3 Commits

Author	SHA1	Message	Date
rcourtman	3b347b6548	fix: harden SQLite against I/O contention causing persistent lock errors ... - Move all SQLite pragmas from db.Exec() to DSN parameters so every connection the pool creates gets busy_timeout and other settings. Previously only the first connection had these applied. - Set MaxOpenConns(1) on audit, RBAC, and notification databases (metrics already had this). Fixes potential for multiple connections where new ones lack busy_timeout. - Increase busy_timeout from 5s to 30s across all databases to tolerate disk I/O pressure during backup windows. - Fix nested query deadlocks in GetRoles(), GetUserAssignments(), and CancelByAlertIDs() that would deadlock with MaxOpenConns(1). - Fix circuit breaker retryInterval not resetting on recovery, which caused the next trip to start at 5-minute backoff instead of 5s. Related to #1156	2026-02-02 17:29:14 +00:00
rcourtman	c44cb5af5b	fix: use pure Go SQLite driver for arm64 compatibility ... Switch from mattn/go-sqlite3 (CGO) to modernc.org/sqlite (pure Go) for auth, audit, and notification queue storage. This enables SQLite functionality on arm64 Docker images which are built with CGO_ENABLED=0. Related to #1140	2026-01-21 18:58:23 +00:00
rcourtman	0ddbf37c59	feat(auth): add policy evaluator and SQLite auth manager for RBAC ... - Add policy evaluator for fine-grained access control - Implement SQLite-backed auth manager for user/role persistence - Support role-based permissions evaluation	2026-01-12 15:20:49 +00:00