@stratum-hq/lib 0.2.3 → 0.2.4

package/dist/migrations/migrations/008_api_key_management.sql

@@ -1,7 +0,0 @@
--- Add expiration and rate limit columns to api_keys
-ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS expires_at TIMESTAMPTZ;
-ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS rate_limit_max INTEGER;
-ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS rate_limit_window TEXT;
-
-CREATE INDEX idx_api_keys_expires ON api_keys(expires_at) WHERE expires_at IS NOT NULL;
-CREATE INDEX idx_api_keys_last_used ON api_keys(last_used_at);

package/dist/migrations/migrations/009_consent.sql

@@ -1,18 +0,0 @@
-CREATE TABLE IF NOT EXISTS consent_records (
-  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id UUID NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
-  subject_id TEXT NOT NULL,
-  purpose TEXT NOT NULL,
-  granted BOOLEAN NOT NULL DEFAULT true,
-  granted_at TIMESTAMPTZ DEFAULT now(),
-  revoked_at TIMESTAMPTZ,
-  expires_at TIMESTAMPTZ,
-  metadata JSONB DEFAULT '{}',
-  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
-  updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
-  UNIQUE(tenant_id, subject_id, purpose)
-);
-
-CREATE INDEX IF NOT EXISTS idx_consent_tenant ON consent_records(tenant_id);
-CREATE INDEX IF NOT EXISTS idx_consent_subject ON consent_records(subject_id);
-CREATE INDEX IF NOT EXISTS idx_consent_purpose ON consent_records(purpose);

package/dist/migrations/migrations/010_multi_region.sql

@@ -1,19 +0,0 @@
-CREATE TABLE IF NOT EXISTS regions (
-  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-  display_name TEXT NOT NULL,
-  slug TEXT NOT NULL UNIQUE,
-  control_plane_url TEXT,
-  database_url TEXT,
-  is_primary BOOLEAN NOT NULL DEFAULT false,
-  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'draining', 'inactive')),
-  metadata JSONB DEFAULT '{}',
-  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
-  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
-);
-
-CREATE INDEX IF NOT EXISTS idx_regions_slug ON regions(slug);
-CREATE INDEX IF NOT EXISTS idx_regions_status ON regions(status);
-
--- Add region_id to tenants (nullable for backward compat)
-ALTER TABLE tenants ADD COLUMN IF NOT EXISTS region_id UUID REFERENCES regions(id);
-CREATE INDEX IF NOT EXISTS idx_tenants_region ON tenants(region_id);

package/dist/migrations/migrations/011_demo_bootstrap.sql

@@ -1,5 +0,0 @@
--- Migration 011: Demo bootstrap
--- REMOVED: Demo API key seeding moved to packages/demo/api/src/seed.ts
--- The original migration inserted a hardcoded API key (sk_live_demo_key)
--- with global admin access, which is a security risk in production.
--- Demo data is now seeded via the demo seed script only.

package/dist/migrations/migrations/012_roles.sql

@@ -1,18 +0,0 @@
--- 012: Role-Based Access Control (RBAC)
--- Roles define named collections of scopes that can be assigned to API keys.
-
-CREATE TABLE IF NOT EXISTS roles (
-  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-  name TEXT NOT NULL UNIQUE,
-  description TEXT,
-  scopes TEXT[] NOT NULL DEFAULT ARRAY['read'],
-  tenant_id UUID REFERENCES tenants(id) ON DELETE CASCADE,
-  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
-  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
-);
-
--- Index for tenant-scoped role lookups
-CREATE INDEX IF NOT EXISTS idx_roles_tenant_id ON roles (tenant_id);
-
--- Add role_id column to api_keys
-ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS role_id UUID REFERENCES roles(id) ON DELETE SET NULL;

package/dist/migrations/migrations/013_api_key_hmac.sql

@@ -1,4 +0,0 @@
--- Add hash_version column to distinguish SHA-256 (legacy) from HMAC-SHA256 hashes.
--- 1 = SHA-256 (legacy), 2 = HMAC-SHA256 (current).
--- Existing keys default to version 1; new keys will be created with version 2.
-ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS hash_version SMALLINT NOT NULL DEFAULT 1;

package/dist/migrations/migrations/014_sort_order.sql

@@ -1,5 +0,0 @@
--- Add sort_order column for sibling reordering
-ALTER TABLE tenants ADD COLUMN IF NOT EXISTS sort_order INTEGER NOT NULL DEFAULT 0;
-
--- Index for efficient ordering queries
-CREATE INDEX IF NOT EXISTS idx_tenant_sort_order ON tenants(parent_id, sort_order);

package/dist/migrations/migrations/015_region_url_encryption.sql

@@ -1,5 +0,0 @@
--- Encrypt database_url column in regions table
--- Existing plaintext URLs will need to be migrated via the key rotation service
-ALTER TABLE regions RENAME COLUMN database_url TO database_url_encrypted;
--- Add a comment to remind developers this column is encrypted
-COMMENT ON COLUMN regions.database_url_encrypted IS 'AES-256-GCM encrypted PostgreSQL connection string. Use encrypt()/decrypt() from @stratum-hq/lib.';

package/dist/migrations/migrations/016_migration_alias.sql

@@ -1,8 +0,0 @@
--- Handle migration renaming: 002_sort_order.sql → 014_sort_order.sql
--- If an existing deployment already applied 002_sort_order.sql, record the
--- new name so the migration runner doesn't try to re-apply it.
-INSERT INTO _migrations (name, applied_at)
-SELECT '014_sort_order.sql', applied_at
-FROM _migrations
-WHERE name = '002_sort_order.sql'
-ON CONFLICT DO NOTHING;