clawsql 0.1.0

package/docker/init/replica.sql

@@ -0,0 +1,16 @@
+-- MySQL Replica Initialization Script
+-- This script runs on replica MySQL instances startup
+
+-- Stop any existing replication
+STOP SLAVE;
+
+-- Configure replication to primary
+CHANGE MASTER TO
+    MASTER_HOST='mysql-primary',
+    MASTER_PORT=3306,
+    MASTER_USER='repl',
+    MASTER_PASSWORD='replpassword',
+    MASTER_AUTO_POSITION=1;
+
+-- Start replication
+START SLAVE;

package/docker/orchestrator/orchestrator.conf.json

@@ -0,0 +1,98 @@
+{
+  "Debug": false,
+  "ListenAddress": ":3000",
+  "MySQLTopologyUser": "clawsql",
+  "MySQLTopologyPassword": "clawsql_password",
+  "MySQLTopologyCredentialsConfigFile": "",
+  "MySQLTopologySSLPrivateKeyFile": "",
+  "MySQLTopologySSLCertFile": "",
+  "MySQLTopologySSLCAFile": "",
+  "MySQLTopologySSLSkipVerify": true,
+  "MySQLTopologyUseMutualTLS": false,
+  "BackendDB": "mysql",
+  "MySQLOrchestratorHost": "metadata-mysql",
+  "MySQLOrchestratorPort": 3306,
+  "MySQLOrchestratorDatabase": "clawsql_meta",
+  "MySQLOrchestratorUser": "clawsql",
+  "MySQLOrchestratorPassword": "clawsql_password",
+  "MySQLConnectTimeoutSeconds": 5,
+  "MySQLDiscoveryPollSeconds": 5,
+  "MySQLFailedDiscoveryPollSeconds": 5,
+  "MySQLDiscoveryMaxConcurrency": 100,
+  "ReplicationLagQuery": "SELECT ABS(TIMESTAMPDIFF(SECOND, NOW(), ts)) FROM replication.heartbeat",
+  "DiscoverByShowSlaveHosts": true,
+  "PowerOffInstancesMeta": true,
+  "InstanceBulkOperationsWaitTimeoutSeconds": 300,
+  "HostnameResolveMethod": "default",
+  "MySQLHostnameResolveMethod": "@@hostname",
+  "SkipBinlogServerUnresolveCheck": true,
+  "ExpiryHostnameResolvesMinutes": 60,
+  "RejectHostnameResolvePattern": "",
+  "ReasonableReplicationLagSeconds": 10,
+  "ProblemIgnoreHostnameFilters": [],
+  "VerifyReplicationFilters": false,
+  "ReasonableMaintenanceReplicationLagSeconds": 20,
+  "CandidateInstanceExpireMinutes": 60,
+  "AuditLogFile": "/var/lib/orchestrator/audit.log",
+  "AuditToSyslog": false,
+  "AuditToBackendDB": true,
+  "RemoveTextFromHostnameDisplay": ".mycompany.com",
+  "ReadOnly": false,
+  "AuthenticationMethod": "",
+  "HTTPAuthUser": "",
+  "HTTPAuthPassword": "",
+  "AuthUserHeader": "X-Forwarded-User",
+  "PowerAuthUsers": ["*"],
+  "ClusterNameToAlias": {
+    "127.0.0.1": "test suite"
+  },
+  "DetectClusterAliasQuery": "SELECT SUBSTRING_INDEX(@@hostname, '.', 1)",
+  "DetectClusterDomainQuery": "",
+  "DetectInstanceAliasQuery": "",
+  "DetectPromotionRuleQuery": "",
+  "DataCenterPattern": "[.]([^.]+)[.][^.]+[.]mycompany[.]com",
+  "PhysicalEnvironmentPattern": "[.]([^.]+[.][^.]+)[.]mycompany[.]com",
+  "PromotionIgnoreHostnameFilters": [],
+  "DetectSemiSyncEnforcedQuery": "SELECT 0 FROM performance_schema.global_variables WHERE VARIABLE_NAME = 'rpl_semi_sync_master_wait_for_replica_count' AND VARIABLE_VALUE = '0'",
+  "ServeAgentsHttp": false,
+  "AgentsServerPort": ":3001",
+  "AgentsUseSSL": false,
+  "AgentsSSLSkipVerify": false,
+  "AgentSSLPrivateKeyFile": "",
+  "AgentSSLCertFile": "",
+  "AgentSSLCAFile": "",
+  "AgentPollSeconds": 60,
+  "AgentUnseenForgetSeconds": 600,
+  "AgentAutoDiscover": false,
+  "PseudoGTIDPattern": "drop view if exists `meta`.`_pseudo_gtid_`",
+  "PseudoGTIDPatternIsFixedSubstring": true,
+  "PseudoGTIDMonotonicHint": "asc:",
+  "DetectPseudoGTIDQuery": "SELECT count(*) FROM INFORMATION_SCHEMA.VIEWS WHERE TABLE_SCHEMA='meta' AND TABLE_NAME='_pseudo_gtid_'",
+  "BinlogEventsChunkSize": 10000,
+  "SkipBinlogEventsContaining": [],
+  "ReduceReplicationAnalysisCount": true,
+  "FailureDetectionPeriodBlockMinutes": 1,
+  "RecoveryPeriodBlockMinutes": 1,
+  "RecoveryIgnoreHostnameFilters": [],
+  "RecoverMasterClusterFilters": ["*"],
+  "RecoverIntermediateMasterClusterFilters": ["*"],
+  "AutoMasterFailover": true,
+  "FailMasterFailover": true,
+  "OnFailureDetectionProcesses": [],
+  "PreFailoverProcesses": [],
+  "PostFailoverProcesses": [
+    "curl -s -X POST http://clawsql:8080/api/v1/webhooks/orchestrator/failover -H 'Content-Type: application/json' -d '{\"cluster\":\"{alias}\",\"master\":\"{failedHost}:{failedPort}\",\"successor\":\"{successorHost}:{successorPort}\",\"isSuccessful\":{isSuccessful},\"failoverType\":\"master\",\"reason\":\"{failureType}\"}'"
+  ],
+  "PostUnsuccessfulFailoverProcesses": [],
+  "PostMasterFailoverProcesses": [
+    "curl -s -X POST http://clawsql:8080/api/v1/webhooks/orchestrator/failover -H 'Content-Type: application/json' -d '{\"cluster\":\"{alias}\",\"master\":\"{failedHost}:{failedPort}\",\"successor\":\"{successorHost}:{successorPort}\",\"isSuccessful\":true,\"failoverType\":\"master\"}'"
+  ],
+  "PostIntermediateMasterFailoverProcesses": [
+    "curl -s -X POST http://clawsql:8080/api/v1/webhooks/orchestrator/failover -H 'Content-Type: application/json' -d '{\"cluster\":\"{alias}\",\"master\":\"{failedHost}:{failedPort}\",\"successor\":\"{successorHost}:{successorPort}\",\"isSuccessful\":true,\"failoverType\":\"intermediate-master\"}'"
+  ],
+  "UnresolvedHostnameRecoveryPeriodHours": 1,
+  "AutopseudoGTID": false,
+  "AutopseudoGTIDIntervalSeconds": 300,
+  "AutopseudoGTIDExpireMinutes": 60,
+  "RecoveryPollSeconds": 5
+}

