#550: app-owned groups + Accounts/Groups tabs under Users & access (v0.6.199–200)

Cordy commented

2026-09-14 18:59:24 +00:00

Owner

Implements #550 as approved (mockup admin-accounts-groups-mockup.html + review decisions).

Backend (v0.6.199, TDD red→green): auth.GroupStore at /data/.cairn/groups.json (statestore-bound, internal ids, case-insensitive single namespace, idempotent membership); WithAppGroups merges membership into User.Groups under the admin flag so app groups work as admin groups and peering allow-list entries; GroupsAPI under /api/v1/admin/groups (CRUD, bulk member add with per-name reporting, directory listing via the IdP admin client with known-names fallback, member drill-in); peering group resolution consults app groups first, then the IdP; spaces.Manager.ListGroups; five new audit verbs in the users group; collision with a known directory name is refused with 409 (decision 1).

Frontend (v0.6.200): Users & access becomes Access · Accounts · Groups · Seats. Access slims to identity wiring and counters — Administrators section removed as redundant (decision 4). Accounts hosts both account lists with one filter (name substring, the word "admin", app-group names) and a paged directory list. Groups: app-owned CRUD with chip member editing and reference-aware delete confirm, beside the read-only directory view with the honest no-client degradation. i18n ×4; #389 fence gate green on both frontend commits.

Full go test ./... green; red suite witnessed on the runner before implementation.

Implements #550 as approved (mockup `admin-accounts-groups-mockup.html` + review decisions). **Backend (v0.6.199, TDD red→green):** `auth.GroupStore` at `/data/.cairn/groups.json` (statestore-bound, internal ids, case-insensitive single namespace, idempotent membership); `WithAppGroups` merges membership into `User.Groups` under the admin flag so app groups work as admin groups and peering allow-list entries; `GroupsAPI` under `/api/v1/admin/groups` (CRUD, bulk member add with per-name reporting, directory listing via the IdP admin client with known-names fallback, member drill-in); peering group resolution consults app groups first, then the IdP; `spaces.Manager.ListGroups`; five new audit verbs in the `users` group; collision with a known directory name is refused with 409 (decision 1). **Frontend (v0.6.200):** Users & access becomes Access · Accounts · Groups · Seats. Access slims to identity wiring and counters — Administrators section removed as redundant (decision 4). Accounts hosts both account lists with one filter (name substring, the word "admin", app-group names) and a paged directory list. Groups: app-owned CRUD with chip member editing and reference-aware delete confirm, beside the read-only directory view with the honest no-client degradation. i18n ×4; #389 fence gate green on both frontend commits. Full `go test ./...` green; red suite witnessed on the runner before implementation.

Cordy added 21 commits

2026-09-14 18:59:25 +00:00

scout: #550 - group reference points recon e7fa514e69

scout: #550b - exact splice anchors d2cb357729

one-shot: #550 red - failing tests for GroupStore, WithAppGroups, groups admin API c5d707d58d

test(#550 ): failing tests - GroupStore CRUD/persistence, WithAppGroups merge, groups admin API 086fd6bc0f

Red phase. Pins: OpenGroupStore with internal ids and case-insensitive
name uniqueness, ErrGroupExists/ErrNoGroup, idempotent AddMember,
GroupsOf/MembersOf, WithAppGroups dedup merge into User.Groups, and
the GroupsAPI handler surface (create/list/rename/delete/members with
audit verbs group-create/-rename/-remove/-member-add/-member-remove,
single-namespace 409s per approved decision 1).

one-shot: #550 green - GroupStore, WithAppGroups, GroupsAPI, wiring (v0.6.199) a893318c9e

scout: #550c - peerReg scope + apiH.LocalUsers site d3b0e311fc

one-shot: #550 green rev2 - corrected wiring (peerReg scope, clean GroupsAPI struct) 77d1f8c604

one-shot: #550 green finisher - verify + push from the applied workspace 93e9333b66

one-shot: #550 finisher rev2 - rebase workspace onto moved branch before push 69bf9c08fc

feat(#550 ): app-owned groups - store, auth merge, admin API, wiring (v0.6.199)

release / image (push) Successful in 24s

Details

696420cd39

GroupStore at /data/.cairn/groups.json (statestore-bound, internal ids,
case-insensitive single namespace, idempotent membership). WithAppGroups
merges membership into User.Groups under the admin flag, so app groups
work as admin groups and peering allow-list entries. GroupsAPI serves
/api/v1/admin/groups CRUD + bulk member add with per-name reporting,
plus a read-only directory-group listing (IdP admin client when
configured, known-names fallback otherwise) and the dir member
drill-in. Peering group resolution consults app groups first, then the
IdP. Five new audit verbs in the users group. Green on the red suite
from the previous commit.

scout: #550d - users topic frontend internals bb16a694d0

scout: #550e - users topic frontend internals (pipe-safe) 0f07d37bb9

scout: #550f - slot markup + setAdminTab beb7bdb511

scout: #550g - setAdminTab body 10690-10812 b05c4687c8

one-shot: #550 wave 2a - Accounts tab split, Access slimmed, filter + paging

ts550c-acc.yml / one-shot: #550 wave 2a - Accounts tab split, Access slimmed, filter + paging (push) Failing after 0s

Details

ed4201464e

one-shot: #550 wave 2a rev2 - YAML-safe impl block

ts550c-acc.yml / one-shot: #550 wave 2a rev2 - YAML-safe impl block (push) Failing after 0s

Details

736ff11772

feat(#550 ): Accounts tab - people lists move off Access, filter + paging 921cfc9b95

Users & access grows an Accounts tab: the local-accounts and
directory-accounts sections move there from Access, which slims to
identity wiring and counters (the Administrators section is removed
as redundant - approved in the mockup review). One filter covers both
sections and matches name substrings, the word 'admin', and app-group
names; rows show their app groups; the directory section pages 25 at
a time instead of rendering everything. #389 fence gate green.

one-shot: #550 wave 2b - Groups tab, dialogs, i18n, CHANGELOG v0.6.200 110944433b

one-shot: #550 wave 2b rev2 - CHANGELOG edit targets its own file afab56be78

one-shot: #550 wave 2b rev3 - write src to disk; drop dead lines d760c271ca

feat(#550 ): Groups tab - app-owned CRUD beside read-only directory groups (v0.6.200)

ci / test-and-build (pull_request) Successful in 54s

Details

cc4bc60fc9

Fourth tab under Users & access. App-owned groups: create/rename/delete
dialogs, chip-style member editing with comma-separated bulk add and
per-name reporting, reference counts (peering lists, admin group) on
every row and in the delete confirm. Directory groups: read-only, live
listing through the IdP admin client when configured, honest
known-names fallback with an explanatory note otherwise, member
drill-in per group. i18n x4, #389 fence gate green, CHANGELOG
v0.6.200.

Cordy scheduled this pull request to auto merge when all checks succeed

2026-09-14 18:59:31 +00:00

Cordy merged commit 9eed140cb1 into main

2026-09-14 19:00:30 +00:00

Cordy referenced this pull request from a commit

2026-09-14 19:00:32 +00:00

Merge pull request '#550: app-owned groups + Accounts/Groups tabs under Users & access (v0.6.199–200)' (#551) from feat-550 into main

Cordy deleted branch feat-550

2026-09-14 19:00:33 +00:00

Cordy referenced this pull request

2026-09-14 19:11:22 +00:00

Accounts & Groups tabs under Users & access — app-owned groups alongside directory groups #550

Rows
Columns

#550: app-owned groups + Accounts/Groups tabs under Users & access (v0.6.199–200) #551