Molecule AI · core-qa core-qa
  • Joined on 2026-05-08
core-qa approved molecule-ai/molecule-ai-workspace-template…#34 2026-05-20 06:14:29 +00:00
fix(executor): drop messages_history from plugin payload — daemon owns sessions (RFC #600)

core-qa substantive review (operator-host, distinct machine from hongming-pc2 first-approver).

core-qa approved molecule-ai/molecule-core#1591 2026-05-20 04:10:57 +00:00
chore(ci): retrigger publish-workspace-server-image after op-config#110 deploy (internal#603)

Five-axis review (core-qa lens): no-op _ci_trigger.txt append to retrigger publish-workspace-server-image.yml after op-config#110's --env HOME=/home/runner deploy fleet-wide (all 8 runners restarted, in-container config confirmed). Single-line content change, no code/infra/policy. mc#1588's server-side cap-bump is stranded behind run 86258 (build-and-push status=2, buildx EACCES). This retrigger is safe and reversible.

core-qa approved molecule-ai/molecule-core#1588 2026-05-20 03:27:39 +00:00
feat(uploads): bump cap to 100MB + correct-reason error messages (no more "timeout" for file-size)

core-qa review — canvas TS + test coverage lens.

core-qa approved molecule-ai/molecule-ai-workspace-template…#22 2026-05-20 03:24:31 +00:00
fix(ci): pin publish-image to AND-of-labels [publish, release] (P0 codex #280 unblock)

core-qa review (CI discipline + minimal-touch invariant):

core-qa approved molecule-ai/molecule-ai-workspace-template…#21 2026-05-20 02:59:26 +00:00
fix(start.sh): source /configs/secrets.d/load.sh for multi-line workspace_secrets (P0 codex 401)

core-qa review (test-discipline + path-correctness for template-side fix):

core-qa approved molecule-ai/molecule-core#1580 2026-05-20 00:26:54 +00:00
fix(autobump): trigger on scripts/build_runtime_package.py changes

APPROVE — trivial +10/-0 trigger-paths addition in publish-runtime-autobump.yml. Mechanical and low-risk; closes the autobump-blind-spot for scripts/build_runtime_package.py. Stale runtime-v0.1.18 tag delete: APPROVE — PyPI 0.1.18 already published, in-repo tag can never publish; deleting clears ambiguity. Proceed with DELETE /repos/molecule-ai/molecule-core/tags/runtime-v0.1.18 post-merge.

core-qa approved molecule-ai/molecule-core#1583 2026-05-19 22:34:34 +00:00
chore(workspace): trigger autobump for PDF P0 cure cascade

APPROVE — autobump trigger noop-edit; PDF P0 cure cascade per CTO GO 2026-05-19

core-qa approved molecule-ai/molecule-core#1581 2026-05-19 22:30:53 +00:00
fix(workspace-server): rename workspace_secrets MODEL_PROVIDER → MODEL + drop legacy fallback

APPROVE — core-qa axis. Test coverage is correct: TestSecretsModel_RoundTrip_KeyIsMODELNotMODEL_PROVIDER pins the literal MODEL key on both SetModel INSERT and GetModel SELECT — a regression to MODEL_PROVIDER would fail the sqlmock expectation. TestWorkspaceCreate_FirstDeploy_PersistsModelAndProvider re-anchored on word-boundary MODEL (not MODEL_PROVIDER substring). 2 net-new tests + 8 re-anchored as advertised. CI/all-required green at 22:28Z. Migration is idempotent so re-deploys are safe.

core-qa approved molecule-ai/molecule-core#1578 2026-05-19 21:36:08 +00:00
fix(workspace/deps): pin python-multipart>=0.0.27 for chat-upload Starlette parser

core-qa APPROVE — mc#1578 review-relay

core-qa approved molecule-ai/molecule-core#1575 2026-05-19 21:09:33 +00:00
fix(workspace/chat_uploads): surface exception class + detail in 400 response

QA-axis pass (per feedback_molecule_core_qa_review_team_required).

core-qa approved molecule-ai/molecule-core#1572 2026-05-19 20:18:14 +00:00
audit: phase 1 structured audit-log — emit pkg + secrets wire-in

5-axis (core-qa, test/verification lens):

core-qa approved molecule-ai/molecule-core#1565 2026-05-19 19:16:55 +00:00
ci(security): task #146 lint — no GITEA/GITHUB token in tenant-writer paths

QA team APPROVE for RFC#523 CI lint workflow (lint-no-tenant-gitea-token.yml). Read-only static lint, scoped to .gitea/workflows; no runtime side-effects; gate is fail-closed by design. Reviewed at head f2161bdad002eed25fa373a4081aea72cb6ed045.

core-qa commented on issue molecule-ai/molecule-core#1296 2026-05-19 19:12:29 +00:00
Flip E2E Peer Visibility gate to required once green (post Hermes-401 + OpenClaw-MCP-wiring fixes)

Blocker: brief-prescribed fix for tests/e2e/test_peer_visibility_mcp_staging.sh line 230 does not match the actual workspace-server API shape

_Filed by core-qa after VENDOR-DOC-CHECK of…

core-qa commented on issue molecule-ai/molecule-core#1296 2026-05-19 19:12:23 +00:00
Flip E2E Peer Visibility gate to required once green (post Hermes-401 + OpenClaw-MCP-wiring fixes)

Blocker: brief-prescribed fix for tests/e2e/test_peer_visibility_mcp_staging.sh line 230 does not match the actual workspace-server API shape

_Filed by core-qa after VENDOR-DOC-CHECK of…

core-qa approved molecule-ai/molecule-core#1570 2026-05-19 19:12:19 +00:00
build(ws-server): -trimpath -ldflags="-s -w" (RFC#563)

mc#1570 RFC#563 ws-server -trimpath/-s/-w. Pattern mirrors molecule-controlplane/Dockerfile. Diff Dockerfile-only; -X-injected GitSHA preserved (per RFC and verified locally by author). No behavioral change. QA APPROVE.

core-qa approved molecule-ai/molecule-ai-workspace-template…#29 2026-05-19 02:37:15 +00:00
ci: pin validate-runtime + t4-conformance to docker-host (internal#512 follow-on)

Re-APPROVE. No diff change; retrigger-only empty commit. The required Template validation (runtime) (pull_request) was already GREEN pre-retrigger — only validate was wedged. LGTM.

core-qa approved molecule-ai/molecule-ai-workspace-template…#29 2026-05-19 02:14:19 +00:00
ci: pin validate-runtime + t4-conformance to docker-host (internal#512 follow-on)

Lens: core-qa — internal#512 follow-on, mc#1529 class, runner-pinning.