feat: bootstrap foundation application

apps/server/internal/database/database.go

@@ -0,0 +1,79 @@
+package database
+
+import (
+	"context"
+	"database/sql"
+	"fmt"
+	"os"
+	"path/filepath"
+	"time"
+
+	libsql "github.com/tursodatabase/go-libsql"
+
+	"github.com/tim/md-hub-secure/apps/server/internal/config"
+)
+
+type DB interface {
+	SQL() *sql.DB
+	Close() error
+}
+
+type dbHandle struct {
+	sql *sql.DB
+}
+
+func Open(ctx context.Context, cfg config.DatabaseConfig) (DB, error) {
+	if err := os.MkdirAll(filepath.Dir(cfg.Path), 0o755); err != nil {
+		return nil, fmt.Errorf("create database directory: %w", err)
+	}
+
+	var (
+		db  *sql.DB
+		err error
+	)
+	if cfg.PrimaryURL == "" {
+		db, err = sql.Open("libsql", "file:"+cfg.Path)
+		if err != nil {
+			return nil, fmt.Errorf("open local libsql database: %w", err)
+		}
+	} else {
+		var opts []libsql.Option
+		if cfg.AuthToken != "" {
+			opts = append(opts, libsql.WithAuthToken(cfg.AuthToken))
+		}
+
+		connector, err := libsql.NewEmbeddedReplicaConnector(cfg.Path, cfg.PrimaryURL, opts...)
+		if err != nil {
+			return nil, fmt.Errorf("create libsql connector: %w", err)
+		}
+
+		db = sql.OpenDB(connector)
+	}
+
+	db.SetConnMaxLifetime(5 * time.Minute)
+	db.SetMaxOpenConns(1)
+	db.SetMaxIdleConns(1)
+
+	if err := db.PingContext(ctx); err != nil {
+		return nil, fmt.Errorf("ping database: %w", err)
+	}
+
+	var journalMode string
+	if err := db.QueryRowContext(ctx, "PRAGMA journal_mode=WAL").Scan(&journalMode); err != nil {
+		return nil, fmt.Errorf("enable wal mode: %w", err)
+	}
+
+	if _, err := db.ExecContext(ctx, "PRAGMA foreign_keys=ON"); err != nil {
+		return nil, fmt.Errorf("enable foreign keys: %w", err)
+	}
+
+	return &dbHandle{sql: db}, nil
+}
+
+func (d *dbHandle) SQL() *sql.DB {
+	return d.sql
+}
+
+func (d *dbHandle) Close() error {
+	return d.sql.Close()
+}

apps/server/internal/database/migrate.go

@@ -0,0 +1,98 @@
+package database
+
+import (
+	"context"
+	"database/sql"
+	"embed"
+	"fmt"
+	"io/fs"
+	"sort"
+	"strings"
+)
+
+//go:embed migrations/*.sql
+var migrationFiles embed.FS
+
+func ApplyMigrations(ctx context.Context, db *sql.DB) error {
+	if _, err := db.ExecContext(ctx, `
+		CREATE TABLE IF NOT EXISTS schema_migrations (
+			version TEXT PRIMARY KEY,
+			applied_at TEXT NOT NULL
+		);
+	`); err != nil {
+		return fmt.Errorf("ensure schema_migrations: %w", err)
+	}
+
+	entries, err := fs.ReadDir(migrationFiles, "migrations")
+	if err != nil {
+		return fmt.Errorf("read migrations: %w", err)
+	}
+
+	var names []string
+	for _, entry := range entries {
+		if entry.IsDir() || !strings.HasSuffix(entry.Name(), ".up.sql") {
+			continue
+		}
+		names = append(names, entry.Name())
+	}
+	sort.Strings(names)
+
+	for _, name := range names {
+		applied, err := migrationApplied(ctx, db, name)
+		if err != nil {
+			return err
+		}
+		if applied {
+			continue
+		}
+
+		body, err := migrationFiles.ReadFile("migrations/" + name)
+		if err != nil {
+			return fmt.Errorf("read migration %s: %w", name, err)
+		}
+
+		tx, err := db.BeginTx(ctx, nil)
+		if err != nil {
+			return fmt.Errorf("begin migration %s: %w", name, err)
+		}
+
+		for _, statement := range splitStatements(string(body)) {
+			if _, err := tx.ExecContext(ctx, statement); err != nil {
+				_ = tx.Rollback()
+				return fmt.Errorf("execute migration %s: %w", name, err)
+			}
+		}
+
+		if _, err := tx.ExecContext(ctx, `INSERT INTO schema_migrations(version, applied_at) VALUES (?, datetime('now'))`, name); err != nil {
+			_ = tx.Rollback()
+			return fmt.Errorf("record migration %s: %w", name, err)
+		}
+
+		if err := tx.Commit(); err != nil {
+			return fmt.Errorf("commit migration %s: %w", name, err)
+		}
+	}
+
+	return nil
+}
+
+func migrationApplied(ctx context.Context, db *sql.DB, version string) (bool, error) {
+	var count int
+	if err := db.QueryRowContext(ctx, `SELECT COUNT(1) FROM schema_migrations WHERE version = ?`, version).Scan(&count); err != nil {
+		return false, fmt.Errorf("lookup migration %s: %w", version, err)
+	}
+	return count > 0, nil
+}
+
+func splitStatements(body string) []string {
+	raw := strings.Split(body, ";")
+	statements := make([]string, 0, len(raw))
+	for _, statement := range raw {
+		statement = strings.TrimSpace(statement)
+		if statement == "" {
+			continue
+		}
+		statements = append(statements, statement)
+	}
+	return statements
+}

