ework-web 0.10.19 → 0.10.21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ework-web",
-  "version": "0.10.19",
+  "version": "0.10.21",
   "type": "module",
   "description": "ework-web — standalone multi-project issue tracker. Local SQLite-backed, no external API dependency. Bun + TypeScript + SSR HTML.",
   "license": "MIT",

package/src/db-admin.ts

@@ -251,13 +251,12 @@ export async function migrateSqliteToMysql(opts: MysqlTargetOpts): Promise<Migra
     // The `config` table is created in db.ts:SqliteDriver.create at boot but
     // is missing from schema-mysql.sql (pre-existing gap — MysqlDriver.create
     // doesn't create it either, so a plain mysql boot has no config table).
-    // Recreate the same shape here so migrate() can copy config rows. `key`
-    // is a MySQL reserved word — must be backticked. VARCHAR(255) on the PK
-    // because MySQL TEXT can't be a PRIMARY KEY without a prefix length.
+    // Recreate the same shape here so migrate() can copy config rows.
     await conn.query(
       applyTargetPrefix(
         "CREATE TABLE IF NOT EXISTS {{config}} (" +
-          "`key` VARCHAR(255) PRIMARY KEY," +
+          "id BIGINT AUTO_INCREMENT PRIMARY KEY," +
+          "akey VARCHAR(255) NOT NULL UNIQUE," +
           "value TEXT NOT NULL," +
           "updated_at VARCHAR(40) NOT NULL" +
           ") ENGINE=InnoDB DEFAULT CHARSET=utf8mb4",
@@ -461,11 +460,10 @@ export async function migrateMysqlToSqlite(targetPath: string): Promise<MigrateR
     target.exec("PRAGMA journal_mode = WAL");
     target.exec("PRAGMA foreign_keys = ON");
 
-    // config table (same shape as db.ts:144 — not in schema.sql).
-    // `key` is NOT reserved in SQLite (unlike MySQL).
+    // config table (same shape as db.ts:158 — not in schema.sql).
     target.exec(
       applyTargetPrefix(
-        "CREATE TABLE IF NOT EXISTS {{config}} (key TEXT PRIMARY KEY, value TEXT NOT NULL, updated_at TEXT NOT NULL)",
+        "CREATE TABLE IF NOT EXISTS {{config}} (id INTEGER PRIMARY KEY AUTOINCREMENT, akey TEXT NOT NULL UNIQUE, value TEXT NOT NULL, updated_at TEXT NOT NULL)",
         ""
       )
     );
@@ -609,12 +607,12 @@ export function generateMysqlDDL(
   }
 
   // config table — created in db.ts:SqliteDriver.create at boot, missing from
-  // schema-mysql.sql. Same shape as migrateSqliteToMysql L257-266. `key` is a
-  // MySQL reserved word → backticked.
+  // schema-mysql.sql. Same shape as migrateSqliteToMysql L257-266.
   lines.push(
     applyTargetPrefix(
       "CREATE TABLE IF NOT EXISTS {{config}} (" +
-        "`key` VARCHAR(255) PRIMARY KEY," +
+        "id BIGINT AUTO_INCREMENT PRIMARY KEY," +
+        "akey VARCHAR(255) NOT NULL UNIQUE," +
         "value TEXT NOT NULL," +
         "updated_at VARCHAR(40) NOT NULL" +
         ") ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;",

