molecule-core/canvas
Molecule AI · core-security 9ce484886d
Some checks failed
Block internal-flavored paths / Block forbidden paths (pull_request) Failing after 32s
E2E Staging SaaS (full lifecycle) / E2E Staging SaaS (pull_request) Has been skipped
E2E Staging SaaS (full lifecycle) / pr-validate (pull_request) Successful in 1m10s
Harness Replays / detect-changes (pull_request) Successful in 28s
CI / Detect changes (pull_request) Successful in 2m0s
E2E API Smoke Test / detect-changes (pull_request) Successful in 1m46s
Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 20s
E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 1m51s
Handlers Postgres Integration / detect-changes (pull_request) Successful in 1m31s
CI / all-required (pull_request) Blocked by required conditions
publish-runtime-autobump / bump-and-tag (pull_request) Has been skipped
Secret scan / Scan diff for credential-shaped strings (pull_request) Failing after 22s
publish-runtime-autobump / pr-validate (pull_request) Successful in 1m3s
qa-review / approved (pull_request) Successful in 26s
lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m22s
gate-check-v3 / gate-check (pull_request) Successful in 44s
Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 1m9s
security-review / approved (pull_request) Successful in 17s
sop-checklist / all-items-acked (pull_request) Successful in 18s
sop-tier-check / tier-check (pull_request) Successful in 19s
lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 2m33s
Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 2m22s
Ops Scripts Tests / Ops scripts (unittest) (pull_request) Failing after 1m37s
lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 2m38s
lint-mask-pr-atomicity / lint-mask-pr-atomicity (pull_request) Successful in 2m45s
E2E Staging External Runtime / E2E Staging External Runtime (pull_request) Successful in 5m33s
Harness Replays / Harness Replays (pull_request) Successful in 6s
CI / Shellcheck (E2E scripts) (pull_request) Successful in 7s
Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Failing after 13m40s
E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 2m36s
Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 5m35s
Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 2m44s
CI / Python Lint & Test (pull_request) Successful in 7m49s
CI / Platform (Go) (pull_request) Failing after 8m2s
E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 9m26s
CI / Canvas (Next.js) (pull_request) Failing after 15m46s
CI / Canvas Deploy Reminder (pull_request) Has been skipped
merge: resolve conflicts with main — keep CWE-78 guard + rows.Err() checks
Conflict resolution for PR mc#1071 targeting main:
- org_helpers.go: deduplicate expandEnvRef/isEnvIdentStart/isEnvIdentPart (added inline by main, also present in branch with doc comment; kept documented version)
- org_helpers_pure_test.go: merge whitespace-only formatting conflicts (take main alignment)
- org_helpers_security_test.go: merge style conflicts + keep main POSIX guard tests
- instructions_test.go: keep both branches of add/add conflict
- delegation_list_test.go: keep main version (branch deleted it)

Security fix (CWE-78) and rows.Err() checks are identical in both branches and remain intact.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-14 21:09:07 +00:00
..
e2e canvas/e2e: surface admin-orgs row + workspace body on failure 2026-05-03 14:01:50 -07:00
public chore: replace brand icon and add HANDOFF.md 2026-04-13 13:03:40 -07:00
src merge: resolve conflicts with main — keep CWE-78 guard + rows.Err() checks 2026-05-14 21:09:07 +00:00
.dockerignore feat(local-dev): containerize platform + canvas stack via docker-compose (closes #126) 2026-05-08 10:53:39 -07:00
.env.example fix(canvas): close 4 gaps in WS status indicator (env, toast, tests) 2026-04-14 08:26:38 +00:00
.gitignore feat(canvas): SaaS cross-origin — slug header + cookie credentials (Phase F) 2026-04-14 20:08:39 -07:00
components.json fix(canvas): restore text-white on saturated buttons + close zinc gaps 2026-05-03 02:04:20 -07:00
Dockerfile ci(docker): pin base image digests in all Dockerfiles 2026-05-09 23:56:39 +00:00
next.config.ts fix(canvas): boot-time matched-pair guard for ADMIN_TOKEN env vars (#175) 2026-05-08 19:22:39 -07:00
package-lock.json fix(canvas/test): resolve ~80 test failures across 17 test files (#299) 2026-05-11 08:14:55 +00:00
package.json feat(canvas): warm-paper theme + Tailwind v4 migration 2026-05-03 01:43:55 -07:00
playwright.config.ts initial commit — Molecule AI platform 2026-04-13 11:55:37 -07:00
playwright.staging.config.ts feat(e2e): canary + canvas Playwright workflows; delegation mechanics 2026-04-21 04:15:10 -07:00
postcss.config.js feat(canvas): warm-paper theme + Tailwind v4 migration 2026-05-03 01:43:55 -07:00
tsconfig.json initial commit — Molecule AI platform 2026-04-13 11:55:37 -07:00
vitest.config.ts fix(canvas): cap maxWorkers:1 to prevent jsdom pool worker startup timeouts 2026-05-09 02:02:10 +00:00