fix: audit remediation Wave 3 — M-1, MED/LOW sweep, ingest robustness + D-1 close-out #14

Merged
user2595 merged 15 commits from fix/audit-wave-3 into main 2026-06-16 04:54:00 +00:00
Showing only changes of commit 10ff5ba3ab - Show all commits

View File

@@ -76,11 +76,13 @@ PYEOF
)" )"
if [[ "$SECTION_OK" != "yes" ]]; then if [[ "$SECTION_OK" != "yes" ]]; then
echo "ABORT — schema not ready: chunks.section is missing (audit M-1)." echo "ABORT — schema not ready: chunks.section is missing (audit M-1)."
echo "The app user cannot add it (chunks is owned by 'postgres'). Apply it as" echo "The app user cannot add it (core tables are owned by 'postgres'). Sync the"
echo "the table owner, then re-run this script:" echo "schema with a privileged role, then re-run this script. Either:"
echo "" echo ""
echo " ssh alfred@192.168.178.103 \\" echo " (a) MIGRATION_DATABASE_URL=postgresql://postgres:PASS@HOST:PORT/papers \\"
echo " \"sudo -u postgres psql -d papers -c \\\\\"ALTER TABLE chunks ADD COLUMN IF NOT EXISTS section TEXT;\\\\\"\"" echo " \"$CODEX_DIR/.venv/bin/codex\" migrate # applies schema.sql idempotently"
echo " (b) sudo -u postgres psql -d papers \\"
echo " -c \"ALTER TABLE chunks ADD COLUMN IF NOT EXISTS section TEXT;\""
echo "" echo ""
echo "Nothing was changed — no TRUNCATE was issued." echo "Nothing was changed — no TRUNCATE was issued."
exit 1 exit 1