package/src/db.ts

@@ -141,6 +141,75 @@ function migrateLabelsTable(db: Database): void {
   }
 }
 
+function migrateConfigTable(db: Database): void {
+  const have = tableColumns(db, "config");
+  if (have.size === 0) return;
+  if (have.has("id") && have.has("akey")) return;
+  db.exec("PRAGMA foreign_keys = OFF");
+  try {
+    const oldKeyCol = have.has("key") ? "key" : "akey";
+    db.exec(applyPrefix("ALTER TABLE {{config}} RENAME TO config_old"));
+    db.exec(applyPrefix(
+      "CREATE TABLE {{config}} (id INTEGER PRIMARY KEY AUTOINCREMENT, akey TEXT NOT NULL UNIQUE, value TEXT NOT NULL, updated_at TEXT NOT NULL)"
+    ));
+    db.exec(applyPrefix(
+      `INSERT INTO {{config}} (akey, value, updated_at) SELECT ${oldKeyCol}, value, updated_at FROM config_old`
+    ));
+    db.exec("DROP TABLE config_old");
+  } finally {
+    db.exec("PRAGMA foreign_keys = ON");
+  }
+}
+
+const SURROGATE_ID_TABLES: Array<{ name: string; createSql: string; dataCols: string }> = [
+  {
+    name: "users",
+    createSql: "CREATE TABLE {{users}} (id INTEGER PRIMARY KEY AUTOINCREMENT, login TEXT NOT NULL UNIQUE, kind TEXT NOT NULL DEFAULT 'human' CHECK (kind IN ('human','bot','system')), display_name TEXT, password_hash TEXT, email TEXT, is_admin INTEGER NOT NULL DEFAULT 0, is_active INTEGER NOT NULL DEFAULT 1, created_at TEXT NOT NULL, updated_at TEXT NOT NULL DEFAULT '')",
+    dataCols: "login, kind, display_name, password_hash, email, is_admin, is_active, created_at, updated_at",
+  },
+  {
+    name: "model_cache",
+    createSql: "CREATE TABLE {{model_cache}} (id INTEGER PRIMARY KEY AUTOINCREMENT, provider_model TEXT NOT NULL UNIQUE, label TEXT NOT NULL, refreshed_at TEXT NOT NULL)",
+    dataCols: "provider_model, label, refreshed_at",
+  },
+  {
+    name: "issue_labels",
+    createSql: "CREATE TABLE {{issue_labels}} (id INTEGER PRIMARY KEY AUTOINCREMENT, issue_id INTEGER NOT NULL REFERENCES {{issues}}(id) ON DELETE CASCADE, label_id INTEGER NOT NULL REFERENCES {{labels}}(id) ON DELETE CASCADE, UNIQUE (issue_id, label_id))",
+    dataCols: "issue_id, label_id",
+  },
+  {
+    name: "reactions",
+    createSql: "CREATE TABLE {{reactions}} (id INTEGER PRIMARY KEY AUTOINCREMENT, comment_id INTEGER NOT NULL REFERENCES {{comments}}(id) ON DELETE CASCADE, user_login TEXT NOT NULL REFERENCES {{users}}(login), content TEXT NOT NULL, UNIQUE (comment_id, user_login, content))",
+    dataCols: "comment_id, user_login, content",
+  },
+  {
+    name: "attachments",
+    createSql: "CREATE TABLE {{attachments}} (id INTEGER PRIMARY KEY AUTOINCREMENT, uuid TEXT NOT NULL UNIQUE, issue_id INTEGER NOT NULL REFERENCES {{issues}}(id) ON DELETE CASCADE, filename TEXT NOT NULL, content_type TEXT NOT NULL DEFAULT 'application/octet-stream', size INTEGER NOT NULL, blob_path TEXT NOT NULL, uploaded_by TEXT NOT NULL REFERENCES {{users}}(login), created_at TEXT NOT NULL)",
+    dataCols: "uuid, issue_id, filename, content_type, size, blob_path, uploaded_by, created_at",
+  },
+  {
+    name: "project_members",
+    createSql: "CREATE TABLE {{project_members}} (id INTEGER PRIMARY KEY AUTOINCREMENT, project_id INTEGER NOT NULL REFERENCES {{projects}}(id) ON DELETE CASCADE, user_login TEXT NOT NULL REFERENCES {{users}}(login) ON DELETE CASCADE, role TEXT NOT NULL DEFAULT 'writer' CHECK (role IN ('reader','writer','admin')), created_at TEXT NOT NULL, UNIQUE (project_id, user_login))",
+    dataCols: "project_id, user_login, role, created_at",
+  },
+];
+
+function migrateAddSurrogateId(db: Database): void {
+  db.exec("PRAGMA foreign_keys = OFF");
+  try {
+    for (const t of SURROGATE_ID_TABLES) {
+      const have = tableColumns(db, t.name);
+      if (have.size === 0 || have.has("id")) continue;
+      db.exec(applyPrefix(`ALTER TABLE {{${t.name}}} RENAME TO ${t.name}_old`));
+      db.exec(applyPrefix(t.createSql));
+      db.exec(applyPrefix(`INSERT INTO {{${t.name}}} (${t.dataCols}) SELECT ${t.dataCols} FROM ${t.name}_old`));
+      db.exec(`DROP TABLE ${t.name}_old`);
+    }
+  } finally {
+    db.exec("PRAGMA foreign_keys = ON");
+  }
+}
+
 // ---- SqliteDriver: wraps bun:sqlite behind AsyncDatabase ----
 class SqliteDriver implements AsyncDatabase {
   readonly dialect = "sqlite" as const;
@@ -155,15 +224,17 @@ class SqliteDriver implements AsyncDatabase {
     db.exec("PRAGMA foreign_keys = ON");
     db.exec(
       applyPrefix(
-        "CREATE TABLE IF NOT EXISTS {{config}} (key TEXT PRIMARY KEY, value TEXT NOT NULL, updated_at TEXT NOT NULL)"
+        "CREATE TABLE IF NOT EXISTS {{config}} (id INTEGER PRIMARY KEY AUTOINCREMENT, akey TEXT NOT NULL UNIQUE, value TEXT NOT NULL, updated_at TEXT NOT NULL)"
       )
     );
     // Migration must run BEFORE schema.sql (same ordering as the original file).
+  migrateConfigTable(db);
   migrateUsersTable(db);
   migratePatTable(db);
   migrateProjectsTable(db);
   migrateIssuesTable(db);
   migrateLabelsTable(db);
+  migrateAddSurrogateId(db);
     db.exec(applyPrefix(readFileSync(join(import.meta.dir, "schema.sql"), "utf8")));
     return new SqliteDriver(db);
   }
@@ -230,6 +301,43 @@ function translateForMysql(sql: string): string {
     .replace(/excluded\.(\w+)/g, "VALUES($1)");
 }
 
