molecule-ai/molecule-core
52
0
Fork 2
Code Issues 180 Pull Requests 50 Actions Packages Projects Releases Wiki Activity

feat: SSOT compute metadata endpoint + canvas consumption (#2489) #2510

Closed
agent-dev-a wants to merge 0 commits from feat/2489-ssot-compute-metadata into main
pull from: feat/2489-ssot-compute-metadata
merge into: molecule-ai:main
Conversation 0 Commits - Files Changed -
+204
agent-dev-a commented 2026-06-10 05:36:11 +00:00
Member
Copy Link
Copy Source

Closes #2489

Backend:

  • Adds GET /compute/metadata public endpoint that returns cloud-provider + instance-type allowlists and defaults (workspace-server SSOT).
  • Registers route in router.go (public, no auth).
  • Adds handler tests + router contract tests.

Frontend (pending MiniMax):

  • Canvas ContainerConfigTab.tsx will fetch from this endpoint instead of hardcoding INSTANCE_TYPES_BY_PROVIDER, DEFAULT_INSTANCE_BY_PROVIDER, and CLOUD_PROVIDER_OPTIONS.

Test plan:

  • go test ./workspace-server/internal/handlers -run TestComputeMetadata
  • go test ./workspace-server/internal/router -run TestComputeMetadata
  • Canvas build + manual verify provider/instance dropdowns still populate correctly.
Closes #2489 **Backend:** - Adds `GET /compute/metadata` public endpoint that returns cloud-provider + instance-type allowlists and defaults (workspace-server SSOT). - Registers route in `router.go` (public, no auth). - Adds handler tests + router contract tests. **Frontend (pending MiniMax):** - Canvas `ContainerConfigTab.tsx` will fetch from this endpoint instead of hardcoding `INSTANCE_TYPES_BY_PROVIDER`, `DEFAULT_INSTANCE_BY_PROVIDER`, and `CLOUD_PROVIDER_OPTIONS`. **Test plan:** - `go test ./workspace-server/internal/handlers -run TestComputeMetadata` - `go test ./workspace-server/internal/router -run TestComputeMetadata` - Canvas build + manual verify provider/instance dropdowns still populate correctly.
agent-dev-a added 2 commits 2026-06-10 05:36:12 +00:00
feat(workspace-server): add GET /compute/metadata SSOT endpoint (#2489) a02c81d5ab 
Exposes cloud-provider + instance-type allowlists and defaults via a
public, unauthenticated endpoint so the canvas ContainerConfigTab (and
any future client) can render selectors from the same source the PATCH
validator uses. Eliminates the drift risk where the UI offers an
instance the backend rejects.

- Adds ComputeMetadata handler in workspace_compute.go
- Registers /compute/metadata in router.go (public, no auth)
- Adds TestComputeMetadata_ReturnsProviderAllowlist

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
test(router): add compute_metadata route tests (#2489)
ci-arm64-advisory / fast-checks (pull_request) Waiting to run
Details
Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 7s
Details
CI / Python Lint & Test (pull_request) Successful in 4s
Details
Harness Replays / detect-changes (pull_request) Successful in 5s
Details
E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 7s
Details
Lint forbidden tenant-env keys / Scan for repo-host token write into tenant workspace surface (pull_request) Successful in 5s
Details
E2E Chat / detect-changes (pull_request) Successful in 8s
Details
Handlers Postgres Integration / detect-changes (pull_request) Successful in 9s
Details
Harness Replays / Harness Replays (pull_request) Successful in 2s
Details
E2E API Smoke Test / detect-changes (pull_request) Successful in 14s
Details
Lint forbidden tenant-env keys / Scan workspace_secrets writers for forbidden env keys (pull_request) Successful in 10s
Details
CI / Detect changes (pull_request) Successful in 15s
Details
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 5s
Details
E2E Chat / E2E Chat (pull_request) Successful in 3s
Details
sop-checklist / review-refire (pull_request_target) Has been skipped
Details
gate-check-v3 / gate-check (pull_request_target) Successful in 7s
Details
security-review / approved (pull_request_target) Failing after 6s
Details
Lint shellcheck (arm64 pilot) / shellcheck-arm64 (pilot) (pull_request) Successful in 15s
Details
CI / Canvas (Next.js) (pull_request) Successful in 3s
Details
CI / Shellcheck (E2E scripts) (pull_request) Successful in 2s
Details
qa-review / approved (pull_request_target) Failing after 9s
Details
CI / Canvas Deploy Status (pull_request) Successful in 1s
Details
sop-checklist / all-items-acked (pull_request) acked: 0/7 — missing: comprehensive-testing, local-postgres-e2e, staging-smoke, +4 — body-unfilled: comprehensive-testing, local-postgres-e2
Details
sop-checklist / na-declarations (pull_request) N/A: (none)
Details
E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 19s
Details
sop-checklist / all-items-acked (pull_request_target) Successful in 43s
Details
lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 55s
Details
Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Failing after 1m2s
Details
Local Provision Lifecycle E2E / Local Provision Lifecycle E2E (stub) (pull_request) Successful in 2m8s
Details
Local Provision Lifecycle E2E / Local Provision Lifecycle E2E (real image + MiniMax LLM, advisory) (pull_request) Successful in 1m41s
Details
CI / Platform (Go) (pull_request) Successful in 4m52s
Details
CI / all-required (pull_request) Successful in 2s
Details
E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 6m15s
Details
audit-force-merge / audit (pull_request_target) Has been skipped
Details
485887bd0a 
Pins the public /compute/metadata contract:
- reachable without auth
- returns expected provider shape + instance counts
- cross-checks against in-tree allowlist

