migrate

Overview ¶

Command migrate applies the kernel migrations to the database named by DATABASE_URL — the framework repo's local/CI migration runner behind `make migrate`. Product repositories get a real cmd/migrate process via app.RunMigrate (Phase 5+); this private tool exists so the compose stack can be migrated without one.

SECURITY: this tool intentionally connects as the raw DATABASE_URL login (the local compose superuser) and uses config.Defaults() — acceptable ONLY because it is a dev/CI convenience. Product code (app.RunMigrate) MUST use the dedicated app_migrate owner DSN from the narrowed MigrateConfig and MUST NOT copy this DATABASE_URL/Defaults() shortcut (SEC-15).