package/docker/prometheus/prometheus.yml

@@ -0,0 +1,45 @@
+# Prometheus Configuration for ClawSQL
+
+global:
+  scrape_interval: 15s
+  evaluation_interval: 15s
+  external_labels:
+    monitor: 'clawsql-demo'
+
+alerting:
+  alertmanagers:
+    - static_configs:
+        - targets: []
+
+rule_files: []
+
+scrape_configs:
+  # Prometheus self-monitoring
+  - job_name: 'prometheus'
+    static_configs:
+      - targets: ['localhost:9090']
+
+  # ClawSQL API metrics
+  - job_name: 'clawsql'
+    static_configs:
+      - targets: ['clawsql:8080']
+    metrics_path: '/api/v1/monitoring/metrics'
+
+  # Orchestrator - no native Prometheus metrics endpoint
+  # The /api/health endpoint provides health status but not Prometheus format
+  # Uncomment below if you deploy orchestrator_exporter
+  # - job_name: 'orchestrator'
+  #   static_configs:
+  #     - targets: ['orchestrator-exporter:9123']
+
+  # MySQL Exporter - requires mysql_exporter container
+  # Uncomment and configure when mysql_exporter is deployed
+  # - job_name: 'mysql'
+  #   static_configs:
+  #     - targets: ['mysql-exporter:9104']
+
+  # ProxySQL Exporter - requires proxysql_exporter container
+  # Uncomment and configure when proxysql_exporter is deployed
+  # - job_name: 'proxysql'
+  #   static_configs:
+  #     - targets: ['proxysql-exporter:42004']

