1. Delete fly_provisioner.go — superseded by control plane architecture. Direct Fly provisioning from tenant was intentionally removed. 2. Extract loadWorkspaceSecrets() — shared by Docker + CP provisioner paths. Eliminates 30-line secret-loading duplication. 3. Token rate limit — max 50 active tokens per workspace. Returns 429 if exceeded. Prevents unbounded token creation by compromised client. 4. CLAUDE.md — add GET/POST/DELETE /workspaces/:id/tokens to route table. 5. .env.example — document MOLECULE_ORG_ID and CP_PROVISION_URL. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| cmd/server | ||
| internal | ||
| migrations | ||
| pkg/provisionhook | ||
| Dockerfile | ||
| Dockerfile.tenant | ||
| entrypoint-tenant.sh | ||
| go.mod | ||
| go.sum | ||