[dependabot]

Bumps github.com/plexusone/systemforge from 0.11.0 to 0.17.0.

Release notes

Sourced from github.com/plexusone/systemforge's releases.

v0.17.0

Release Notes: v0.17.0

Full Changelog: plexusone/systemforge@v0.16.0...v0.17.0

v0.16.0

Release Notes: v0.16.0

Full Changelog: plexusone/systemforge@v0.15.0...v0.16.0

v0.15.0

Release Notes: v0.15.0

Full Changelog: plexusone/systemforge@v0.14.0...v0.15.0

v0.14.0

Release Notes: v0.14.0

Full Changelog: plexusone/systemforge@v0.13.0...v0.14.0

v0.13.0

Release Notes: v0.13.0

Full Changelog: plexusone/systemforge@v0.12.0...v0.13.0

v0.12.0

Release Notes: v0.12.0

Full Changelog: plexusone/systemforge@v0.11.0...v0.12.0

Changelog

Sourced from github.com/plexusone/systemforge's changelog.

[v0.17.0] - 2026-10-18

Highlights

• Relying-party applications manage managed principals through SystemAuth: a /managed-principals API served by systemauthsvc, called with the manager's access token, and the mpclient Go client
• Nobody becomes a manager without agreeing: managers other than the creator join by invitation or claim
• The contract's identity, policy and audit operations refuse requests until the application is federated

Upgrade Guide

• Standalone applications that serve the contract API: set Config.AllowUnauthenticatedStandalone in development and tests, or federate the application; identity, policy and audit operations otherwise answer 403
• Code calling managedprincipal.Service.Create with managers other than the actor, or AddManager: invite those managers or issue a claim, or build the service with WithDirectManagerAdds for administrator tooling
• Managers in roles registered with WithRoles can no longer issue login tokens; issue them as a guardian or educator
• To let a relying party manage managed principals, enable managed_principals for the deployment and its client and add systemforge:managed_principals to the client's scopes

Added

• SystemAuth built by systemauthsvc serves the managed-principal API at /managed-principals when managed principals are enabled, for relying parties calling with a manager's access token granted systemforge:managed_principals; Options.AuditEmitter, ManagedPrincipalRates and ManagedPrincipalOptions, and Service.ManagedPrincipals() (a76d041)
• managedprincipal.NewHandler relying-party mode (WithRequestClient): the client is the access token's, creation names only the caller, unknown and unmanaged principals answer 403; WithCodeRateLimit for code routes; GET / (Service.ListManagedBy) and POST /{id}/login-tokens (af30b5b)
• managedprincipal/mpclient, a typed client for the managed-principal API with errors wrapped in *APIError (eaca813)
• systemauth.Server.BearerAccess and BearerAuthenticator: bearer access that carries the token's client, scopes and grant, adapted to requestprincipal (c0c4e8d)

Changed

• BREAKING: The contract's identity, policy and audit operations answer 403 until the application is federated; Config.AllowUnauthenticatedStandalone restores the open behavior for development and tests (9883be5)
• BREAKING: managedprincipal.Service.Create accepts only the actor as manager and AddManager is refused with ErrConsentRequired, so managers join by invitation or claim; WithDirectManagerAdds keeps direct adds for administrator tooling (53a2655)
• Issuing a login token requires manage_credentials (bf1c347)
• The managed-principal handler answers 403 for an unknown or unmanaged principal, as for one the caller does not manage (0124078)

Documentation

• Managed principals guide covers the API on SystemAuth, its configuration and scope, and the client
• INIT-SYSTEMFORGE-012 specification for managed principals in relying-party applications (a18e9f1)
• v0.17.0 release notes; relying-party, embedding and README updates for the managed-principal API

Tests

• The connections test checks the error RunJobs returns when its context ends (078231b)

[v0.16.0] - 2026-10-14

Highlights

• Connections can be reconnected in place, track what depends on them with bindings, and be shared with a principal through per-connection role grants
• The connection library is renamed from connectionforge to connectforge; imports, tables (connectforge_*) and the key purpose (connectforge.credential) change, which is breaking for deployments that enabled connections in v0.15.0

Upgrade Guide

• Update imports from connectionforge to connectforge
• Deployments that enabled connections in v0.15.0 must re-create connections or rename the tables and re-seal credentials; migrate does not copy rows or re-seal

... (truncated)

Commits

• 4999584 docs(release): add v0.17.0 release notes and changelog
• b85c833 docs: cover the managed-principal API for relying parties
• 4796eba docs(releases): link the v0.11.0 migration script on GitHub
• 078231b test(systemauthsvc): check the error RunJobs returns when its context ends
• d2e99f3 docs: record manager consent, issuance permission and the contract change
• 0124078 fix(managedprincipal): answer an unknown principal as one that is not the cal...
• bf1c347 fix(managedprincipal): require manage_credentials to issue a login token
• 53a2655 fix(managedprincipal)!: require consent before anyone becomes a manager
• 36eaa80 docs: describe the managed-principal API for relying parties
• eaca813 feat(managedprincipal): add a client for relying parties
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 0de265b2-f5df-4f3c-a06d-1200413d72ef

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Superseded by #23.