package/docker/proxysql/entrypoint.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+# ClawSQL ProxySQL Entrypoint
+
+# Remove stale PID file if exists
+rm -f /var/lib/proxysql/proxysql.pid
+
+# Start ProxySQL in foreground
+exec proxysql --config /etc/proxysql.cnf --foreground

package/docker/proxysql/init.sql.demo

@@ -0,0 +1,30 @@
+-- ClawSQL ProxySQL Initialization Script
+-- Configures MySQL servers and users for the demo cluster
+
+-- Add MySQL servers
+-- Hostgroup 0 = writers (primary)
+-- Hostgroup 1 = readers (replicas)
+INSERT OR REPLACE INTO mysql_servers (hostname, port, hostgroup_id, status, weight) VALUES
+    ('mysql-primary', 3306, 0, 'ONLINE', 1),
+    ('mysql-replica-1', 3306, 1, 'ONLINE', 1),
+    ('mysql-replica-2', 3306, 1, 'ONLINE', 1);
+
+-- Add MySQL users for connections through ProxySQL
+INSERT OR REPLACE INTO mysql_users (username, password, default_hostgroup, transaction_persistent) VALUES
+    ('root', 'rootpassword', 0, 1),
+    ('clawsql', 'clawsqlpassword', 0, 1);
+
+-- Add query rules for read/write splitting
+-- Route SELECT queries to readers (hostgroup 1)
+INSERT OR REPLACE INTO mysql_query_rules (rule_id, active, match_pattern, destination_hostgroup, apply) VALUES
+    (1, 1, '^SELECT', 1, 1);
+
+-- Load configuration to runtime
+LOAD MYSQL SERVERS TO RUNTIME;
+LOAD MYSQL USERS TO RUNTIME;
+LOAD MYSQL QUERY RULES TO RUNTIME;
+
+-- Save configuration to disk
+SAVE MYSQL SERVERS TO DISK;
+SAVE MYSQL USERS TO DISK;
+SAVE MYSQL QUERY RULES TO DISK;

package/docker/proxysql/proxysql.cnf

@@ -0,0 +1,38 @@
+datadir="/var/lib/proxysql"
+
+admin_variables=
+{
+    admin_credentials="admin:admin;clawsql:clawsql"
+    mysql_ifaces="0.0.0.0:6032"
+    refresh_interval=2000
+    web_enabled=true
+    web_port=6080
+    stats_history_duration=86400
+}
+
+mysql_variables=
+{
+    threads=4
+    max_connections=2048
+    default_query_delay=0
+    default_query_timeout=36000000
+    have_compress=true
+    poll_timeout=2000
+    interfaces="0.0.0.0:6033"
+    default_schema="information_schema"
+    stacksize=1048576
+    server_version="8.0.0"
+    connect_timeout_server=3000
+    monitor_username="monitor"
+    monitor_password="monitorpassword"
+    monitor_history=600000
+    monitor_connect_interval=60000
+    monitor_ping_interval=10000
+    monitor_read_only_interval=1500
+    monitor_read_only_timeout=500
+    ping_interval_server_msec=120000
+    ping_timeout_server=500
+    commands_stats=true
+    sessions_sort=true
+    connect_retries_on_failure=10
+}