+async function migrateMysqlSurrogateId(pool: Pool): Promise<void> {
+  const MYSQL_ALTERS: Array<{ table: string; sql: string }> = [
+    { table: "users", sql: "ALTER TABLE {{users}} DROP PRIMARY KEY, ADD COLUMN id BIGINT AUTO_INCREMENT PRIMARY KEY FIRST, ADD UNIQUE INDEX uk_users_login (login)" },
+    { table: "model_cache", sql: "ALTER TABLE {{model_cache}} DROP PRIMARY KEY, ADD COLUMN id BIGINT AUTO_INCREMENT PRIMARY KEY FIRST, ADD UNIQUE INDEX uk_mc_pm (provider_model)" },
+    { table: "issue_labels", sql: "ALTER TABLE {{issue_labels}} DROP PRIMARY KEY, ADD COLUMN id BIGINT AUTO_INCREMENT PRIMARY KEY FIRST, ADD UNIQUE INDEX uk_il (issue_id, label_id)" },
+    { table: "reactions", sql: "ALTER TABLE {{reactions}} DROP PRIMARY KEY, ADD COLUMN id BIGINT AUTO_INCREMENT PRIMARY KEY FIRST, ADD UNIQUE INDEX uk_react (comment_id, user_login, content)" },
+    { table: "attachments", sql: "ALTER TABLE {{attachments}} DROP PRIMARY KEY, ADD COLUMN id BIGINT AUTO_INCREMENT PRIMARY KEY FIRST, ADD UNIQUE INDEX uk_att_uuid (uuid)" },
+    { table: "project_members", sql: "ALTER TABLE {{project_members}} DROP PRIMARY KEY, ADD COLUMN id BIGINT AUTO_INCREMENT PRIMARY KEY FIRST, ADD UNIQUE INDEX uk_pm (project_id, user_login)" },
+  ];
+  for (const m of MYSQL_ALTERS) {
+    const tbl = DB_PREFIX + m.table;
+    const [cols] = await pool.query(
+      "SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = ? AND COLUMN_NAME = 'id'",
+      [tbl]
+    );
+    if ((cols as unknown[]).length > 0) continue;
+    try {
+      await pool.query(applyPrefix(m.sql));
+    } catch (e) {
+      const errno = (e as { errno?: number }).errno;
+      if (errno === 1146) continue;
+      console.warn(`[db] MySQL surrogate-id migration for ${m.table} failed (errno ${errno}):`, (e as Error).message);
+    }
+  }
+  const [cfgCols] = await pool.query(
+    "SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = ? AND COLUMN_NAME = 'key'",
+    [DB_PREFIX + "config"]
+  );
+  if ((cfgCols as unknown[]).length > 0) {
+    try {
+      await pool.query(applyPrefix("ALTER TABLE {{config}} CHANGE `key` akey VARCHAR(255) NOT NULL"));
+    } catch (e) {
+      console.warn("[db] MySQL config key→akey rename failed:", (e as Error).message);
+    }
+  }
+}
+
 class MysqlDriver implements AsyncDatabase {
   readonly dialect = "mysql" as const;
   private readonly pool: Pool;
@@ -271,6 +379,7 @@ class MysqlDriver implements AsyncDatabase {
           throw e;
         }
       }
+      await migrateMysqlSurrogateId(pool);
     }
     return new MysqlDriver(pool);
   }
@@ -347,9 +456,9 @@ export function getDB(): AsyncDatabase {
 export async function getConfigAll(): Promise<Record<string, string>> {
   try {
     const driver = getDB();
-    const rows = await driver.all<{ key: string; value: string }>("SELECT key, value FROM {{config}}");
+    const rows = await driver.all<{ akey: string; value: string }>("SELECT akey, value FROM {{config}}");
     const out: Record<string, string> = {};
-    for (const r of rows) out[r.key] = r.value;
+    for (const r of rows) out[r.akey] = r.value;
     return out;
   } catch {
     return {};
@@ -359,12 +468,12 @@ export async function getConfigAll(): Promise<Record<string, string>> {
 export async function setConfig(key: string, value: string): Promise<void> {
   const now = new Date().toISOString();
   await getDB().run(
-    "INSERT INTO {{config}} (key, value, updated_at) VALUES (?, ?, ?) " +
-      "ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at",
+    "INSERT INTO {{config}} (akey, value, updated_at) VALUES (?, ?, ?) " +
+      "ON CONFLICT(akey) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at",
     [key, value, now]
   );
 }
 
