Hongming Wang 96b909b8f3 fix: code review findings — token UI, auth hardening, WS dedup ... 1. Settings panel: wire TokensTab into "API Tokens" tab (was imported but not rendered). Rename "API Keys" → "Secrets", add "API Tokens" tab. Fix docs link → doc.moleculesai.app/docs/tokens. 2. Referer match hardening: require exact host match or trailing slash to prevent evil.com subdomain bypass. Cache CANVAS_PROXY_URL at init time instead of per-request os.Getenv. 3. Extract shared deriveWsBaseUrl() to lib/ws-url.ts — eliminates duplicate 12-line derivation in socket.ts and TerminalTab.tsx. 4. Token list pagination: add ?limit= and ?offset= params (default 50, max 200) to GET /workspaces/:id/tokens. 507/507 canvas tests pass, Go build + vet clean. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-16 10:42:26 -07:00
..
__tests__	fix(canvas): address all code review findings on PR #482	2026-04-16 07:48:47 -07:00
app	Merge pull request #251 from Molecule-AI/feat/cookie-consent-banner	2026-04-15 13:49:53 -07:00
components	fix: code review findings — token UI, auth hardening, WS dedup	2026-04-16 10:42:26 -07:00
hooks	initial commit — Molecule AI platform	2026-04-13 11:55:37 -07:00
lib	fix: code review findings — token UI, auth hardening, WS dedup	2026-04-16 10:42:26 -07:00
store	fix: code review findings — token UI, auth hardening, WS dedup	2026-04-16 10:42:26 -07:00
stores	initial commit — Molecule AI platform	2026-04-13 11:55:37 -07:00
styles	fix(canvas): C1/C2/C3/C5 dark-theme CSS and ReactFlow colorMode	2026-04-16 10:45:16 +00:00
types	initial commit — Molecule AI platform	2026-04-13 11:55:37 -07:00
middleware.ts	initial commit — Molecule AI platform	2026-04-13 11:55:37 -07:00