package/docker-compose.demo.yml

@@ -0,0 +1,115 @@
+# ClawSQL Demo MySQL Cluster
+# Run with: docker-compose -f docker-compose.yml -f docker-compose.demo.yml up -d
+#
+# This file adds a demo MySQL cluster (primary + 2 replicas) for testing.
+# Users with existing MySQL instances do NOT need this file.
+
+services:
+  # =============================================================================
+  # MySQL Primary (Writer)
+  # =============================================================================
+  mysql-primary:
+    image: mysql:8.0
+    container_name: mysql-primary
+    hostname: mysql-primary
+    ports:
+      - "3306:3306"
+    environment:
+      - MYSQL_ROOT_PASSWORD=rootpassword
+      - MYSQL_DATABASE=clawsql
+      - MYSQL_USER=clawsql
+      - MYSQL_PASSWORD=clawsqlpassword
+    command: >
+      --server-id=1
+      --log-bin=mysql-bin
+      --binlog-format=ROW
+      --gtid-mode=ON
+      --enforce-gtid-consistency=ON
+      --log-slave-updates=ON
+    volumes:
+      - mysql-primary-data:/var/lib/mysql
+      - ./init/primary.sql:/docker-entrypoint-initdb.d/01-primary.sql
+    networks:
+      - clawsql-network
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-uroot", "-prootpassword"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  # =============================================================================
+  # MySQL Replica 1 (Reader)
+  # =============================================================================
+  mysql-replica-1:
+    image: mysql:8.0
+    container_name: mysql-replica-1
+    hostname: mysql-replica-1
+    ports:
+      - "3307:3306"
+    environment:
+      - MYSQL_ROOT_PASSWORD=rootpassword
+    command: >
+      --server-id=2
+      --log-bin=mysql-bin
+      --binlog-format=ROW
+      --gtid-mode=ON
+      --enforce-gtid-consistency=ON
+      --log-slave-updates=ON
+      --read-only=ON
+    volumes:
+      - mysql-replica-1-data:/var/lib/mysql
+      - ./init/replica.sql:/docker-entrypoint-initdb.d/01-replica.sql
+    depends_on:
+      mysql-primary:
+        condition: service_healthy
+    networks:
+      - clawsql-network
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-uroot", "-prootpassword"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  # =============================================================================
+  # MySQL Replica 2 (Reader)
+  # =============================================================================
+  mysql-replica-2:
+    image: mysql:8.0
+    container_name: mysql-replica-2
+    hostname: mysql-replica-2
+    ports:
+      - "3308:3306"
+    environment:
+      - MYSQL_ROOT_PASSWORD=rootpassword
+    command: >
+      --server-id=3
+      --log-bin=mysql-bin
+      --binlog-format=ROW
+      --gtid-mode=ON
+      --enforce-gtid-consistency=ON
+      --log-slave-updates=ON
+      --read-only=ON
+    volumes:
+      - mysql-replica-2-data:/var/lib/mysql
+      - ./init/replica.sql:/docker-entrypoint-initdb.d/01-replica.sql
+    depends_on:
+      mysql-primary:
+        condition: service_healthy
+    networks:
+      - clawsql-network
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-uroot", "-prootpassword"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+# =============================================================================
+# Volumes for MySQL data persistence
+# =============================================================================
+volumes:
+  mysql-primary-data:
+  mysql-replica-1-data:
+  mysql-replica-2-data:

