YoursFunny 5060b760ba fix(fetch): cap one fetch at a 900-second total budget ...

The per-request CLIENT timeout and the per-chunk DOWNLOAD_IDLE_TIMEOUT both reset on progress, so neither bounded the fetch as a whole: a URL that keeps dripping (a trickle the idle timeout reads as life) could hold one of the eight FETCH_SLOTS for effectively ever, and the queue behind the slots is what then stalls. The attempts loop now runs inside tokio::time::timeout(900 s) — generous for a genuinely large ugoira zip on a honest slow link (minutes), fatal for a drip — and answers Transient with the cache key, so the retry and its jittered backoff take over. The permit is taken outside the timeout: the slot is released on either path. Audit low finding 'url_workers long tail' (process-wide total-deadline option).

2026-09-24 15:38:25 +08:00

..

x-media

fix(fetch): cap one fetch at a 900-second total budget

2026-09-24 15:38:25 +08:00

xmedia-bot

fix(send): refuse a file id at the upload fallback's door

2026-09-24 15:35:55 +08:00