Harden image admission, resource recovery and session renewal

Add exact-image compatibility policy, experimental admission, paginated build history and shared reauthentication checks. Preserve uncertain Docker creation records, bound frontend resource waits and renew runtime sessions proactively. Lazy-load and split Monaco, add regression and opt-in live Docker fault tests, and record full race and real-browser acceptance results.
2026-10-14 13:41:54 +08:00
parent 66abb76318
commit 9a71772771
62 changed files with 4679 additions and 332 deletions
@@ -91,6 +91,8 @@ func (a *API) users(w http.ResponseWriter, r *http.Request) {
 			fail(w, 400, "positive quota and user ID required")
 			return
 		}
+		user := a.userLocks.Acquire(in.ID)
+		defer user.Release()
 		result, err := a.s.DB.Exec("UPDATE users SET quota=? WHERE id=?", in.Quota, in.ID)
 		if err != nil {
 			fail(w, 500, "quota update failed")