Oliver Kieselbach 43a87ff747 perf(backend): read-bound delegated config/all to point-reads [Phase 2b follow-up] ...

Addresses a Codex review finding: the Phase 2b delegated config/all path loaded
EVERY tenant config via GetAllConfigurationsAsync() (an O(all tenants) table scan
+ full-config materialization) and then filtered in memory. Because Phase 2b
opened this endpoint to delegated MSP users, a caller scoped to a few tenants
could trigger an all-tenants scan per request — response-bounded, not read-bounded.

Now point-read ONLY the caller's managed tenants via the non-creating
TryGetConfigurationAsync (cached; never writes a phantom default row), dropping
ids with no config row (exists==false). A delegated MSP scoped to k tenants does
k point reads instead of scanning n. The response is still filtered+redacted as
defense in depth; the set fed to it is now itself bounded.

Full Functions suite green (2464).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-25 20:53:38 +02:00

..

Agent

feat(agent+web): agent_late_start + script_timeout_suspected detectors + per-script run duration

2026-06-23 12:44:53 +02:00

Backend

perf(backend): read-bound delegated config/all to point-reads [Phase 2b follow-up]

2026-06-25 20:53:38 +02:00

McpServer

Merge branch 'main' of https://github.com/okieselbach/Autopilot-Monitor

2026-06-23 12:47:27 +02:00

Shared

feat(backend): delegated-admin (MSP mode) data model + scope service [Phase 0]

2026-06-25 18:50:56 +02:00

Web

feat(backend): retention/cleanup for previously-unbounded append-only tables

2026-06-24 17:11:28 +02:00