root 3ca1509935 fix(schema): enforce cross-space FK on tasks.project_id via composite key ...

Security review flagged that tasks.project_id could reference a project in
a different space. Added composite FK (project_id, space_id) -> projects(id, space_id)
with ON DELETE SET NULL (project_id) so a deleted project leaves the task in
its space with project_id NULL rather than orphaning into a NULL space.

Added two regression tests: cross-space FK rejection + cascade behavior.

2026-05-31 02:14:20 +10:00

..

migrations

fix(schema): enforce cross-space FK on tasks.project_id via composite key

2026-05-31 02:14:20 +10:00

repos

feat(repos): spaces, projects, tasks with audit stub

2026-05-31 02:11:31 +10:00

migrate.js

feat: db pool + migration runner with idempotency

2026-05-31 02:05:53 +10:00

pool.js

feat: db pool + migration runner with idempotency

2026-05-31 02:05:53 +10:00