Hongming Wang b54ceb799f fix: address 5-axis review findings on PR #2413 ... Critical: - ExternalConnectModal.tsx: filledUniversalMcp substitution searched for WORKSPACE_AUTH_TOKEN but the snippet's placeholder is now MOLECULE_WORKSPACE_TOKEN (changed in the previous polish commit 876c0bfc). Operators copy-pasting the MCP tab would have gotten a literal "<paste from create response>" instead of the token. Fix the substitution to match the new placeholder name. Important: - mcp_cli._platform_register: 401/403 from initial register now hard- exits with code 3 + an actionable stderr message pointing the operator at the canvas Tokens tab. Pre-fix: warning log + continue, which made a bad-token startup silently fail (heartbeat 401's forever, every tool call also 401's, no clear surfacing in the operator's MCP client). 500/503 still log + continue (transient platform blips shouldn't abort the MCP loop). - a2a_mcp_server.cli_main docstring: removed stale claim that this is the wheel's console-script entry-point target. The actual target is mcp_cli.main since 2026-04-30. Wheel-smoke pins both names so the functionality was correct, but the doc was lying. Test coverage: 3 new mcp_cli tests: - register 401 exits code=3 + stderr mentions canvas Tokens tab - register 403 (C18 hijack rejection) takes same path - register 500/503 does NOT exit — only auth errors hard-fail Findings deferred to follow-up (acceptable per review rubric): - Code dedup across mcp_cli / heartbeat.py / molecule_agent SDK - Pooled httpx.Client for connection reuse - Heartbeat exponential backoff - Token-resolution ordering parity (env-first vs file-first) between mcp_cli.main and platform_auth.get_token Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-04-30 16:06:59 -07:00
..
e2e	fix(e2e-canvas): kill teardown race that poisons concurrent runs	2026-04-29 19:23:56 -07:00
public
src	fix: address 5-axis review findings on PR #2413	2026-04-30 16:06:59 -07:00
.env.example
.gitignore
components.json	chore(canvas): initialize shadcn/ui — components.json + cn utility	2026-04-18 07:57:17 -07:00
Dockerfile	chore(canvas): upgrade node:20-alpine → node:22-alpine	2026-04-24 18:54:30 +00:00
next.config.ts	fix(canvas,dotenv): review-driven hardening of fit gate + parser parity	2026-04-24 22:23:51 -07:00
package-lock.json	chore(deps): batch dep bumps — 6 safe upgrades (4 actions majors + 2 npm dev deps)	2026-04-28 17:44:55 -07:00
package.json	chore(deps): batch dep bumps — 6 safe upgrades (4 actions majors + 2 npm dev deps)	2026-04-28 17:44:55 -07:00
playwright.config.ts
playwright.staging.config.ts	feat(e2e): canary + canvas Playwright workflows; delegation mechanics	2026-04-21 04:15:10 -07:00
postcss.config.js
tailwind.config.ts
tsconfig.json
vitest.config.ts	feat(canvas): vitest coverage instrumentation (#1815, no CI gate yet)	2026-04-26 23:44:07 -07:00