v0.47.0

This release adds project roles, user groups and per-project permissions: every route declares the permission it needs and each MCP tool is checked against its REST route's, and the dashboard shows each action only to those allowed to take it on that project.

Full diff: v0.46.0…v0.47.0

✨ Highlights

• 👥 Project roles and groups — Give users and groups a role per project, managed in settings and in project members, with an API for groups and project roles.
• 🔐 A permission on every route — Every route declares a permission from one catalog of instance and project roles, and MCP tools are checked against the permission of their REST route.
• 📋 Settings > Roles — A read-only page lists what each role can do, and actions show by permission on the project they act on.
• ⚡ Nuxt 4.5 — The dashboard runs on Nuxt 4.5 and forwards prefetch preload hints.

Features

Roles, groups & permissions

• auth: project roles, user groups and per-project permissions (5c486b1)
• auth: store project roles in role bindings and add groups (d512fcc)
• auth: add the permission catalog for instance and project roles (1453c50)
• auth: declare a permission on every route (8242e77)
• auth: check MCP tools against the permission of their REST route (1c1a819)
• auth: add the access-management API for groups and project roles (5e60520)

Settings & dashboard

• ui: manage groups and project roles in settings and project members (2cd9f8d)
• ui: add a read-only Settings > Roles page listing what each role can do (6ab33b3)
• ui: show actions by permission on the project they act on (b9d3ea9)
• ui: move the Settings pages to a vertical section menu (3404f60)

Platform

• app: upgrade to Nuxt 4.5 and forward prefetch preload hints (04838be)