@cat-factory/worker 0.80.1 → 0.80.2

package/migrations/0046_user_identity_foreign_keys.sql

@@ -0,0 +1,114 @@
+-- Referential integrity for the user-identity lineage (the account-orphaning incident).
+--
+-- Previously NOTHING referenced users(id) at the DB level, so a users row could be removed
+-- while its identity, personal account, personal subscription, memberships, and run
+-- activations lived on — a dangling identity that the login path then silently forked a
+-- fresh (empty) account around. Add ON DELETE RESTRICT foreign keys so a users row can no
+-- longer be dropped while any of those still reference it; an unsafe delete now fails
+-- loudly instead of orphaning.
+--
+-- SQLite cannot ALTER a table to add a constraint, so each table is rebuilt via the
+-- standard create-new / copy / drop / rename dance and its indexes recreated. The current
+-- (post-migration) column shapes are reproduced exactly — including accounts.spend_monthly_limit
+-- (added in 0042). user_id on personal_subscriptions, memberships, and subscription_activations
+-- is also corrected from INTEGER to TEXT to match the canonical `usr_*` users.id (the Postgres
+-- side is already text).
+--
+-- defer_foreign_keys holds FK enforcement until this transaction commits, so the drop/rename
+-- steps of the rebuild dance don't trip an intermediate constraint check (mirrors 0001_init).
+
+PRAGMA defer_foreign_keys=TRUE;
+
+-- user_identities.user_id -> users(id)
+CREATE TABLE user_identities_new (
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE RESTRICT,
+  provider TEXT NOT NULL,
+  subject TEXT NOT NULL,
+  secret TEXT,
+  metadata TEXT,
+  created_at INTEGER NOT NULL,
+  PRIMARY KEY (provider, subject)
+);
+INSERT INTO user_identities_new (user_id, provider, subject, secret, metadata, created_at)
+  SELECT user_id, provider, subject, secret, metadata, created_at FROM user_identities;
+DROP TABLE user_identities;
+ALTER TABLE user_identities_new RENAME TO user_identities;
+CREATE INDEX idx_user_identities_user ON user_identities (user_id);
+
+-- accounts.owner_user_id -> users(id)  (nullable: null for org accounts)
+CREATE TABLE accounts_new (
+  id                     TEXT    NOT NULL PRIMARY KEY,
+  type                   TEXT    NOT NULL,
+  name                   TEXT    NOT NULL,
+  github_account_login   TEXT,
+  created_at             INTEGER NOT NULL,
+  default_cloud_provider TEXT,
+  owner_user_id          TEXT REFERENCES users(id) ON DELETE RESTRICT,
+  spend_monthly_limit    REAL
+);
+INSERT INTO accounts_new (id, type, name, github_account_login, created_at, default_cloud_provider, owner_user_id, spend_monthly_limit)
+  SELECT id, type, name, github_account_login, created_at, default_cloud_provider, owner_user_id, spend_monthly_limit FROM accounts;
+DROP TABLE accounts;
+ALTER TABLE accounts_new RENAME TO accounts;
+CREATE UNIQUE INDEX idx_accounts_personal
+  ON accounts (owner_user_id)
+  WHERE type = 'personal';
+
+-- personal_subscriptions.user_id -> users(id)  (also INTEGER -> TEXT)
+CREATE TABLE personal_subscriptions_new (
+  id            TEXT    NOT NULL,
+  user_id       TEXT    NOT NULL REFERENCES users(id) ON DELETE RESTRICT,
+  vendor        TEXT    NOT NULL,
+  label         TEXT    NOT NULL,
+  token_cipher  TEXT    NOT NULL,
+  expires_at    INTEGER,
+  created_at    INTEGER NOT NULL,
+  updated_at    INTEGER NOT NULL,
+  last_used_at  INTEGER,
+  deleted_at    INTEGER,
