Backlog/v12 soar command execution

[AlexSanchez-bit]

No description provided.

[github-actions]

🛑 AI review — Engineer review required

This PR touches critical paths or introduces changes the model cannot judge with sufficient confidence. @Kbayero @osmontero please review.

🛑 architecture (gemini-3-flash-lite) — blocking — must fix before merge

Summary: Breaking change to SOAR command stream protocol; forces synchronous agent/server behavior and alters expected WebSocket message flow.

• high backend/modules/soar/handler/command_ws.go:154 — The logic change from a continuous stream loop to a single-result expectation breaks the contract with existing agents that may expect or provide multi-part streaming responses. This requires a coordinated agent update.

🛑 bugs (gemini-3-flash-lite) — blocking — must fix before merge

Summary: Removed context cancellation handling and loop, causing potential goroutine leaks and incomplete stream processing.

• high backend/modules/soar/handler/command_ws.go:197 — The select block now ignores ctx.Done() because the case is empty. If the client disconnects or the context is cancelled, the goroutine will hang indefinitely if resultCh or errCh are not closed, leading to a goroutine leak.
• high backend/modules/soar/handler/command_ws.go:160 — The logic was changed from a loop to a single select. If the agent sends multiple results (which the previous code supported), only the first one is processed and the connection is closed, effectively breaking multi-part command outputs.

🛑 security (gemini-3-flash-lite) — blocking — must fix before merge

Summary: Refactored WebSocket command stream handler logic; touches security-critical command execution path.

• medium backend/modules/soar/handler/command_ws.go:186 — The error message from the gRPC stream is sent directly to the client via JSON marshaling. Ensure that grpcErr.Error() does not contain sensitive internal system paths, stack traces, or internal infrastructure details that could lead to information disclosure.

[utmstackprapprover]

Changes requested — AI review found blocking issues (high/critical, or engineer review required). See above.

[utmstackprapprover]

Changes requested — AI review found blocking issues (high/critical, or engineer review required). See above.

[utmstackprapprover]

Changes requested — AI review found blocking issues (high/critical, or engineer review required). See above.

[utmstackprapprover]

Changes requested — AI review found blocking issues (high/critical, or engineer review required). See above.

[utmstackprapprover]

Changes requested — AI review found blocking issues (high/critical, or engineer review required). See above.