@vectros-ai/cli 0.14.0 → 0.15.0

package/AUTHORING.md

@@ -166,6 +166,20 @@ seed:
     # Seeds are illustrative sample data. They're applied by default; provision a
     # production context with `bootstrap --no-seed` to skip them (schemas + key
     # still apply).
+
+issuers:
+  - issuerId: auth0-prod       # your slug; 3-31 chars, lowercase letter first
+    issuer: "https://your-tenant.us.auth0.com/"
+    jwksUri: "https://your-tenant.us.auth0.com/.well-known/jwks.json"
+    audience: "https://api.your-app.example.com"   # globally unique per (issuer, audience)
+    contextId: my-thing        # which app context an exchanged token targets
+    # Optional trusted third-party IdP issuers (BYO-IdP token exchange). Applied
+    # in the BOOTSTRAP-token phase, alongside app-context/service-principal
+    # creation — NOT the same phase as schemas/accessProfile/roles above (see
+    # BLUEPRINT_FIELD_PHASES, exported by @vectros-ai/blueprints). Registration
+    # is create-once: re-applying an already-registered issuerId leaves it
+    # unchanged — there's no update, so an edited jwksUri/audience on a live
+    # issuer won't take effect via re-apply.
 ```
 
 YAML or JSON are both accepted (chosen by extension). The bundled library is
@@ -284,7 +298,10 @@ reference Y", add the reference field to `lookupFields` as an equality lookup
 ### The scope gate — what you can and can't request
 
 The gate allows only **data-plane** resources:
-`records`, `schemas`, `search`, `documents`, `folders`, `inference`.
+`records`, `schemas`, `search`, `documents`, `folders`, `inference`, `entities`
+(per-namespace identity-entity CRUD — `org`/`client`/any namespace you
+registered — ownership-gated the same way as `records`; it grants no
+authority over the namespace *registry* itself, which stays root-key-only).
 Operations are `c|r|u|d`, combinable (`records:cru`), with a per-resource
 wildcard (`records:*`). Anything else — control-plane resources or the bare
 `*` — is rejected, and there is **intentionally no override flag**. This is

package/CHANGELOG.md

@@ -3,6 +3,68 @@
 All notable changes to `@vectros-ai/cli` are documented here.
 This project adheres to [Semantic Versioning](https://semver.org).
 
+## 0.15.0
+
+### Added
+
+- **`bootstrap` can register trusted third-party IdP issuers via a blueprint's
+  new `issuers:` block** (requires `@vectros-ai/blueprints` 0.12.0+). Each entry
+  (`issuerId`, `issuer`, `jwksUri`, `audience`, `contextId`, optional `subClaim`/
+  `emailClaim`) is applied in the bootstrap-token phase — alongside app-context
+  and service-principal creation — using the same owner-only authority that
+  creates the app context itself, never an ordinary partner-grantable scope.
+  `vectros blueprint plan` names this phase explicitly in the preview.
+
+- **`vectros blueprint-test` now verifies a declared `issuers:` entry actually
+  registered and is readable back**, the same live-credential proof it already
+  gives schemas and roles. One limitation, surfaced explicitly in the run's
+  report rather than silently: the platform has no way to remove a registered
+  issuer yet, so (unlike every other resource `blueprint-test` provisions)
+  issuer registrations are not torn down after the test run.
+
+### Fixed
+
+- **`key rotate` no longer silently mints a second key when `--name` defaults
+  to `'default'` and the real key you meant to rotate is named something
+  else** (e.g. a `bootstrap`-minted key, which is never named `'default'`).
+  It now refuses when the default name matches no active key but another
+  active key already exists for the same principal/context, naming the
+  other key(s) so you can re-run with the right `--name` — or `--force-new`
+  to mint a new one alongside them anyway. Previously this minted an
+  unrelated key with no error or warning, leaving the original — possibly
+  the reason you were rotating — still active.
+
+- **`bootstrap --blueprint <file>` now accepts `--set name=value` / `--values
+  <file>`** for a file blueprint's declared `inputs:`, matching what `vectros
+  blueprint validate`/`plan` already supported. Previously there was no way
+  to apply a blueprint with a required, no-default input via `bootstrap` at
+  all — the flags simply didn't exist on that command. Supplying either flag
+  against a bundled or `--blank` blueprint (which have no `inputs:` to set)
+  is now a clear usage error rather than a silent no-op.
+
+- **The bootstrap scope gate no longer treats `entities` (identity-entity
+  CRUD — `org`/`client`/any namespace you registered) as control-plane.**
+  It's ordinary tenant data, ownership-gated the same way as `records` —
+  creating or reading an entity grants no additional access by itself. This
+  had blocked provisioning any blueprint role that manages its own
+  entities (e.g. a user creating their own org). The namespace *registry*
+  itself (registering a new namespace type) is unaffected and stays
+  root-key-only, correctly rejected by the gate as before.
+
+- **The displayed/stored environment (`whoami`, `keyring list`/`doctor`, `blueprint-test`'s
+  banner) now reflects the base URL a command actually resolved and sent requests to, not
+  a hidden flag default.** The two diverge whenever `VECTROS_API_BASE_URL`/`--base-url`
+  alone selects the environment (the common shape when targeting staging without also
+  passing `--env staging`) — previously this echoed the wrong environment label next to a
+  key or session that was actually minted/used against a different one.
+
+### Changed
+
+- **Dependency maintenance** — repinned the bundled `@vectros-ai/sdk` to `0.39.0` (the
+  trusted BYO-IdP issuer registry and RFC 8693 token exchange, `exists-by-email`, and the
+  scoped-token TTL cap narrowed to 1 hour). The CLI bundles the SDK into its published
+  binary, so this is a rebuild against its current version.
+
 ## 0.14.0
 
 ### Security

package/README.md

@@ -188,9 +188,10 @@ Blueprints are **untrusted input** (agent- or community-authored) and the
 CLI runs under an elevated ephemeral bridge token. So the trust boundary is
 **this binary, not the blueprint**: a hardcoded **scope gate** bounds every
 mint to a data-plane allowlist (`records` / `schemas` / `search` / `documents`
-/ `folders` / `inference`). Any control-plane scope (keys / profiles / users /
-billing / admin) or `*` wildcard **hard-rejects** — the CLI mints nothing and
-exits non-zero. There is intentionally **no override flag**.
+/ `folders` / `inference` / `entities`). Any control-plane scope (keys /
+profiles / users / billing / admin / namespaces) or `*` wildcard
+**hard-rejects** — the CLI mints nothing and exits non-zero. There is
+intentionally **no override flag**.
 
 ## Rate limits