weichenandCursor
89acd16ca5
Why: Two processes opening the same SQLite file both migrate and reconcile, so the second one seals the first one's live runs. The activity lock is taken before open, and durability settings are read back on the application connection. Evidence: SELF go test ./internal/instanceguard ./internal/store ./internal/app (filtered T8 cases) on feature/u8-sqlite-instance-guard. PG durability readback is NOT_RUN locally; Dev CI test-backend-pg is the GATE. Impact: SQLite serve and migrate share one non-blocking flock. A replaced database or rebuilt lock file refuses start unless --adopt-instance-guard. PostgreSQL serve refuses when fsync, full_page_writes, or synchronous_commit is off. Refs: docs/recovery/u8-sqlite-instance-guard.md Co-authored-by: Cursor <cursoragent@cursor.com>
31 lines
758 B
Go
31 lines
758 B
Go
package main
|
||
|
||
import (
|
||
"flag"
|
||
"fmt"
|
||
"os"
|
||
|
||
"agent-system-backend/internal/app"
|
||
)
|
||
|
||
func runMigrate(args []string) int {
|
||
fs := flag.NewFlagSet("migrate", flag.ExitOnError)
|
||
data := fs.String("data", "./data", "数据目录（SQLite 档）")
|
||
dsn := fs.String("dsn", "", "PostgreSQL DSN（空则读 AGENT_SYSTEM_DSN）")
|
||
adopt := fs.Bool("adopt-instance-guard", false, "数据库被替换或锁文件被重建后，显式重写守卫")
|
||
_ = fs.Parse(args)
|
||
storage := *dsn
|
||
if storage == "" {
|
||
storage = os.Getenv("AGENT_SYSTEM_DSN")
|
||
}
|
||
if err := app.Migrate(app.Options{
|
||
DataDir: *data,
|
||
StorageDSN: storage,
|
||
AdoptInstanceGuard: *adopt,
|
||
}); err != nil {
|
||
fmt.Fprintln(os.Stderr, "agent-system:", err)
|
||
return 1
|
||
}
|
||
return 0
|
||
}
|