.sqlx/query-47c1cee8591250819d22e87058c6011bebb77eaf93c1cfa2535db42221d8ecf3.json

@@ -0,0 +1,34 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT tokens_in, tokens_out, credits FROM usage_events\n               WHERE workspace_id = $1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "tokens_in",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "tokens_out",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 2,
+        "name": "credits",
+        "type_info": "Numeric"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Uuid"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false
+    ]
+  },
+  "hash": "47c1cee8591250819d22e87058c6011bebb77eaf93c1cfa2535db42221d8ecf3"
+}

migrations/0028_backfill_on_delete.sql

@@ -0,0 +1,201 @@
+-- Backfill ON DELETE clauses on FKs from 0001-0006 and 0026. The pattern
+-- (CASCADE for tenant-scoped children, SET NULL for historical references)
+-- was learned after v1 shipped and applied consistently from 0010 onward;
+-- this migration retrofits the earlier tables so DELETEs succeed instead of
+-- either failing with a FK violation or leaving orphans.
+--
+-- Two FKs stay as NO ACTION deliberately:
+--   * audit_log.workspace_id — audit is append-only and must outlive any
+--     workspace delete (the trigger blocks UPDATE/DELETE on audit rows).
+--   * thread_messages.from_agent — history stays attributable via the
+--     agents.deleted_at soft-delete already in schema.
+--
+-- Two FKs stay NOT NULL and become explicit RESTRICT rather than SET NULL:
+--   * agents.managed_by — the Rust domain type is `UserId` (not Option).
+--     Making it nullable would ripple through cm-domain/cm-db/cm-api/tests.
+--     RESTRICT preserves current behavior (delete blocked) but documents it.
+--   * installed_skills.installed_by — same reasoning.
+-- To hard-delete a user in either case, reassign or hard-delete the
+-- dependent rows first — which matches real org-ownership semantics.
+
+-- ---- 0001_init: workspaces cascade -----------------------------------------
+ALTER TABLE users
+    DROP CONSTRAINT IF EXISTS users_workspace_id_fkey,
+    ADD  CONSTRAINT users_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE;
+
+ALTER TABLE agents
+    DROP CONSTRAINT IF EXISTS agents_workspace_id_fkey,
+    ADD  CONSTRAINT agents_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE;
+
+ALTER TABLE agents
+    DROP CONSTRAINT IF EXISTS agents_managed_by_fkey,
+    ADD  CONSTRAINT agents_managed_by_fkey
+         FOREIGN KEY (managed_by) REFERENCES users (id) ON DELETE RESTRICT;
+
+ALTER TABLE sessions
+    DROP CONSTRAINT IF EXISTS sessions_agent_id_fkey,
+    ADD  CONSTRAINT sessions_agent_id_fkey
+         FOREIGN KEY (agent_id) REFERENCES agents (id) ON DELETE CASCADE,
+    DROP CONSTRAINT IF EXISTS sessions_workspace_id_fkey,
+    ADD  CONSTRAINT sessions_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE;
+
+ALTER TABLE messages
+    DROP CONSTRAINT IF EXISTS messages_session_id_fkey,
+    ADD  CONSTRAINT messages_session_id_fkey
+         FOREIGN KEY (session_id) REFERENCES sessions (id) ON DELETE CASCADE;
+
+ALTER TABLE steps
+    DROP CONSTRAINT IF EXISTS steps_message_id_fkey,
+    ADD  CONSTRAINT steps_message_id_fkey
+         FOREIGN KEY (message_id) REFERENCES messages (id) ON DELETE CASCADE;
+
+ALTER TABLE agent_runs
+    DROP CONSTRAINT IF EXISTS agent_runs_session_id_fkey,
+    ADD  CONSTRAINT agent_runs_session_id_fkey
+         FOREIGN KEY (session_id) REFERENCES sessions (id) ON DELETE CASCADE;
+
+ALTER TABLE approvals
+    DROP CONSTRAINT IF EXISTS approvals_workspace_id_fkey,
+    ADD  CONSTRAINT approvals_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE,
+    DROP CONSTRAINT IF EXISTS approvals_run_id_fkey,
+    ADD  CONSTRAINT approvals_run_id_fkey
+         FOREIGN KEY (run_id) REFERENCES agent_runs (id) ON DELETE CASCADE,
+    DROP CONSTRAINT IF EXISTS approvals_requested_by_agent_fkey,
+    ADD  CONSTRAINT approvals_requested_by_agent_fkey
+         FOREIGN KEY (requested_by_agent) REFERENCES agents (id) ON DELETE CASCADE,
+    DROP CONSTRAINT IF EXISTS approvals_decided_by_fkey,
+    ADD  CONSTRAINT approvals_decided_by_fkey
+         FOREIGN KEY (decided_by) REFERENCES users (id) ON DELETE SET NULL;
+
+-- Single-use execution grants: deleting the approval should drop the grant.
