Molecule AI Core-DevOps f11b1703f0 hotfix(wsauth+restart_template): CanvasOrBearer return + CWE-22 path traversal guard ... - wsauth_middleware: add missing return after AbortWithStatusJSON in CanvasOrBearer final else branch (CRITICAL auth bypass) - restart_template: apply sanitizeRuntime before filepath.Join to prevent CWE-22 path traversal via dbRuntime field		2026-04-24 18:12:07 +00:00
..
cmd/server	fix(go): replace $1 literal with resp.Body.Close() in 7 files (#1247)	2026-04-21 03:18:21 +00:00
internal	hotfix(wsauth+restart_template): CanvasOrBearer return + CWE-22 path traversal guard	2026-04-24 18:12:07 +00:00
migrations	feat(a2a): queue-on-busy — Phase 1 of priority queue (#1870)	2026-04-23 14:09:29 -07:00
pkg/provisionhook	fix(docker): fix plugin go.mod replace for TokenProvider interface (#960)	2026-04-20 13:42:53 -07:00
.ci-force	chore: force Platform(Go) CI run on main — validate go vet clean	2026-04-21 15:43:19 +00:00
.gitignore	feat(ws-server): pull env from CP on startup	2026-04-19 02:41:15 -07:00
.golangci.yaml	chore(workspace-server): add golangci.yaml disabling errcheck	2026-04-24 07:16:54 +00:00
Dockerfile	chore: extract ContextMenu Zustand fix + a2a_proxy local-docker SSRF bypass + workspace-server Dockerfile GID entrypoint	2026-04-22 20:00:16 -07:00
Dockerfile.tenant	feat(terminal): remote path via aws ec2-instance-connect + pty	2026-04-21 18:13:29 -07:00
entrypoint-tenant.sh	fix(security): add USER directive before ENTRYPOINT in all tenant images (#1155)	2026-04-20 23:51:33 +00:00
go.mod	fix(#1933): bump molecule-ai-plugin-github-app-auth to current main (step 1)	2026-04-23 18:53:25 -07:00
go.sum	fix(#1933): bump molecule-ai-plugin-github-app-auth to current main (step 1)	2026-04-23 18:53:25 -07:00