chore: bump version to 1.1.1

Migration 031 created the prompt_policies table but never registered
admin.prompt_policies in _VALID_PERMISSIONS or granted it to the
builtin-admin role, causing 403 on all prompt-policy admin endpoints.

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "turnstone"
-version = "1.1.0"
+version = "1.1.1"
 description = "Multi-node AI orchestration platform with tool use, agent routing, and cluster simulation."
 readme = "README.md"
 license = "BUSL-1.1"

tests/test_governance_endpoints.py

@@ -57,6 +57,7 @@ class _InjectAuthMiddleware(BaseHTTPMiddleware):
                     "admin.users",
                     "admin.orgs",
                     "admin.policies",
+                    "admin.prompt_policies",
                     "admin.skills",
                     "admin.usage",
                     "admin.audit",

tests/test_sdk_governance.py

@@ -64,6 +64,7 @@ class _InjectAuthMiddleware(BaseHTTPMiddleware):
                     "admin.roles",
                     "admin.orgs",
                     "admin.policies",
+                    "admin.prompt_policies",
                 }
             ),
         )

turnstone/__init__.py

@@ -1,3 +1,3 @@
 """turnstone - Multi-node AI orchestration platform with tool use, agent routing, and cluster simulation."""
 
-__version__ = "1.1.0"
+__version__ = "1.1.1"

turnstone/console/server.py

@@ -2125,6 +2125,7 @@ _VALID_PERMISSIONS = frozenset(
         "admin.roles",
         "admin.orgs",
         "admin.policies",
+        "admin.prompt_policies",
         "admin.skills",
         "admin.audit",
         "admin.usage",

turnstone/core/storage/migrations/versions/032_prompt_policy_permission.py

@@ -0,0 +1,39 @@
+"""Grant admin.prompt_policies permission to builtin-admin role.
+
+Migration 031 created the prompt_policies table but did not add the
+corresponding permission to the builtin-admin role, causing 403 on
+/v1/api/admin/prompt-policies for all users.
+
+Revision ID: 032
+Revises: 031
+Create Date: 2026-04-05
+"""
+
+import sqlalchemy as sa
+from alembic import op
+
+revision = "032"
+down_revision = "031"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    conn = op.get_bind()
+    conn.execute(
+        sa.text(
+            "UPDATE roles SET permissions = permissions || ',admin.prompt_policies' "
+            "WHERE role_id = 'builtin-admin' "
+            "AND permissions NOT LIKE '%admin.prompt_policies%'"
+        )
+    )
+
+
+def downgrade() -> None:
+    conn = op.get_bind()
+    conn.execute(
+        sa.text(
+            "UPDATE roles SET permissions = REPLACE(permissions, ',admin.prompt_policies', '') "
+            "WHERE role_id = 'builtin-admin'"
+        )
+    )

uv.lock

@@ -2496,7 +2496,7 @@ wheels = [
 
 [[package]]
 name = "turnstone"
-version = "1.1.0"
+version = "1.1.1"
 source = { editable = "." }
 dependencies = [
     { name = "alembic" },