Detect changes (push) Successful in 1m3s Details E2E API Smoke Test / detect-changes (push) Successful in 59s Details Handlers Postgres Integration / detect-changes (push) Successful in 49s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 53s Details Harness Replays / Harness Replays (push) Successful in 6s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 42s Details CI / Shellcheck (E2E scripts) (push) Successful in 7s Details CI / Canvas (Next.js) (push) Successful in 10s Details CI / Python Lint & Test (push) Successful in 8s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 11s Details CI / Canvas Deploy Reminder (push) Successful in 4s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Failing after 1m18s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 1m53s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 2m34s Details CI / Platform (Go) (push) Failing after 3m30s Details CI / all-required (push) Successful in 6s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 18s Details publish-workspace-server-image / build-and-push (push) Successful in 8m49s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 24s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Successful in 5m45s Details Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Successful in 9m0s Details gitea-merge-queue / queue (push) Compensated by status-reaper (workflow has no push: trigger; Gitea 1.22.6 hardcoded-suffix bug — see .gitea/scripts/status-reaper.py) Details status-reaper / reap (push) Successful in 1m3s Details	2026-05-14 16:26:20 +00:00
Molecule AI Core-BE	420c42a202	fix(handlers): add rows.Err() checks after all secrets scan loops Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 11s Details Harness Replays / detect-changes (pull_request) Successful in 12s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 11s Details CI / Detect changes (pull_request) Successful in 26s Details qa-review / approved (pull_request) Successful in 18s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 28s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 26s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 27s Details security-review / approved (pull_request) Successful in 20s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 26s Details Harness Replays / Harness Replays (pull_request) Successful in 7s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 10s Details CI / Python Lint & Test (pull_request) Successful in 9s Details CI / Canvas (Next.js) (pull_request) Successful in 13s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 7s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 10s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m14s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Failing after 1m22s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 1m57s Details CI / Platform (Go) (pull_request) Failing after 3m7s Details CI / all-required (pull_request) Successful in 5s Details sop-checklist / na-declarations (pull_request) N/A: qa-review Details sop-tier-check / tier-check (pull_request) Successful in 19s Details gate-check-v3 / gate-check (pull_request) Successful in 28s Details sop-checklist / all-items-acked (pull_request) Successful in 25s Details audit-force-merge / audit (pull_request) Successful in 24s Details Regression from audit #109: rows.Err() checks were removed from List, ListGlobal, restartAllAffectedByGlobalKey, and Values between commits `3a30b073` and `b25b4fb6`. Without these checks, a mid-stream query error (e.g. connection loss during iteration) is silently ignored and partial results are returned as if the query succeeded. Fix: add if err := rows.Err(); err != nil { log.Printf(...) } after every for rows.Next() loop in secrets.go. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 09:17:31 -07:00
devops-engineer	cee43a6dd8	Merge pull request 'fix(handlers): restore POSIX-identifier guard in expandWithEnv (CWE-78, MC#982 regression)' (#1030 ) from fix/982-posix-identifier-guard into main Some checks failed Block internal-flavored paths / Block forbidden paths (push) Successful in 5s Details Harness Replays / detect-changes (push) Successful in 7s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 7s Details CI / Detect changes (push) Successful in 14s Details Harness Replays / Harness Replays (push) Successful in 4s Details E2E API Smoke Test / detect-changes (push) Successful in 15s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 15s Details Handlers Postgres Integration / detect-changes (push) Successful in 16s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 15s Details CI / Canvas (Next.js) (push) Successful in 4s Details CI / Shellcheck (E2E scripts) (push) Successful in 3s Details CI / Python Lint & Test (push) Successful in 4s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 6s Details CI / Canvas Deploy Reminder (push) Successful in 2s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Failing after 44s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 1m19s Details CI / Platform (Go) (push) Failing after 1m53s Details CI / all-required (push) Successful in 1s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 2m3s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 11s Details Sweep stale Cloudflare DNS records / Sweep CF orphans (push) Successful in 11s Details publish-workspace-server-image / build-and-push (push) Successful in 3m57s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 16s Details ci-required-drift / drift (push) Successful in 57s Details gitea-merge-queue / queue (push) Compensated by status-reaper (workflow has no push: trigger; Gitea 1.22.6 hardcoded-suffix bug — see .gitea/scripts/status-reaper.py) Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Successful in 5m28s Details status-reaper / reap (push) Successful in 3m30s Details	2026-05-14 16:12:26 +00:00
