Initial import: KeepNote service (dcntrlized-auth consumer)

database/migrations/001_init_schema.sql

@@ -0,0 +1,76 @@
+\c dcntrlized;
+
+CREATE SCHEMA IF NOT EXISTS keepnote;
+
+-- ============================================================================
+-- Auth (D3/D5, planning/platform/shared-auth/README.md): identity moved to
+-- the shared dcntrlized-auth service. The per-service `users` table is
+-- DISABLED below; data tables keep a plain-UUID user_id (no FK) that points
+-- at auth.users(id). Existing dev rows are re-pointed by 002_shared_auth.sql.
+-- ============================================================================
+-- CREATE TABLE IF NOT EXISTS keepnote.users (
+--     id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+--     username VARCHAR(255) NOT NULL UNIQUE,
+--     password_hash VARCHAR(255) NOT NULL,
+--     created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+-- );
+
+CREATE TABLE IF NOT EXISTS keepnote.notes (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    user_id UUID NOT NULL,
+    title VARCHAR(255) NOT NULL,
+    content TEXT,
+    created TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    modified TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+    -- user_id is a plain UUID (platform account id, auth.users) -- no FK (D5).
+    -- FOREIGN KEY (user_id) REFERENCES keepnote.users(id) ON DELETE CASCADE
+);
+
+CREATE TABLE IF NOT EXISTS keepnote.tags (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    name VARCHAR(255) NOT NULL UNIQUE
+);
+
+CREATE TABLE IF NOT EXISTS keepnote.note_tags (
+    note_id UUID NOT NULL,
+    tag_id UUID NOT NULL,
+    PRIMARY KEY (note_id, tag_id),
+    FOREIGN KEY (note_id) REFERENCES keepnote.notes(id) ON DELETE CASCADE,
+    FOREIGN KEY (tag_id) REFERENCES keepnote.tags(id) ON DELETE CASCADE
+);
+
+-- Added IF NOT EXISTS to indexes
+CREATE INDEX IF NOT EXISTS idx_user_id ON keepnote.notes(user_id);
+CREATE INDEX IF NOT EXISTS idx_note_id ON keepnote.note_tags(note_id);
+CREATE INDEX IF NOT EXISTS idx_tag_id ON keepnote.note_tags(tag_id);
+
+-- Placed the function inside the keepnote schema
+CREATE OR REPLACE FUNCTION keepnote.update_updated_at_column()
+RETURNS TRIGGER AS $$
+BEGIN
+    NEW.modified = NOW();
+    RETURN NEW;
+END;
+$$ language 'plpgsql';
+
+-- Drop the trigger if it exists, then recreate it
+DROP TRIGGER IF EXISTS update_notes_modtime ON keepnote.notes;
+CREATE TRIGGER update_notes_modtime
+    BEFORE UPDATE ON keepnote.notes
+    FOR EACH ROW
+    EXECUTE FUNCTION keepnote.update_updated_at_column();
+
+-- Idempotent User Creation using a DO block
+DO $$
+BEGIN
+    IF NOT EXISTS (SELECT FROM pg_catalog.pg_roles WHERE rolname = 'keepnote_user') THEN
+        CREATE USER keepnote_user WITH PASSWORD 'keepnote';
+    END IF;
+END
+$$;
+
+-- Grants are naturally idempotent (they won't error if re-run)
+GRANT CONNECT ON DATABASE dcntrlized TO keepnote_user;
+GRANT USAGE ON SCHEMA keepnote TO keepnote_user;
+GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA keepnote TO keepnote_user;
+ALTER DEFAULT PRIVILEGES IN SCHEMA keepnote GRANT ALL ON TABLES TO keepnote_user;

database/migrations/002_shared_auth.sql

@@ -0,0 +1,19 @@
+\c dcntrlized;
+
+-- Plain-UUID user_id: drop the legacy FK (D5).
+ALTER TABLE IF EXISTS keepnote.notes DROP CONSTRAINT IF EXISTS notes_user_id_fkey;
+
+-- Re-point existing rows to auth.users by username, then drop the old table.
+-- No-op on fresh DBs (the old users table never existed).
+DO $$
+BEGIN
+    IF EXISTS (SELECT FROM pg_catalog.pg_tables WHERE schemaname='keepnote' AND tablename='users')
+       AND EXISTS (SELECT FROM pg_catalog.pg_tables WHERE schemaname='auth'   AND tablename='users') THEN
+        UPDATE keepnote.notes n
+           SET user_id = a.id
+          FROM keepnote.users old
+          JOIN auth.users a ON a.username = old.username
+         WHERE n.user_id = old.id;
+        DROP TABLE keepnote.users;
+    END IF;
+END $$;