feat: add independent Bell authentication and RBAC (#12)

Bell/server/internal/platform/http.go

@@ -28,6 +28,8 @@ func NewHTTPApp(db *pgxpool.Pool) *HTTPApp {
 	return app
 }
 
+func (a *HTTPApp) Router() *http.ServeMux { return a.Mux }
+
 func (a *HTTPApp) Handler() http.Handler {
 	return securityHeaders(a.Mux)
 }

Bell/server/internal/platform/migrations.go

@@ -1,56 +0,0 @@
-package platform
-
-import (
-	"context"
-	"embed"
-	"fmt"
-	"io/fs"
-	"sort"
-
-	"github.com/jackc/pgx/v5/pgxpool"
-)
-
-//go:embed migrations/*.sql
-var migrationFiles embed.FS
-
-func Migrate(ctx context.Context, pool *pgxpool.Pool) error {
-	if _, err := pool.Exec(ctx, `CREATE TABLE IF NOT EXISTS bell_schema_migrations (name text PRIMARY KEY, applied_at timestamptz NOT NULL DEFAULT now())`); err != nil {
-		return fmt.Errorf("create migration ledger: %w", err)
-	}
-	entries, err := fs.ReadDir(migrationFiles, "migrations")
-	if err != nil {
-		return fmt.Errorf("read embedded migrations: %w", err)
-	}
-	sort.Slice(entries, func(i, j int) bool { return entries[i].Name() < entries[j].Name() })
-	for _, entry := range entries {
-		if entry.IsDir() {
-			continue
-		}
-		var applied bool
-		if err := pool.QueryRow(ctx, `SELECT EXISTS(SELECT 1 FROM bell_schema_migrations WHERE name=$1)`, entry.Name()).Scan(&applied); err != nil {
-			return err
-		}
-		if applied {
-			continue
-		}
-		sqlBytes, err := migrationFiles.ReadFile("migrations/" + entry.Name())
-		if err != nil {
-			return err
-		}
-		tx, err := pool.Begin(ctx)
-		if err != nil {
-			return err
-		}
-		if _, err = tx.Exec(ctx, string(sqlBytes)); err == nil {
-			_, err = tx.Exec(ctx, `INSERT INTO bell_schema_migrations(name) VALUES($1)`, entry.Name())
-		}
-		if err != nil {
-			_ = tx.Rollback(ctx)
-			return fmt.Errorf("apply migration %s: %w", entry.Name(), err)
-		}
-		if err := tx.Commit(ctx); err != nil {
-			return fmt.Errorf("commit migration %s: %w", entry.Name(), err)
-		}
-	}
-	return nil
-}

Bell/server/internal/platform/migrations/0001_platform.sql

@@ -1,5 +0,0 @@
-CREATE TABLE IF NOT EXISTS bell_runtime_probe (
-    singleton boolean PRIMARY KEY DEFAULT true CHECK (singleton),
-    started_at timestamptz NOT NULL DEFAULT now()
-);
-