GeezerVison

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		May 14, 2026 4:24pm

⚠️ GitGuardian has uncovered 2 secrets following the scan of your pull request.

Please consider investigating the findings and remediating the incidents. Failure to do so may lead to compromising the associated services or software components.

^{🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.}

PR Summary

Medium Risk
Introduces global Postgres lock_timeout/statement_timeout defaults, which can cause previously-long or lock-waiting queries to start failing and needs validation in production workloads. Also changes knowledge-base document creation semantics by removing a transaction/lock, so knowledge_base.updatedAt is no longer updated atomically with the insert.

Overview
Adds default Postgres session guards in packages/db/db.ts (lock_timeout=5s, statement_timeout=30s) so lock waits and long-running queries fail fast instead of wedging connections.

Updates workspace archival to SET LOCAL higher per-transaction timeouts (5min statement, 30s lock) to keep this rare, large operation reliable under the new global defaults.

Simplifies knowledge-base document creation (createDocumentRecords, createSingleDocument) by dropping the explicit transaction and SELECT ... FOR UPDATE lock, relying on FK constraints/atomic inserts and reducing deadlock/pool checkout overhead.

^{Reviewed by Cursor Bugbot for commit 0ad209f. Bugbot is set up for automated code reviews on this repo. Configure here.}

Greptile Summary

This PR adds server-side lock_timeout=5s and statement_timeout=30s session defaults to the postgres.js connection pool, converting silent long-running query hangs into loud server-side cancellations. It also refactors KB document creation to use a single INSERT...SELECT...WHERE EXISTS statement rather than an explicit transaction with a row-level lock, and overrides the new shorter defaults in the workspace archival transaction with SET LOCAL.

• packages/db/db.ts: Adds connection: { lock_timeout: 5_000, statement_timeout: 30_000 } so every connection in the pool inherits these session-level guards at connection startup.
• apps/sim/lib/workspaces/lifecycle.ts: Prepends SET LOCAL overrides at the start of the archival transaction so the 30s default doesn't abort legitimate large-workspace cleanup operations.
• apps/sim/lib/knowledge/documents/service.ts: Replaces the explicit db.transaction + SELECT ... FOR UPDATE pattern with a new insertDocumentsIfKbAlive helper that does the existence check and insert atomically in one SQL statement via INSERT...SELECT...WHERE EXISTS.

Confidence Score: 4/5

The timeout and lock changes are safe; open questions remain around the KB document creation path that were raised in previous review threads.

The db.ts and lifecycle.ts changes are straightforward and mechanically correct — session timeouts are set at startup, and the archival transaction correctly overrides them with SET LOCAL before any DML. The insertDocumentsIfKbAlive helper is a genuine improvement for combining the soft-delete guard and insert into one SQL statement. The two open issues from prior review threads (the soft-delete race window at READ COMMITTED isolation and the non-atomic updatedAt update) are still present in this revision and would benefit from being addressed before merging to a production path.

apps/sim/lib/knowledge/documents/service.ts — the document creation path still has the two open concerns from prior review threads worth re-examining before merge.

Important Files Changed

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[createDocumentRecords / createSingleDocument] --> B{Upfront KB check\ndb.select WHERE deletedAt IS NULL}
    B -- KB not found --> C[throw 'Knowledge base not found']
    B -- KB alive --> D[Process tag data\nprocessDocumentTags]
    D --> E[Build NewDocumentRow array]
    E --> F[insertDocumentsIfKbAlive\nINSERT...SELECT...WHERE EXISTS\ndeleted_at IS NULL]
    F -- 0 rows returned\nKB soft-deleted in window --> G[throw 'Knowledge base not found']
    F -- N rows returned --> H[Log success]
    H --> I[db.update knowledgeBase\nset updatedAt - separate statement]
    I --> J[Return document data]

_{Reviews (2): Last reviewed commit: "fix(knowledge): close soft-delete TOCTOU..." | Re-trigger Greptile}

@greptile review