+ALTER TABLE execution_grants
+    DROP CONSTRAINT IF EXISTS execution_grants_approval_id_fkey,
+    ADD  CONSTRAINT execution_grants_approval_id_fkey
+         FOREIGN KEY (approval_id) REFERENCES approvals (id) ON DELETE CASCADE;
+
+-- audit_log.workspace_id — intentionally left as NO ACTION.
+
+ALTER TABLE skills
+    DROP CONSTRAINT IF EXISTS skills_workspace_id_fkey,
+    ADD  CONSTRAINT skills_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE;
+
+ALTER TABLE installed_skills
+    DROP CONSTRAINT IF EXISTS installed_skills_skill_id_fkey,
+    ADD  CONSTRAINT installed_skills_skill_id_fkey
+         FOREIGN KEY (skill_id) REFERENCES skills (id) ON DELETE CASCADE,
+    DROP CONSTRAINT IF EXISTS installed_skills_installed_by_fkey,
+    ADD  CONSTRAINT installed_skills_installed_by_fkey
+         FOREIGN KEY (installed_by) REFERENCES users (id) ON DELETE RESTRICT;
+
+ALTER TABLE secrets
+    DROP CONSTRAINT IF EXISTS secrets_workspace_id_fkey,
+    ADD  CONSTRAINT secrets_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE;
+
+ALTER TABLE app_connections
+    DROP CONSTRAINT IF EXISTS app_connections_workspace_id_fkey,
+    ADD  CONSTRAINT app_connections_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE,
+    DROP CONSTRAINT IF EXISTS app_connections_agent_id_fkey,
+    ADD  CONSTRAINT app_connections_agent_id_fkey
+         FOREIGN KEY (agent_id) REFERENCES agents (id) ON DELETE CASCADE,
+    DROP CONSTRAINT IF EXISTS app_connections_secret_ref_fkey,
+    ADD  CONSTRAINT app_connections_secret_ref_fkey
+         FOREIGN KEY (secret_ref) REFERENCES secrets (id) ON DELETE SET NULL;
+
+ALTER TABLE threads
+    DROP CONSTRAINT IF EXISTS threads_workspace_id_fkey,
+    ADD  CONSTRAINT threads_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE;
+
+ALTER TABLE thread_participants
+    DROP CONSTRAINT IF EXISTS thread_participants_agent_id_fkey,
+    ADD  CONSTRAINT thread_participants_agent_id_fkey
+         FOREIGN KEY (agent_id) REFERENCES agents (id) ON DELETE CASCADE;
+
+-- thread_messages.thread_id → CASCADE; from_agent stays NO ACTION.