 export async function deleteConfig(key: string): Promise<void> {
-  await getDB().run("DELETE FROM {{config}} WHERE key = ?", [key]);
+  await getDB().run("DELETE FROM {{config}} WHERE akey = ?", [key]);
 }

package/src/index.ts

@@ -68,6 +68,7 @@ import {
   archiveLabel,
   deleteLabel,
   setIssueLabels,
+  listAllProjectIds,
   type ProjectRole,
   type UserRow,
 } from "./store";
@@ -127,6 +128,8 @@ async function refreshOpencodeClient(): Promise<void> {
 await refreshOpencodeClient();
 setInterval(refreshOpencodeClient, 10_000);
 
+void autoWireAllProjects(`http://${cfg.host}:${cfg.port}`);
+
 async function autoWireDaemon(projectId: number, origin: string): Promise<void> {
   if (!cfg.autowireActive) {
     log.info("autoWireDaemon: skipped (WORK_AUTOWIRE_ACTIVE=false)", { projectId });
@@ -160,6 +163,24 @@ async function autoWireDaemon(projectId: number, origin: string): Promise<void>
   }
 }
 
+let backfillStarted = false;
+async function autoWireAllProjects(origin: string): Promise<void> {
+  if (backfillStarted) return;
+  backfillStarted = true;
+  if (!cfg.autowireActive || (!cfg.daemonBotLogin.trim() && !cfg.daemonWebhookUrl.trim())) return;
+  try {
+    const ids = await listAllProjectIds();
+    let wired = 0;
+    for (const id of ids) {
+      await autoWireDaemon(id, origin);
+      wired++;
+    }
+    if (wired > 0) log.info("autoWireAllProjects: backfilled", { count: wired });
+  } catch (e) {
+    log.warn("autoWireAllProjects failed", { err: e as Error });
+  }
+}
+
 const SEC_HEADERS: Record<string, string> = {
   "content-security-policy": `default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'`,
   "x-content-type-options": "nosniff",
@@ -561,7 +582,7 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
       const form = await req.formData().catch(() => new FormData());
       const f: Record<string, string | undefined> = {};
       for (const [k, v] of form.entries()) f[k] = typeof v === "string" ? v : undefined;
-      const r = await handleCreateProject(f);
+      const r = await handleCreateProject(f, cfg.defaultModel);
       if (r.projectId) {
         await ensureProjectBootstrapAdmin(r.projectId, ctx.user!.login);
         await autoWireDaemon(r.projectId, url.origin);
@@ -973,6 +994,18 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
     return json({ ok: true });
   }
 
+  if (req.method === "POST" && url.pathname === "/api/daemons/wire-all") {
+    if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
+    if (!rateLimit(`daemons-wire:${ip}`, 5, 5 / 3600)) return json({ error: "rate limited" }, 429);
+    try {
+      const ids = await listAllProjectIds();
+      for (const id of ids) await autoWireDaemon(id, url.origin);
+      return json({ ok: true, count: ids.length });
+    } catch (e) {
+      return json({ ok: false, error: errMsg(e) });
+    }
+  }
+
   if (req.method === "POST" && url.pathname === "/api/daemons/deploy") {
     if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
     if (!rateLimit(`daemons-deploy:${ip}`, 10, 10 / 3600)) return json({ error: "rate limited" }, 429);
@@ -1931,10 +1964,7 @@ function parseState(s: string | null): "open" | "closed" | "all" {
 async function createProjectSafe(owner: string, name: string) {
   let project = await getProject(owner, name);
   if (project) return project;
-  // Auto-create project on first issue POST. Owner/name were already validated by the
-  // URL regex shape; allow creation here so `/<owner>/<new-repo>/issues` (POST) bootstraps
-  // a project in one step. Use createIssue's tx for atomicity.
-  project = await createProject(owner, name, "");
+  project = await createProject(owner, name, "", cfg.defaultModel);
   return project;
 }
 

