ops: sweep expired confirmations, authorization codes, and invites #160

New issue

Closed

opened 2026-08-09 18:23:01 +00:00 by rosa · 0 comments

rosa commented

2026-08-09 18:23:01 +00:00

Owner

Found during an operational-resilience review (Release It! stability rules).

Location: crates/infra/src/repositories/sqlite.rs:677,690 (confirmations), :1289 (authorization_codes), :1107 (invites)
Severity: Medium — unbounded growth (Steady State)

Problem

Confirmations, authorization codes, and invites are deleted only when they are consumed (keyed by identifier). An expired-but-never-redeemed row is never swept, so these capability tables accumulate dead rows indefinitely. Lower volume than sessions, but the same Steady-State violation: something accumulates with no matching reclamation.

Suggested fix

Add a periodic sweep — DELETE ... WHERE expires_at < now for each of the three tables — ideally running on the same scheduled reaper introduced for session cleanup (#159).

Found during an operational-resilience review (Release It! stability rules). **Location:** `crates/infra/src/repositories/sqlite.rs:677,690` (confirmations), `:1289` (authorization_codes), `:1107` (invites) **Severity:** Medium — unbounded growth (Steady State) ## Problem Confirmations, authorization codes, and invites are deleted only when they are **consumed** (keyed by `identifier`). An expired-but-never-redeemed row is never swept, so these capability tables accumulate dead rows indefinitely. Lower volume than sessions, but the same Steady-State violation: something accumulates with no matching reclamation. ## Suggested fix Add a periodic sweep — `DELETE ... WHERE expires_at < now` for each of the three tables — ideally running on the same scheduled reaper introduced for session cleanup (#159).

rosa added the

labels

2026-08-09 18:23:15 +00:00

rosa referenced this issue from a commit

2026-08-10 02:38:08 +00:00

fix: sweep expired confirmations, codes, and invites on the reaper

rosa referenced this issue from a pull request that will close it,

2026-08-10 02:38:43 +00:00