Molecule AI Infra-SRE	499e204a82	chore: trigger CI for SOP gate re-check (n/a declarations added) Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 28s Details Harness Replays / detect-changes (pull_request) Successful in 17s Details CI / Detect changes (pull_request) Successful in 48s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 48s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 17s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 41s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 52s Details qa-review / approved (pull_request) Successful in 30s Details security-review / approved (pull_request) Failing after 27s Details sop-checklist / na-declarations (pull_request) N/A: qa-review Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 58s Details sop-tier-check / tier-check (pull_request) Successful in 27s Details gate-check-v3 / gate-check (pull_request) Failing after 40s Details sop-checklist / all-items-acked (pull_request) Successful in 31s Details Harness Replays / Harness Replays (pull_request) Successful in 7s Details CI / Canvas (Next.js) (pull_request) Successful in 6s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 6s Details CI / Python Lint & Test (pull_request) Successful in 8s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m22s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 9s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 7s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Failing after 1m16s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 1m52s Details CI / Platform (Go) (pull_request) Failing after 2m33s Details CI / all-required (pull_request) Successful in 1s Details audit-force-merge / audit (pull_request) Successful in 4s Details	2026-05-14 09:07:04 -07:00
Molecule AI Core-DevOps	a3a358f968	fix(handlers): restore POSIX-identifier guard in expandWithEnv (CWE-78) Restore the POSIX shell-identifier guard in expandWithEnv (org_helpers.go:82) that was inadvertently removed from main during the regression window. Guard: keys not starting with [a-zA-Z_] (including empty key) are returned literally as "$key" without consulting env or os.Getenv. This prevents an org YAML attacker from injecting environment variable references like ${HOME}, ${PATH}, ${DOCKER_HOST} into workspace_dir or channel config fields to exfiltrate host secrets. Also restore org_helpers_pure_test.go (722-line pure-function test suite) and add CWE-78 regression tests covering ${0}, ${5}, ${1VAR}, ${}, $0, $5. Fixes MC#982 regression. Co-Audit: core-offsec, core-security. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 09:07:04 -07:00
devops-engineer	ed01130536	Merge pull request 'fix(handlers): repair instructions test compile' (#1028 ) from fix/handlers-instructions-test-compile into main Some checks failed Block internal-flavored paths / Block forbidden paths (push) Successful in 12s Details Harness Replays / detect-changes (push) Successful in 8s Details CI / Detect changes (push) Successful in 17s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 22s Details E2E API Smoke Test / detect-changes (push) Successful in 22s Details Handlers Postgres Integration / detect-changes (push) Successful in 20s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 14s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 25s Details Harness Replays / Harness Replays (push) Successful in 10s Details CI / Canvas (Next.js) (push) Successful in 11s Details CI / Shellcheck (E2E scripts) (push) Successful in 9s Details CI / Python Lint & Test (push) Successful in 12s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 13s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 2m43s Details CI / Canvas Deploy Reminder (push) Successful in 7s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 3m17s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 24s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Successful in 5m33s Details publish-workspace-server-image / build-and-push (push) Successful in 10m13s Details main-red-watchdog / watchdog (push) Successful in 33s Details Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Successful in 4m59s Details gate-check-v3 / gate-check (push) Successful in 31s Details gitea-merge-queue / queue (push) Successful in 17s Details CI / Platform (Go) (push) Failing after 13m59s Details status-reaper / reap (push) Successful in 1m35s Details CI / all-required (push) Successful in 5s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 7m14s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Successful in 5m43s Details	2026-05-14 15:50:42 +00:00
hongming-codex-laptop	3359580502	fix(handlers): repair instructions test compile Some checks failed CI / Detect changes (pull_request) Successful in 44s Details Harness Replays / detect-changes (pull_request) Successful in 28s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 1m14s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 1m13s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 19s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 54s Details gate-check-v3 / gate-check (pull_request) Successful in 35s Details qa-review / approved (pull_request) Successful in 23s Details security-review / approved (pull_request) Failing after 24s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m26s Details sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details sop-checklist / all-items-acked (pull_request) Successful in 28s Details sop-tier-check / tier-check (pull_request) Successful in 27s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 6s Details CI / Canvas (Next.js) (pull_request) Successful in 9s Details CI / Python Lint & Test (pull_request) Successful in 11s Details Harness Replays / Harness Replays (pull_request) Successful in 12s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 12s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 2m44s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Failing after 14m51s Details CI / Platform (Go) (pull_request) Failing after 19m43s Details CI / all-required (pull_request) Successful in 6s Details audit-force-merge / audit (pull_request) Successful in 14s Details	2026-05-14 08:20:32 -07:00
