2 Commits

Include renames

Author	SHA1	Message	Date
Admin	cf51a6be94	fix(db): run schema-level grants against the shared database, not postgres	2026-08-21 21:05:23 +01:00
Admin	3217dca39f	feat(db): dbctl — reconcile per-peer CONNECT authorization on the shared DB (M2 §4) ... New lib/db/dbctl: SyncAuthorization runs after the DB starts (EnsureDatabaseRunning), ensuring a LOGIN role + CONNECT grant per installed peer and revoking the stock PUBLIC CONNECT grant on mTLS-armed databases; RevokeForService drops a peer's CONNECT at uninstall. Admin executes over the in-container unix socket as postgres (trust). Wired into ensureInfraRunning and UninstallContainer. Includes unit tests + env-gated live integration test.	2026-08-19 00:22:23 +01:00