update

internal/app/download.go

@@ -166,7 +166,7 @@ func (s *Server) exchangeDeploymentCode(
 			   FROM authorization_packages ap
 			   JOIN packages p ON p.id = ap.package_id
 			  WHERE ap.authorization_id = ?
-			    AND ap.package_slug = ?
+			    AND p.slug = ?
 			    AND p.enabled = TRUE`,
 			authorizationID, request.RequestedPackage,
 		).Scan(&authorized); err != nil {
@@ -241,7 +241,7 @@ func (s *Server) exchangeDeploymentCode(
 
 	rows, err := tx.QueryContext(
 		r.Context(),
-		`SELECT ap.package_slug, ap.display_name, ap.package_version, ap.sha256
+		`SELECT p.slug, p.display_name, p.package_version, p.sha256
 		   FROM authorization_packages ap
 		   JOIN packages p ON p.id = ap.package_id
 		  WHERE ap.authorization_id = ? AND p.enabled = TRUE
@@ -330,8 +330,8 @@ func (s *Server) handlePackageDownload(w http.ResponseWriter, r *http.Request) {
 	var hostname string
 	err := s.db.QueryRowContext(
 		r.Context(),
-		`SELECT p.id, ap.package_slug, ap.display_name, ap.package_name,
-		        ap.package_version, ap.file_name, ap.sha256, p.enabled,
+		`SELECT p.id, p.slug, p.display_name, p.package_name,
+		        p.package_version, p.file_name, p.sha256, p.enabled,
 		        ds.authorization_id, ah.hostname
 		   FROM download_sessions ds
 		   JOIN authorizations a ON a.id = ds.authorization_id
@@ -343,7 +343,7 @@ func (s *Server) handlePackageDownload(w http.ResponseWriter, r *http.Request) {
 		    AND ds.expires_at > UTC_TIMESTAMP(6)
 		    AND a.revoked_at IS NULL
 		    AND a.expires_at > UTC_TIMESTAMP(6)
-		    AND ap.package_slug = ?
+		    AND p.slug = ?
 		    AND p.enabled = TRUE`,
 		sessionHash[:], slug,
 	).Scan(