fred 8a2473da11 fix(gateway): serialize bootstrap setup with an advisory lock (#1430) ...

POST /api/bootstrap/setup checked the zero-user count and then created the
first admin with nothing making the two atomic, so two concurrent setup
requests could both pass the check and each create an admin user plus an
admin API token.

Setup now runs inside a db.transaction that first takes
pg_advisory_xact_lock(BOOTSTRAP_SETUP_LOCK_KEY): the second concurrent
caller blocks until the first commits, re-reads the count, and gets 403.
The lock is transaction-scoped, so it also serializes across gateway
replicas sharing the database.

Spec: mock db gained transaction/execute; new assertions pin
lock-before-count ordering, and a new suite pins 403 + no createUser call
when users already exist.

Closes #1430

2026-08-26 17:23:58 -05:00

..

src

fix(gateway): serialize bootstrap setup with an advisory lock (#1430)

2026-08-26 17:23:58 -05:00

package.json

feat: add Tess runtime provider registry (#722)

2026-07-12 23:53:54 +00:00

tsconfig.json

fix: add vitest.config.ts to eslint allowDefaultProject (#440 build fix) (#441)

2026-04-05 22:01:57 +00:00

tsconfig.typecheck.json

fix: rename all packages from @mosaic/* to @mosaicstack/*

2026-04-04 21:43:23 -05:00

vitest.config.ts

fix: bootstrap hotfix — DTO erasure, wizard failure, port prefill, Pi SDK copy (mosaic-v0.0.26) (#440)

2026-04-05 21:43:30 +00:00