molecule-core/canvas/src
Hongming Wang 206856ad3a fix(canvas): add 15s fetch timeout on API calls
Pre-launch audit flagged api.ts as missing a timeout on every fetch.
A slow or hung CP response would leave the UI spinning indefinitely
with no way for the user to abort — effectively a client-side DoS.

15s is long enough for real CP queries (slowest observed is Stripe
portal redirect at ~3s) and short enough that a stalled backend
surfaces as a clear error with a retry affordance.

Uses AbortSignal.timeout (widely supported since 2023) so the
abort propagates through React Query / SWR consumers cleanly.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-19 02:12:47 -07:00
..
__tests__ fix(canvas): replace unsafe-inline/unsafe-eval with nonce-based CSP (#450) 2026-04-16 20:35:27 +00:00
app fix(canvas): 5 UX polish fixes — error handling, a11y, loading state 2026-04-16 21:39:44 -07:00
components fix(canvas): degraded badge WCAG AA contrast — amber-400 → amber-300 (closes #885) 2026-04-18 12:05:38 -07:00
hooks initial commit — Molecule AI platform 2026-04-13 11:55:37 -07:00
lib fix(canvas): add 15s fetch timeout on API calls 2026-04-19 02:12:47 -07:00
store fix(gate-6): merge main into fix/a11y-audit-902-905 — resolve 7 conflicts 2026-04-18 01:34:00 +00:00
stores initial commit — Molecule AI platform 2026-04-13 11:55:37 -07:00
styles fix(canvas): C1/C2/C3/C5 dark-theme CSS and ReactFlow colorMode 2026-04-16 10:45:16 +00:00
types feat(canvas): audit trail visualization panel (issue #753) 2026-04-17 16:03:28 +00:00
middleware.ts fix(canvas): replace unsafe-inline/unsafe-eval with nonce-based CSP (#450) 2026-04-16 20:35:27 +00:00