devops-engineer	c0bbcb7756	Merge pull request 'fix(canvas/ThemeToggle): replace querySelectorAll with Array.from children approach' (#1017 ) from design/themetoggle-test-teardown-fix into main Some checks failed CI / Detect changes (push) Successful in 40s Details E2E API Smoke Test / detect-changes (push) Successful in 45s Details Harness Replays / detect-changes (push) Successful in 19s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 47s Details Handlers Postgres Integration / detect-changes (push) Successful in 55s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 24s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 1m0s Details CI / Platform (Go) (push) Successful in 8s Details CI / Shellcheck (E2E scripts) (push) Successful in 5s Details CI / Python Lint & Test (push) Successful in 7s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 10s Details Harness Replays / Harness Replays (push) Successful in 7s Details status-reaper / reap (push) Has started running Details publish-canvas-image / Build & push canvas image (push) Successful in 5m2s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Failing after 3m49s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 2m29s Details publish-workspace-server-image / build-and-push (push) Successful in 9m56s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 8m17s Details Sweep stale Cloudflare DNS records / Sweep CF orphans (push) Successful in 35s Details ci-required-drift / drift (push) Successful in 1m28s Details gate-check-v3 / gate-check (push) Compensated by status-reaper (workflow has no push: trigger; Gitea 1.22.6 hardcoded-suffix bug — see .gitea/scripts/status-reaper.py) Details CI / Canvas (Next.js) (push) Successful in 16m4s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Has started running Details CI / Canvas Deploy Reminder (push) Successful in 5s Details CI / all-required (push) Successful in 4s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 18m44s Details Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Successful in 5m30s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 15s Details Sweep stale Cloudflare Tunnels / Sweep CF tunnels (push) Successful in 23s Details gitea-merge-queue / queue (push) Successful in 18s Details	2026-05-14 15:07:31 +00:00
Molecule AI Core-UIUX	20241de570	fix(canvas/ThemeToggle): resolve 5 pre-existing INDEX_SIZE_ERR test errors Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 9s Details CI / Detect changes (pull_request) Successful in 26s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 26s Details Harness Replays / detect-changes (pull_request) Successful in 13s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 37s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 33s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 16s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 30s Details security-review / approved (pull_request) Failing after 19s Details qa-review / approved (pull_request) Successful in 20s Details gate-check-v3 / gate-check (pull_request) Failing after 23s Details sop-tier-check / tier-check (pull_request) Successful in 14s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m18s Details CI / Platform (Go) (pull_request) Successful in 12s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 22s Details CI / Python Lint & Test (pull_request) Successful in 21s Details Harness Replays / Harness Replays (pull_request) Successful in 7s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 9s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 14s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 9s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 8m40s Details CI / Canvas (Next.js) (pull_request) Successful in 12m25s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details CI / all-required (pull_request) Successful in 1s Details sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details sop-checklist / all-items-acked (pull_request) [info tier:low] acked: 5/7 — missing: root-cause, no-backwards-compat — body-unfilled: comprehensive-testing, local-postgres-e2e, staging-sm Details audit-force-merge / audit (pull_request) Successful in 14s Details Root cause: handleKeyDown used querySelectorAll("> [role=radio]") to find the next radio button after a key press. jsdom's selector parser throws INDEX_SIZE_ERR on the child-combinator selector in test environments, which @asamuzakjp/dom-selector surfaces as SyntaxError. The error always fired after the last keyboard-navigation test in each describe block (ArrowRight, ArrowLeft, ArrowDown, Home, End = 5 errors) and was non-fatal to the test pass count (18/18 still passed). Fix: 1. Replace querySelectorAll("> [role=radio]") with Array.from(radiogroup.children).filter(el => el.tagName === "BUTTON" && el.getAttribute("role") === "radio" ) — avoids the child-combinator selector entirely. 2. Guard the focus call with isConnected check to survive React StrictMode double-invocation of the handler during re-render. 3. Add bounds check (next < btns.length) before accessing btns[next]. Result: 18/18 pass, 0 errors (was 18/18 pass, 5 errors). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 14:37:29 +00:00
