chore: bump Backend + Cli (project.create gate trifecta)
* HarborForge.Backend 01f6b56 → HEAD
fix(projects): perm-gate create + apikey-via-Bearer + introspect with apikey.
- POST /projects checks project.create perm (was hardcoded is_admin)
- /auth/me/permissions accepts API key (was JWT-only → broke hf-cli local gate)
- get_current_user_or_apikey falls back to API-key lookup when Authorization:
Bearer fails JWT decode (hf-cli only emits Bearer headers)
- init_bootstrap seeds project.create perm + assigns to mgr role
* HarborForge.Cli a42ba6f
fix(cli): gate `hf project create` on project.create (was project.write).
prod e2e verified: nav (mgr) /auth/me/permissions returns 26 perms
including project.create; POST /projects with nav API key returns 201.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Submodule HarborForge.Backend updated: 01f6b562e1...d2b83ad58d
Submodule HarborForge.Cli updated: b0f4aa286b...a42ba6f880
Reference in New Issue
Block a user