zhi/HarborForge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: settle hf permission introspection strategy

Browse Source
This commit is contained in:
zhi
2026-03-21 14:14:10 +00:00
parent 6e531f9117
commit 56dc5ef3d6
2 changed files with 51 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
plans/hf-cross-project-todo.md
View File

@@ -11,7 +11,9 @@
- [ ] Finalize MVP scope for first shipping version of `hf`
- [ ] Confirm which existing backend routes can be reused vs which new routes are needed
- [ ] Define canonical code-first lookup policy across all resources
- [ ] Define permission introspection strategy for `--help` / `--help-brief`
- [x] Define permission introspection strategy for `--help` / `--help-brief`
- settled as: token → current user → user role → role permissions
- `hf user create` remains a special account-manager-token flow and is not gated by ordinary user-token write permission
- [ ] Define JSON output contract for CLI list/get commands
- [ ] Define CLI exit code / stderr conventions
- [ ] Define local plugin↔monitor communication protocol over `monitor_port`