Make vote-shop debits atomic before granting rewards - #1600

Merged

BenCodez merged 77 commits into

security/atomic-vote-shop

Sep 19, 2026

Commits on Sep 7, 2026

Make vote shop debit atomic
BenCodez
committed
6b69462
Test concurrent vote shop debits
BenCodez
committed
4b12ebf
Use stable purchase locks and async persistence
BenCodez
committed
1d44c4b
Use stable purchase locks and async persistence
BenCodez
committed
70fe42f
Keep purchase locks stable across reloads
BenCodez
committed
a199326
Keep purchase locks stable across reloads
BenCodez
committed
e335aec
Address review feedback with regression coverage
BenCodez
committed
9c176fd
Address review feedback with regression coverage
BenCodez
committed
dd3a770
Address latest review feedback
BenCodez
committed
6a5cd23

Commits on Sep 8, 2026

Make concurrent debit regression deterministic
BenCodez
committed
ebfbc55
Merge remote-tracking branch 'origin/master' into security/pr-1600-local
BenCodez
committed
b8b695e
fix: make shared vote shop purchases atomic
BenCodez
committed
ca4471d
Preserve synchronous shared point updates
BenCodez
committed
38ae0d6
Preserve purchase and transfer semantics
BenCodez
committed
e07be21
Reserve shared transfer points before hooks
BenCodez
committed
c5ddb3c
Release shared transfer hooks before callbacks
BenCodez
committed
ca387d7
Close shared point mutation consistency gaps
BenCodez
committed
dc25f95
Journal shared vote shop purchases
BenCodez
committed
520aa14
Recover shared transfers and bound journal names
BenCodez
committed
4d3f404
Make shared MySQL purchases failure-safe
BenCodez
committed
8d07e5a
Harden shared MySQL point completion and recovery
BenCodez
committed
0a4913e
Close shared point settlement edge cases
BenCodez
committed
58c5d0d
Close shared point settlement edge cases
BenCodez
committed
4928b10
Preserve shared point mutation state
BenCodez
committed
bdd471b
Merge remote-tracking branch 'origin/master' into security/pr-1600-local
BenCodez
committed
e1aa435
Keep rejected transfer recovery off Bukkit
BenCodez
committed
a52a1ec

Commits on Sep 9, 2026

Reconcile caches after recovery refunds
BenCodez
committed
6fe7db7
Avoid stale shared purchase cache writes
BenCodez
committed
a2e0112
Fix shared vote shop recovery races
BenCodez
committed
1bfde24
Close shared vote shop recovery races
BenCodez
committed
a58168c
Bound shared point and purchase recovery work
BenCodez
committed
cb73334
Wait for shared point reward persistence
BenCodez
committed
f3141f2
Handle rejected shared point submissions
BenCodez
committed
35f3ac2
Keep shared shop validation off GUI lanes
BenCodez
committed
e7fb241
Recover rejected shared point operations
BenCodez
committed
b35abf4
Avoid blocking vote shop placeholder reads
BenCodez
committed
6b87b9f
Fix shared vote shop recovery and cache refresh
BenCodez
committed
87de933
Handle rejected transfer settlement and cache races
BenCodez
committed
c687cbf

Commits on Sep 10, 2026

Harden shared point settlement and callback recovery
BenCodez
committed
21ac3f9
Harden vote shop recovery paths
BenCodez
committed
c94842e
Exclude optimistic points from cache dumps
BenCodez
committed
e8e9316
Align weekly reset generation with configured period
BenCodez
committed
3c049f4
Complete atomic point transfer safeguards
BenCodez
committed
367f941
Harden shared MySQL purchase completion
BenCodez
committed
96c8504
Await durable shared point rewards
BenCodez
committed
7ed6948

Commits on Sep 11, 2026

Make shared point rewards retry safe
BenCodez
committed
adcfa27
Harden indeterminate shared point operations
BenCodez
committed
68976d5

Commits on Sep 13, 2026

Fence shared vote shop resets from cache dumps
BenCodez
committed
0647d07
Fence all shared MySQL cache dumps
BenCodez
committed
8bc2e1c
Document shared limit cache contract
BenCodez
committed
36a5979
Track epochs for every limited purchase
BenCodez
committed
64a983b
Version Vote Party configuration support
BenCodez
committed
03dd3fb
Harden replay recovery and mixed-version setup
BenCodez
committed
d29b107
Preserve mixed-version Vote Party settings
BenCodez
committed
044bef3

Commits on Sep 14, 2026

Commits on Sep 16, 2026

Protect offline point cache clearing
BenCodez
committed
85e8cdf
Serialize optimistic cache clearing
BenCodez
committed
8818f29
Avoid unnecessary cache monitor coupling
BenCodez
committed
265d211
Retire completed admin point operations
BenCodez
committed
5bae2bd
Release ambiguous unstarted point claims
BenCodez
committed
2e5e7d4
Dispatch vote shop purchases synchronously
BenCodez
committed
ec0574e
Preserve authoritative bulk point validation
BenCodez
committed
83470a2
Preserve point replay safety across mode changes
BenCodez
committed
6e4bebf
Keep transfer player access on the entity lane
BenCodez
committed
288dff8

Commits on Sep 19, 2026

Settle PerServer reward points atomically with shared journal
BenCodez
committed
f3cd9ea
Merge current master into PR 1600
BenCodez
committed
dc3875f
Accept quoted legacy per-server points columns
BenCodez
committed
0998dac
Dispatch per-server point hook on entity lane and ensure column
BenCodez
committed
2376b64
Credit nullable first-use per-server points atomically
BenCodez
committed
01adaf3
Serialize per-server MySQL point mutations with journals
BenCodez
committed
c650501
Confirm all MySQL shop debits and atomic per-server credits
BenCodez
committed
765f2e7
Keep MySQL transfers off server lanes and pin queued point columns
BenCodez
committed
8498622
Settle nullable transfer credits and recover quoted point columns
BenCodez
committed
d5811f2