Files
Juan DenisandClaude Fable 5 f34969eaac fix(models): close all 26 dangling-on-delete FKs + orphan sweep migration
Every NOT NULL FK from the KNOWN_DANGLING_ON_DELETE audit now declares
its parent-side relationship, so the delete-cascade policy door covers
it: AI conversations/pending actions, API keys, dashboards, event
subscriptions, login links, sent invitations, resource grants (users);
env vars + history, previews + settings, WAF policy (applications);
surveys, doctor results, proxy stack, tunnels (servers); manifests
(projects); DDNS hosts (zones); exposed services (tunnels); drills
(backup policies); rollouts (agent versions); site plugin installs
(WordPress sites); queue messages (groups). The ratchet set is now
EMPTY and stays that way.

One new deliberate exception: Workspace.projects — projects carry
environments and app groupings, so delete_workspace now refuses (409)
while any remain instead of silently destroying them (previously it
crashed with IntegrityError).

Migration 095 sweeps rows already orphaned on existing installs by
pre-fix hard-deletes — including an application's leftover env-var
secrets, which a reused SQLite row id could have attached to a future
app.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-31 20:25:29 -04:00

73 lines
2.7 KiB
Python

from datetime import datetime
from app import db
from app.models.json_column_mixin import JsonColumnMixin
from app.models.mixins import TimestampMixin
import json
class Project(JsonColumnMixin, TimestampMixin, db.Model):
"""A Project groups applications under a Workspace.
Hierarchy: Workspace -> Project -> Environment -> Applications.
OPT-IN and backward compatible: applications carry a nullable project_id, so
existing apps remain "unassigned" until a user organizes them into projects.
"""
__tablename__ = 'projects'
id = db.Column(db.Integer, primary_key=True)
workspace_id = db.Column(db.Integer, db.ForeignKey('workspaces.id'), nullable=False, index=True)
# DELIBERATELY not cascaded (see _delete_cascade_policy): projects contain
# environments and app groupings — delete_workspace refuses while any
# remain instead of silently destroying them.
workspace = db.relationship('Workspace',
backref=db.backref('projects', lazy='dynamic'))
name = db.Column(db.String(128), nullable=False)
slug = db.Column(db.String(128), nullable=False)
description = db.Column(db.Text, nullable=True)
metadata_json = db.Column(db.Text, nullable=True)
# Environments belonging to this project. Deleting a project cascades to its
# environments (apps are detached/blocked separately by the service layer).
environments = db.relationship(
'Environment',
backref='project',
lazy='dynamic',
cascade='all, delete-orphan',
order_by='Environment.order',
)
__table_args__ = (
db.UniqueConstraint('workspace_id', 'slug', name='uq_project_workspace_slug'),
)
@property
def metadata_(self):
return self._json_read('metadata_json')
@metadata_.setter
def metadata_(self, v):
self.metadata_json = json.dumps(v) if v else None
def to_dict(self, include_counts=False):
result = {
'id': self.id,
'workspace_id': self.workspace_id,
'name': self.name,
'slug': self.slug,
'description': self.description,
'metadata': self.metadata_,
'created_at': self.created_at.isoformat() if self.created_at else None,
'updated_at': self.updated_at.isoformat() if self.updated_at else None,
}
if include_counts:
from app.models.application import Application
result['environment_count'] = self.environments.count()
# Live apps only — a project claiming 5 while showing 3 is just wrong.
result['app_count'] = Application.query_active().filter_by(project_id=self.id).count()
return result
def __repr__(self):
return f'<Project {self.name}>'