sync: align runtime source with GitHub main

app/security/service.py

@@ -22,7 +22,7 @@ from app.security.errors import (
 )
 from app.security.models import APIKey
 from app.security.schemas import APIKeyCreate, APIKeyPatch
-from app.security.scopes import configured_roles, effective_scopes
+from app.security.scopes import configured_roles, effective_scopes, membership_role_scopes
 from app.security.tenancy import TenantService
 
 KEY_PATTERN = re.compile(r"^mp_([a-z][a-z0-9]{1,15})_([A-Za-z0-9_-]{43,})$")
@@ -218,6 +218,9 @@ class APIKeyService:
             user_id=principal.user_id,
             membership_id=principal.membership_id,
             membership_role=principal.membership_role,
+            membership_scopes=membership_role_scopes(
+                principal.membership_role, self.settings.auth_role_scopes
+            ),
         )
 
     @staticmethod