From a3edfffe213e42ffdde873e6c7369bd22697b8e5 Mon Sep 17 00:00:00 2001 From: Molecule AI Documentation Specialist Date: Sun, 10 May 2026 12:00:57 +0000 Subject: [PATCH 1/2] docs(changelog): add molecule-app a11y batch-2 entry for 2026-05-10 Closes doc-watch tracking: molecule-app#5 merged 2026-05-10T10:49:07Z Co-Authored-By: Claude Opus 4.7 --- content/docs/changelog.mdx | 1 + 1 file changed, 1 insertion(+) diff --git a/content/docs/changelog.mdx b/content/docs/changelog.mdx index ce161ad..515eaf2 100644 --- a/content/docs/changelog.mdx +++ b/content/docs/changelog.mdx @@ -93,6 +93,7 @@ Entries are published daily at 23:50 UTC. ### 🔧 Fixes +- **Canvas accessibility — WCAG 2.4.7 focus-visible rings (batch 2)**: `focus-visible` keyboard rings added to 9 customer-facing buttons across molecule-app — SignInButton on the landing page, "Request access" on the waitlist page, "+ New Workspace" CTA and Notifications bell in the app shell, "Try again" on error boundaries, "Sign out" in the header, the "I agree" button on terms-gate, and "Manage keys on canvas" in the API tokens view. ARIA attributes (`aria-current`, `aria-label`, `aria-busy`) also corrected on the billing view PlanCard and portal buttons. All rings use semantic color tokens — no hardcoded hex colors. (`molecule-app` [#5](https://git.moleculesai.app/molecule-ai/molecule-app/pull/5)) - **SSRF validation before writing external workspace URL**: the workspace handler now validates URLs against SSRF allowlists before writing external workspace configurations. (`molecule-core` [#221](https://git.moleculesai.app/molecule-ai/molecule-core/pull/221)) - **Dockerfile tenant chown /org-templates**: `/org-templates` directory now correctly chowned to the canvas user to fix `EACCES` on `mkdir` for external resolvers. (`molecule-core` [#223](https://git.moleculesai.app/molecule-ai/molecule-core/pull/223)) - **CI `ghcr` → `ECR` migration + POST route smoke tests**: canary-verify workflow migrated from GHCR to ECR; new POST route smoke tests added for deployment verification. (`molecule-core` [#217](https://git.moleculesai.app/molecule-ai/molecule-core/pull/217)) From 796487a04a603c72f70f7d69b0e0212aef7e136f Mon Sep 17 00:00:00 2001 From: Molecule AI Documentation Specialist Date: Sun, 10 May 2026 20:16:44 +0000 Subject: [PATCH 2/2] docs(changelog): backfill molecule-app #9 and #10 accessibility entries Covers two PRs that merged at 08:47 and 08:52 UTC (before the 08:17 tick window, hence missed in initial docs#12): - molecule-app#10 (08:52 UTC): ThemeToggle WCAG 2.4.7 focus ring - molecule-app#9 (08:47 UTC): NotImplementedState WCAG 2.4.7 focus ring Changelog now covers all three a11y PRs: #5, #9, #10. Co-Authored-By: Claude Opus 4.7 --- content/docs/changelog.mdx | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/docs/changelog.mdx b/content/docs/changelog.mdx index 515eaf2..e80786a 100644 --- a/content/docs/changelog.mdx +++ b/content/docs/changelog.mdx @@ -94,6 +94,8 @@ Entries are published daily at 23:50 UTC. ### 🔧 Fixes - **Canvas accessibility — WCAG 2.4.7 focus-visible rings (batch 2)**: `focus-visible` keyboard rings added to 9 customer-facing buttons across molecule-app — SignInButton on the landing page, "Request access" on the waitlist page, "+ New Workspace" CTA and Notifications bell in the app shell, "Try again" on error boundaries, "Sign out" in the header, the "I agree" button on terms-gate, and "Manage keys on canvas" in the API tokens view. ARIA attributes (`aria-current`, `aria-label`, `aria-busy`) also corrected on the billing view PlanCard and portal buttons. All rings use semantic color tokens — no hardcoded hex colors. (`molecule-app` [#5](https://git.moleculesai.app/molecule-ai/molecule-app/pull/5)) +- **Canvas accessibility — WCAG 2.4.7 ThemeToggle focus ring**: `focus-visible` keyboard ring added to the three theme-preference radio buttons (Light / System / Dark) in `ThemeToggle`, fixing WCAG 2.4.7 for the theme switcher. (`molecule-app` [#10](https://git.moleculesai.app/molecule-ai/molecule-app/pull/10)) +- **Canvas accessibility — WCAG 2.4.7 NotImplementedState focus ring**: `focus-visible` keyboard ring added to the "Track issue #N" link in `NotImplementedState`, completing the WCAG 2.4.7 focus-visible ring coverage across all customer-facing interactive elements. (`molecule-app` [#9](https://git.moleculesai.app/molecule-ai/molecule-app/pull/9)) - **SSRF validation before writing external workspace URL**: the workspace handler now validates URLs against SSRF allowlists before writing external workspace configurations. (`molecule-core` [#221](https://git.moleculesai.app/molecule-ai/molecule-core/pull/221)) - **Dockerfile tenant chown /org-templates**: `/org-templates` directory now correctly chowned to the canvas user to fix `EACCES` on `mkdir` for external resolvers. (`molecule-core` [#223](https://git.moleculesai.app/molecule-ai/molecule-core/pull/223)) - **CI `ghcr` → `ECR` migration + POST route smoke tests**: canary-verify workflow migrated from GHCR to ECR; new POST route smoke tests added for deployment verification. (`molecule-core` [#217](https://git.moleculesai.app/molecule-ai/molecule-core/pull/217))