package/docker-compose.yml

@@ -0,0 +1,217 @@
+# ClawSQL Platform - Docker Compose
+# MySQL HA management platform with Orchestrator, ProxySQL, Prometheus, and Grafana
+#
+# Quick Start:
+#   ./start.sh              # Start platform only (use your own MySQL)
+#   ./start.sh --demo       # Start with demo MySQL cluster
+#
+# After starting, register your MySQL instances:
+#   curl -X POST http://localhost:8080/api/v1/instances \
+#     -H 'Content-Type: application/json' \
+#     -d '{"host": "your-mysql-host", "port": 3306}'
+
+services:
+  # =============================================================================
+  # ClawSQL Application (Node.js)
+  # =============================================================================
+  clawsql:
+    build:
+      context: .
+      dockerfile: docker/Dockerfile.node
+    container_name: clawsql
+    hostname: clawsql
+    ports:
+      - "8080:8080"
+    environment:
+      - API_HOST=0.0.0.0
+      - API_PORT=8080
+      - API_TOKEN_SECRET=${API_TOKEN_SECRET:-change-me-in-production}
+      - ORCHESTRATOR_URL=http://orchestrator:3000
+      - PROXYSQL_HOST=proxysql
+      - PROXYSQL_ADMIN_PORT=6032
+      - PROMETHEUS_URL=http://prometheus:9090
+      # Metadata Database (shared with Orchestrator)
+      - METADATA_DB_HOST=${METADATA_DB_HOST:-metadata-mysql}
+      - METADATA_DB_PORT=${METADATA_DB_PORT:-3306}
+      - METADATA_DB_NAME=${METADATA_DB_NAME:-clawsql_meta}
+      - METADATA_DB_USER=${METADATA_DB_USER:-clawsql}
+      - METADATA_DB_PASSWORD=${METADATA_DB_PASSWORD:-clawsql_password}
+      # MySQL credentials (for your MySQL instances)
+      - MYSQL_ADMIN_USER=${MYSQL_ADMIN_USER:-clawsql}
+      - MYSQL_ADMIN_PASSWORD=${MYSQL_ADMIN_PASSWORD:-clawsql_password}
+      - MYSQL_REPLICATION_USER=${MYSQL_REPLICATION_USER:-repl}
+      - MYSQL_REPLICATION_PASSWORD=${MYSQL_REPLICATION_PASSWORD:-repl_password}
+      # Logging
+      - LOG_LEVEL=${LOG_LEVEL:-INFO}
+      - LOG_FORMAT=${LOG_FORMAT:-json}
+      # Failover settings
+      - AUTO_FAILOVER_ENABLED=${AUTO_FAILOVER_ENABLED:-true}
+    depends_on:
+      orchestrator:
+        condition: service_started
+      proxysql:
+        condition: service_started
+    networks:
+      - clawsql-network
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+
+  # =============================================================================
+  # Orchestrator - MySQL Topology Management
+  # Uses shared metadata MySQL database
+  # =============================================================================
+  orchestrator:
+    image: openarkcode/orchestrator:latest
+    container_name: orchestrator
+    hostname: orchestrator
+    ports:
+      - "3000:3000"
+    volumes:
+      - ./docker/orchestrator/orchestrator.conf.json:/etc/orchestrator.conf.json
+    networks:
+      - clawsql-network
+    restart: unless-stopped
+
+  # =============================================================================
+  # ProxySQL - MySQL Proxy with Routing
+  # =============================================================================
+  proxysql:
+    image: proxysql/proxysql:latest
+    container_name: proxysql
+    hostname: proxysql
+    ports:
+      - "6032:6032"  # Admin interface
+      - "6033:6033"  # MySQL traffic
+    volumes:
+      - ./docker/proxysql/proxysql.cnf:/etc/proxysql.cnf
+      - ./docker/proxysql/entrypoint.sh:/entrypoint.sh:ro
+      - proxysql-data:/var/lib/proxysql
+    entrypoint: ["/bin/bash", "/entrypoint.sh"]
+    networks:
+      - clawsql-network
+    restart: unless-stopped
+
+  # =============================================================================
+  # Prometheus - Metrics Collection
+  # =============================================================================
+  prometheus:
+    image: prom/prometheus:latest
+    container_name: prometheus
+    hostname: prometheus
+    ports:
+      - "9090:9090"
+    volumes:
+      - ./docker/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
+      - prometheus-data:/prometheus
+    command:
+      - '--config.file=/etc/prometheus/prometheus.yml'
+      - '--storage.tsdb.path=/prometheus'
+      - '--web.enable-lifecycle'
+    networks:
+      - clawsql-network
+    restart: unless-stopped
+
+  # =============================================================================
+  # Grafana - Visualization
+  # =============================================================================
+  grafana:
+    image: grafana/grafana:latest
+    container_name: grafana
+    hostname: grafana
+    ports:
+      - "3001:3000"
+    environment:
+      - GF_SECURITY_ADMIN_USER=${GRAFANA_ADMIN_USER:-admin}
+      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD:-admin}
+      - GF_USERS_ALLOW_SIGN_UP=false
+    volumes:
+      - grafana-data:/var/lib/grafana
+      - ./docker/grafana/provisioning:/etc/grafana/provisioning
+      - ./docker/grafana/dashboards:/var/lib/grafana/dashboards
+    depends_on:
+      - prometheus
+    networks:
+      - clawsql-network
+    restart: unless-stopped
+
+  # =============================================================================
+  # MySQL Exporter - MySQL Metrics (optional, uncomment to enable)
+  # =============================================================================
+  # mysql-exporter:
+  #   image: prom/mysqld-exporter:latest
+  #   container_name: mysql-exporter
+  #   hostname: mysql-exporter
+  #   ports:
+  #     - "9104:9104"
+  #   environment:
+  #     - DATA_SOURCE_NAME=${MYSQL_MONITOR_USER:-monitor}:${MYSQL_MONITOR_PASSWORD:-}@(${MYSQL_HOST:-mysql-primary}:3306)/
+  #   networks:
+  #     - clawsql-network
+  #   restart: unless-stopped
+
+  # =============================================================================
+  # ProxySQL Exporter - ProxySQL Metrics (optional, uncomment to enable)
+  # =============================================================================
+  # proxysql-exporter:
+  #   image: prom/proxysql-exporter:latest
+  #   container_name: proxysql-exporter
+  #   hostname: proxysql-exporter
+  #   ports:
+  #     - "42004:42004"
+  #   command:
+  #     - '--web.listen-address=:42004'
+  #     - '--proxysql.addr=proxysql:6032'
+  #     - '--proxysql.user=admin'
+  #     - '--proxysql.password=admin'
+  #   networks:
+  #     - clawsql-network
+  #   restart: unless-stopped
+
+  # =============================================================================
+  # Metadata MySQL - Shared Database for Orchestrator and ClawSQL
+  # Auto-provisioned if METADATA_DB_HOST is not set
+  # =============================================================================
+  metadata-mysql:
+    image: mysql:8.0
+    container_name: metadata-mysql
+    hostname: metadata-mysql
+    profiles:
+      - metadata
+    environment:
+      MYSQL_ROOT_PASSWORD: ${METADATA_DB_ROOT_PASSWORD:-metadata_root}
+      MYSQL_DATABASE: ${METADATA_DB_NAME:-clawsql_meta}
+      MYSQL_USER: ${METADATA_DB_USER:-clawsql}
+      MYSQL_PASSWORD: ${METADATA_DB_PASSWORD:-clawsql_password}
+    volumes:
+      - metadata-mysql-data:/var/lib/mysql
+    networks:
+      - clawsql-network
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+# =============================================================================
+# Networks
+# =============================================================================
+networks:
+  clawsql-network:
+    driver: bridge
+    ipam:
+      config:
+        - subnet: 172.18.0.0/24
+
+# =============================================================================
+# Volumes
+# =============================================================================
+volumes:
+  metadata-mysql-data:
+  proxysql-data:
+  prometheus-data:
+  grafana-data:

