backend/internal/web/handlers_tasks.go

@@ -190,6 +190,27 @@ func TaskCreateHandler(deps TasksDeps) http.HandlerFunc {
 			return
 		}
 
+		const maxAllowedPosition = int32(2_000_000_000)
+		if maxPos > maxAllowedPosition-100 {
+			errs.General = "Column has too many tasks."
+			w.Header().Set("Content-Type", "text/html; charset=utf-8")
+			if r.Header.Get("HX-Request") == "true" {
+				w.Header().Set("HX-Retarget", "#add-task-slot-"+statusStr)
+				w.Header().Set("HX-Reswap", "innerHTML")
+				w.WriteHeader(http.StatusUnprocessableEntity)
+				_ = templates.TaskCreateFormFragment(
+					tablo.ID,
+					status,
+					templates.TaskCreateForm{Title: title, Status: statusStr},
+					errs,
+					csrf.Token(r),
+				).Render(ctx, w)
+				return
+			}
+			http.Redirect(w, r, "/tablos/"+tablo.ID.String(), http.StatusSeeOther)
+			return
+		}
+
 		task, err := deps.Queries.InsertTask(ctx, sqlc.InsertTaskParams{
 			TabloID:     tablo.ID,
 			Title:       title,