Commit graph

2 commits

Author SHA1 Message Date
Randall Stillwell
98406fafbe fix(migration): neon() returns rows array directly, not { rows, rowCount }
The pick-a-name B2 migration script (shipped 2026-05-24 in `9abbab6`)
was authored against the @vercel/postgres return shape
`{ rows: [...], rowCount: N }` but uses @neondatabase/serverless's
`neon()` tagged template, which returns the rows array DIRECTLY. As
shipped, the first query at line 37 produced `before === undefined`
and crashed at the `before.length` check on line 44 with
`TypeError: Cannot read properties of undefined (reading 'length')`.

Verified pattern from `lib/database.js` line 33: the wrapper adapter
explicitly checks `Array.isArray(result)` because `neon()` returns
the array directly. AGENTS.md Gotcha #1 mentions @neondatabase and
@vercel/postgres run in parallel; this is exactly the kind of cross-
contamination that creates.

Fix: drop the `{ rows: x }` destructuring in all 3 sites (lines 37,
61, 73) and assign the result directly. Added a 4-line "why" comment
block above the first site so the next person to write a migration
script doesn't make the same mistake.

Hand-verified post-fix:
- node --check: exit 0
- Live run against prod Neon DB: migrated 3 users (admin id=1, alice
  id=5, bob id=6) from @tcgvault.com → @deckhearth.com. Idempotent
  re-run prints "Nothing to migrate."
- No data loss; the broken first attempt didn't reach the UPDATE
  statement (crashed before line 54), so prod was unchanged.

Operator action satisfied by this fix:
- The `pick-a-name` PR #21 / squash `9abbab6` post-merge operator
  action ("run the migration script before next admin login") is now
  complete in prod. Admin login uses `admin@deckhearth.com`.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-25 11:25:43 -05:00
varutasu
9abbab6c21
feat(brand): unify on Deck Hearth across in-repo strings + infra (P1 brand decision)
Resolves the launch-blocking 'TCG Vault vs Deck Hearth' inconsistency called out in AGENTS.md line 5 since project setup. Operator gate-0 decision: Deck Hearth wins. Two briefs applied serially. B1 (mechanical): 7-file display + comment sweep. B2 (infrastructure): Redis prefix rename in lib/rate-limit.js (5 prefixes, accept one-time counter reset), package.json + lockfile regen (STOP-on-churn confirmed only name lines changed), admin/alice/bob email rename in seed scripts + login pre-fill + NEW idempotent migration script scripts/migrations/2026-05-24-rename-admin-email.js. Risk 4 PRESERVE applied: test/lib/permission-middleware.test.js retains admin@tcgvault.com literal with 7-line architect-authored why comment (documents pre-fix-auth-bypass bug shape; preserves historical truth per project's gotcha-documentation convention). All 5 D-decisions ratified at gate-1 (Deck Hearth / deck-hearth / deckhearth / admin@deckhearth.com / full deckhearth Redis prefix). Local: lint 128 baseline (B1 + B2), vitest 21/21 (B1 + B2). CI all green: Playwright smoke 3/3 against rebranded preview in 1m4s, forbidden-cors-headers pass, forbidden-endpoints pass, Screenshot diff pass, Vercel deployment complete. Cross-validation lineage: 4th convoy where the same 3-test smoke spec defends auth surface through sweeping change (after PR #15 Layout default-user, PR #19 CORS, PR #20 rate-limit, now this PR #21 brand rename). OPERATOR POST-MERGE ACTION REQUIRED: run 'node scripts/migrations/2026-05-24-rename-admin-email.js' against prod Neon DB before next admin login (ordering: migration FIRST, then any subsequent setup-db invocation). Migration is ESM, idempotent, UNIQUE-collision-safe. PR #21 architect-commit 50ce9ab, B1 ac8c998, B2 1c18d21.
2026-05-25 02:28:29 -05:00