devops-engineer	5738f53ee8	Merge pull request 'fix(ci): repair delegation list and merge queue tests' (#1013 ) from fix/main-red-cdb0b040-ci-tests into main Some checks failed CI / Detect changes (push) Successful in 56s Details publish-runtime-autobump / pr-validate (pull_request) Successful in 53s Details Harness Replays / detect-changes (push) Successful in 16s Details E2E API Smoke Test / detect-changes (push) Successful in 1m3s Details gate-check-v3 / gate-check (pull_request) Successful in 21s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 53s Details Handlers Postgres Integration / detect-changes (push) Successful in 47s Details qa-review / approved (pull_request) Successful in 17s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m18s Details security-review / approved (pull_request) Successful in 18s Details sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details sop-checklist / all-items-acked (pull_request) Successful in 20s Details sop-tier-check / tier-check (pull_request) Successful in 17s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 14s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 44s Details Ops Scripts Tests / Ops scripts (unittest) (push) Successful in 1m21s Details CI / Canvas (Next.js) (push) Successful in 10s Details CI / Shellcheck (E2E scripts) (push) Successful in 7s Details CI / Python Lint & Test (push) Successful in 8s Details Harness Replays / Harness Replays (push) Successful in 9s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 14s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 2m10s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 2m49s Details CI / Platform (Go) (push) Failing after 4m59s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Failing after 4m49s Details CI / Canvas Deploy Reminder (push) Successful in 6s Details audit-force-merge / audit (pull_request) Successful in 37s Details publish-workspace-server-image / build-and-push (push) Successful in 9m6s Details CI / all-required (push) Successful in 6s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 40s Details	2026-05-14 14:36:38 +00:00
hongming-codex-laptop	0b47f9516d	fix(ci): repair delegation list and merge queue tests Some checks failed sop-checklist / all-items-acked (pull_request) All items acked Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Blocked by required conditions Details Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 24s Details Harness Replays / detect-changes (pull_request) Successful in 19s Details CI / Detect changes (pull_request) Successful in 1m15s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 53s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 1m9s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 1m11s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 13s Details qa-review / approved (pull_request) Successful in 16s Details gate-check-v3 / gate-check (pull_request) Successful in 18s Details security-review / approved (pull_request) Failing after 19s Details sop-tier-check / tier-check (pull_request) Successful in 18s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m21s Details Ops Scripts Tests / Ops scripts (unittest) (pull_request) Successful in 1m21s Details Harness Replays / Harness Replays (pull_request) Successful in 9s Details CI / Canvas (Next.js) (pull_request) Successful in 16s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 10s Details CI / Python Lint & Test (pull_request) Successful in 9s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 19s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 2m4s Details CI / Platform (Go) (pull_request) Failing after 4m14s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Failing after 4m15s Details sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details CI / all-required (pull_request) Successful in 4s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Failing after 12m49s Details audit-force-merge / audit (pull_request) Successful in 23s Details	2026-05-14 14:19:42 +00:00
devops-engineer	2a476c3bbb	Merge pull request 'fix(ci): add job-level if: to canvas-deploy-reminder (mc#958 root-fix)' (#1015 ) from sre/ci-required-drift-canvas-reminder-skip into main Some checks failed E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 8s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 7s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Failing after 1m5s Details Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 18s Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 14s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 3m11s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 1m44s Details publish-workspace-server-image / build-and-push (push) Successful in 8m1s Details publish-runtime-autobump / bump-and-tag (pull_request) Has been skipped Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 1m48s Details lint-mask-pr-atomicity / lint-mask-pr-atomicity (pull_request) Successful in 1m55s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m17s Details Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 2m2s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 15s Details qa-review / approved (pull_request) Successful in 20s Details gate-check-v3 / gate-check (pull_request) Successful in 28s Details security-review / approved (pull_request) Successful in 24s Details publish-runtime-autobump / pr-validate (pull_request) Successful in 59s Details CI / Canvas Deploy Reminder (push) Successful in 28s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m46s Details Secret scan / Scan diff for credential-shaped strings (push) Failing after 10m10s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 40s Details CI / all-required (push) Successful in 4s Details Sweep stale Cloudflare Tunnels / Sweep CF tunnels (push) Successful in 14s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 3s Details Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Successful in 4m33s Details main-red-watchdog / watchdog (push) Successful in 35s Details gitea-merge-queue / queue (push) Compensated by status-reaper (workflow has no push: trigger; Gitea 1.22.6 hardcoded-suffix bug — see .gitea/scripts/status-reaper.py) Details status-reaper / reap (push) Successful in 1m3s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Successful in 4m42s Details	2026-05-14 14:17:21 +00:00