+ALTER TABLE thread_messages
+    DROP CONSTRAINT IF EXISTS thread_messages_thread_id_fkey,
+    ADD  CONSTRAINT thread_messages_thread_id_fkey
+         FOREIGN KEY (thread_id) REFERENCES threads (id) ON DELETE CASCADE;
+
+ALTER TABLE file_nodes
+    DROP CONSTRAINT IF EXISTS file_nodes_workspace_id_fkey,
+    ADD  CONSTRAINT file_nodes_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE,
+    DROP CONSTRAINT IF EXISTS file_nodes_agent_id_fkey,
+    ADD  CONSTRAINT file_nodes_agent_id_fkey
+         FOREIGN KEY (agent_id) REFERENCES agents (id) ON DELETE CASCADE;
+
+ALTER TABLE credit_lots
+    DROP CONSTRAINT IF EXISTS credit_lots_workspace_id_fkey,
+    ADD  CONSTRAINT credit_lots_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE;
+
+ALTER TABLE usage_events
+    DROP CONSTRAINT IF EXISTS usage_events_workspace_id_fkey,
+    ADD  CONSTRAINT usage_events_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE,
+    DROP CONSTRAINT IF EXISTS usage_events_agent_id_fkey,
+    ADD  CONSTRAINT usage_events_agent_id_fkey
+         FOREIGN KEY (agent_id) REFERENCES agents (id) ON DELETE SET NULL,
+    DROP CONSTRAINT IF EXISTS usage_events_run_id_fkey,
+    ADD  CONSTRAINT usage_events_run_id_fkey
+         FOREIGN KEY (run_id) REFERENCES agent_runs (id) ON DELETE SET NULL;
+
+-- ---- 0002_auth_sessions ---------------------------------------------------
+ALTER TABLE auth_sessions
+    DROP CONSTRAINT IF EXISTS auth_sessions_user_id_fkey,
+    ADD  CONSTRAINT auth_sessions_user_id_fkey
+         FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE;
+
+-- ---- 0003_run_events ------------------------------------------------------
+ALTER TABLE run_events
+    DROP CONSTRAINT IF EXISTS run_events_run_id_fkey,
+    ADD  CONSTRAINT run_events_run_id_fkey
+         FOREIGN KEY (run_id) REFERENCES agent_runs (id) ON DELETE CASCADE;
+
+-- ---- 0004_outbox ----------------------------------------------------------
+ALTER TABLE outbox
+    DROP CONSTRAINT IF EXISTS outbox_workspace_id_fkey,
+    ADD  CONSTRAINT outbox_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE,
+    DROP CONSTRAINT IF EXISTS outbox_agent_id_fkey,
+    ADD  CONSTRAINT outbox_agent_id_fkey
+         FOREIGN KEY (agent_id) REFERENCES agents (id) ON DELETE CASCADE;
+
+-- ---- 0005_oauth_states ----------------------------------------------------
+ALTER TABLE oauth_states
+    DROP CONSTRAINT IF EXISTS oauth_states_workspace_id_fkey,
+    ADD  CONSTRAINT oauth_states_workspace_id_fkey
+         FOREIGN KEY (workspace_id) REFERENCES workspaces (id) ON DELETE CASCADE,
+    DROP CONSTRAINT IF EXISTS oauth_states_user_id_fkey,
+    ADD  CONSTRAINT oauth_states_user_id_fkey
+         FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
+    DROP CONSTRAINT IF EXISTS oauth_states_agent_id_fkey,
+    ADD  CONSTRAINT oauth_states_agent_id_fkey
+         FOREIGN KEY (agent_id) REFERENCES agents (id) ON DELETE CASCADE;
+
+-- ---- 0006_promo_codes -----------------------------------------------------
+ALTER TABLE promo_codes
+    DROP CONSTRAINT IF EXISTS promo_codes_redeemed_by_fkey,
+    ADD  CONSTRAINT promo_codes_redeemed_by_fkey
+         FOREIGN KEY (redeemed_by) REFERENCES workspaces (id) ON DELETE SET NULL;
+
+-- ---- 0026_group_rooms -----------------------------------------------------
+-- The threads.created_by / thread_participants.added_by columns were added
+-- nullable by 0026, so SET NULL is legal.
+ALTER TABLE threads
+    DROP CONSTRAINT IF EXISTS threads_created_by_fkey,
+    ADD  CONSTRAINT threads_created_by_fkey
+         FOREIGN KEY (created_by) REFERENCES agents (id) ON DELETE SET NULL;
+
+ALTER TABLE thread_participants
+    DROP CONSTRAINT IF EXISTS thread_participants_added_by_fkey,
+    ADD  CONSTRAINT thread_participants_added_by_fkey
+         FOREIGN KEY (added_by) REFERENCES agents (id) ON DELETE SET NULL;