zeekay 5c156bd997 notify: Postgres lockdown — env-var guard at boot ...

notifyd is SQLite-only (via hanzoai/base). Adds internal/storagelock
which refuses to boot when DATABASE_URL, POSTGRES_URL, POSTGRES_DSN,
POSTGRES_HOST, NOTIFY_DATABASE_URL, or NOTIFY_POSTGRES_URL are set.
Wired into cmd/notifyd/main.go before base.New(); 9 test cases cover
DSN classification, password redaction, multi-violation reporting,
whitespace handling, and nil-lookup safety.

Per the PG → SQLite migration plan
(~/work/hanzo/CLAUDE_PG_TO_SQLITE_MIGRATION.md, service #2). Notify
has no PG code today, so the lockdown is the deliverable — there is
no schema to migrate from.

2026-06-05 09:29:28 -07:00

..

storagelock_test.go

notify: Postgres lockdown — env-var guard at boot

2026-06-05 09:29:28 -07:00

storagelock.go

notify: Postgres lockdown — env-var guard at boot

2026-06-05 09:29:28 -07:00