fix(queue): 隔离异步准入故障并持久化退避

将 X-Async 调度改为逐任务阻塞协议，区分全局容量、平台容量、用户组 FIFO、任务级异常和系统级故障，避免单个历史毒任务触发整批回滚。\n\n新增持久化退避、单任务 CAS 重选、幂等终态事务、固定标签指标和损坏快照自愈，并修复 Worker 从 preparing 直接进入 finalizing 时的自等待死锁。\n\n验证：API 全量测试、PostgreSQL 集成场景、race、go vet、govulncheck、pnpm lint/test/build、Compose 与发布脚本测试通过；pnpm audit 命中未改动的 Nx 工具链既有漏洞。
2026-08-04 18:23:35 +08:00
parent 44d5cf2b9d
commit f4214dd489
12 changed files with 1654 additions and 133 deletions
@@ -226,7 +226,13 @@ func (l *Lease) EnterFinalizing(ctx context.Context) error {
 		// Even under critical pressure, let one submitted task at a time finish
 		// and release its provider lease instead of deadlocking the drain path.
 		heavyLimit := max(c.heavyLimit, 1)
-		if c.preparing+c.finalizing < heavyLimit {
+		heavyInUseByOthers := c.preparing + c.finalizing
+		if l.phase == PhasePreparing {
+			// A preparing lease already owns one heavy slot. Moving that same
+			// lease to finalizing must not wait for itself to release the slot.
+			heavyInUseByOthers--
+		}
+		if heavyInUseByOthers < heavyLimit {
 			c.decrementPhaseLocked(l.phase)
 			c.finalizing++
 			l.phase = PhaseFinalizing