package/src/schema-mysql.sql

@@ -8,7 +8,8 @@
 -- tables InnoDB + utf8mb4 for FK CASCADE + full Unicode (emoji).
 
 CREATE TABLE IF NOT EXISTS {{users}} (
-  login         VARCHAR(255) PRIMARY KEY,
+  id            BIGINT AUTO_INCREMENT PRIMARY KEY,
+  login         VARCHAR(255) NOT NULL UNIQUE,
   kind          VARCHAR(16) NOT NULL DEFAULT 'human'
                 CHECK (kind IN ('human','bot','system')),
   display_name  VARCHAR(255) DEFAULT NULL,
@@ -33,7 +34,8 @@ CREATE TABLE IF NOT EXISTS {{projects}} (
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
 
 CREATE TABLE IF NOT EXISTS {{model_cache}} (
-  provider_model VARCHAR(128) PRIMARY KEY,
+  id             BIGINT AUTO_INCREMENT PRIMARY KEY,
+  provider_model VARCHAR(128) NOT NULL UNIQUE,
   label          VARCHAR(255) NOT NULL,
   refreshed_at   VARCHAR(40) NOT NULL
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
@@ -86,19 +88,21 @@ CREATE TABLE IF NOT EXISTS {{labels}} (
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
 
 CREATE TABLE IF NOT EXISTS {{issue_labels}} (
-  issue_id BIGINT NOT NULL,
-  label_id BIGINT NOT NULL,
-  PRIMARY KEY (issue_id, label_id),
+  id        BIGINT AUTO_INCREMENT PRIMARY KEY,
+  issue_id  BIGINT NOT NULL,
+  label_id  BIGINT NOT NULL,
+  UNIQUE (issue_id, label_id),
   CONSTRAINT {{fk_il_issue}} FOREIGN KEY (issue_id) REFERENCES {{issues}}(id) ON DELETE CASCADE,
   CONSTRAINT {{fk_il_label}} FOREIGN KEY (label_id) REFERENCES {{labels}}(id) ON DELETE CASCADE
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
 CREATE INDEX issue_labels_label ON {{issue_labels}} (label_id);
 
 CREATE TABLE IF NOT EXISTS {{reactions}} (
-  comment_id BIGINT NOT NULL,
-  user_login VARCHAR(255) NOT NULL,
-  content    VARCHAR(64) NOT NULL,
-  PRIMARY KEY (comment_id, user_login, content),
+  id          BIGINT AUTO_INCREMENT PRIMARY KEY,
+  comment_id  BIGINT NOT NULL,
+  user_login  VARCHAR(255) NOT NULL,
+  content     VARCHAR(64) NOT NULL,
+  UNIQUE (comment_id, user_login, content),
   CONSTRAINT {{fk_reactions_comment}} FOREIGN KEY (comment_id)  REFERENCES {{comments}}(id) ON DELETE CASCADE,
   CONSTRAINT {{fk_reactions_user}} FOREIGN KEY (user_login)  REFERENCES {{users}}(login)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
@@ -106,14 +110,15 @@ CREATE INDEX reactions_comment ON {{reactions}} (comment_id);
 CREATE INDEX reactions_user   ON {{reactions}} (user_login);
 
