[Zach Dunn (zachdunn)]

What

listPrefixIdsForTarget (managed comment sync and the CLI private-prefix route) used to range-scan every gh/private/ file_metadata row in the workspace to find which private prefixes hold a PR or issue's files. On the largest workspace that is about 10.5k rows per call.

It now reads the distinct prefix_id values from that target's github_attachments rows. The query is pinned with INDEXED BY github_attachments_target_idx, because without stats SQLite picks github_attachments_prefix_idx and walks every private row in the workspace. In production the biggest target reads 29 rows in about 0.5 ms.

The index row's repo is resolved on the server, so the second query that checked prefix ownership is no longer needed. The sentinel and head-branch lookups are unchanged.

Coverage

Every putObject writes an index row for managed keys. In production, every private attachment key with metadata written since Sep 4 has a row. 168 older keys (Aug 18 to Sep 4, on 48 PRs) have no row; their objects are still in R2. Those rows need a one-off backfill before this deploys, or those old PRs could drop private images on their next comment sync.

Tests

• New SQLite test: the query plan uses github_attachments_target_idx, and the result covers indexed ids, detached rows, other repos, the sentinel and the head branch.
• The fakes now handle the new statement, and the unused file_metadata arm is removed.
• The comment tests seed index rows instead of metadata.
• api: 3637 tests pass. mcp: 213 tests pass.

---

Generated by Claude Code

[changeset-bot]

⚠️ No Changeset found

Latest commit: 2c30977

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one): 2

• coderabbit:review
• review

🚫 Excluded labels (none allowed): 1

• wip

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 97a650a2-b1a7-400b-9c28-26e7b2b8f59a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn