fix(web): register vulnerability AI cache migration #796

Merged

simon merged 1 commit from fix/vuln-ask-ai-query into dev 2026-06-27 11:39:03 +00:00

Conversation 0 Commits 1 Files changed 3 +19697

simon commented 2026-06-27 11:11:59 +00:00

Owner

Copy link

Summary

• Register the existing vulnerability AI remediation cache migration in Drizzle journal metadata.
• Add the matching 0036 snapshot so future schema generation stays aligned.
• Extend migration validation to fail when a SQL migration exists but is missing from the journal.

Validation

• corepack pnpm --filter web run db:validate
• corepack pnpm --filter web exec node --experimental-strip-types --test lib/vulnerabilities/ai-remediation-cache.test.mjs lib/ai/settings-core.test.mjs
• corepack pnpm --filter web run lint
• corepack pnpm --filter web run type-check
• DATABASE_URL=postgresql://dummy:dummy@localhost:5432/dummy BETTER_AUTH_SECRET=dummy-secret-for-ci-build-only-at-least-32 BETTER_AUTH_URL=http://localhost:3000 NEXT_PUBLIC_APP_URL=http://localhost:3000 corepack pnpm --filter web run build

Notes

• Full corepack pnpm --filter web run test:unit currently has one unrelated pre-existing dashboard source assertion failure tracked as #784.

## Summary - Register the existing vulnerability AI remediation cache migration in Drizzle journal metadata. - Add the matching 0036 snapshot so future schema generation stays aligned. - Extend migration validation to fail when a SQL migration exists but is missing from the journal. ## Validation - corepack pnpm --filter web run db:validate - corepack pnpm --filter web exec node --experimental-strip-types --test lib/vulnerabilities/ai-remediation-cache.test.mjs lib/ai/settings-core.test.mjs - corepack pnpm --filter web run lint - corepack pnpm --filter web run type-check - DATABASE_URL=postgresql://dummy:dummy@localhost:5432/dummy BETTER_AUTH_SECRET=dummy-secret-for-ci-build-only-at-least-32 BETTER_AUTH_URL=http://localhost:3000 NEXT_PUBLIC_APP_URL=http://localhost:3000 corepack pnpm --filter web run build ## Notes - Full `corepack pnpm --filter web run test:unit` currently has one unrelated pre-existing dashboard source assertion failure tracked as #784.

simon added 1 commit 2026-06-27 11:11:59 +00:00

fix(web): register vulnerability AI cache migration dbe425c70e

simon force-pushed fix/vuln-ask-ai-query from dbe425c70e to de7ea09fc2 2026-06-27 11:23:20 +00:00 Compare

simon merged commit 3f13ef3c9e into dev 2026-06-27 11:39:03 +00:00

simon deleted branch fix/vuln-ask-ai-query 2026-06-27 11:39:03 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

E2E Failure

Regression found by end-to-end automation

  

area:agent

Go agent

  

area:audit-log

Audit logging

  

area:auth

Authentication

  

area:authz

Authorisation / RBAC

  

area:ci

CI / tooling / scanning

  

area:crypto

Cryptography / secrets

  

area:db

Database / schema

  

area:docker

Docker / deployment

  

area:headers

HTTP headers / CSP

  

area:ingest

gRPC ingest service

  

area:ldap

LDAP integration

  

area:rate-limit

Rate limiting / abuse prevention

  

area:ssrf

Server-side request forgery

  

area:supply-chain

Supply chain / deploy

  

area:terminal

Terminal / PTY

  

autorelease: pending

  

autorelease: tagged

  

bug

Something isn't working

  

claude-working

  

documentation

Improvements or additions to documentation

  

duplicate

This issue or pull request already exists

  

enhancement

New feature or request

  

good first issue

Good for newcomers

  

help wanted

Extra attention is needed

  

invalid

This doesn't seem right

  

priority: critical

Critical - blocking or data loss

  

priority: high

High priority - should be addressed soon

  

priority: low

Low priority - nice to have

  

priority: medium

Medium priority - address after high priority items

  

question

Further information is requested

  

security

Security finding from pre-pentest audit

  

sev:critical

Severity: Critical

  

sev:high

Severity: High

  

sev:info

Severity: Informational / Hardening

  

sev:low

Severity: Low

  

sev:medium

Severity: Medium

  

tests-required

Needs tests or stronger coverage before fix is complete

  

wontfix

This will not be worked on

No labels

E2E Failure

area:agent

area:audit-log

area:auth

area:authz

area:ci

area:crypto

area:db

area:docker

area:headers

area:ingest

area:ldap

area:rate-limit

area:ssrf

area:supply-chain

area:terminal

autorelease: pending

autorelease: tagged

bug

claude-working

documentation

duplicate

enhancement

good first issue

help wanted

invalid

priority: critical

priority: high

priority: low

priority: medium

question

security

sev:critical

sev:high

sev:info

sev:low

sev:medium

tests-required

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

carrtech/ct-ops!796

No description provided.