feat: Add max execution time per scan to prevent runaway scans #10

[bigjoe-io]

Closes #10

Impact

Prevents runaway scans from degrading system performance. Some contracts may hang analyzers, so this adds timeout protection.

Changes

• ✅ Implement ScanService with Promise.race timeout mechanism
• ✅ Add WorkerScanService for worker thread isolation (optional)
• ✅ Create POST /scan endpoint with timeout protection
• ✅ Add configurable timeout via SCAN_MAX_EXECUTION_TIME_MS env var
• ✅ Implement graceful timeout error handling with clear messages
• ✅ Add unit tests for timeout scenarios
• ✅ Include comprehensive documentation

Implementation Details

• Uses Node.js Promise.race() for lightweight timeout enforcement
• Provides optional worker thread implementation for better isolation
• Default timeout: 30 seconds (configurable)
• Scans exceeding limit fail gracefully with clear error messages

Testing

• Unit tests included in scan.service.spec.ts
• Tests cover successful scans, timeout scenarios, and custom timeouts

Done Criteria

✅ Scans exceeding limit fail gracefully with clear error
✅ Uses Node.js process timeout (Promise.race)
✅ Provides worker constraints option
✅ Configurable via environment variables

[mijinummi]

Hello @bigjoefilms , kindly resolve the conflict from your branch, you may need to pull from main

[mijinummi]

Please resolve the conflict

[mijinummi]

@bigjoefilms ???

[mijinummi]

please kindly try and resolve the conflict