Skip to content

migrate: check errors in stripWalletAssignmentFKs#674

Merged
parkan merged 1 commit into
mainfrom
fix/migrate-sqlite-unchecked-exec
Apr 24, 2026
Merged

migrate: check errors in stripWalletAssignmentFKs#674
parkan merged 1 commit into
mainfrom
fix/migrate-sqlite-unchecked-exec

Conversation

@parkan
Copy link
Copy Markdown
Collaborator

@parkan parkan commented Apr 23, 2026

Summary

Three dialect branches of `stripWalletAssignmentFKs` were discarding `.Error` from their `db.Exec` calls.

sqlite (potentially destructive): INSERT into `wallet_assignments_tmp` and `DROP TABLE wallet_assignments` were unchecked. A silent INSERT failure followed by a successful DROP + RENAME would wipe the table while reporting success. The data is load-bearing -- `export-keys` reads `wallet_assignments` to rebuild `preparation.wallet_id` after the schema change.

postgres: errors from `DROP CONSTRAINT IF EXISTS` (permissions, lock contention) were swallowed; now propagated. Happy path unchanged.

mysql: `DROP FOREIGN KEY` has no `IF EXISTS` before 8.0.19, so a re-run failed and the error was swallowed. Added an `information_schema.table_constraints` check to skip the drop cleanly when the FK is already gone.

Test plan

  • `go test ./model/...` (sqlite)
  • CI matrix covers postgres + mysql

parkan added a commit that referenced this pull request Apr 23, 2026
## Summary
PR #669 added \`//go:generate make -C sol bytecode\` to
\`util/testutil/fvm_precompiles.go\`, which calls \`forge build\` +
\`forge inspect\`. The devcontainer's Dockerfile only copied \`anvil\`
from the Foundry image, not \`forge\`.

Effect: CI's \"Generate swagger code\" step runs \`go generate ./...\`
whenever codegen-gated paths (\`api/\`, \`handler/\`, \`cmd/\`,
\`storagesystem/\`, \`docs/gen/\`, \`model/\`, \`singularity.go\`,
\`docgen.sh\`) change. On those PRs, \`make -C sol bytecode\` fails with
\`forge: No such file or directory\`.

Currently blocks #670, #673, #674.

## Test plan
- [ ] CI devcontainer build includes \`/usr/local/bin/forge\`
- [ ] \`go generate ./...\` succeeds inside the devcontainer
@parkan parkan force-pushed the fix/migrate-sqlite-unchecked-exec branch from a01e2ed to 9a44992 Compare April 23, 2026 15:57
parkan added a commit that referenced this pull request Apr 23, 2026
## Summary
\`forge inspect\` appends a CBOR metadata section to the
deployedBytecode: an IPFS hash of the compiler metadata JSON plus the
solc version tag. That IPFS hash drifts between forge versions even with
\`solc\` pinned in \`foundry.toml\`. Locally (forge 1.5.1) it matches
what was committed in #669; in CI (\`foundry:latest\`, newer) \`go
generate ./...\` produces different trailing bytes and \`git diff
--exit-code\` fails.

Fix: \`bytecode_hash = \"none\"\` + \`cbor_metadata = false\` -- solc
omits the metadata section entirely. Output is deterministic across
forge versions and solc patches. Regenerated the three .txt files
against the new config; runtime bytecode is unchanged (FVM precompile
mocks don't consult the metadata).

Currently blocks #670, #673, #674 after #675 unblocked the
missing-\`forge\` issue.

## Test plan
- [x] \`make -C util/testutil/sol clean bytecode\` produces the
committed output under forge 1.5.1
- [x] \`go test ./util/testutil/...\` pass
- [x] \`go test ./service/dealpusher/...\` pass (DDO / PDP mocks
exercise the stripped bytecode)
- [ ] CI
Three dialect branches silently discarded errors from the statements
that rebuild or strip wallet_assignments FKs.

sqlite: INSERT and DROP were unchecked. A failed INSERT (schema drift,
constraint) followed by successful DROP + RENAME would wipe the table
while reporting success. wallet_assignments carries preparation_id ->
actor_id links that export-keys needs to reconstruct preparation.wallet_id,
so losing them silently breaks legacy wallet migration.

postgres: DROP CONSTRAINT IF EXISTS errors (permissions, lock contention)
were dropped. Behavior unchanged on happy path; real errors now surface.

mysql: DROP FOREIGN KEY has no IF EXISTS before 8.0.19, so checking
information_schema.table_constraints makes the path idempotent. A re-run
previously failed silently; it now skips the drop cleanly.
@parkan parkan force-pushed the fix/migrate-sqlite-unchecked-exec branch from 9a44992 to fb9f64d Compare April 23, 2026 17:32
@parkan parkan self-assigned this Apr 23, 2026
@parkan parkan requested a review from anjor April 23, 2026 19:05
@parkan parkan merged commit 49f3a19 into main Apr 24, 2026
1 check passed
@parkan parkan deleted the fix/migrate-sqlite-unchecked-exec branch April 24, 2026 13:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants