mirror of
https://github.com/we-promise/sure.git
synced 2026-07-28 04:32:12 +00:00
9d4b4bc27c
* feat(jobs): reap imports and exports stuck by lost background jobs A hard-killed worker (OOM, SIGKILL during deploy) loses its in-flight Sidekiq job permanently. Sync is the only model with a stale sweep; everything else wedges in a non-terminal status forever: - Import stuck "importing"/"reverting" (e.g. #2274) - ImportSession stuck "importing" — unrecoverable, publish_later refuses to re-publish while importing - FamilyExport stuck "pending"/"processing" — exports index polls every 3s indefinitely - PdfImport's AI-processing claim held forever (ProcessPdfJob's reclaim only runs if the job is redelivered) - Provider activities_fetch_pending flags stranded when a self-rescheduling fetch chain loses a link SyncCleanerJob (existing hourly cron) now sweeps all of them, each isolated so one failure doesn't block the rest, and records every reaped record as a DebugLogEntry with the family attached. Idempotency guards so a stray or redelivered job cannot corrupt a record the reaper (or a user retry) has since moved on: - Import#publish skips complete/reverting/revert_failed imports — a redelivered ImportJob after completion double-applies data for import types without row dedup. Failed imports deliberately stay publishable: their transaction rolled back, so a re-run is a retry. - FamilyDataExportJob refuses terminal exports but still allows processing ones through, since graceful-shutdown redelivery is what completes them. Reaper thresholds (6h imports, 2h exports) key off updated_at and dwarf legitimate runtimes, so live jobs are not swept in practice. * fix(jobs): make the reapers race-safe and commit-aware Review feedback on #2681 (jjmata, Codex, CodeRabbit): - Every sweep now mutates under record.with_lock with a staleness re-check, mirroring the guard Sync#perform gained in #2680 — a job finishing between the sweep query and the write can no longer be clobbered mid-flight - Import.clean distinguishes which side of import!'s single transaction the worker died on: rows attached means the data committed and only the status write was lost, so the record is finalized as complete (marking it failed invited a re-publish that double-imports types without row dedup, e.g. TradeImport); no rows means a clean rollback and the failed/try-again path stays - PdfImport.clean applies the same split: no rows → the AI-extraction claim died, reclaim to pending; rows → the publish died post-commit, finalize complete instead of letting the same extracted rows be published twice. Stuck PdfImport reverts (previously unswept by either clean) now go to revert_failed like every other import - ImportSession.clean reconciles chunks whose import! committed but never got the complete-status write before failing the session, so re-publish skips them instead of duplicating their rows via SureImport's split path - Import#publish redelivery skip is captured via DebugLogEntry instead of Rails.logger so support can see it in /settings/debug - The interrupted-error copy is i18n-backed (imports.errors.interrupted) * fix(jobs): round-2 review feedback on the reapers - Import.clean excludes session-owned chunks (import_session_id: nil) — SyncCleanerJob runs it before ImportSession.clean, so it could finalize or fail a SureImport chunk outside the session flow that owns its lifecycle. Regression test added (CodeRabbit major) - family.sync_later moved outside the row-lock transaction in both reap paths — Rails doesn't defer enqueues to after-commit by default, so Sidekiq could pick the job up before the status write was visible - Per-record rescue in Import.clean / PdfImport.clean so one bad record doesn't abort the rest of the hourly sweep - ImportSession.clean uses the importing? enum predicate; reconcile_committed_chunks! iterates with each (default-ordered association made find_each warn, and chunk counts are tiny) * fix(jobs): address round-3 reaper review (isolation + commit signal) Per-record rescue isolation for the three sweeps that lacked it — FamilyExport.clean, ImportSession.clean, and SyncCleanerJob's activity-flag loop — mirroring Import.clean/PdfImport.clean. One bad record (validation error, DB blip) no longer aborts the rest of that sweep for the hour; the activity-flag guard is per-record so a failure also stops skipping the models that follow. data_committed? now covers Category/Rule/Merchant imports, whose records hang off the family rather than the import (no entries or accounts), via the new Import#committed_by_named_records? helper. A committed one is reaped to complete instead of a retryable failed; nameless RuleImport rows carry no stable key, so a nameless-only file has no commit signal and stays retryable. * fix(schema): drop duplicate enable_banking_accounts columns from merge The merge of main into this branch re-appended product, credit_limit, and identification_hashes after updated_at, so schema.rb declared each twice and db:schema:load raised "you can't define an already defined column 'product'". Removed the duplicate declarations (kept the new treat_balance_as_available_credit column); the test database loads again.
