@stackbone/cli 0.3.5 → 0.4.0

package/migrations/0071_api_keys.sql

@@ -0,0 +1,75 @@
+-- 0071_api_keys.sql — the per-workspace API KEYS a caller outside the browser
+-- presents to reach an agent or a workflow on this box (PLA-1124).
+--
+-- Numbered 0056 against `next`, whose last migration is 0055. The runner keys
+-- `schema_migrations` on the four-digit prefix alone, so two branches that both
+-- take the next free number half-apply and then report a checksum mismatch
+-- pointing at the wrong problem. `scripts/check-migration-numbers.mjs` is the
+-- pre-merge gate; renumber against the tip you merge into.
+--
+-- ONE migration, and it is the whole story. Unlike `connector`/`connection_grant`
+-- these keys have no control-plane twin to stay in step with: a key is minted by
+-- the box, verified by the box and revoked on the box, so there is nothing to
+-- dual-home and no idempotent-DDL-in-TS copy to keep beside this file. Every
+-- topology — a cloud-hosted box, a self-host install and the `stackbone dev`
+-- emulator — runs its own Postgres and applies this same file at boot
+-- (`apply-migrations.ts`, reached from `workspace-runtime`'s
+-- `apply-platform-schema.ts`), so there is one place the table comes from.
+--
+-- WHAT IS STORED, AND WHAT DELIBERATELY IS NOT. A key is
+-- `sbk_live_<selector>_<secret>`. The SELECTOR names the row and is public — it
+-- is what a lookup matches and what a masked read shows. The SECRET is 256 bits
+-- of randomness and is never written anywhere: `secret_digest` holds its SHA-256
+-- in lowercase hex, and the plaintext exists only inside the create response.
+-- There is deliberately NO column a plaintext key could be put in, which is what
+-- `libs/shared/box-schema/src/lib/schema/api-keys.spec.ts` pins.
+--
+-- NO FOREIGN KEYS, for the same reason the activity trail 0055 creates has none:
+-- `organization_id`, `created_by` and `revoked_by` are the control plane's ids
+-- and neither an `organization` nor a `user` table exists inside a box.
+-- `organization_id` stays NOT NULL — a box nobody has registered records the nil
+-- uuid, which says "this box answers for no organization yet" and never claims a
+-- tenant it does not have. The two actor columns are nullable because a
+-- `stackbone dev` mint happens with nobody signed in, and the honest row for it
+-- names no actor instead of borrowing somebody's name.
+--
+-- REVOCATION IS A LIFECYCLE TRANSITION, NEVER A DELETE. `revoked_at` and
+-- `revoked_by` are set once and never cleared, and no code path removes a row.
+-- A key that stopped working is exactly the thing an operator reconstructs
+-- months later — "who turned this off, and when" is unanswerable from an absent
+-- row. `expires_at` is nullable on purpose: NULL means "valid until revoked",
+-- which is a choice an operator made and not a missing value.
+CREATE TABLE IF NOT EXISTS stackbone_platform.api_keys (
+    id              uuid        PRIMARY KEY DEFAULT gen_random_uuid(),
+    organization_id uuid        NOT NULL,
+    name            text        NOT NULL,
+    selector        text        NOT NULL,
+    secret_digest   text        NOT NULL,
+    permissions     jsonb       NOT NULL DEFAULT '[]'::jsonb,
+    expires_at      timestamptz,
+    last_used_at    timestamptz,
+    revoked_at      timestamptz,
+    revoked_by      uuid,
+    created_by      uuid,
+    created_at      timestamptz NOT NULL DEFAULT now()
+);
+
+-- The lookup the invocation wires will match a presented key on, and the reason
+-- the selector exists at all: one index probe, on a value that is not a secret,
+-- before any digest is compared. UNIQUE because two rows sharing a selector
+-- would make that probe ambiguous — and the mint draws 64 bits, so a collision
+-- is a bug worth failing the insert over rather than resolving arbitrarily.
+CREATE UNIQUE INDEX IF NOT EXISTS api_keys_selector_idx
+    ON stackbone_platform.api_keys (selector);
+--> statement-breakpoint
+-- "Every key this workspace holds", newest first — the management list's order.
+CREATE INDEX IF NOT EXISTS api_keys_organization_idx
+    ON stackbone_platform.api_keys (organization_id, created_at);
+--> statement-breakpoint
+
+-- A digest is not a credential, but it IS the input to an offline guess, and the
+-- read-only SQL Explorer role has no use for one. Kept out of its reach exactly
+-- like `secrets` (0011) and `browser_auth_profiles` (0024): the blanket
+-- `ALTER DEFAULT PRIVILEGES … GRANT SELECT` in 0005 fires on every table created
+-- afterwards, so a table-level REVOKE is what actually strips it.
+REVOKE ALL ON stackbone_platform.api_keys FROM stackbone_viewer;

package/migrations/0072_control_plane_identity_mcp_resource.sql

@@ -0,0 +1,23 @@
+-- 0061_control_plane_identity_mcp_resource.sql — the identifier this box's MCP
+-- resource is registered under, and the exact `aud` of every MCP access token
+-- minted for it (PLA-872).
+--
+-- It belongs on the row 0046 created for the same reason the pair there does: a
+-- box answers for exactly one installation and serves exactly one resource, and
+-- both are learned in the same teach call. Split across two tables, a re-teach
+-- that moved the box to a new hostname could land one and not the other, and the
+-- box would go on verifying tokens minted for an address nobody reaches.
+--
+-- NULLABLE, and that is the whole back-compat story. A box taught by a wizard or
+-- a `stackbone link` from before this column has the pair and no resource: it is
+-- not a broken row, it is a box that cannot serve OAuth MCP yet and answers
+-- `503 mcp_not_ready` at `/mcp` until somebody registers it again. Defaulting it
+-- to anything would be inventing the box's own external URL, which is the one
+-- thing a container cannot know about itself.
+--
+-- `text`, not a domain or a check: what makes a value canonical is
+-- `canonicalMcpResource` in `@stackbone/validators`, the box re-runs it on the
+-- teach call before writing, and a CHECK constraint here could only ever be a
+-- second, weaker copy of that rule.
+ALTER TABLE stackbone_platform.runtime_control_plane_identity
+    ADD COLUMN IF NOT EXISTS mcp_resource text;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stackbone/cli",
-  "version": "0.3.5",
+  "version": "0.4.0",
   "license": "UNLICENSED",
   "type": "module",
   "bin": {
@@ -19,6 +19,7 @@
     "@clack/prompts": "^1.2.0",
     "@hono/node-server": "^2.0.0",
     "@hono/zod-openapi": "^1.6.1",
+    "@modelcontextprotocol/server": "2.0.0",
     "@scalar/hono-api-reference": "^0.11.16",
     "ajv": "^8.20.0",
     "ajv-formats": "^3.0.1",
@@ -28,6 +29,7 @@
     "drizzle-kit": "^0.31.10",
     "drizzle-orm": "^0.45.2",
     "hono": "^4.12.15",
+    "ioredis": "^5.10.1",
     "jose": "^6.2.3",
     "libsodium-wrappers": "^0.8.4",
     "open": "^11.0.0",