AndyYang
6c69de2df1
- Add crypto utility (internal/utils/crypto.go) with AES-256-GCM encrypt/decrypt using SYSTEM_AES_KEY env var, with "enc:v1:" prefix for versioned ciphertext - Encrypt tenant API key via GORM BeforeSave/AfterFind hooks and manual encryption in CreateTenant/UpdateAPIKey (db.Updates bypasses hooks) - Encrypt model API key in ModelParameters Value/Scan (driver.Valuer) - Widen api_key column from varchar(64) to varchar(256) across all DB dialects (MySQL, ParadeDB, SQLite) and add versioned migration 000018 - Propagate SYSTEM_AES_KEY through docker-compose, Helm secrets and values - Fix migration 000017 PL/pgSQL dollar-quoting syntax ($ -> $$)
15 lines
589 B
SQL
15 lines
589 B
SQL
-- ============================================================================
|
|
-- Migration 000017 DOWN: Remove is_builtin from mcp_services
|
|
-- ============================================================================
|
|
|
|
DO $$ BEGIN RAISE NOTICE '[Migration 000017 DOWN] Removing is_builtin column from mcp_services...'; END $$;
|
|
|
|
-- Drop index
|
|
DROP INDEX IF EXISTS idx_mcp_services_is_builtin;
|
|
|
|
-- Remove is_builtin column
|
|
ALTER TABLE mcp_services
|
|
DROP COLUMN IF EXISTS is_builtin;
|
|
|
|
DO $$ BEGIN RAISE NOTICE '[Migration 000017 DOWN] is_builtin column removed from mcp_services'; END $$;
|