Add integrity verification to generate and import commands #71
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
FEATURE: Add migration chain and hash verification for generate/import commands This commit implements integrity verification for the generate and import commands as specified in the generate-import-integrity design document: For `tern generate`: - Verifies migration chain integrity before generating (each migration's parent_state_hash matches the previous migration's resulting_state_hash) - --force flag now skips verification in addition to destructive confirmations For `tern import`: - Adds --force flag to skip verification - Verifies local migration chain integrity before importing - Verifies that local migration files match what was applied to the database (compares BLAKE3 hash of operations against stored migration_hash) - Handles edge cases: fresh database, more migrations in DB than local Both commands provide detailed error messages with resolution options when verification fails. Includes comprehensive unit tests for the verification functions.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
FEATURE: Add migration chain and hash verification for generate/import commands
This commit implements integrity verification for the generate and import
commands as specified in the generate-import-integrity design document:
For
tern generate:parent_state_hash matches the previous migration's resulting_state_hash)
For
tern import:(compares BLAKE3 hash of operations against stored migration_hash)
Both commands provide detailed error messages with resolution options when
verification fails. Includes comprehensive unit tests for the verification
functions.