 CREATE TABLE IF NOT EXISTS {{attachments}} (
-  uuid         VARCHAR(64) PRIMARY KEY,
-  issue_id     BIGINT NOT NULL,
-  filename     VARCHAR(255) NOT NULL,
-  content_type VARCHAR(128) NOT NULL DEFAULT 'application/octet-stream',
-  size         BIGINT NOT NULL,
-  blob_path    VARCHAR(1024) NOT NULL,
-  uploaded_by  VARCHAR(255) NOT NULL,
-  created_at   VARCHAR(40) NOT NULL,
+  id            BIGINT AUTO_INCREMENT PRIMARY KEY,
+  uuid          VARCHAR(64) NOT NULL UNIQUE,
+  issue_id      BIGINT NOT NULL,
+  filename      VARCHAR(255) NOT NULL,
+  content_type  VARCHAR(128) NOT NULL DEFAULT 'application/octet-stream',
+  size          BIGINT NOT NULL,
+  blob_path     VARCHAR(1024) NOT NULL,
+  uploaded_by   VARCHAR(255) NOT NULL,
+  created_at    VARCHAR(40) NOT NULL,
   CONSTRAINT {{fk_attachments_issue}} FOREIGN KEY (issue_id)    REFERENCES {{issues}}(id) ON DELETE CASCADE,
   CONSTRAINT {{fk_attachments_user}} FOREIGN KEY (uploaded_by) REFERENCES {{users}}(login)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
@@ -169,12 +174,13 @@ CREATE INDEX pat_user         ON {{personal_access_tokens}} (user_login);
 CREATE INDEX pat_last_eight   ON {{personal_access_tokens}} (token_last_eight);
 
 CREATE TABLE IF NOT EXISTS {{project_members}} (
-  project_id BIGINT NOT NULL,
-  user_login VARCHAR(255) NOT NULL,
-  role       VARCHAR(16) NOT NULL DEFAULT 'writer'
-             CHECK (role IN ('reader','writer','admin')),
-  created_at VARCHAR(40) NOT NULL,
-  PRIMARY KEY (project_id, user_login),
+  id          BIGINT AUTO_INCREMENT PRIMARY KEY,
+  project_id  BIGINT NOT NULL,
+  user_login  VARCHAR(255) NOT NULL,
+  role        VARCHAR(16) NOT NULL DEFAULT 'writer'
+              CHECK (role IN ('reader','writer','admin')),
+  created_at  VARCHAR(40) NOT NULL,
+  UNIQUE (project_id, user_login),
   CONSTRAINT {{fk_pm_project}} FOREIGN KEY (project_id) REFERENCES {{projects}}(id) ON DELETE CASCADE,
   CONSTRAINT {{fk_pm_user}} FOREIGN KEY (user_login) REFERENCES {{users}}(login) ON DELETE CASCADE
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;

package/src/schema.sql

@@ -1,10 +1,10 @@
 -- ework schema. Applied idempotently on boot (IF NOT EXISTS everywhere).
 -- See db.ts for PRAGMA setup (WAL + foreign_keys = ON).
 
--- login stays PRIMARY KEY intentionally. Renaming users is not supported;
--- swap to INTEGER user_id + UNIQUE(login) if that ever changes.
+-- login is UNIQUE (not PRIMARY KEY) — surrogate id is the PK now.
 CREATE TABLE IF NOT EXISTS {{users}} (
-  login         TEXT PRIMARY KEY,
+  id            INTEGER PRIMARY KEY AUTOINCREMENT,
+  login         TEXT NOT NULL UNIQUE,
   kind          TEXT NOT NULL DEFAULT 'human'
                 CHECK (kind IN ('human','bot','system')),
   display_name  TEXT,
@@ -40,7 +40,8 @@ CREATE TABLE IF NOT EXISTS {{projects}} (
 -- than a single JSON blob so the settings UI can render a select without
 -- parsing JSON in SQL.
 CREATE TABLE IF NOT EXISTS {{model_cache}} (
-  provider_model TEXT PRIMARY KEY,
+  id             INTEGER PRIMARY KEY AUTOINCREMENT,
+  provider_model TEXT NOT NULL UNIQUE,
   label          TEXT NOT NULL,
   refreshed_at   TEXT NOT NULL
 );
@@ -89,29 +90,32 @@ CREATE TABLE IF NOT EXISTS {{labels}} (
 );
 
 CREATE TABLE IF NOT EXISTS {{issue_labels}} (
+  id        INTEGER PRIMARY KEY AUTOINCREMENT,
   issue_id  INTEGER NOT NULL REFERENCES {{issues}}(id) ON DELETE CASCADE,
   label_id  INTEGER NOT NULL REFERENCES {{labels}}(id) ON DELETE CASCADE,
-  PRIMARY KEY (issue_id, label_id)
+  UNIQUE (issue_id, label_id)
 );
 
