[grubmeshi]

remove-apikey-self

meshStack removes the preview endpoint GET /api/meshobjects/meshapikeys/self (ClickUp). Its only caller was meshstack auth status. meshStack also adds clientVersionHint to every 4xx error body under /api when the meshStack CLI is older than v0.9.0 or the Terraform provider is older than its minimum version. clientVersionHint replaces terraformProviderVersionHint, which no client read.

• ReadSelf is removed from client.MeshApiKeyClient, and ApiKeyPermissions.Only with it. This changes the public Go client; the Terraform provider only had a mock for ReadSelf.
• auth status, profile show and profile edit read only the stored credential and its cached token. They no longer show the display name, owning workspace, expiry or permissions of an API key, and profile show no longer waits for meshStack.
• Error bodies are parsed strictly by their fields. A known body shows its message, errorCode and errorId, and clientVersionHint on its own line. Any other body shows the status and the raw body. The Terraform provider shows errors through this client, so it shows the hint too.

Merge this PR before meshcloud/terraform-provider-meshstack#371, which pins this branch.

Cross-repo PRs

• meshcloud/meshfed-release#11588 — remove GET /self, add clientVersionHint for outdated CLI and Terraform provider versions
• remove-apikey-self: stop reading the API key from meshStack, show the client version hint #65 — drop ReadSelf, status reads only local files, show clientVersionHint
• remove-apikey-self: drop the ReadSelf mock terraform-provider-meshstack#371 — drop the ReadSelf mock, pin the CLI branch

🤖 Generated with Claude Code

[meshcloud-gh-actions]

Coverage of the acceptance run against the meshStack backend, on 85863f254cbfa239ad39ad5221284ac29afcc388.

Scope	Coverage
Unit tests	77.8%
Acceptance tests	55.3%
Combined	80.5%

Uncovered functions

client/api_key.go:52: meshApiKeyClient.Create 0.0%
client/api_key.go:56: meshApiKeyClient.Read 0.0%
client/api_key.go:60: meshApiKeyClient.Update 0.0%
client/api_key.go:64: meshApiKeyClient.Delete 0.0%
client/api_key_permissions.go:20: ApiKeyPermissions.AllCodes 0.0%
client/api_key_permissions.go:33: ApiKeyPermissions.WorkspaceCodes 0.0%
client/api_key_permissions.go:262: AllApiKeyPermissions 0.0%
client/api_key_permissions.go:266: WorkspacePermissionCodes 0.0%
client/building_block_definition.go:71: MeshBuildingBlockDefinitionApprovalPolicies.NothingRequiresApproval 0.0%
client/building_block_definition.go:82: DisabledSchedule 0.0%
client/building_block_definition.go:89: MeshBuildingBlockDefinitionSchedule.IsDisabled 0.0%
client/building_block_definition.go:93: MeshBuildingBlockDefinitionSpec.HasNeutralPolicies 0.0%
client/building_block_definition.go:97: MeshBuildingBlockDefinitionSpec.WithNeutralPolicies 0.0%
client/building_block_definition.go:166: meshBuildingBlockDefinitionClient.List 0.0%
client/building_block_definition.go:173: meshBuildingBlockDefinitionClient.Read 0.0%
client/building_block_definition.go:177: meshBuildingBlockDefinitionClient.Create 0.0%
client/building_block_definition.go:181: meshBuildingBlockDefinitionClient.Update 0.0%
client/building_block_definition.go:185: meshBuildingBlockDefinitionClient.Delete 0.0%
client/building_block_definition_version.go:100: MeshBuildingBlockType.TagInputTargets 0.0%
client/building_block_definition_version.go:245: meshBuildingBlockDefinitionVersionClient.Create 0.0%
client/building_block_definition_version.go:254: meshBuildingBlockDefinitionVersionClient.Update 0.0%
client/building_block_definition_version_implementation.go:80: MeshBuildingBlockDefinitionImplementation.InferType 0.0%
client/building_block_definition_version_implementation.go:94: MeshBuildingBlockDefinitionImplementation.MarshalJSON 0.0%
client/building_block_definition_version_implementation.go:107: *MeshBuildingBlockDefinitionImplementation.UnmarshalJSON 0.0%
client/building_block_runner.go:87: meshBuildingBlockRunnerClient.Create 0.0%
... and 131 more

covdata func names a method without its receiver, so an entry can belong to an implementation nothing selects rather than to a function the tests never reached. Open the file and line before reading one as a coverage gap.

[nroi]

lgtm, just 2 remarks.

[sonarqubecloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud