operator

Sep 28, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 25, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 25, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 25, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 25, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 24, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 24, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 23, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 23, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 23, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 22, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 22, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 22, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 22, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Changes in this version

+ var ErrChannelClosed = errors.New("operator: durable channel closed")

+ var ErrNotSupported = errors.New("operator: not supported by this host")

+ var ErrRequestInFlight = errors.New("operator: durable request already in flight for this invocation")

+ var ErrSessionClosed = errors.New("operator: session closed")

+ var ErrSessionEnded = errors.New("operator: engine durable session ended")

+ type ActionHandler interface

+ HandleAction func(ctx context.Context, action *contracts.AssignedAction) error

+ type DurableChannel interface

+ Close func() error

+ ExpectEntry func(branchId, nodeId int64) error

+ Recv func(ctx context.Context) (*v1.DurableTaskResponse, error)

+ Send func(ctx context.Context, req *v1.DurableTaskRequest) error

+ type Host interface

+ Open func(ctx context.Context, id Identity, opts OpenOpts) (Session, error)

+ type Identity struct

+ Kind sqlcv1.V1OperatorKind

+ LeasingManager sqlcv1.V1OperatorLeasingManager

+ Name string

+ OperatorId *uuid.UUID

+ TenantId uuid.UUID

+ type OpenOpts struct

+ Actions []string

+ Handler ActionHandler

+ Labels map[string]interface{}

+ ResumeWorkerId *uuid.UUID

+ RuntimeInfo *contracts.RuntimeInfo

+ SlotConfig map[string]int32

+ WorkerName string

type Operator

+ Start func(ctx context.Context, s Session) error

+ type Registration struct

+ OperatorId uuid.UUID

+ Resumed bool

+ TenantId uuid.UUID

+ WorkerId uuid.UUID

+ type Session interface

+ AddActions func(ctx context.Context, ids []string) error

+ Close func(ctx context.Context) error

+ Done func() <-chan struct{}

+ Err func() error

+ Flush func(ctx context.Context) error

+ OpenDurable func(ctx context.Context, taskExternalId uuid.UUID, invocation int32) (DurableChannel, error)

+ Pause func(ctx context.Context) error

+ PutWorkflow func(ctx context.Context, wf *v1.CreateWorkflowVersionRequest) ([]string, error)

+ Registration func() Registration

+ RemoveActions func(ctx context.Context, ids []string) error

+ SendStepActionEvent func(ctx context.Context, ev *contracts.StepActionEvent) error

type SharedOperator

+ func (s *SharedOperator[T]) OpenDurable(ctx context.Context, taskExternalId uuid.UUID, invocation int32) (DurableChannel, error)

+ func (s *SharedOperator[T]) OperatorId() uuid.UUID

+ func (s *SharedOperator[T]) Session() Session

+ func (s *SharedOperator[T]) Start(_ context.Context, session Session) error

type TaskEventWriter

+ CancelTaskWithReason func(ctx context.Context, tenantId uuid.UUID, request *contracts.StepActionEvent) (*contracts.ActionEventResponse, error)

Sep 21, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 22, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 21, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 21, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 21, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 19, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 18, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 18, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 18, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 15, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 15, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 11, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 12, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 11, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 11, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 11, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 11, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 10, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 10, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 10, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 9, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 10, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 10, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 10, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 9, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 9, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 8, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 8, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 8, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 8, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 8, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 4, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 4, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Changes in this version

type SharedOperator

+ func (s *SharedOperator[T]) SendStartedAt(action *contracts.AssignedAction, at time.Time) error

Sep 4, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 4, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 3, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 3, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 2, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 3, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 3, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 3, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 3, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 2, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 2, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 1, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 1, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 1, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 1, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 1, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Sep 1, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 31, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 31, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 31, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 28, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 28, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 27, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 27, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 27, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 27, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 27, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 27, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 27, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 27, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 27, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 27, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 27, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 26, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 26, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 26, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 26, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 26, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 26, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 25, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 25, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 25, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 25, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 25, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 24, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 24, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 24, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 21, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 21, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 21, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 21, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 20, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 20, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 20, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Aug 20, 2026 GO-2026-6535

  GO-2026-6535: Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState in hatchet in github.com/hatchet-dev/hatchet

Changes in this version

+ type DAGStepTriggerRequest struct

+ ActionId string

+ AdditionalMetadata []byte

+ ChildIndex int32

+ DagParentTaskRunIds []uuid.UUID

+ DesiredWorkerLabels []*sqlcv1.GetDesiredLabelsRow

+ Input string

+ InvocationCount int32

+ IsCancelled bool

+ IsSkipped bool

+ ParentReExecuted bool

+ ParentTaskExternalId uuid.UUID

+ WorkflowName string

+ WorkflowVersionId uuid.UUID

+ type DAGStepTriggerResult struct

+ BranchId int64

+ ErrorMessage *string

+ IsFailure bool

+ IsSatisfied bool

+ NodeId int64

+ ReExecuted bool

+ ResultPayload []byte

+ WorkflowRunExternalId uuid.UUID

+ type Operator interface

+ Cleanup func()

+ Drain func()

+ HandleAction func(ctx context.Context, action *contracts.AssignedAction) error

+ WorkerId func() uuid.UUID

+ type SharedOperator struct

+ func NewSharedOperator[T any](operator *sqlcv1.V1Operator, l *zerolog.Logger, repo repository.Repository, ...) (*SharedOperator[T], error)

+ func (s *SharedOperator[T]) CancelDAGChildren(ctx context.Context, taskExternalIds []uuid.UUID) error

+ func (s *SharedOperator[T]) CancelTask(taskRunExternalId string) bool

+ func (s *SharedOperator[T]) Cleanup()

+ func (s *SharedOperator[T]) Config() T

+ func (s *SharedOperator[T]) Drain()

+ func (s *SharedOperator[T]) Logger() *zerolog.Logger

+ func (s *SharedOperator[T]) RecordTask() func()

+ func (s *SharedOperator[T]) RegisterCancellableContext(ctx context.Context, taskRunExternalId string) (context.Context, func())

+ func (s *SharedOperator[T]) RegisterDurableTask(ctx context.Context, externalId uuid.UUID) (chan<- *v1contracts.DurableTaskRequest, ...)

+ func (s *SharedOperator[T]) SendCancelled(action *contracts.AssignedAction) error

+ func (s *SharedOperator[T]) SendCancelledWithMessage(action *contracts.AssignedAction, msg string) error

+ func (s *SharedOperator[T]) SendCompleted(action *contracts.AssignedAction, output []byte) error

+ func (s *SharedOperator[T]) SendFailed(action *contracts.AssignedAction, errMsg string, shouldNotRetry bool) error

+ func (s *SharedOperator[T]) SendStarted(action *contracts.AssignedAction) error

+ func (s *SharedOperator[T]) TenantId() uuid.UUID

+ func (s *SharedOperator[T]) TriggerDAGStep(ctx context.Context, req *DAGStepTriggerRequest) (*DAGStepTriggerResult, error)

+ func (s *SharedOperator[T]) UpdateWorkerActions(ctx context.Context, actions []string) error

+ func (s *SharedOperator[T]) WorkerId() uuid.UUID

+ type TaskEventWriter interface

+ CancelDAGChildren func(ctx context.Context, tenantId uuid.UUID, taskExternalIds []uuid.UUID) error

+ CancelTaskEvent func(ctx context.Context, request *contracts.StepActionEvent) (*contracts.ActionEventResponse, error)

+ RegisterDurableTask func(ctx context.Context, externalId uuid.UUID) (chan<- *v1contracts.DurableTaskRequest, ...)

+ SendStepActionEvent func(ctx context.Context, request *contracts.StepActionEvent) (*contracts.ActionEventResponse, error)

+ TriggerDAGStep func(ctx context.Context, tenantId uuid.UUID, req *DAGStepTriggerRequest) (*DAGStepTriggerResult, error)