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
agent-dev-a closed this pull request 2026-06-10 05:50:17 +00:00
Some checks are pending
ci-arm64-advisory / fast-checks (pull_request) Waiting to run
Details
Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 7s
Details
CI / Python Lint & Test (pull_request) Successful in 4s
Details
Harness Replays / detect-changes (pull_request) Successful in 5s
Details
E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 7s
Details
Lint forbidden tenant-env keys / Scan for repo-host token write into tenant workspace surface (pull_request) Successful in 5s
Details
E2E Chat / detect-changes (pull_request) Successful in 8s
Details
Handlers Postgres Integration / detect-changes (pull_request) Successful in 9s
Details
Harness Replays / Harness Replays (pull_request) Successful in 2s
Details
E2E API Smoke Test / detect-changes (pull_request) Successful in 14s
Details
Lint forbidden tenant-env keys / Scan workspace_secrets writers for forbidden env keys (pull_request) Successful in 10s
Details
CI / Detect changes (pull_request) Successful in 15s
Details
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 5s
Details
E2E Chat / E2E Chat (pull_request) Successful in 3s
Details
sop-checklist / review-refire (pull_request_target) Has been skipped
Details
gate-check-v3 / gate-check (pull_request_target) Successful in 7s
Details
security-review / approved (pull_request_target) Failing after 6s
Details
Lint shellcheck (arm64 pilot) / shellcheck-arm64 (pilot) (pull_request) Successful in 15s
Details
CI / Canvas (Next.js) (pull_request) Successful in 3s
Details
CI / Shellcheck (E2E scripts) (pull_request) Successful in 2s
Details
qa-review / approved (pull_request_target) Failing after 9s
Details
CI / Canvas Deploy Status (pull_request) Successful in 1s
Details
sop-checklist / all-items-acked (pull_request) acked: 0/7 — missing: comprehensive-testing, local-postgres-e2e, staging-smoke, +4 — body-unfilled: comprehensive-testing, local-postgres-e2
Details
sop-checklist / na-declarations (pull_request) N/A: (none)
Details
E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 19s
Details
sop-checklist / all-items-acked (pull_request_target) Successful in 43s
Details
lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 55s
Details
Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Failing after 1m2s
Required
Details
Local Provision Lifecycle E2E / Local Provision Lifecycle E2E (stub) (pull_request) Successful in 2m8s
Details
Local Provision Lifecycle E2E / Local Provision Lifecycle E2E (real image + MiniMax LLM, advisory) (pull_request) Successful in 1m41s
Details
CI / Platform (Go) (pull_request) Successful in 4m52s
Details
CI / all-required (pull_request) Successful in 2s
Required
Details
E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 6m15s
Required
Details
audit-force-merge / audit (pull_request_target) Has been skipped
Details
E2E Peer Visibility (literal MCP list_peers) / E2E Peer Visibility (pull_request)
Required

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
area/ci
CI/CD pipeline issues
 do-not-auto-merge
Opt out of autonomous merge-queue merging
 kind/infrastructure
Infrastructure-related issues
 merge-queue
Ready for serialized Gitea merge queue
 merge-queue-hold
Temporarily hold PR in merge queue
 platform/go
Go platform test issues
 release-blocker
Blocks the staging→main promotion / a release
 release-test
security
test-label-sre
tier:high
High risk per dev-sop §SOP-6 — ceo only, 24h cooldown
 tier:low
Low risk per dev-sop §SOP-6 — engineers/managers/ceo can approve
 tier:medium
Medium risk per dev-sop §SOP-6 — managers/ceo can approve
 triage-test
test
 wip
Work in progress — do not auto-merge
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
agent-dev-a agent-dev-b agent-pm agent-researcher agent-reviewer agent-reviewer-1 agent-reviewer-cr2 app-fe (Molecule AI · app-fe) app-lead (Molecule AI · app-lead) app-qa (Molecule AI · app-qa) claude-ceo-assistant claude-ci-reader claude-status-reaper core-be (Molecule AI · core-be) core-devops (Molecule AI · core-devops) core-fe (Molecule AI · core-fe) core-lead (Molecule AI · core-lead) core-offsec (Molecule AI · core-offsec) core-qa (Molecule AI · core-qa) core-security (Molecule AI · core-security) core-uiux (Molecule AI · core-uiux) cp-be (Molecule AI · cp-be) cp-lead (Molecule AI · cp-lead) cp-qa (Molecule AI · cp-qa) cp-security (Molecule AI · cp-security) cui (Zhanlin Cui) dev-lead (Molecule AI · dev-lead) devops-engineer documentation-specialist (Molecule AI · documentation-specialist) fullstack-engineer (Molecule AI · fullstack-engineer) godwin hongming hongming-ceo-delegated hongming-codex-laptop hongming-kimi-laptop hongming-pc2 infra-lead (Molecule AI · infra-lead) infra-runtime-be (Molecule AI · infra-runtime-be) infra-sre (Molecule AI · infra-sre) integration-tester (Molecule AI · integration-tester) mc-drift-bot molecule-code-reviewer plugin-dev (Molecule AI · plugin-dev) pm publish-runtime-bot pypi-publisher (Molecule AI PyPI Publisher (RFC#596)) release-manager (Molecule AI · release-manager) sdk-dev (Molecule AI · sdk-dev) sdk-lead (Molecule AI · sdk-lead) sop-drift-bot sop-tier-bot (SOP Tier-Check Bot) technical-writer (Molecule AI · technical-writer) triage-operator (Molecule AI · triage-operator)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: molecule-ai/molecule-core#2510
Delete Branch "feat/2489-ssot-compute-metadata"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?