- Q3: prod void DB role NOSUPERUSER (vector marked trusted; deploy/README documents it) - Q4: buildChildEnv allow-list for the claude subprocess (no OWNER_TOKEN/DATABASE_URL/secrets leak) - Q5: pending-change approve claims-before-applying + reopens on failure (no re-approvable dup) - Q6: /capture/upload validates space_id (UUID+existence); pg pool statement_timeout 30s - Q9: disabled failing syncoid-donatello timer on Z Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
42 lines
1.4 KiB
JavaScript
42 lines
1.4 KiB
JavaScript
import { pool } from '../pool.js';
|
|
|
|
export async function create({ agent_id, entity_type, entity_id, action, payload, reason }) {
|
|
const { rows: [r] } = await pool.query(
|
|
`INSERT INTO pending_changes(agent_id, entity_type, entity_id, action, payload, reason)
|
|
VALUES($1,$2,$3,$4,$5,$6) RETURNING *`,
|
|
[agent_id, entity_type, entity_id || null, action, payload, reason || null]
|
|
);
|
|
return r;
|
|
}
|
|
|
|
export async function listPending({ limit = 100 } = {}) {
|
|
const { rows } = await pool.query(
|
|
`SELECT * FROM pending_changes WHERE status='pending' ORDER BY created_at LIMIT $1`,
|
|
[limit]
|
|
);
|
|
return rows;
|
|
}
|
|
|
|
export async function getById(id) {
|
|
const { rows: [r] } = await pool.query(`SELECT * FROM pending_changes WHERE id=$1`, [id]);
|
|
return r;
|
|
}
|
|
|
|
export async function resolve(id, status, resolved_by) {
|
|
const { rows: [r] } = await pool.query(
|
|
`UPDATE pending_changes SET status=$1, resolved_at=now(), resolved_by=$2
|
|
WHERE id=$3 AND status='pending' RETURNING *`,
|
|
[status, resolved_by || null, id]
|
|
);
|
|
return r;
|
|
}
|
|
|
|
// Compensating action: return a claimed change to 'pending' if applying it
|
|
// failed, so the owner can retry (prevents a claimed-but-unapplied dead change).
|
|
export async function reopen(id) {
|
|
await pool.query(
|
|
`UPDATE pending_changes SET status='pending', resolved_at=NULL, resolved_by=NULL WHERE id=$1`,
|
|
[id]
|
|
);
|
|
}
|