mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-09 21:10:59 +00:00
The delete-all-data guard counted an account's surviving rows with a literal `WHERE user_id = $1`, which is the same assumption the wipe loop itself used to make. Account grants relate two accounts and carry no such column, so the guard raised `column "user_id" does not exist` and stopped before it could assert anything. The predicate now comes from the wipe plan's own owner-column declaration, so the guard asks the question the route answers instead of its own version of it.