Molecule AI Infra-SRE	7888f96f45	fix(ci): add job-level if: to canvas-deploy-reminder (mc#958 root-fix) Some checks failed sop-checklist / all-items-acked (pull_request) All items acked Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 22s Details CI / Detect changes (pull_request) Successful in 1m50s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 1m41s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 1m38s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 1m45s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 28s Details qa-review / approved (pull_request) Successful in 26s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 2m44s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 1m1s Details gate-check-v3 / gate-check (pull_request) Failing after 33s Details security-review / approved (pull_request) Failing after 19s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m29s Details sop-tier-check / tier-check (pull_request) Successful in 25s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m49s Details lint-mask-pr-atomicity / lint-mask-pr-atomicity (pull_request) Successful in 2m58s Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 2m34s Details Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 2m53s Details CI / Platform (Go) (pull_request) Successful in 12s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 10s Details CI / Canvas (Next.js) (pull_request) Successful in 13s Details CI / Python Lint & Test (pull_request) Successful in 12s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 13s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 16s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 19s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 7s Details sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details CI / all-required (pull_request) Successful in 4s Details audit-force-merge / audit (pull_request) Successful in 26s Details canvas-deploy-reminder had step-level gating (REF_NAME != refs/heads/main) but no job-level `if:`. The ci-required-drift.py ci_job_names() skip logic only detects job-level `github.ref` gates, so canvas-deploy-reminder was flagged as F1 (missing from all-required.needs) despite being intentionally excluded. Fix: - Added job-level `if: github.ref == 'refs/heads/main'` to canvas-deploy-reminder so ci-required-drift.py correctly skips it from ci_job_names() F1 check - Added canvas-deploy-reminder to all-required.needs (sentinel handles skipped job result correctly) - Removed stale continue-on-error: true (was mc#774 interim mask; step exits 0 when not applicable) The step-level exit 0 is preserved for the "canvas not changed" case on main pushes. The job-level `if:` makes the main-push-only scope visible to the drift detector. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 13:58:40 +00:00
devops-engineer	4e92e46182	Merge pull request 'test(handlers): add InstructionsHandler coverage — 18 sqlmock cases' (#1005 ) from test/instructions-handler-coverage into main Some checks failed Block internal-flavored paths / Block forbidden paths (push) Successful in 19s Details Harness Replays / detect-changes (push) Successful in 16s Details CI / Detect changes (push) Successful in 46s Details E2E API Smoke Test / detect-changes (push) Successful in 45s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 22s Details Handlers Postgres Integration / detect-changes (push) Successful in 1m0s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 1m5s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 1m58s Details Harness Replays / Harness Replays (push) Successful in 9s Details CI / Canvas (Next.js) (push) Successful in 12s Details CI / Shellcheck (E2E scripts) (push) Successful in 11s Details CI / Python Lint & Test (push) Successful in 10s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Has started running Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 13s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Failing after 1m35s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 2m15s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 2m54s Details Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Successful in 5m11s Details publish-workspace-server-image / build-and-push (push) Successful in 10m13s Details CI / Platform (Go) (push) Failing after 4m38s Details main-red-watchdog / watchdog (push) Successful in 1m12s Details CI / Canvas Deploy Reminder (push) Successful in 8s Details gate-check-v3 / gate-check (push) Successful in 1m19s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 28s Details CI / all-required (push) Successful in 4s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 14s Details gitea-merge-queue / queue (push) Successful in 9s Details Sweep stale Cloudflare DNS records / Sweep CF orphans (push) Successful in 15s Details status-reaper / reap (push) Successful in 1m17s Details ci-required-drift / drift (push) Successful in 2m26s Details	2026-05-14 13:58:27 +00:00
Molecule AI Core-BE	f417c1a870	test(handlers): add InstructionsHandler coverage — 18 cases Some checks failed sop-checklist / all-items-acked (pull_request) All items acked Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 19s Details CI / Detect changes (pull_request) Successful in 41s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 46s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 42s Details Harness Replays / detect-changes (pull_request) Successful in 17s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 41s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 19s Details sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details qa-review / approved (pull_request) Successful in 21s Details gate-check-v3 / gate-check (pull_request) Successful in 33s Details security-review / approved (pull_request) Failing after 19s Details sop-tier-check / tier-check (pull_request) Successful in 18s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 44s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 16s Details CI / Python Lint & Test (pull_request) Successful in 15s Details CI / Canvas (Next.js) (pull_request) Successful in 17s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 9s Details Harness Replays / Harness Replays (pull_request) Successful in 8s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 11s Details CI / Canvas Deploy Reminder (pull_request) Successful in 10s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m18s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Failing after 56s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 1m32s Details CI / Platform (Go) (pull_request) Failing after 2m51s Details CI / all-required (pull_request) Successful in 7s Details audit-force-merge / audit (pull_request) Successful in 19s Details Add sqlmock unit tests for InstructionsHandler (instructions.go): - List: empty result, scope filter, workspace_id filter, DB error - Create: success (global), success (workspace with scope_target), invalid scope, workspace scope missing scope_target, content too long (>8192), title too long (>200) - Update: success, not found (0 rows), content too long, title too long - Delete: success, not found (0 rows) - Resolve: empty workspace, with global+workspace instructions, missing workspace_id - scanInstructions: rows.Err() handled gracefully (continues, not fatal) All 18 tests cover the DB query paths using sqlmock.	2026-05-14 13:49:43 +00:00
