From e5c0f53f755cce94388bee9f821d22f369dcf5de Mon Sep 17 00:00:00 2001
From: xavix-yo <daniele.guiducci@gmail.com>
Date: Tue, 4 Aug 2026 22:35:47 +0100
Subject: [PATCH] fix: re-apply the owner schema when a user database is opened

open_user_pool ran only the key probe, so ensure_column never reached
pre-existing {userid}.db files: users created before an additive column
(e.g. chat_sessions.is_open) was introduced hit 'no such column' at
their next login. create_owner_tables is idempotent, so running it at
unlock lands additive changes per user, at the only moment an encrypted
file is readable.
---
 crates/skald-core/src/db/mod.rs | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/crates/skald-core/src/db/mod.rs b/crates/skald-core/src/db/mod.rs
index 72c1e91..2cd32c3 100644
--- a/crates/skald-core/src/db/mod.rs
+++ b/crates/skald-core/src/db/mod.rs
@@ -158,9 +158,16 @@ pub async fn create_user_pool(path: &Path, key: Option<&Dek>) -> Result<SqlitePo
 }
 
 /// Opens an existing user database. Never creates one — see [`create_user_pool`].
+///
+/// Re-applies the owner schema on every open: `create_owner_tables` is
+/// idempotent (`CREATE TABLE IF NOT EXISTS` + `ensure_column`), so an additive
+/// column lands on a pre-existing database at the user's next unlock — the only
+/// moment an encrypted file is readable. A failure here fails the open
+/// (fail-closed).
 pub async fn open_user_pool(path: &Path, key: Option<&Dek>) -> Result<SqlitePool> {
     let pool = SqlitePool::connect_with(user_options(path, key, false)).await?;
     probe(&pool).await?;
+    create_owner_tables(&pool).await?;
     Ok(pool)
 }