KYTE-#325 PR B: MCP schema-management tools + schema scope

[kennethphough]

KYTE-#325 — PR B (MCP schema-management tools)

Builds on PR A (#108). Lets a schema-scoped MCP token create and migrate data models from Claude, where each change applies a real DDL migration via DataModelController/ModelAttributeController in internal mode (mirrors the #322 SiteTools pattern).

New scope

• schema added to KyteMCPTokenController::VALID_SCOPES, held separately from provision (model-migration rights independent of site spin-up/tear-down). Not hierarchical.

New tools (ModelTools, all #[RequiresScope('schema')])

tool	DDL	notes
create_model	CREATE TABLE	base table w/ PK + audit columns
add_attribute	ADD COLUMN	decimal needs precision+scale; varchar needs size; FK via foreign_key_model
update_attribute	CHANGE COLUMN	name required (full column def rewritten)
rename_model	RENAME TABLE	loads app model constants first (see below)
remove_attribute	DROP COLUMN	destructive — requires confirm_destructive=true
delete_model	DROP TABLE	destructive — requires confirm_destructive=true

Every caller-supplied model/attribute id is re-scoped to the token's account; foreign ids are rejected. read_model/list_models already existed.

Why rename_model calls loadAppModels

DataModelController::update guards on defined($o->name) — the model must be registered as a runtime constant. The HTTP pipeline does this via Api::loadAppModels at routing, but the MCP path bypasses routing, so the tool registers the app's models first (same as AppModelWrapperController).

Model-layer hardening (surfaced by partial MCP payloads)

• DataModelController::prepareModelDef reads optional flags/defaults defensively — no undefined-property warning / null-to-strlen deprecation when a caller omits protected/password/defaults/unsigned.
• Api::loadAppModels skips rows with a missing/corrupt model_definition (instead of define()-ing a null name) and no longer re-defines an already-defined constant.

Tests

McpModelToolsTest extended with write coverage: create / add / update / rename, decimal precision/scale reaching the physical column, destructive-op confirm gating, FK-dependency block, and cross-account isolation — driving real DDL against the test DB via a dedicated password-bearing app user (Api::dbappconnect rejects empty passwords).

Verification

• PHPStan level 1 (php:8.2-cli, -d memory_limit=512M) — green.
• Unit suite (256 tests) — green against MariaDB 10.5.

Follow-ups (not in this PR)

• dev dogfood: grant schema on dev token [FEATURE] Add option to enable module for existing, new, and inline JavaScript #8 once deployed to dev19.
• Release v4.15.x (rides with the batched v4.14.0 site-tools rollout).
• Shipyard token-UI scope checkboxes (read/draft/commit/provision/schema) = Shipyard 2.2.1.

🤖 Generated with Claude Code