Publish curated ITWorx-ModelForge source from 990401737f96c8d46a9f7b0d84994516cadcb6a0

deploy/postgres/provision-existing-1.2.1.sql

@@ -9,6 +9,26 @@
 \getenv runtime_password MODELFORGE_RUNTIME_DB_PASSWORD
 \getenv database_name MODELFORGE_POSTGRES_DB
 
+-- PostgreSQL permanently protects the cluster bootstrap superuser (OID 10): even another
+-- superuser cannot remove that role's SUPERUSER attribute. v1.2.1 installations initialized with
+-- POSTGRES_USER=modelforge therefore need a fresh cluster plus logical restore. Refuse before
+-- creating roles or changing privileges; direct pg_authid mutation is not a supported shortcut.
+do $$
+begin
+    if exists (
+        select 1
+        from pg_catalog.pg_roles
+        where rolname = 'modelforge' and oid = 10
+    ) then
+        raise exception using
+            errcode = '55000',
+            message = 'modelforge is the protected PostgreSQL bootstrap superuser (OID 10)',
+            detail = 'PostgreSQL cannot demote the bootstrap superuser.',
+            hint = 'Follow docs/UPGRADE.md: create a fresh cluster under the retained admin, logically restore with --no-owner --no-privileges, then run migration 0024.';
+    end if;
+end
+$$;
+
 select pg_catalog.format(
     'create role %I login password %L superuser createdb createrole inherit replication bypassrls',
     :'admin_role', :'admin_password'