Mode Enforcement

# Try to migrate in readonly mode
chameleon migrate --apply

❌ readonly mode: schema modifications blocked
💡 Upgrade to standard mode: chameleon config set mode=standard

# Upgrade to standard mode
chameleon config set mode=standard
🔐 Enter mode password: ****
✅ Mode upgraded to standard

# Now migrations work
chameleon migrate --apply
✅ Migration applied successfully
✅ Schema v002 registered and locked

# Upgrade to privileged mode
chameleon config set mode=privileged
🔐 Enter mode password: ****
✅ Mode upgraded to privileged

# Execute direct SQL (logged)
chameleon exec "ALTER TABLE users ADD COLUMN admin BOOLEAN DEFAULT FALSE"
⚠️  Direct SQL in privileged mode
✅ Executed successfully
📝 Logged to audit trail

# Upgrade to emergency mode
chameleon config set mode=emergency
🔐 Enter mode password: ****
⚠️  WARNING: Emergency mode bypasses all safety checks
✅ Mode upgraded to emergency

# Force migration without checks
chameleon migrate --apply --force
⚠️  EMERGENCY: Skipping integrity verification
⚠️  EMERGENCY: Skipping migration validation
✅ Migration forced
📝 Emergency operation logged

# Set password (do this first)
chameleon config auth set-password

Enter new password: ********
Confirm password: ********
✅ Mode password configured

.chameleon/vault/auth/mode.key  # Hashed password

# readonly → standard
chameleon config set mode=standard
🔐 Enter mode password: ****
✅ Mode upgraded to standard

# standard → privileged
chameleon config set mode=privileged
🔐 Enter mode password: ****
✅ Mode upgraded to privileged

# privileged → emergency
chameleon config set mode=emergency
🔐 Enter mode password: ****
⚠️  WARNING: Emergency mode bypasses all safety checks
✅ Mode upgraded to emergency

# emergency → readonly (no password)
chameleon config set mode=readonly
✅ Mode downgraded to readonly

# privileged → standard (no password)
chameleon config set mode=standard
✅ Mode downgraded to standard

User: chameleon migrate --apply
          ↓
1. Load current mode from vault
          ↓
2. Check if operation allowed
          ↓
   readonly?  → BLOCK (error)
   standard?  → ALLOW (with validation)
   privileged? → ALLOW (direct)
   emergency? → ALLOW (skip checks)
          ↓
3. Log operation to integrity.log
          ↓
4. Execute operation
          ↓
5. Record in audit trail

chameleon config get mode

Current mode: readonly

chameleon status

Schema:
  Current version:  v002
  Status:          ✓ Up to date

Vault:
  Versions:        2 registered
  Integrity:       ✓ OK
  Mode:            🔒 readonly (locked)
  Password:        ✓ Configured

2026-02-23T15:45:00Z [MODE_CHANGE] from=readonly to=standard type=upgrade user=dperalta
2026-02-23T16:30:00Z [MODE_CHANGE] from=standard to=readonly type=downgrade user=dperalta
2026-02-24T10:15:00Z [MODE_CHANGE] from=readonly to=privileged type=upgrade user=admin

chameleon config auth set-password

Enter new password: ********
Confirm password: ********
✅ Mode password configured

chameleon config auth set-password

Enter current password: ********
Enter new password: ********
Confirm new password: ********
✅ Mode password updated

# Set password via environment
export CHAMELEON_MODE_PASSWORD="strong-password"

# Upgrade without prompt
chameleon config set mode=standard
✅ Mode upgraded to standard (using env password)

Mode: standard
Rationale: Developers need to iterate on schemas
Password: Team shared (stored in password manager)
Monitoring: Basic logging

Mode: readonly
Rationale: Verify migrations before production
Password: DevOps team only
Monitoring: Alert on mode changes

Mode: readonly
Rationale: Prevent accidental schema changes
Password: DBA team only (rotated regularly)
Monitoring: Alert on ANY mode change
Process: Change requests required for upgrades

Mode: privileged (temporary)
Rationale: Apply approved schema changes
Password: Single-use, rotated after
Monitoring: Full audit trail reviewed
Process: Downgrade to readonly immediately after

# 1. Start in readonly (default)
chameleon status
# Mode: readonly

# 2. Upgrade for development
chameleon config set mode=standard

# 3. Develop and migrate
chameleon migrate --apply

# 4. Downgrade when done
chameleon config set mode=readonly

# 1. Verify integrity first
chameleon verify

# 2. Request approval (change ticket)
# 3. Schedule maintenance window

# 4. Upgrade mode (time-limited)
chameleon config set mode=standard

# 5. Preview changes
chameleon migrate --dry-run

# 6. Apply migration
chameleon migrate --apply

# 7. Verify success
chameleon status

# 8. IMMEDIATELY downgrade
chameleon config set mode=readonly

# 9. Verify downgrade
chameleon config get mode

# 1. Assess incident
# 2. Get emergency authorization

# 3. Upgrade to emergency
chameleon config set mode=emergency

# 4. Fix issue (all actions logged)
chameleon migrate --apply --force

# 5. Downgrade immediately
chameleon config set mode=readonly

# 6. Review audit trail
cat .chameleon/vault/integrity.log | grep EMERGENCY

# 7. Document incident
# 8. Rotate password