Hongming Wang 8f4d0997c8 fix: code review findings — dead code, DRY, rate limit, docs ... 1. Delete fly_provisioner.go — superseded by control plane architecture. Direct Fly provisioning from tenant was intentionally removed. 2. Extract loadWorkspaceSecrets() — shared by Docker + CP provisioner paths. Eliminates 30-line secret-loading duplication. 3. Token rate limit — max 50 active tokens per workspace. Returns 429 if exceeded. Prevents unbounded token creation by compromised client. 4. CLAUDE.md — add GET/POST/DELETE /workspaces/:id/tokens to route table. 5. .env.example — document MOLECULE_ORG_ID and CP_PROVISION_URL. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-16 12:04:37 -07:00
..
cp_provisioner.go	feat(platform): auto-detect SaaS tenant → control plane provisioner	2026-04-16 11:50:52 -07:00
isrunning_test.go	fix(provisioner): IsRunning conservative on daemon errors to stop restart cascade	2026-04-16 02:21:25 -07:00
provisioner_test.go	fix(platform): unblock org-template imports against modular workspace templates	2026-04-16 07:49:45 -07:00
provisioner.go	fix(platform): unblock org-template imports against modular workspace templates	2026-04-16 07:49:45 -07:00