Promote v0.1.67 to main #123

Merged
binjovi-bot merged 1 commit from trunk into main 2026-09-13 15:29:04 +00:00
Collaborator
No description provided.
fix(binjovi-mcp): the OAuth service must know every MCP scope
All checks were successful
binjovi/ci Binjovi completed the frozen plan
01c6bdeb9d
Every authorize request naming binjovi.repository.create answered
{"error":"invalid_request"}, so create_repository could never be used
even with the scope on the client and the permission in the control
plane policy.

Binjovi.MCPOAuth.Protocol builds @scopes at COMPILE time from
Binjovi.Domain.MCPPermissions.scopes(), and refuses any request naming a
scope outside it. This Deployment was pinned to sha-833fc189660f, which
predates create_repository: that revision has no occurrence of the tool
at all. So the control plane advertised a tool whose scope this service
would never grant.

Measured, not guessed. The same authorize request was replayed against
the live endpoint twice: without the scope it answers 302, with it 400.

Bumped to sha-57d0ab2ab4be, the revision the control plane runs.

The two images are pinned in different repositories and nothing keeps
them in step; the comment says so, and says to bump this when a new MCP
tool ships.

Claude-Session: https://claude.ai/code/session_01JGe4pyhQ36AhgDfPJry4d3
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/ory!123
No description provided.