devops-engineer	8628d5cd2d	Merge pull request 'fix(ci): add explicit 20m timeout to canvas-build job' (#1006 ) from sre/canvas-build-timeout into main Some checks failed Block internal-flavored paths / Block forbidden paths (push) Successful in 18s Details publish-workspace-server-image / Production auto-deploy (push) Blocked by required conditions Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (push) Successful in 14s Details CI / Detect changes (push) Successful in 1m1s Details E2E API Smoke Test / detect-changes (push) Successful in 1m0s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 1m0s Details Handlers Postgres Integration / detect-changes (push) Successful in 55s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 14s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 45s Details CI / Platform (Go) (push) Successful in 7s Details CI / Shellcheck (E2E scripts) (push) Successful in 6s Details CI / Canvas (Next.js) (push) Successful in 9s Details CI / Python Lint & Test (push) Successful in 7s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (push) Successful in 1m40s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 9s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 11s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (push) Successful in 2m12s Details CI / Canvas Deploy Reminder (push) Successful in 19s Details CI / all-required (push) Successful in 14s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Failing after 1m12s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 3m4s Details publish-workspace-server-image / build-and-push (push) Successful in 7m48s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Successful in 5m13s Details status-reaper / reap (push) Has started running Details gitea-merge-queue / queue (push) Compensated by status-reaper (workflow has no push: trigger; Gitea 1.22.6 hardcoded-suffix bug — see .gitea/scripts/status-reaper.py) Details	2026-05-14 13:49:05 +00:00
Molecule AI Infra-SRE	4262c0a3db	fix(ci): add explicit 20m timeout to canvas-build job Some checks failed sop-checklist / all-items-acked (pull_request) All items acked CI / Detect changes (pull_request) Successful in 41s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 45s Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 15s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 52s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 51s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 17s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 21s Details gate-check-v3 / gate-check (pull_request) Successful in 10s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 1m55s Details qa-review / approved (pull_request) Successful in 13s Details sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details security-review / approved (pull_request) Failing after 13s Details sop-tier-check / tier-check (pull_request) Successful in 14s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m19s Details Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 1m42s Details lint-mask-pr-atomicity / lint-mask-pr-atomicity (pull_request) Successful in 1m53s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m42s Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 2m7s Details CI / Platform (Go) (pull_request) Successful in 15s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 11s Details CI / Python Lint & Test (pull_request) Successful in 10s Details CI / Canvas (Next.js) (pull_request) Successful in 13s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 9s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 6s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 8s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 8s Details CI / Canvas Deploy Reminder (pull_request) Successful in 5s Details CI / all-required (pull_request) Successful in 4s Details audit-force-merge / audit (pull_request) Successful in 26s Details Cold runner cache causes O(npm install) to take ~14m on first run. Without an explicit job-level timeout, Gitea's hard limit (~15m) is the active constraint — a single slow build would timeout instead of completing successfully. Matches the pattern already used by platform-build (timeout-minutes: 15). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 13:30:01 +00:00
devops-engineer	1dd6697031	Merge pull request 'fix(canvas): guard querySelectorAll in ThemeToggle handleKeyDown' (#1001 ) from fix/2088-themetoggle-queryselectorall-errors into main Some checks failed Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 48s Details gate-check-v3 / gate-check (pull_request) Failing after 24s Details qa-review / approved (pull_request) Successful in 15s Details security-review / approved (pull_request) Successful in 18s Details sop-checklist / all-items-acked (pull_request) Successful in 18s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m23s Details sop-tier-check / tier-check (pull_request) Successful in 18s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 9m22s Details audit-force-merge / audit (pull_request) Has been skipped Details Harness Replays / Harness Replays (push) Failing after 10m36s Details CI / Platform (Go) (push) Failing after 10m31s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 