mosaic/stack
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

fix(database): Add composite unique constraints for workspace isolation #109

Closed
jason.woltje wants to merge 0 commits from fix/prisma-composite-unique into develop
pull from: fix/prisma-composite-unique
merge into: mosaic:develop
Conversation 0 Commits - Files Changed -
jason.woltje commented 2026-01-30 02:07:19 +00:00
Owner
Copy Link

Summary

Fixes Critical issue from code review: Prisma findUnique/update/delete calls use compound filters (id + workspaceId) but schema didn't define composite uniques.

Changes

Added @@unique([id, workspaceId]) to:

  • Task
  • Event
  • Project
  • Domain
  • Idea
  • UserLayout (layouts)
  • ActivityLog

Impact

  • Services using findUnique({ where: { id, workspaceId } }) now typecheck correctly
  • Workspace isolation enforced at database level
  • No runtime errors from invalid Prisma queries

Verification

  • pnpm prisma generate successful
  • pnpm prisma format validates schema

Migration Note

After merge, run pnpm prisma migrate dev to create the migration.

## Summary Fixes **Critical** issue from code review: Prisma findUnique/update/delete calls use compound filters (id + workspaceId) but schema didn't define composite uniques. ## Changes Added `@@unique([id, workspaceId])` to: - Task - Event - Project - Domain - Idea - UserLayout (layouts) - ActivityLog ## Impact - Services using `findUnique({ where: { id, workspaceId } })` now typecheck correctly - Workspace isolation enforced at database level - No runtime errors from invalid Prisma queries ## Verification - `pnpm prisma generate` successful - `pnpm prisma format` validates schema ## Migration Note After merge, run `pnpm prisma migrate dev` to create the migration.
jason.woltje added 1 commit 2026-01-30 02:07:19 +00:00
fix(database): add composite unique constraints for workspace isolation 715481fbbb
jason.woltje closed this pull request 2026-01-30 03:04:03 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
ai
AI/LLM integration
 api
Backend/API work
 api
auth
Authentication
 database
database
Database/schema work
 devops
Docker/deployment
 docs
Documentation
 frontend
graph
knowledge-module
migration
Data migration
 orchestrator
Orchestrator service (apps/orchestrator/)
 p0
Critical priority
 p1
High priority
 p2
Medium priority
 p3
Low priority
 performance
Performance work
 phase-1
phase-2
phase-3
phase-4
phase-5
plugin
MoltBot plugin work
 search
security
Security-related
 setup
Initial setup
 testing
Testing/QA
 web
Frontend work
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jason.woltje
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaic/stack#109
Delete Branch "fix/prisma-composite-unique"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?