Sonarly Claude Code 8d5104eb18 Debounced workflow step update throws during auth token renewal window
https://sonarly.com/issue/5150?type=bug

The debounced `updateAction` callback in the workflow code editor fires while workflow data is temporarily `undefined` due to an in-progress authentication token renewal, causing `getUpdatableWorkflowVersion()` to throw an unrecoverable error.

Fix: The fix adds a `!isDefined(workflow)` guard to the `updateAction` debounced callback in `WorkflowEditActionCode.tsx`, mirroring the existing guard already present in `handleCodeChange`.

During auth token renewal, all active Apollo queries are invalidated and must be re-fetched. This leaves `workflow` temporarily `undefined`. The debounced `updateAction` (500ms delay) can fire within this window, calling `actionOptions.onActionUpdate` → `updateStep` → `getUpdatableWorkflowVersion()`, which throws when `workflow` is `undefined`.

The fix is a one-line change — adding `|| !isDefined(workflow)` to the existing `readonly` check:

```typescript file=packages/twenty-front/src/modules/workflow/workflow-steps/workflow-actions/code-action/components/WorkflowEditActionCode.tsx lines=255-267
const updateAction = useDebouncedCallback(
    (actionUpdate: Partial<WorkflowCodeAction>) => {
      if (actionOptions.readonly === true || !isDefined(workflow)) {  // ← added guard
        return;
      }

      actionOptions.onActionUpdate({
        ...action,
        ...actionUpdate,
      });
    },
    500,
  );
```

This is consistent with the sibling `handleCodeChange` function (line 270) which already has the same `!isDefined(workflow)` guard. The edit in progress at the time of the debounce fire will be silently dropped (not persisted), which is the same behaviour as `handleCodeChange` — the user may need to re-type their last keystroke after the token renewal completes, but no unrecoverable error is thrown.
2026-03-04 10:30:15 +00:00
2025-08-07 17:02:12 +02:00
2025-07-08 15:13:02 +02:00
2026-03-04 00:50:06 +01:00
2026-02-25 10:35:46 +01:00
2026-03-04 00:50:06 +01:00
2026-03-04 00:50:06 +01:00

Twenty logo

The #1 Open-Source CRM

🌐 Website · 📚 Documentation · Roadmap · Discord · Figma


Cover


Installation

See: 🚀 Self-hosting 🖥️ Local Setup

Why Twenty

We built Twenty for three reasons:

CRMs are too expensive, and users are trapped. Companies use locked-in customer data to hike prices. It shouldn't be that way.

A fresh start is required to build a better experience. We can learn from past mistakes and craft a cohesive experience inspired by new UX patterns from tools like Notion, Airtable or Linear.

We believe in Open-source and community. Hundreds of developers are already building Twenty together. Once we have plugin capabilities, a whole ecosystem will grow around it.


What You Can Do With Twenty

Please feel free to flag any specific needs you have by creating an issue.

Below are a few features we have implemented to date:

Personalize layouts with filters, sort, group by, kanban and table views

Companies Kanban Views

Customize your objects and fields

Setting Custom Objects

Create and manage permissions with custom roles

Permissions

Automate workflow with triggers and actions

Workflows

Emails, calendar events, files, and more

Other Features


Stack

Thanks

Chromatic Greptile Sentry Crowdin E2B

Thanks to these amazing services that we use and recommend for UI testing (Chromatic), code review (Greptile), catching bugs (Sentry) and translating (Crowdin).

Join the Community

Languages
TypeScript 78%
MDX 18.5%
JavaScript 3.1%
Python 0.2%