+  PRIMARY KEY (id)
+);
+INSERT INTO personal_subscriptions_new (id, user_id, vendor, label, token_cipher, expires_at, created_at, updated_at, last_used_at, deleted_at)
+  SELECT id, user_id, vendor, label, token_cipher, expires_at, created_at, updated_at, last_used_at, deleted_at FROM personal_subscriptions;
+DROP TABLE personal_subscriptions;
+ALTER TABLE personal_subscriptions_new RENAME TO personal_subscriptions;
+CREATE UNIQUE INDEX idx_personal_subs_user_vendor
+  ON personal_subscriptions (user_id, vendor)
+  WHERE deleted_at IS NULL;
+CREATE INDEX idx_personal_subs_expiry
+  ON personal_subscriptions (expires_at)
+  WHERE deleted_at IS NULL;
+
+-- memberships.user_id -> users(id)  (also INTEGER -> TEXT)
+CREATE TABLE memberships_new (
+  account_id TEXT    NOT NULL,
+  user_id    TEXT    NOT NULL REFERENCES users(id) ON DELETE RESTRICT,
+  roles      TEXT    NOT NULL DEFAULT 'developer',
+  created_at INTEGER NOT NULL,
+  PRIMARY KEY (account_id, user_id)
+);
+INSERT INTO memberships_new (account_id, user_id, roles, created_at)
+  SELECT account_id, user_id, roles, created_at FROM memberships;
+DROP TABLE memberships;
+ALTER TABLE memberships_new RENAME TO memberships;
+CREATE INDEX idx_memberships_user ON memberships (user_id);
+
+-- subscription_activations.user_id -> users(id)  (also INTEGER -> TEXT)
+CREATE TABLE subscription_activations_new (
+  id            TEXT    NOT NULL,
+  execution_id  TEXT    NOT NULL,
+  user_id       TEXT    NOT NULL REFERENCES users(id) ON DELETE RESTRICT,
+  vendor        TEXT    NOT NULL,
+  token_cipher  TEXT    NOT NULL,
+  created_at    INTEGER NOT NULL,
+  expires_at    INTEGER NOT NULL,
+  PRIMARY KEY (id)
+);
+INSERT INTO subscription_activations_new (id, execution_id, user_id, vendor, token_cipher, created_at, expires_at)
+  SELECT id, execution_id, user_id, vendor, token_cipher, created_at, expires_at FROM subscription_activations;
+DROP TABLE subscription_activations;
+ALTER TABLE subscription_activations_new RENAME TO subscription_activations;
+CREATE UNIQUE INDEX idx_sub_activations_run
+  ON subscription_activations (execution_id, user_id, vendor);
+CREATE INDEX idx_sub_activations_expiry
+  ON subscription_activations (expires_at);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/worker",
-  "version": "0.80.1",
+  "version": "0.80.2",
   "description": "Reusable Cloudflare Worker library (Hono + D1) exposing the Agent Architecture Board core: the `createApp()` Hono factory, the default fetch/scheduled/queue handler, and the Durable Object + Workflow classes. Deployments (see deploy/backend) supply the wrangler.toml + config and re-export these.",
   "repository": {
     "type": "git",
@@ -52,10 +52,10 @@
     "@cat-factory/integrations": "0.79.2",
     "@cat-factory/kernel": "0.115.1",
     "@cat-factory/observability-langfuse": "0.7.175",
-    "@cat-factory/orchestration": "0.102.1",
+    "@cat-factory/orchestration": "0.102.2",
     "@cat-factory/prompt-fragments": "0.13.7",
     "@cat-factory/provider-cloudflare": "0.7.191",
-    "@cat-factory/server": "0.106.1",
+    "@cat-factory/server": "0.106.2",
     "@cat-factory/spend": "0.12.1"
   },
   "devDependencies": {
@@ -64,7 +64,7 @@
     "typescript": "7.0.1-rc",
     "vitest": "^4.1.9",
     "wrangler": "^4.107.0",
-    "@cat-factory/conformance": "0.10.76"
+    "@cat-factory/conformance": "0.10.77"
   },
   "scripts": {
     "build": "tsc -b tsconfig.build.json",