Ilker ManapandClaude Opus 5 ade689fc8e Refuse to run the destructive store tests against a real database ...

These TRUNCATE every table before each test. Pointed at a deployment that is a
silent and complete data loss — every key, every user, every conversation.

Not hypothetical. I did it: an SSH tunnel to the production database had been
opened minutes earlier for a perfectly good reason, and the same DSN was then
handed to the test suite. Twenty-one users, nine API keys, eighteen sessions,
four hundred and sixty-one usage records and three runtime-added models, gone
between one command and the next. Recovered only because the pre-migration
SQLite file was still there.

The guard is the database name. A test database has to say so, because a check
that could be satisfied by accident would not have stopped this one — the DSN
was entirely correct for what it had been opened for, and catastrophic for
what it was then used for.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-25 18:40:12 +02:00

..

migrations

Stop a second control plane from placing work behind the first's back

2026-09-25 18:24:06 +02:00

claims_test.go

Route every query through a dialect, before there is a second one

2026-09-25 16:10:35 +02:00

claims.go

Route every query through a dialect, before there is a second one

2026-09-25 16:10:35 +02:00

copy_test.go

Stop a second control plane from placing work behind the first's back

2026-09-25 18:24:06 +02:00

copy.go

Stop a second control plane from placing work behind the first's back

2026-09-25 18:24:06 +02:00

dialect_test.go

Route every query through a dialect, before there is a second one

2026-09-25 16:10:35 +02:00

dialect.go

Route every query through a dialect, before there is a second one

2026-09-25 16:10:35 +02:00

keys_test.go

Add the store: tenancy, keys and usage on SQLite

2026-09-16 08:37:40 +02:00

keys.go

Add the store: tenancy, keys and usage on SQLite

2026-09-16 08:37:40 +02:00

leadership_test.go

Stop a second control plane from placing work behind the first's back

2026-09-25 18:24:06 +02:00

leadership.go

Stop a second control plane from placing work behind the first's back

2026-09-25 18:24:06 +02:00

memory_test.go

agenta memory eklendi

2026-09-24 04:04:03 +03:00

memory.go

Run the store on PostgreSQL, chosen by what the address looks like

2026-09-25 16:18:10 +02:00

migrate.go

Run the store on PostgreSQL, chosen by what the address looks like

2026-09-25 16:18:10 +02:00

models.go

Keep runtime models, so an added model outlives a restart

2026-09-17 06:26:23 +02:00

open_test.go

Run the store on PostgreSQL, chosen by what the address looks like

2026-09-25 16:18:10 +02:00

open.go

Run the store on PostgreSQL, chosen by what the address looks like

2026-09-25 16:18:10 +02:00

postgres_test.go

Refuse to run the destructive store tests against a real database

2026-09-25 18:40:12 +02:00

postgres.go

Run the store on PostgreSQL, chosen by what the address looks like

2026-09-25 16:18:10 +02:00

seal.go

Onboard users with one-time links instead of pasted keys

2026-09-16 09:11:28 +02:00

sessions.go

Serve the cluster dashboard over the web, without serving pprof with it

2026-09-16 10:46:45 +02:00

sqlite.go

Route every query through a dialect, before there is a second one

2026-09-25 16:10:35 +02:00

store_test.go

Route every query through a dialect, before there is a second one

2026-09-25 16:10:35 +02:00

store.go

Approve accounts from the browser, and draw the traffic

2026-09-16 12:01:42 +02:00

threads_test.go

Give projects somewhere to keep a conversation, off unless they ask

2026-09-18 11:05:34 +02:00

threads.go

Route every query through a dialect, before there is a second one

2026-09-25 16:10:35 +02:00

users.go

Add an in-browser chat, without putting a key in the browser

2026-09-16 12:05:30 +02:00