3217dca39f5dbf0858d2e3e22fbb337ad2f79bb2
New lib/db/dbctl: SyncAuthorization runs after the DB starts (EnsureDatabaseRunning), ensuring a LOGIN role + CONNECT grant per installed peer and revoking the stock PUBLIC CONNECT grant on mTLS-armed databases; RevokeForService drops a peer's CONNECT at uninstall. Admin executes over the in-container unix socket as postgres (trust). Wired into ensureInfraRunning and UninstallContainer. Includes unit tests + env-gated live integration test.
Maestro
Dcntrlized project coordinator service
Languages
Go
63.9%
TypeScript
32.3%
CSS
3.3%
HTML
0.3%
Dockerfile
0.2%