Skip to content

Fix reliability issues — goroutine leak, panics, non-transactional writes#231

Merged
MichielDean merged 1 commit into
mainfrom
feat/sc-q4slr
Apr 14, 2026
Merged

Fix reliability issues — goroutine leak, panics, non-transactional writes#231
MichielDean merged 1 commit into
mainfrom
feat/sc-q4slr

Conversation

@MichielDean
Copy link
Copy Markdown
Owner

Closes droplet sc-q4slr.

…tional writes

- APITokenStore.Lookup: replace unbounded goroutine with synchronous
  last_used_at update using the request context
- jwt.go: NewJWTManager returns error instead of panic for short secret
- csrf.go: CSRFMiddleware, SetCSRFCookie, generateSignedToken return
  errors instead of panic; validate HMAC key is not empty
- embed.go: Mount returns error instead of panic on FS creation failure
- routes.go: handle all new error returns from JWT, CSRF, SPA mount
- executions.go: wrap INSERT in transaction, launch K8s job outside tx,
  use dedicated markExecutionFailed with its own transaction for
  failure status updates
- Update all callers and tests for new error-return signatures
@MichielDean MichielDean merged commit 232dc13 into main Apr 14, 2026
11 checks passed
@MichielDean MichielDean deleted the feat/sc-q4slr branch April 14, 2026 16:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant