Merge dev-2026-03-22 into main #12

zhi · 2026-03-22T14:11:27Z

zhi commented

2026-03-22 14:11:27 +00:00

Backend: merge dev-2026-03-22 to main

zhi added 15 commits 2026-03-22 14:11:28 +00:00

feat: add username-based user lookup and permission introspection endpoint e5fd89f972

- users router: accept username or id in get/update/delete/worklogs via _find_user_by_id_or_username()
- auth router: add GET /auth/me/permissions for CLI help introspection (token → user → role → permissions)

Expose milestone codes in response schema 32e79a41d8

feat: add code-first API support for projects, milestones, proposes, tasks 43af5b29f6

- Projects: get/update/delete/members endpoints now accept project_code
- Milestones: all project-scoped and top-level endpoints accept milestone_code
- Proposes: all endpoints accept project_code and propose_code
- Tasks: code-first support for all CRUD + transition + take + search
- Schemas: add code/type/due_date/project_code/milestone_code/taken_by fields
- All endpoints use id-or-code lookup helpers for backward compatibility
- Milestone serializer now includes milestone_code and code fields
- Task serializer enriches responses with project_code, milestone_code, taken_by

Addresses TODO §2.1: code-first API support across CLI-targeted resources

Add support code-based action routes 96cbe109ec

feat: add code-based meetings router with participant/attend support 86911286c0

- New dedicated meetings.py router with full CRUD (list/get/create/update/delete)
- All endpoints accept meeting_code or numeric id
- MeetingParticipant model for tracking meeting attendance
- POST /meetings/{id}/attend adds current user to participant list
- Serialization includes participants list, project_code, milestone_code
- Creator auto-added as participant on meeting creation
- Registered in main.py alongside existing routers

docs: refresh openclaw plugin architecture docs f45f5957f4

feat: enrich member/comment/propose APIs with usernames 3ff9132596

- ProjectMemberResponse now includes username and full_name
- Comment list endpoint returns author_username
- ProposeResponse now includes created_by_username
- All serializers resolve User objects to surface human-readable names
- Supports frontend code-first migration (TODO §3.1/3.2)

chore: remove legacy Python CLI and update README b351075561

- Remove cli.py (superseded by Go-based hf CLI)
- Update README to point to HarborForge.Cli for CLI usage

feat: add general /supports list endpoint with status/taken_by filters d17072881b

- New GET /supports endpoint for listing all support tickets across projects
- Supports optional ?status= and ?taken_by= (me|null|username) query params
- Ordered by created_at descending
- Complements the existing scoped /supports/{project_code}/{milestone_id} endpoint

Fix milestones 422 + acc-mgr user + reset-apikey endpoint 88931d822d

- Fix: /milestones?project_id= now accepts project_code (str) not just int
- Add: built-in acc-mgr user created on wizard init (account-manager role, no login, undeletable)
- Add: POST /users/{id}/reset-apikey with permission-based access control
- Add: GET /auth/me/apikey-permissions for frontend capability check
- Add: user.reset-self-apikey and user.reset-apikey permissions
- Protect admin and acc-mgr accounts from deletion
- Block acc-mgr from login (/auth/token returns 403)

Fix: accept task_code/milestone_code as identifiers, add /config/status endpoint 8b357aabc4

- All /tasks/{task_id} endpoints now accept both numeric id and task_code string
- All /milestones/{milestone_id} endpoints (misc.py) now accept both numeric id and milestone_code
- Added _resolve_task() and _resolve_milestone() helpers
- GET /config/status reads initialization state from config volume (no wizard dependency)
- MilestoneResponse schema now includes milestone_code field
- Comments and worklog endpoints also accept task_code

Merge fix/three-bugs-2026-03-22: accept task_code/milestone_code as identifiers, add /config/status endpoint 1905378064

Apply fix: accept project_code as identifier in project endpoints 15126aa0e5

Fix: use role name 'admin' instead of 'superadmin' for global admin check 5ccd955a66

Merge pull request 'Merge dev-2026-03-22-x1 into dev-2026-03-22' (#11 ) from dev-2026-03-22-x1 into dev-2026-03-22 28d8dec010