package/init/primary.sql

@@ -0,0 +1,19 @@
+-- Primary initialization script
+-- Create replication user
+CREATE USER IF NOT EXISTS 'repl'@'%' IDENTIFIED BY 'replpassword';
+GRANT REPLICATION SLAVE ON *.* TO 'repl'@'%';
+
+-- Create monitoring user
+CREATE USER IF NOT EXISTS 'monitor'@'%' IDENTIFIED BY 'monitorpassword';
+GRANT REPLICATION CLIENT, PROCESS ON *.* TO 'monitor'@'%';
+GRANT SELECT ON mysql.* TO 'monitor'@'%';
+
+-- Create Orchestrator user (needs SUPER for topology management)
+CREATE USER IF NOT EXISTS 'clawsql'@'%' IDENTIFIED BY 'clawsql_password';
+GRANT ALL PRIVILEGES ON *.* TO 'clawsql'@'%' WITH GRANT OPTION;
+
+-- Create application user for demo database
+CREATE USER IF NOT EXISTS 'app'@'%' IDENTIFIED BY 'apppassword';
+GRANT ALL PRIVILEGES ON clawsql.* TO 'app'@'%';
+
+FLUSH PRIVILEGES;

package/init/replica.sql

@@ -0,0 +1,13 @@
+-- Replica initialization script
+-- Configure replication to primary
+STOP SLAVE;
+
+CHANGE REPLICATION SOURCE TO
+    SOURCE_HOST='mysql-primary',
+    SOURCE_PORT=3306,
+    SOURCE_USER='repl',
+    SOURCE_PASSWORD='replpassword',
+    SOURCE_AUTO_POSITION=1,
+    GET_SOURCE_PUBLIC_KEY=1;
+
+START SLAVE;