-- Repair OpenAPI OAuth connection bindings that still point at scopes without-- the referenced Connection row.---- Shared org sources can use user-owned OAuth connections. If a migrated-- binding landed at org scope while the Connection lives at user-org scope,-- copy it to the matching user-org scope under the same org. Any remaining-- invalid connection binding has no backing Connection and should be removed-- so the source falls back to sign-in. INSERT INTO "credential_binding" (	"id",	"scope_id",	"plugin_id",	"source_id",	"source_scope_id",	"slot_key",	"kind",	"text_value",	"secret_id",	"connection_id",	"created_at",	"updated_at")SELECT	b."id",	c."scope_id",	b."plugin_id",	b."source_id",	b."source_scope_id",	b."slot_key",	b."kind",	b."text_value",	b."secret_id",	b."connection_id",	b."created_at",	now()FROM "credential_binding" bJOIN "connection" c  ON c."id" = b."connection_id" AND c."scope_id" LIKE 'user-org:%:' || b."source_scope_id"WHERE b."plugin_id" = 'openapi'  AND b."kind" = 'connection'  AND NOT EXISTS (		SELECT 1		FROM "connection" exact		WHERE exact."id" = b."connection_id"		  AND exact."scope_id" = b."scope_id"	)ON CONFLICT ("scope_id", "id") DO UPDATE SET	"plugin_id" = excluded."plugin_id",	"source_id" = excluded."source_id",	"source_scope_id" = excluded."source_scope_id",	"slot_key" = excluded."slot_key",	"kind" = excluded."kind",	"text_value" = excluded."text_value",	"secret_id" = excluded."secret_id",	"connection_id" = excluded."connection_id",	"updated_at" = excluded."updated_at";--> statement-breakpoint DELETE FROM "credential_binding" bWHERE b."plugin_id" = 'openapi'  AND b."kind" = 'connection'  AND NOT EXISTS (		SELECT 1		FROM "connection" c		WHERE c."id" = b."connection_id"		  AND c."scope_id" = b."scope_id"	);--> statement-breakpoint