From 7326cadfecb14b25a8144a12b23b5060aeff8106 Mon Sep 17 00:00:00 2001
From: orion <orion@op.hangman-lab.top>
Date: Thu, 16 Apr 2026 21:19:13 +0000
Subject: [PATCH] feat: grant user.reset-apikey permission to account-manager
 role

Allows acc-mgr to reset user API keys, enabling automated
provisioning workflows via the CLI.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 app/init_wizard.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/init_wizard.py b/app/init_wizard.py
index 1d094b1..b51897b 100644
--- a/app/init_wizard.py
+++ b/app/init_wizard.py
@@ -189,6 +189,7 @@ _DEV_PERMISSIONS = {
 
 _ACCOUNT_MANAGER_PERMISSIONS = {
     "account.create",
+    "user.reset-apikey",
 }
 
 # Role definitions: (name, description, permission_set)