feat(spaces): app-owned space membership store (#213) #220

Merged

Cordy merged 2 commits from feat-spacestore into main

2026-08-13 16:13:58 +00:00

Cordy commented

2026-08-13 16:13:06 +00:00

Owner

First code step of #211 (ADR 0001). A self-contained, IdP-free store for Cairn-owned spaces.

internal/spacestore: Space{Name, Owner, Members[]} persisted as one JSON object through internal/statestore (age-encrypted in the backend on s3, exactly like shares/holds). API: Create, Get, SetMember (write|read, owner always write / not demotable), RemoveMember (owner not removable), Delete, plus query helpers RoleFor and SpacesForUser for the scope integration (#214) and List for admin. Atomic write-then-commit via a clone (failed persist leaves the cache untouched). No IdP calls — works identically under local/oidc/ldap and any key custody.

Tests cover CRUD, role change, owner-demote/remove guards, bad name/role/user, delete-missing, SpacesForUser, and a persistence round-trip.

Not yet wired (that's #214 scope + #216 API); this package stands alone and compiles/tests on its own.

First code step of #211 (ADR 0001). A self-contained, IdP-free store for Cairn-owned spaces. `internal/spacestore`: `Space{Name, Owner, Members[]}` persisted as one JSON object through `internal/statestore` (age-encrypted in the backend on s3, exactly like shares/holds). API: `Create`, `Get`, `SetMember` (write|read, owner always write / not demotable), `RemoveMember` (owner not removable), `Delete`, plus query helpers `RoleFor` and `SpacesForUser` for the scope integration (#214) and `List` for admin. Atomic write-then-commit via a clone (failed persist leaves the cache untouched). No IdP calls — works identically under local/oidc/ldap and any key custody. Tests cover CRUD, role change, owner-demote/remove guards, bad name/role/user, delete-missing, `SpacesForUser`, and a persistence round-trip. Not yet wired (that's #214 scope + #216 API); this package stands alone and compiles/tests on its own.

Cordy added 2 commits

2026-08-13 16:13:07 +00:00