9 Commits

Include renames

Author	SHA1	Message	Date
yukkop	6f80f672f2	rework: fix all vulnerabilities	2026-09-08 10:36:38 +00:00
yukkop	7c25e3b46d	feat: db-tool: +secrets load	2026-06-09 23:57:51 +00:00
yukkop	b56dc50e50	feat: db-tool: normalize-backup	2026-06-03 08:14:22 +00:00
yukkop	0ec8e910a0	test(postgres-hooks): retarget hectic bundle tests to migrator init + db-tool hydrate ... Move postgres-init-hectic-inheritance test (13 cases) to migrator/init-hectic-bundle since the bundle is now applied by `migrator init` instead of `postgres-init`. Drop init-migrator-with-inherits since `--inherits` is now a deprecation warning, not an error. Add db-tool hydrate-hook test (5 cases) covering --no-hook skip, default apply, idempotency, and HECTIC_DOTENV_FILE. Augment init-migrator with hectic.version and hectic.secret table assertions.	2026-04-30 22:12:09 +00:00
yukkop	72955d606a	feat(db-tool): hectic-inheritance: add hectic.immutable + diff coverage ... Add a hectic.immutable parent table. Tables inheriting it get auto-attached BEFORE INSERT/UPDATE/DELETE/TRUNCATE row+statement triggers that block DML unless the session sets hectic.migration_mode='on' (intended use: SET LOCAL inside a migration transaction). Same exemptions as the rest of the bundle apply (hectic schema, partitions, temp tables, GUC-excluded schemas). database diff now appends an --- IMMUTABLE TABLE DATA --- section to its output, with per-table unified row diffs of every table inheriting hectic.immutable, surfacing drift in 'frozen' reference data alongside schema drift. Subcommand exits non-zero when either schema or data differs. Test postgres-init-hectic-inheritance extended to 10 cases covering immutable triggers, DML blocked outside migration_mode, SET LOCAL allowing DML inside a transaction, GUC not leaking past COMMIT, and TRUNCATE under migration_mode.	2026-04-30 16:10:38 +00:00
yukkop	1d1c28f7f3	feat(db-tool): hectic-inheritance: bootstrap hectic.created_at / hectic.updated_at inheritance hook ... Adds a SQL bundle plus event triggers that enforce `INHERITS (hectic.created_at)` on every user CREATE TABLE and auto-attach a BEFORE UPDATE row trigger when a table inherits `hectic.updated_at`. Always-exempt: `hectic`, `information_schema`, `pg_*`, declarative partitions, temp tables. Per-DB opt-out via the GUC `hectic.inheritance_extra_excluded_schemas`. Exposed three ways: * `pkgs.hectic.hectic-inheritance` — derivation with the SQL at $out/share/hectic/hectic-inheritance.sql * `self.lib.hecticInheritance.{sql,path}` — pkgs-free Nix surface * `postgres-init` opt-in via `PG_HECTIC_INHERITANCE=1` (HECTIC_INHERITANCE_SQL overrides the default) Test postgres-init-hectic-inheritance covers all six branches: bootstrap, non-inheriting reject, accepting inheritance, auto updated_at trigger fires, GUC exclusion, declarative partition exemption.	2026-04-30 15:16:57 +00:00
yukkop	47c7fa9bf8	fix(db-tool): postgres-init: createdb on reuse when target DB missing ... Previously when PG_REUSE=1 and PG_VERSION existed but the target database had never been successfully created (e.g. devshell exited mid-init in a prior run), postgres-init skipped createdb and the subsequent psql connection failed with 'database "<db>" does not exist'. Now on reuse path we probe pg_database and create the target DB if missing, making postgres-init fully idempotent across stale-state recovery. Adds postgres-init-reuse-missing-db test.	2026-04-30 12:16:09 +00:00
yukkopandSisyphus	e67c2e0c47	fix(package): db-tool: call postgres-init/cleanup binaries instead of local devshell scripts ... Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-04-30 10:10:11 +00:00
yukkop	977b2cfa95	feat(\db-tool\): introduce unified db-tool package with postgres harness and tests (T0-T8)	2026-04-30 09:06:44 +00:00