2m35s Details Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Successful in 6m41s Details CI / Platform (Go) (pull_request) Successful in 11s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 8s Details CI / Canvas (Next.js) (pull_request) Successful in 10s Details CI / Python Lint & Test (pull_request) Successful in 17s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 10s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 5s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 6s Details CI / Canvas (Next.js) (push) Successful in 15m24s Details status-reaper / reap (push) Has started running Details Sweep stale Cloudflare Tunnels / Sweep CF tunnels (push) Successful in 12s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 14s Details gitea-merge-queue / queue (push) Successful in 21s Details CI / Canvas Deploy Reminder (pull_request) Successful in 5s Details CI / all-required (pull_request) Successful in 4s Details CI / Canvas Deploy Reminder (push) Successful in 6s Details CI / all-required (push) Successful in 5s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Successful in 4m50s Details	2026-05-14 13:13:09 +00:00
Molecule AI Core-FE	5e6c490b19	fix(canvas): guard querySelectorAll in ThemeToggle handleKeyDown Some checks failed sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 13s Details CI / Detect changes (pull_request) Successful in 28s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 33s Details Harness Replays / detect-changes (pull_request) Successful in 12s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 14s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 37s Details qa-review / approved (pull_request) Successful in 14s Details security-review / approved (pull_request) Successful in 13s Details gate-check-v3 / gate-check (pull_request) Successful in 26s Details sop-checklist / all-items-acked (pull_request) Successful in 19s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 38s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 41s Details sop-tier-check / tier-check (pull_request) Successful in 14s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m14s Details audit-force-merge / audit (pull_request) Successful in 16s Details CI / Platform (Go) (pull_request) Successful in 19s Details CI / Python Lint & Test (pull_request) Successful in 11s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 16s Details Harness Replays / Harness Replays (pull_request) Successful in 13s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 13s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 8s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 10m32s Details CI / Shellcheck (E2E scripts) (pull_request) Failing after 14m32s Details CI / Canvas (Next.js) (pull_request) Successful in 17m9s Details CI / Canvas Deploy Reminder (pull_request) Successful in 9s Details CI / all-required (pull_request) Failing after 7s Details querySelectorAll throws INDEX_SIZE_ERR in jsdom when the child-combinator selector is evaluated in certain DOM attachment states. Wrap in try-catch with fallback selector to restore the 5 errors (0 failures) in ThemeToggle.test.tsx. Tests: 208 files, 3245 passed, 0 errors.	2026-05-14 13:11:46 +00:00
devops-engineer	cdb0b0401a	Merge pull request 'ci: fix db.DB pollution + ci-required-drift github.ref skip (mc#975, mc#958, mc#959)' (#991 ) from ci/975-db-pollution-fix into main Some checks failed Runtime PR-Built Compatibility / detect-changes (push) Successful in 39s Details Ops Scripts Tests / Ops scripts (unittest) (push) Failing after 1m18s Details Harness Replays / Harness Replays (push) Successful in 6s Details CI / Shellcheck (E2E scripts) (push) Successful in 5s Details CI / Python Lint & Test (push) Successful in 5s Details CI / Canvas (Next.js) (push) Successful in 6s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 5s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Failing after 1m11s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 1m39s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 2m22s Details CI / Platform (Go) (push) Failing after 3m52s Details publish-runtime-autobump / bump-and-tag (pull_request) Has been skipped Details Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 16s Details gate-check-v3 / gate-check (pull_request) Successful in 13s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 14s Details publish-workspace-server-image / build-and-push (push) Successful in 7m22s Details qa-review / approved (pull_request) Successful in 15s Details publish-runtime-autobump / pr-validate (pull_request) Successful in 41s Details security-review / approved (pull_request) Successful in 23s Details sop-checklist / all-items-acked (pull_request) Successful in 23s Details sop-tier-check / tier-check (pull_request) Successful in 21s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m19s Details audit-force-merge / audit (pull_request) Successful in 23s Details main-red-watchdog / watchdog (push) Successful in 1m7s Details CI / Canvas Deploy Reminder (push) Successful in 3s Details status-reaper / reap (push) Has started running Details gitea-merge-queue / queue (push) Successful in 17s Details gate-check-v3 / gate-check (push) Compensated by status-reaper (workflow has no push: trigger; Gitea 1.22.6 hardcoded-suffix bug — see .gitea/scripts/status-reaper.py) Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (push) Successful in 1m55s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Successful in 5m10s Details	2026-05-14 13:01:05 +00:00
