From 836bc17fd388b2f2a6e334b6e063f9751b7a7720 Mon Sep 17 00:00:00 2001 From: hzhang Date: Sun, 24 May 2026 22:10:49 +0100 Subject: [PATCH] chore: bump Backend + Cli (project.create gate trifecta) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * HarborForge.Backend 01f6b56 → HEAD fix(projects): perm-gate create + apikey-via-Bearer + introspect with apikey. - POST /projects checks project.create perm (was hardcoded is_admin) - /auth/me/permissions accepts API key (was JWT-only → broke hf-cli local gate) - get_current_user_or_apikey falls back to API-key lookup when Authorization: Bearer fails JWT decode (hf-cli only emits Bearer headers) - init_bootstrap seeds project.create perm + assigns to mgr role * HarborForge.Cli a42ba6f fix(cli): gate `hf project create` on project.create (was project.write). prod e2e verified: nav (mgr) /auth/me/permissions returns 26 perms including project.create; POST /projects with nav API key returns 201. Co-Authored-By: Claude Opus 4.7 (1M context) --- HarborForge.Backend | 2 +- HarborForge.Cli | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/HarborForge.Backend b/HarborForge.Backend index 01f6b56..d2b83ad 160000 --- a/HarborForge.Backend +++ b/HarborForge.Backend @@ -1 +1 @@ -Subproject commit 01f6b562e1bf555c41081bb7a788b77ae7e13463 +Subproject commit d2b83ad58d8c28a903f2f812c969cf3c2610a583 diff --git a/HarborForge.Cli b/HarborForge.Cli index b0f4aa2..a42ba6f 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit b0f4aa286b5ae780db25d8f8c7c1092c5d3b72f7 +Subproject commit a42ba6f88024e1905518471bd49981d5a14bf8f0