c5cc11c28f
Brings Authority into §2.7 compliance. Previously AutoMigrate=true was set
in Program.cs but no runner was wired; 001_initial_schema.sql was
non-idempotent so wiring AddStartupMigrations against a pre-bootstrapped
DB crash-looped. Discovered during DEPRECATE-003 when the new drop
migration couldn't apply via Authority's own startup path.
Idempotency fixes in 001_initial_schema.sql:
- CREATE INDEX → CREATE INDEX IF NOT EXISTS (27 indexes)
- CREATE TRIGGER → DROP TRIGGER IF EXISTS + CREATE TRIGGER (3 triggers)
- CREATE POLICY → DROP POLICY IF EXISTS + CREATE POLICY (12 policies)
- CREATE TABLE / FUNCTION (OR REPLACE) / RLS ENABLE / role DO blocks were
already idempotent — left unchanged
Wiring:
- AddStartupMigrations("authority", "Authority", typeof(AuthorityDataSource)
.Assembly) called inside RegisterAuthorityServices (canonical
Signals/Scanner pattern).
- Stale options.AutoMigrate = true + options.MigrationsPath removed from
Program.cs.
- Migrations\_archived\** excluded from the EmbeddedResource glob.
Init script cleanup (migrations own schema authority now):
- 04-authority-schema.sql: 569 lines → 60 lines (schema shells + guarded
default-tenant seed fallback only; all DDL removed)
- 04b-authority-dedicated-schema.sql: same reduction for dedicated DB
Verification sequence — all PASS:
1. Green-field replay: 001 runs twice with zero semantic drift (pg_dump
diff shows only session restrict nonce).
2. Wire against pre-migrated volume: runner applies 001+002 in 209ms, no
crash-loop.
3. Wire + fresh schema: migrates 20 tables from empty in 395ms.
4. Idempotent restart: "Database is up to date", pure no-op.
Sprint SPRINT_20260422_003_Authority_auto_migration_compliance created
and archived in the same pass.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
33 lines
1.1 KiB
SQL
33 lines
1.1 KiB
SQL
-- Authority Schema (dedicated DB): Bootstrap Fallback.
|
|
--
|
|
-- Counterpart to 04-authority-schema.sql. Targets the dedicated
|
|
-- `stellaops_authority` database created by 00-create-authority-db.sql for
|
|
-- OIDC connection-pool isolation.
|
|
--
|
|
-- AGENTS.md §2.7 / SPRINT_20260422_003 (AUTH-MIGRATE-003): Schema DDL is
|
|
-- owned by the Authority service migration runner (embedded SQL in
|
|
-- `StellaOps.Authority.Persistence.dll`). This file only creates the
|
|
-- `authority` / `authority_app` schemas so the service can connect, and
|
|
-- guards a `default` tenant fallback seed.
|
|
|
|
\c stellaops_authority
|
|
|
|
CREATE SCHEMA IF NOT EXISTS authority;
|
|
CREATE SCHEMA IF NOT EXISTS authority_app;
|
|
|
|
-- Guarded default tenant seed (no-op if authority.tenants does not yet exist).
|
|
DO $$
|
|
BEGIN
|
|
IF EXISTS (
|
|
SELECT 1
|
|
FROM information_schema.tables
|
|
WHERE table_schema = 'authority'
|
|
AND table_name = 'tenants'
|
|
) THEN
|
|
INSERT INTO authority.tenants (tenant_id, name, display_name, status)
|
|
VALUES ('default', 'Default', 'Default Tenant', 'active')
|
|
ON CONFLICT (tenant_id) DO NOTHING;
|
|
END IF;
|
|
END
|
|
$$;
|