fix: four small confirmed findings (token timing, apply provider keys, worker probes, dead AsyncLock)#1066

Merged

buremba merged 6 commits into

mainfrom

feat/fix-small-bundle

May 26, 2026

Commits on May 26, 2026

fix(server): constant-time WORKER_API_TOKEN compare for trusted-worker path
buremba
committed
fix(cli): push provider API keys even on an all-noop apply
buremba
committed
fix(chart): add worker liveness probe + guard multi-replica RWO cache PVCs
buremba
committed
refactor(core): delete dead AsyncLock util
buremba
committed
fix(cli): push provider keys AFTER executePlan so created agents exist
buremba
committed
docs(cli): correct pushProviderApiKeys comment + drop unused test param
buremba
committed