Molecule AI Core-DevOps	3297d16093	ci-required-drift: also skip jobs gated on github.ref (fixes mc#958/mc#959) Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 22s Details Harness Replays / detect-changes (pull_request) Successful in 22s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 20s Details CI / Detect changes (pull_request) Successful in 1m2s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 1m0s Details qa-review / approved (pull_request) Failing after 26s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 1m3s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 1m6s Details gate-check-v3 / gate-check (pull_request) Failing after 45s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 1m4s Details Harness Replays / Harness Replays (pull_request) Successful in 6s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m19s Details sop-tier-check / tier-check (pull_request) Successful in 16s Details sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details sop-checklist / all-items-acked (pull_request) [info tier:low] acked: 5/7 — missing: root-cause, no-backwards-compat — body-unfilled: comprehensive-testing, local-postgres-e2e, staging-sm Details CI / Canvas (Next.js) (pull_request) Successful in 9s Details Ops Scripts Tests / Ops scripts (unittest) (pull_request) Failing after 1m26s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 8s Details CI / Python Lint & Test (pull_request) Successful in 9s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 9s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 8s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Failing after 1m12s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 1m36s Details CI / Canvas Deploy Reminder (pull_request) Successful in 3s Details audit-force-merge / audit (pull_request) Successful in 15s Details CI / Platform (Go) (pull_request) Failing after 3m13s Details CI / all-required (pull_request) Successful in 4s Details security-review / approved (pull_request) Failing after 12m6s Details canvas-deploy-reminder has: if: needs.changes.outputs.canvas == 'true' && github.event_name == 'push' && github.ref == 'refs/heads/main' ci_job_names() only skipped jobs with `github.event_name` in their `if:`. The `github.ref` branch was invisible to the detector, so canvas-deploy-reminder was flagged as missing from all-required.needs — a false positive that fires on every PR touching canvas/ code. Now the skip check also fires when `github.ref` is present in the `if:` condition string, matching the same rationale as the event_name skip: these jobs never execute in a PR context, so requiring them under all-required.needs: is not meaningful. Refs: mc#958 (main), mc#959 (staging) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 12:58:13 +00:00
Molecule AI Core-DevOps	e0e5dd911f	handlers: add missing db import + remove duplicate test declarations Two compilation errors were preventing CI/Platform (Go) from running any tests at all (go vet failed first): 1. delegation_list_test.go: missing `db` import. The file assigns `db.DB = mockDB` but never imported the `db` package — a silent omission that compiled before the staging promotion's go.mod bump. 2. org_helpers_security_test.go: three test functions redeclared in org_helpers_pure_test.go (both files added by the staging promotion): TestIsSafeRoleName_Valid, TestMergeCategoryRouting_EmptyListDropsCategory, TestMergeCategoryRouting_EmptyKeySkipped. Removed from security file; pure_test.go versions use testify and are more comprehensive. Together with the prevDB/restore fixes in the previous commits, this should make CI/Platform (Go) fully green. Refs: mc#975 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 12:58:04 +00:00
Molecule AI Core-DevOps	a50f51eb8f	handlers/internal: fix db.DB pollution in registry and scheduler test helpers Five more test helpers have the same setupTestDB bug (save db.DB but don't restore on teardown). go test -race runs tests in parallel; when test A sets db.DB = mockA and test B sets db.DB = mockB, if A runs first and cleanup closes mockA, B then runs with db.DB pointing at a closed mock. Fixed files: - internal/registry/liveness_test.go setupLivenessTestDB - internal/registry/hibernation_test.go setupHibernationMock - internal/registry/access_test.go setupMockDB - internal/registry/healthsweep_test.go setupTestDB - internal/scheduler/scheduler_test.go setupTestDB All now follow: prevDB := db.DB; db.DB = mockDB; t.Cleanup(func() { mockDB.Close(); db.DB = prevDB }) Total files fixed for mc#975: 8 files, ~20 test helper functions across the workspace-server. Together with the CI fix to remove the PHASE3_MASKED workaround, this should make CI/Platform (Go) stable. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 12:58:03 +00:00
Molecule AI Core-DevOps	e11f1f3c06	handlers: fix db.DB pollution in activity_test.go and a2a_queue_test.go activity_test.go: 6 test functions used `defer mockDB.Close(); db.DB = mockDB` without saving/restoring the previous db.DB. go test -race could run subsequent tests with db.DB pointing at a closed mock. a2a_queue_test.go: setupTestDBForQueueTests had the same bug as setupTestDB — called `t.Cleanup(func(){mockDB.Close()})` without restoring prevDB. All callers of this helper are now protected. Pattern applied everywhere: save prevDB, assign mockDB, t.Cleanup restores both. Together with the delegation_list_test.go fix in the previous commit, this should eliminate all remaining race-condition failures in CI/Platform (Go). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 12:58:03 +00:00
Molecule AI Core-DevOps	126edf74c1	handlers: restore db.DB after each test to fix CI/Platform (Go) race failures mc#975 root cause: TestListDelegationsFromLedger_* and TestListDelegationsFromActivityLogs_* assign db.DB = mockDB then defer mockDB.Close(), but never save/restore the previous db.DB value. With go test -race (parallel execution), any test running after one of these 13 tests sees db.DB pointing at a closed sqlmock and fails. Fix: save prevDB := db.DB before assignment, then t.Cleanup(func() { mockDB.Close(); db.DB = prevDB }) — the same pattern already used by setupTestDB for the SSRF/restore path. Also fix setupTestDB in handlers_test.go: it called t.Cleanup(func() { mockDB.Close() }) but left db.DB pointing at the closed mock; now it also restores prevDB. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 12:58:03 +00:00

fix(provisioner): skip symlinks in collectCPConfigFiles WalkDir (OFFSEC-010) #1074

51 Commits