apps/server/internal/database/migrations/000001_initial.down.sql

@@ -0,0 +1,5 @@
+DROP TABLE IF EXISTS attachments;
+DROP TABLE IF EXISTS document_versions;
+DROP TABLE IF EXISTS documents;
+DROP TABLE IF EXISTS users;
+

apps/server/internal/database/migrations/000001_initial.up.sql

@@ -0,0 +1,8 @@
+CREATE TABLE IF NOT EXISTS users (
+    id TEXT PRIMARY KEY,
+    email TEXT NOT NULL UNIQUE,
+    display_name TEXT,
+    password_hash TEXT,
+    created_at TEXT NOT NULL,
+    last_seen_at TEXT
+);

apps/server/internal/database/migrations/000002_documents.down.sql

@@ -0,0 +1,2 @@
+DROP TABLE IF EXISTS documents;
+

apps/server/internal/database/migrations/000002_documents.up.sql

@@ -0,0 +1,10 @@
+CREATE TABLE IF NOT EXISTS documents (
+    id TEXT PRIMARY KEY,
+    path TEXT NOT NULL UNIQUE,
+    current_hash TEXT NOT NULL,
+    title TEXT NOT NULL,
+    tags TEXT NOT NULL DEFAULT '',
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL
+);
+

apps/server/internal/database/migrations/000003_document_versions.down.sql

@@ -0,0 +1,2 @@
+DROP TABLE IF EXISTS document_versions;
+

apps/server/internal/database/migrations/000003_document_versions.up.sql

@@ -0,0 +1,11 @@
+CREATE TABLE IF NOT EXISTS document_versions (
+    id TEXT PRIMARY KEY,
+    document_id TEXT NOT NULL,
+    hash TEXT NOT NULL,
+    previous_hash TEXT,
+    created_at TEXT NOT NULL,
+    change_summary TEXT,
+    UNIQUE(document_id, hash),
+    FOREIGN KEY(document_id) REFERENCES documents(id) ON DELETE CASCADE
+);
+

apps/server/internal/database/migrations/000004_attachments.down.sql

@@ -0,0 +1,2 @@
+DROP TABLE IF EXISTS attachments;
+

apps/server/internal/database/migrations/000004_attachments.up.sql

@@ -0,0 +1,8 @@
+CREATE TABLE IF NOT EXISTS attachments (
+    hash TEXT PRIMARY KEY,
+    original_name TEXT NOT NULL,
+    content_type TEXT NOT NULL,
+    size_bytes INTEGER NOT NULL,
+    created_at TEXT NOT NULL
+);
+

apps/server/internal/database/migrations/000005_indexes.down.sql

@@ -0,0 +1,3 @@
+DROP INDEX IF EXISTS idx_documents_path;
+DROP INDEX IF EXISTS idx_document_versions_document_id;
+

apps/server/internal/database/migrations/000005_indexes.up.sql

@@ -0,0 +1,3 @@
+CREATE INDEX IF NOT EXISTS idx_documents_path ON documents(path);
+CREATE INDEX IF NOT EXISTS idx_document_versions_document_id ON document_versions(document_id);
+