@vibedeckx/linux-x64 0.3.9 → 0.3.10

package/dist/bin.js

@@ -185980,10 +185980,29 @@ var createCoreRepos = (kdb, h) => ({
       const row = await readQuery.executeTakeFirst();
       return row ? mapProject(row) : void 0;
     },
+    /**
+     * Deleting a project cascades down two independent paths: to its sessions,
+     * and to `workspaces` → `workspace_checkouts`. `remote_session_mappings`
+     * sits on neither — it has no key to `projects` — so once a mapping's
+     * checkout is a real foreign key, leaving those rows behind would strand
+     * them against a checkout the same statement just deleted.
+     *
+     * The dependents are therefore removed explicitly, in order, inside one
+     * transaction. The scope check happens first so an unauthorized caller
+     * cannot delete another tenant's mappings on the way to a no-op.
+     */
     delete: async (id, userId) => {
-      let query = kdb.deleteFrom("projects").where("id", "=", id);
-      if (userId) query = query.where("user_id", "=", userId);
-      await query.execute();
+      await kdb.transaction().execute(async (trx) => {
+        let scope = trx.selectFrom("projects").select("id").where("id", "=", id);
+        if (userId) scope = scope.where("user_id", "=", userId);
+        if (!await scope.executeTakeFirst()) return;
+        const mappings = await trx.selectFrom("remote_session_mappings").select(["remote_server_id", "remote_session_id"]).where("project_id", "=", id).execute();
+        for (const mapping of mappings) {
+          await trx.deleteFrom("notification_sync_cursors").where("remote_server_id", "=", mapping.remote_server_id).where("remote_session_id", "=", mapping.remote_session_id).execute();
+        }
+        await trx.deleteFrom("remote_session_mappings").where("project_id", "=", id).execute();
+        await trx.deleteFrom("projects").where("id", "=", id).execute();
+      });
     },
     // Deliberately unscoped: the notification importer runs without a request
     // context and must DERIVE ownership from the mapped local project rather
@@ -203458,6 +203477,100 @@ var createWorkspaceRegistryRepo = (kdb, h) => ({
 });
 
