molecule-ai/molecule-core

[core-devops-agent] chore: promote main→staging v3 (operational push fix + security tests) #964

Merged

devops-engineer merged 7 commits from promote/main-to-staging-v3 into staging

2026-05-14 05:04:41 +00:00

Author	SHA1	Message	Date
molecule-operator	647dec55e6	chore: promote main→staging v3 (all pending main fixes) Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 21s Details sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details Harness Replays / detect-changes (pull_request) Successful in 27s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 57s Details CI / Detect changes (pull_request) Successful in 1m0s Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 18s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 13s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 43s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 2m25s Details qa-review / approved (pull_request) Successful in 13s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m21s Details security-review / approved (pull_request) Successful in 14s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m35s Details Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 2m16s Details Harness Replays / Harness Replays (pull_request) Successful in 6s Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 2m26s Details CI / Canvas (Next.js) (pull_request) Successful in 11s Details Ops Scripts Tests / Ops scripts (unittest) (pull_request) Failing after 1m24s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 6s Details CI / Python Lint & Test (pull_request) Successful in 6s Details audit-force-merge / audit (pull_request) Successful in 29s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 8s Details gate-check-v3 / gate-check (pull_request) Successful in 17s Details sop-checklist / all-items-acked (pull_request) Successful in 28s Details sop-tier-check / tier-check (pull_request) Successful in 19s Details CI / Canvas Deploy Reminder (pull_request) Successful in 5s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 1m49s Details CI / Platform (Go) (pull_request) Failing after 3m18s Details CI / all-required (pull_request) Successful in 4s Details	2026-05-14 05:01:45 +00:00
devops-engineer	6582c0964a	Merge pull request 'test(handlers/org_helpers): add security-critical test coverage for resolveInsideRoot, isSafeRoleName, mergeCategoryRouting' (#956 ) from feat/org-helpers-security-tests into main Some checks failed Block internal-flavored paths / Block forbidden paths (push) Successful in 6s Details Harness Replays / detect-changes (push) Successful in 5s Details CI / Detect changes (push) Successful in 14s Details E2E API Smoke Test / detect-changes (push) Successful in 14s Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 16s Details Handlers Postgres Integration / detect-changes (push) Successful in 16s Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 11s Details Runtime PR-Built Compatibility / detect-changes (push) Successful in 23s Details Harness Replays / Harness Replays (push) Successful in 10s Details CI / Shellcheck (E2E scripts) (push) Successful in 9s Details CI / Canvas (Next.js) (push) Successful in 14s Details CI / Python Lint & Test (push) Successful in 9s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 13s Details CI / Canvas Deploy Reminder (push) Successful in 11s Details E2E API Smoke Test / E2E API Smoke Test (push) Successful in 2m13s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 3m1s Details Handlers Postgres Integration / Handlers Postgres Integration (push) Successful in 5m26s Details publish-workspace-server-image / build-and-push (push) Successful in 8m57s Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 7s Details SECRET_PATTERNS drift lint / Detect SECRET_PATTERNS drift (push) Successful in 58s Details Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Successful in 5m27s Details main-red-watchdog / watchdog (push) Successful in 45s Details CI / Platform (Go) (push) Failing after 16m2s Details publish-workspace-server-image / Production auto-deploy (push) Failing after 8m26s Details CI / all-required (push) Successful in 5s Details gate-check-v3 / gate-check (push) Successful in 22s Details gitea-merge-queue / queue (push) Successful in 16s Details Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Successful in 8m8s Details status-reaper / reap (push) Successful in 1m23s Details	2026-05-14 04:47:05 +00:00
Molecule AI Core-BE	9cd76919af	test(handlers/org_helpers): add security-critical test coverage Some checks failed Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 15s Details CI / Detect changes (pull_request) Successful in 29s Details Harness Replays / detect-changes (pull_request) Successful in 13s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 36s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 36s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 15s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 34s Details qa-review / approved (pull_request) Successful in 17s Details security-review / approved (pull_request) Successful in 15s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 29s Details sop-checklist / all-items-acked (pull_request) Successful in 14s Details gate-check-v3 / gate-check (pull_request) Successful in 25s Details sop-tier-check / tier-check (pull_request) Successful in 17s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m9s Details audit-force-merge / audit (pull_request) Successful in 7s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 6s Details CI / Canvas (Next.js) (pull_request) Successful in 7s Details CI / Python Lint & Test (pull_request) Successful in 7s Details Harness Replays / Harness Replays (pull_request) Successful in 7s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 9s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 8s Details CI / Canvas Deploy Reminder (pull_request) Successful in 6s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 1m50s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 5m30s Details CI / Platform (Go) (pull_request) Failing after 16m11s Details CI / all-required (pull_request) Successful in 4s Details Add 25 unit tests for three previously-uncovered pure helpers in org_helpers.go: - resolveInsideRoot (10 cases): empty path, absolute path, dotdot traversal, dotdot with intermediate, valid relative, exact root match, dot path component, nested dotdot escapes, dotdot at start, sibling directory (the filepath.Separator guard is exercised). - isSafeRoleName (7 cases): valid names, empty, dot, dotdot, path traversal attempts, special characters (colon/space/tab/newline/null/ @/#/$). Defense-in-depth for the persona env loader (OFFSEC-006 class). - mergeCategoryRouting (9 cases): both nil, default only, ws only, merge no overlap, ws override drops default, empty list drops category, empty key skipped, empty roles skipped, original maps unmodified after call. Go not available in container; CI runs the suite.	2026-05-14 04:45:13 +00:00
