feat: implement job management, schema inspection, validation logic, …

[bella-247]

This pull request introduces several improvements and bug fixes across the codebase, focusing on enhanced security, better handling of composite foreign keys, improved persistence for job data, and performance optimizations. The changes also include new and updated tests to ensure correctness and reliability.

Key changes:

Security and Middleware Improvements

• Added a Content-Security-Policy header to HTTP responses to further harden the server against cross-site scripting and related attacks. This is also now tested in TestSecurityHeaders. [1] [2]
• Rate limiting middleware now properly respects the X-Forwarded-For header, improving accuracy when the server is behind a proxy.

Persistence and Job Store

• Job data (Data field in Job struct) is now persisted to disk and included in JSON, fixing previous issues where job data was not saved or reloaded. This is verified with new tests for persistence round-trip and data integrity. [1] [2] [3]

Foreign Key Validation

• Enhanced referential integrity checks to correctly handle composite foreign keys, including a new serialization helper and comprehensive tests for both valid and orphaned composite FKs. [1] [2] [3]

Performance and Robustness

• Optimized the topological sort implementation in the planner by building a reverse adjacency map, reducing redundant edge scans and improving performance. A benchmark was also added. [1] [2] [3] [4]

Miscellaneous Fixes

• Improved config flag parsing for robustness and maintainability.
• Fixed semantic summary output to use the correct node list.
• Minor improvements to stream handling and imports. [1] [2] [3] [4] [5]

These updates collectively enhance the security, correctness, and performance of the application.…and server middleware

What does this PR do?

Why is it needed?

Closes #

How was it tested?

Does it change any existing behavior?

Checklist

• Tests added or updated
• make test passes (go test ./... -race)
• make lint passes (golangci-lint run ./...)
• No cross-stage imports (parser doesn't import generator, etc.)
• No time.Now() or unseeded randomness in the generation pipeline
• Error messages follow the format in SRS §12.2
• Exported functions have doc comments
• Golden files updated if output format changed (make test-golden UPDATE=true)

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 4cbafbf8-d108-4c23-86b8-f8b3d306e39d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/serious-bugs

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}