69 lines
2.4 KiB
YAML
69 lines
2.4 KiB
YAML
import_market_data:
|
|
cron: "0 22 * * 1-5" # 5:00 PM EST / 6:00 PM EDT (NY time) Monday through Friday
|
|
class: "ImportMarketDataJob"
|
|
queue: "scheduled"
|
|
description: "Imports market data daily at 5:00 PM EST (1 hour after market close)"
|
|
args:
|
|
mode: "full"
|
|
clear_cache: false
|
|
|
|
clean_syncs:
|
|
cron: "0 * * * *" # every hour
|
|
class: "SyncCleanerJob"
|
|
queue: "scheduled"
|
|
description: "Cleans up stale syncs and reaps imports, exports, and provider fetch flags stuck by lost jobs"
|
|
|
|
run_security_health_checks:
|
|
cron: "0 2 * * 1-5" # 2:00 AM EST / 3:00 AM EDT (NY time) Monday through Friday
|
|
class: "SecurityHealthCheckJob"
|
|
queue: "scheduled"
|
|
description: "Runs security health checks to detect issues with security data"
|
|
|
|
sync_hourly:
|
|
cron: "0 * * * *" # every hour at the top of the hour
|
|
class: "SyncHourlyJob"
|
|
queue: "scheduled"
|
|
description: "Syncs provider items that opt-in to hourly syncing"
|
|
|
|
sync_property_valuations:
|
|
cron: "30 1 1 * *" # monthly on the 1st at 1:30 AM
|
|
class: "SyncPropertyValuationsJob"
|
|
queue: "scheduled"
|
|
description: "Refreshes AVM property valuations once a month (providers enforce tight monthly request caps)"
|
|
|
|
clean_data:
|
|
cron: "0 3 * * *" # daily at 3:00 AM
|
|
class: "DataCleanerJob"
|
|
queue: "scheduled"
|
|
description: "Cleans up old data (e.g., expired merchant associations, expired archived exports)"
|
|
|
|
clean_debug_log_entries:
|
|
cron: "30 3 * * *" # daily at 3:30 AM
|
|
class: "DebugLogCleanupJob"
|
|
queue: "scheduled"
|
|
description: "Deletes debug log entries older than 90 days"
|
|
|
|
clean_inactive_families:
|
|
cron: "0 4 * * *" # daily at 4:00 AM
|
|
class: "InactiveFamilyCleanerJob"
|
|
queue: "scheduled"
|
|
description: "Archives and destroys families that expired their trial without subscribing (managed mode only)"
|
|
|
|
refresh_demo_family:
|
|
cron: "0 5 * * *" # daily at 5:00 AM UTC
|
|
class: "DemoFamilyRefreshJob"
|
|
queue: "scheduled"
|
|
description: "Refreshes demo family data and emails super admins with daily usage summary"
|
|
|
|
generate_insights:
|
|
cron: "0 6 * * *" # daily at 6:00 AM UTC, after the nightly cleanup jobs
|
|
class: "GenerateInsightsJob"
|
|
queue: "scheduled"
|
|
description: "Generates proactive financial insights for all families"
|
|
|
|
sweep_expired_goal_pledges:
|
|
cron: "*/15 * * * *" # every 15 minutes
|
|
class: "SweepExpiredGoalPledgesJob"
|
|
queue: "scheduled"
|
|
description: "Marks goal pledges that passed their 7-day window as expired"
|