devops-engineer	0e549dfc55	Merge pull request 'ci: stop operational push jobs painting main red' (#962 ) from fix/main-push-operational-red into main Some checks failed E2E API Smoke Test / E2E API Smoke Test (push) Blocked by required conditions Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Blocked by required conditions Details Handlers Postgres Integration / Handlers Postgres Integration (push) Blocked by required conditions Details publish-workspace-server-image / Production auto-deploy (push) Blocked by required conditions Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Blocked by required conditions Details Block internal-flavored paths / Block forbidden paths (push) Successful in 9s Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (push) Successful in 14s Details CI / Detect changes (push) Has been cancelled Details E2E API Smoke Test / detect-changes (push) Successful in 37s Details CI / Platform (Go) (push) Has been cancelled Details CI / Canvas (Next.js) (push) Has been cancelled Details CI / Shellcheck (E2E scripts) (push) Has been cancelled Details E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 39s Details CI / Canvas Deploy Reminder (push) Has been cancelled Details Handlers Postgres Integration / detect-changes (push) Successful in 38s Details CI / Python Lint & Test (push) Has been cancelled Details CI / all-required (push) Has been cancelled Details Secret scan / Scan diff for credential-shaped strings (push) Successful in 15s Details publish-workspace-server-image / build-and-push (push) Has been cancelled Details Runtime PR-Built Compatibility / detect-changes (push) Has been cancelled Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (push) Successful in 1m32s Details status-reaper / reap (push) Has started running Details Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 7s Details Ops Scripts Tests / Ops scripts (unittest) (push) Successful in 1m29s Details Sweep stale Cloudflare Tunnels / Sweep CF tunnels (push) Successful in 18s Details gitea-merge-queue / queue (push) Successful in 16s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (push) Successful in 2m12s Details	2026-05-14 04:44:43 +00:00
hongming-codex-laptop	dec1be237d	ci: preserve sop checklist concurrency update All checks were successful Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 14s Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 10s Details CI / Detect changes (pull_request) Successful in 25s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 27s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 27s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 27s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 19s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 28s Details qa-review / approved (pull_request) Successful in 14s Details gate-check-v3 / gate-check (pull_request) Successful in 25s Details security-review / approved (pull_request) Successful in 11s Details sop-checklist / all-items-acked (pull_request) Successful in 11s Details sop-tier-check / tier-check (pull_request) Successful in 11s Details audit-force-merge / audit (pull_request) Successful in 11s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m13s Details Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 1m33s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m26s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 1m41s Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 1m42s Details Ops Scripts Tests / Ops scripts (unittest) (pull_request) Successful in 1m30s Details CI / Platform (Go) (pull_request) Successful in 7s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 5s Details CI / Canvas (Next.js) (pull_request) Successful in 7s Details CI / Python Lint & Test (pull_request) Successful in 5s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 7s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 6s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 8s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 6s Details CI / Canvas Deploy Reminder (pull_request) Successful in 6s Details CI / all-required (pull_request) Successful in 7s Details	2026-05-13 21:42:26 -07:00
hongming-codex-laptop	4491b07add	ci: narrow status reaper soft skip to commit listing All checks were successful Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 16s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 18s Details CI / Detect changes (pull_request) Successful in 24s Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 9s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 20s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 38s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 39s Details qa-review / approved (pull_request) Successful in 16s Details security-review / approved (pull_request) Successful in 17s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 37s Details sop-checklist / all-items-acked (pull_request) Successful in 18s Details sop-tier-check / tier-check (pull_request) Successful in 16s Details gate-check-v3 / gate-check (pull_request) Successful in 31s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m13s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m28s Details Ops Scripts Tests / Ops scripts (unittest) (pull_request) Successful in 1m19s Details Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 1m39s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 1m58s Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 1m57s Details CI / Platform (Go) (pull_request) Successful in 8s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 9s Details CI / Canvas (Next.js) (pull_request) Successful in 9s Details CI / Python Lint & Test (pull_request) Successful in 8s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 6s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 6s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 7s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 9s Details CI / Canvas Deploy Reminder (pull_request) Successful in 3s Details CI / all-required (pull_request) Successful in 5s Details	2026-05-13 21:41:58 -07:00
hongming-codex-laptop	3b47c974ee	ci: stop operational push jobs painting main red Some checks failed sop-checklist / na-declarations (pull_request) awaiting /sop-n/a declaration for: qa-review, security-review Details Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 16s Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 13s Details CI / Detect changes (pull_request) Successful in 38s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 53s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 55s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 55s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 24s Details qa-review / approved (pull_request) Failing after 22s Details security-review / approved (pull_request) Failing after 22s Details gate-check-v3 / gate-check (pull_request) Successful in 33s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 1m8s Details sop-checklist / all-items-acked (pull_request) Successful in 30s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m28s Details sop-tier-check / tier-check (pull_request) Successful in 20s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m46s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 2m10s Details Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 2m21s Details Ops Scripts Tests / Ops scripts (unittest) (pull_request) Successful in 1m39s Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 2m28s Details CI / Platform (Go) (pull_request) Successful in 8s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 11s Details CI / Canvas (Next.js) (pull_request) Successful in 13s Details CI / Python Lint & Test (pull_request) Successful in 14s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 10s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 10s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 10s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 5s Details CI / Canvas Deploy Reminder (pull_request) Successful in 5s Details CI / all-required (pull_request) Successful in 4s Details	2026-05-14 04:41:10 +00:00