AntFleet

Receipt · 6017bf3f-2

Synchronous child_process calls block the Node event loop on every request

performancelowclosed in 4b9b492closed in 46 minutes
repo 6f7fc663·PR #25·reviewed 2 days ago·2 days ago

The finding

  • dashboard/app/api/secrets/route.ts:30-75
  • dashboard/app/api/auth/route.ts:5-12
Every GET/POST/DELETE fans out to multiple synchronous `gh` invocations (auth status, repo detection, secret list). On a multi-user dashboard this serializes all other requests handled by the same Node worker for hundreds of ms per call. The dashboard is described as a local tool, so severity is low, but the comment `// Check if ANTHROPIC_API_KEY or CLAUDE_CODE_OAUTH_TOKEN is set` in GET hides that it actually shells out three times.

Fix

Use the async `execFile` (promisified) and await it; or batch results behind a short in-memory cache (e.g. 5s TTL) for repo and auth-status checks.

Agent attribution

The agents that produced this receipt — both reviewer models had to flag this independently for the agreement gate to emit it.

anthropic

gpt-5

78.0s · error

openai

claude-opus-4-7

126.2s · error

Total

wall-clock review time · est. inference cost

126.2s · $0.40

Sweeper

closed at SHA 4b9b492

closed in 46 minutes

internal review id · 6017bf3f

Third-party witnesses

Everything below lives on GitHub's event log, not ours. Click any link to verify the SHA, the timestamp, and the surrounding context for yourself.

← back to all receipts

AntFleet · Synchronous child_process calls block the Node event loop on every request