 // src/storage/sqlite.ts
+var countDanglingCheckoutBindings = (db) => {
+  const scalar = (sql2) => Number(db.prepare(sql2).get().count);
+  return {
+    sessions: scalar(`SELECT count(*) AS count FROM agent_sessions s
+      LEFT JOIN workspace_checkouts c ON c.id = s.workspace_checkout_id
+      WHERE s.workspace_checkout_id IS NOT NULL AND c.id IS NULL`),
+    mappings: scalar(`SELECT count(*) AS count FROM remote_session_mappings m
+      LEFT JOIN workspace_checkouts c ON c.id = m.workspace_checkout_id
+      WHERE m.workspace_checkout_id IS NOT NULL AND c.id IS NULL`)
+  };
+};
+var tightenWorkspaceCheckoutForeignKeys = (db) => {
+  const ddl = (table) => db.prepare(
+    "SELECT sql FROM sqlite_master WHERE type = 'table' AND name = ?"
+  ).get(table)?.sql ?? "";
+  const bound = (table) => /REFERENCES\s+workspace_checkouts/i.test(ddl(table));
+  if (bound("agent_sessions") && bound("remote_session_mappings")) return;
+  const indexDdl = (table) => db.prepare(
+    "SELECT sql FROM sqlite_master WHERE type = 'index' AND tbl_name = ? AND sql IS NOT NULL"
+  ).all(table).map((row) => row.sql);
+  const dangling = countDanglingCheckoutBindings(db);
+  if (dangling.sessions > 0 || dangling.mappings > 0) {
+    console.warn(
+      `[Storage] Refusing to add the workspace_checkout foreign key: ${dangling.sessions} session(s) and ${dangling.mappings} remote mapping(s) reference a checkout that no longer exists. Resolve or clear those bindings, then restart to complete the migration.`
+    );
+    return;
+  }
+  const sessionIndexes = indexDdl("agent_sessions");
+  const mappingIndexes = indexDdl("remote_session_mappings");
+  db.transaction(() => {
+    if (!bound("agent_sessions")) {
+      db.exec(`
+        CREATE TABLE agent_sessions_fk_new (
+          id TEXT PRIMARY KEY,
+          project_id TEXT NOT NULL,
+          branch TEXT NOT NULL DEFAULT '',
+          workspace_checkout_id TEXT DEFAULT NULL,
+          status TEXT NOT NULL DEFAULT 'running',
+          permission_mode TEXT DEFAULT 'edit',
+          agent_type TEXT DEFAULT 'claude-code',
+          title TEXT DEFAULT NULL,
+          model TEXT DEFAULT NULL,
+          created_at TEXT DEFAULT (strftime('%Y-%m-%d %H:%M:%f', 'now')),
+          updated_at TEXT DEFAULT (strftime('%Y-%m-%d %H:%M:%f', 'now')),
+          activity_at INTEGER DEFAULT (cast((julianday('now') - 2440587.5) * 86400000 as integer)),
+          last_user_message_at INTEGER DEFAULT NULL,
+          last_completed_at INTEGER DEFAULT NULL,
+          favorited_at INTEGER DEFAULT NULL,
+          FOREIGN KEY (project_id) REFERENCES projects(id) ON DELETE CASCADE,
+          FOREIGN KEY (workspace_checkout_id) REFERENCES workspace_checkouts(id)
+            DEFERRABLE INITIALLY DEFERRED
+        );
+        INSERT INTO agent_sessions_fk_new
+          (id, project_id, branch, workspace_checkout_id, status, permission_mode, agent_type,
+           title, model, created_at, updated_at, activity_at, last_user_message_at,
+           last_completed_at, favorited_at)
+          SELECT id, project_id, branch, workspace_checkout_id, status, permission_mode, agent_type,
+                 title, model, created_at, updated_at, activity_at, last_user_message_at,
+                 last_completed_at, favorited_at
+            FROM agent_sessions;
+        DROP TABLE agent_sessions;
+        ALTER TABLE agent_sessions_fk_new RENAME TO agent_sessions;
+      `);
+      for (const sql2 of sessionIndexes) db.exec(sql2);
+    }
+    if (!bound("remote_session_mappings")) {
+      db.exec(`
+        CREATE TABLE remote_session_mappings_fk_new (
+          local_session_id TEXT PRIMARY KEY,
+          project_id TEXT NOT NULL,
+          remote_server_id TEXT NOT NULL,
+          remote_session_id TEXT NOT NULL,
+          branch TEXT,
+          workspace_checkout_id TEXT DEFAULT NULL,
+          title_resolved INTEGER NOT NULL DEFAULT 0,
+          notification_sync_start TEXT NOT NULL DEFAULT 'from_now',
+          notification_watch_until INTEGER,
+          FOREIGN KEY (workspace_checkout_id) REFERENCES workspace_checkouts(id)
+            DEFERRABLE INITIALLY DEFERRED
+        );
+        INSERT INTO remote_session_mappings_fk_new
+          (local_session_id, project_id, remote_server_id, remote_session_id, branch,
+           workspace_checkout_id, title_resolved, notification_sync_start, notification_watch_until)
+          SELECT local_session_id, project_id, remote_server_id, remote_session_id, branch,
+                 workspace_checkout_id, title_resolved, notification_sync_start, notification_watch_until
+            FROM remote_session_mappings;
+        DROP TABLE remote_session_mappings;
+        ALTER TABLE remote_session_mappings_fk_new RENAME TO remote_session_mappings;
+      `);
+      for (const sql2 of mappingIndexes) db.exec(sql2);
+    }
+  })();
+  console.log("[Storage] workspace_checkout foreign keys are now enforced.");
+};
 var createDatabase = (dbPath) => {
   const db = new Database(dbPath);
   db.pragma("journal_mode = WAL");
@@ -204954,6 +205067,7 @@ var createDatabase = (dbPath) => {
   }
   db.exec(`CREATE INDEX IF NOT EXISTS idx_remote_session_mappings_workspace_checkout
     ON remote_session_mappings(workspace_checkout_id)`);
+  tightenWorkspaceCheckoutForeignKeys(db);
   const sessionSearchCacheInfo = db.prepare("PRAGMA table_info(session_search_cache)").all();
   if (!sessionSearchCacheInfo.some((col) => col.name === "written_at")) {
     db.exec("ALTER TABLE session_search_cache ADD COLUMN written_at INTEGER");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibedeckx/linux-x64",
-  "version": "0.3.9",
+  "version": "0.3.10",
   "description": "Vibedeckx platform binaries for Linux x64",
   "os": [
     "linux"