Initial TopDeck: self-hosted ranked favorites

A single Go binary with SQLite that serves a public page of the owner's
ranked lists (movies, TV, albums, songs, video games, theater) and a
login-gated editor.

- Lists of 1–65,535 entries (100 recommended), several per category
- Search-to-add via TMDB, TheTVDB, IGDB, Deezer/MusicBrainz, Wikipedia;
  manual entry as a fallback
- Theater entries carry a production (Broadway, tour, …), venue and cast
- Artwork cached locally; URL override and uploads
- Drag, arrow and type-a-rank reordering; paginated for long lists
- 12 theme presets plus custom CSS
- First-run setup code or env-provided admin; bcrypt, rate-limited login,
  CSRF-guarded JSON API
- Dockerfile and docker-compose.yml

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

internal/store/store.go

@@ -0,0 +1,114 @@
+// Package store is the SQLite persistence layer.
+package store
+
+import (
+	"context"
+	"database/sql"
+	"errors"
+	"fmt"
+	"path/filepath"
+
+	_ "modernc.org/sqlite"
+)
+
+var ErrNotFound = errors.New("not found")
+
+type Store struct {
+	db *sql.DB
+}
+
+func Open(dataDir string) (*Store, error) {
+	path := filepath.Join(dataDir, "topdeck.db")
+	dsn := fmt.Sprintf("file:%s?_pragma=journal_mode(WAL)&_pragma=foreign_keys(1)&_pragma=busy_timeout(5000)&_pragma=synchronous(NORMAL)&_txlock=immediate", path)
+	db, err := sql.Open("sqlite", dsn)
+	if err != nil {
+		return nil, err
+	}
+	db.SetMaxOpenConns(4)
+	s := &Store{db: db}
+	if err := s.migrate(context.Background()); err != nil {
+		db.Close()
+		return nil, fmt.Errorf("migrate: %w", err)
+	}
+	return s, nil
+}
+
+func (s *Store) Close() error { return s.db.Close() }
+
+// migrations are applied in order; the index into this slice (plus one) is
+// the schema version stored in PRAGMA user_version.
+var migrations = []string{
+	`
+CREATE TABLE users (
+	id            INTEGER PRIMARY KEY,
+	username      TEXT NOT NULL UNIQUE COLLATE NOCASE,
+	password_hash TEXT NOT NULL,
+	created_at    INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE TABLE sessions (
+	token_hash TEXT PRIMARY KEY,
+	user_id    INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+	expires_at INTEGER NOT NULL
+);
+CREATE TABLE settings (
+	key   TEXT PRIMARY KEY,
+	value TEXT NOT NULL
+);
+CREATE TABLE lists (
+	id          INTEGER PRIMARY KEY,
+	slug        TEXT NOT NULL UNIQUE,
+	title       TEXT NOT NULL,
+	category    TEXT NOT NULL,
+	description TEXT NOT NULL DEFAULT '',
+	max_items   INTEGER NOT NULL DEFAULT 10 CHECK (max_items BETWEEN 1 AND 65535),
+	position    INTEGER NOT NULL DEFAULT 0,
+	visible     INTEGER NOT NULL DEFAULT 1,
+	layout      TEXT NOT NULL DEFAULT 'grid',
+	created_at  INTEGER NOT NULL DEFAULT (unixepoch()),
+	updated_at  INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE TABLE items (
+	id           INTEGER PRIMARY KEY,
+	list_id      INTEGER NOT NULL REFERENCES lists(id) ON DELETE CASCADE,
+	rank         INTEGER NOT NULL,
+	title        TEXT NOT NULL,
+	subtitle     TEXT NOT NULL DEFAULT '',
+	year         TEXT NOT NULL DEFAULT '',
+	image        TEXT NOT NULL DEFAULT '',
+	image_source TEXT NOT NULL DEFAULT '',
+	provider     TEXT NOT NULL DEFAULT '',
+	provider_id  TEXT NOT NULL DEFAULT '',
+	external_url TEXT NOT NULL DEFAULT '',
+	note         TEXT NOT NULL DEFAULT '',
+	extra        TEXT NOT NULL DEFAULT '{}',
+	created_at   INTEGER NOT NULL DEFAULT (unixepoch()),
+	updated_at   INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE INDEX items_list_rank ON items(list_id, rank);
+`,
+}
+
+func (s *Store) migrate(ctx context.Context) error {
+	var version int
+	if err := s.db.QueryRowContext(ctx, "PRAGMA user_version").Scan(&version); err != nil {
+		return err
+	}
+	for i := version; i < len(migrations); i++ {
+		tx, err := s.db.BeginTx(ctx, nil)
+		if err != nil {
+			return err
+		}
+		if _, err := tx.ExecContext(ctx, migrations[i]); err != nil {
+			tx.Rollback()
+			return fmt.Errorf("migration %d: %w", i+1, err)
+		}
+		if _, err := tx.ExecContext(ctx, fmt.Sprintf("PRAGMA user_version = %d", i+1)); err != nil {
+			tx.Rollback()
+			return err
+		}
+		if err := tx.Commit(); err != nil {
+			return err
+		}
+	}
+	return nil
+}