fix(mcp): bound the setOauthRowUser write too so no step escapes the budget

waleedlatif1 · waleedlatif1 · commit 43dcd07382df · 2026-07-22T18:37:21.000-07:00
The user-stamp write was the one DB op left unbounded on the start path; wrap it
in timedStep(DB_STEP_MS) so every step stays inside the sub-30s budget and its
timeout routes to the same 504.
diff --git a/apps/sim/app/api/mcp/oauth/start/route.ts b/apps/sim/app/api/mcp/oauth/start/route.ts
@@ -158,7 +158,7 @@ export const GET = withRouteHandler(
         )
       }
       if (row.userId !== userId) {
-        await setOauthRowUser(row.id, userId)
+        await timedStep('setOauthRowUser', DB_STEP_MS, () => setOauthRowUser(row.id, userId))
         row.userId = userId
       }
       const preregistered = await timedStep('loadPreregisteredClient', DB_STEP_MS, () =>

Original file line number	Diff line number	Diff line change
`@@ -158,7 +158,7 @@ export const GET = withRouteHandler(`
`158`	`158`	`)`
`159`	`159`	`}`
`160`	`160`	`if (row.userId !== userId) {`
`161`		`- await setOauthRowUser(row.id, userId)`
	`161`	`+ await timedStep('setOauthRowUser', DB_STEP_MS, () => setOauthRowUser(row.id, userId))`
`162`	`162`	`row.userId = userId`
`163`	`163`	`}`
`164`	`164`	`const preregistered = await timedStep('loadPreregisteredClient', DB_STEP_MS, () =>`