 CREATE TABLE IF NOT EXISTS {{reactions}} (
-  comment_id INTEGER NOT NULL REFERENCES {{comments}}(id) ON DELETE CASCADE,
-  user_login TEXT NOT NULL REFERENCES {{users}}(login),
-  content    TEXT NOT NULL,
-  PRIMARY KEY (comment_id, user_login, content)
+  id          INTEGER PRIMARY KEY AUTOINCREMENT,
+  comment_id  INTEGER NOT NULL REFERENCES {{comments}}(id) ON DELETE CASCADE,
+  user_login  TEXT NOT NULL REFERENCES {{users}}(login),
+  content     TEXT NOT NULL,
+  UNIQUE (comment_id, user_login, content)
 );
 CREATE INDEX IF NOT EXISTS reactions_comment
   ON {{reactions}} (comment_id);
 
 CREATE TABLE IF NOT EXISTS {{attachments}} (
-  uuid        TEXT PRIMARY KEY,
-  issue_id    INTEGER NOT NULL REFERENCES {{issues}}(id) ON DELETE CASCADE,
-  filename    TEXT NOT NULL,
-  content_type TEXT NOT NULL DEFAULT 'application/octet-stream',
-  size        INTEGER NOT NULL,
-  blob_path   TEXT NOT NULL,
-  uploaded_by TEXT NOT NULL REFERENCES {{users}}(login),
-  created_at  TEXT NOT NULL
+  id            INTEGER PRIMARY KEY AUTOINCREMENT,
+  uuid          TEXT NOT NULL UNIQUE,
+  issue_id      INTEGER NOT NULL REFERENCES {{issues}}(id) ON DELETE CASCADE,
+  filename      TEXT NOT NULL,
+  content_type  TEXT NOT NULL DEFAULT 'application/octet-stream',
+  size          INTEGER NOT NULL,
+  blob_path     TEXT NOT NULL,
+  uploaded_by   TEXT NOT NULL REFERENCES {{users}}(login),
+  created_at    TEXT NOT NULL
 );
 CREATE INDEX IF NOT EXISTS attachments_issue
   ON {{attachments}} (issue_id);
@@ -187,12 +191,13 @@ CREATE INDEX IF NOT EXISTS pat_last_eight
 -- routes through here: a write-scoped PAT can only write where the owning user
 -- has writer+ role on the target project.
 CREATE TABLE IF NOT EXISTS {{project_members}} (
-  project_id INTEGER NOT NULL REFERENCES {{projects}}(id) ON DELETE CASCADE,
-  user_login TEXT NOT NULL REFERENCES {{users}}(login) ON DELETE CASCADE,
-  role       TEXT NOT NULL DEFAULT 'writer'
-             CHECK (role IN ('reader','writer','admin')),
-  created_at TEXT NOT NULL,
-  PRIMARY KEY (project_id, user_login)
+  id          INTEGER PRIMARY KEY AUTOINCREMENT,
+  project_id  INTEGER NOT NULL REFERENCES {{projects}}(id) ON DELETE CASCADE,
+  user_login  TEXT NOT NULL REFERENCES {{users}}(login) ON DELETE CASCADE,
+  role        TEXT NOT NULL DEFAULT 'writer'
+              CHECK (role IN ('reader','writer','admin')),
+  created_at  TEXT NOT NULL,
+  UNIQUE (project_id, user_login)
 );
 CREATE INDEX IF NOT EXISTS project_members_user
   ON {{project_members}} (user_login);

package/src/store.ts

@@ -171,7 +171,12 @@ export async function listProjectsWithCounts(): Promise<ProjectWithCounts[]> {
   );
 }
 
-export async function createProject(owner: string, name: string, description: string): Promise<ProjectRow> {
+export async function listAllProjectIds(): Promise<number[]> {
+  const rows = await getDB().all<{ id: number }>("SELECT id FROM {{projects}} ORDER BY id");
+  return rows.map((r) => r.id);
+}
+
+export async function createProject(owner: string, name: string, description: string, model?: string): Promise<ProjectRow> {
   owner = owner.trim();
   name = name.trim();
   if (!/^[A-Za-z0-9_.-]+$/.test(owner)) throw new StoreError(400, "owner 含非法字符");
@@ -180,8 +185,8 @@ export async function createProject(owner: string, name: string, description: st
   const ts = now();
   const db = getDB();
   const info = await db.run(
-    "INSERT INTO {{projects}} (owner, name, description, created_at, updated_at) VALUES (?, ?, ?, ?, ?)",
-    [owner, name, description ?? "", ts, ts]
+    "INSERT INTO {{projects}} (owner, name, description, model, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)",
+    [owner, name, description ?? "", model ?? "", ts, ts]
   );
   return (await getProjectById(info.insertId))!;
 }
@@ -689,33 +694,41 @@ export async function setIssueLabel(issueId: number, labelId: number, on: boolea
   }
   const label = await getDB().get<LabelRow>("SELECT * FROM {{labels}} WHERE id = ?", [labelId]);
   if (!label) throw new StoreError(404, "标签不存在");
-  if (label.exclusive === 1) {
-    const scope = labelScope(label.name);
-    if (scope) {
-      const current = await listLabelsForIssue(issueId);
-      const siblings = current.filter((l) => l.exclusive === 1 && labelScope(l.name) === scope && l.id !== labelId);
-      for (const s of siblings) {
-        await getDB().run("DELETE FROM {{issue_labels}} WHERE issue_id = ? AND label_id = ?", [issueId, s.id]);
+  // Wrap read-modify-write in a transaction to prevent concurrent callers
+  // from racing on exclusive-scope eviction (read old set → both insert).
+  await getDB().transaction(async () => {
+    if (label.exclusive === 1) {
+      const scope = labelScope(label.name);
+      if (scope) {
+        const current = await listLabelsForIssue(issueId);
+        const siblings = current.filter((l) => l.exclusive === 1 && labelScope(l.name) === scope && l.id !== labelId);
+        for (const s of siblings) {
+          await getDB().run("DELETE FROM {{issue_labels}} WHERE issue_id = ? AND label_id = ?", [issueId, s.id]);
+        }
       }
     }
-  }
-  const dialect = getDB().dialect;
-  const insert = dialect === "sqlite"
-    ? "INSERT OR IGNORE INTO {{issue_labels}} (issue_id, label_id) VALUES (?, ?)"
-    : "INSERT IGNORE INTO {{issue_labels}} (issue_id, label_id) VALUES (?, ?)";
-  await getDB().run(insert, [issueId, labelId]);
+    const dialect = getDB().dialect;
+    const insert = dialect === "sqlite"
+      ? "INSERT OR IGNORE INTO {{issue_labels}} (issue_id, label_id) VALUES (?, ?)"
+      : "INSERT IGNORE INTO {{issue_labels}} (issue_id, label_id) VALUES (?, ?)";
+    await getDB().run(insert, [issueId, labelId]);
+  });
 }
 
 export async function setIssueLabels(issueId: number, labelIds: number[]): Promise<void> {
   const dialect = getDB().dialect;
-  await getDB().run("DELETE FROM {{issue_labels}} WHERE issue_id = ?", [issueId]);
-  const ids = Array.from(new Set(labelIds));
-  const insert = dialect === "sqlite"
-    ? "INSERT OR IGNORE INTO {{issue_labels}} (issue_id, label_id) VALUES (?, ?)"
-    : "INSERT IGNORE INTO {{issue_labels}} (issue_id, label_id) VALUES (?, ?)";
-  for (const id of ids) {
-    await getDB().run(insert, [issueId, id]);
-  }
+  // Wrap DELETE + INSERTs in a transaction so a crash between operations
+  // doesn't leave the issue with zero labels.
+  await getDB().transaction(async () => {
+    await getDB().run("DELETE FROM {{issue_labels}} WHERE issue_id = ?", [issueId]);
+    const ids = Array.from(new Set(labelIds));
+    const insert = dialect === "sqlite"
+      ? "INSERT OR IGNORE INTO {{issue_labels}} (issue_id, label_id) VALUES (?, ?)"
+      : "INSERT IGNORE INTO {{issue_labels}} (issue_id, label_id) VALUES (?, ?)";
+    for (const id of ids) {
+      await getDB().run(insert, [issueId, id]);
+    }
+  });
 }
 
 export async function createAttachment(a: Omit<AttachmentRow, "created_at">): Promise<AttachmentRow> {

package/src/views/home.ts

@@ -92,14 +92,15 @@ ${tabNavHTML("projects")}
 }
 
 export async function handleCreateProject(
-  form: Record<string, string | undefined>
+  form: Record<string, string | undefined>,
+  defaultModel: string,
 ): Promise<{ location: string; error?: string; projectId?: number }> {
   const owner = (form.owner ?? "").trim();
   const name = (form.name ?? "").trim();
   const description = (form.description ?? "").trim();
   if (!owner || !name) return { location: "/projects", error: "owner 和 name 必填" };
   try {
-    const p = await createProject(owner, name, description);
+    const p = await createProject(owner, name, description, defaultModel);
     return { location: `/${encodeURIComponent(p.owner)}/${encodeURIComponent(p.name)}/issues`, projectId: p.id };
   } catch (e) {
     return {