Seat lifecycle: 90-day window, Seats tab, audited manual release (#428) #429

Merged

Cordy merged 10 commits from seat-lifecycle-428 into main

2026-09-05 03:54:35 +00:00

Cordy commented

2026-09-05 03:54:21 +00:00

Owner

Implements #428 (issue stays open for live verification and the parked check-in payload question).

A seat is a person who signed in within the last 90 days. Admit refreshes last-seen (throttled to one write per day); windowed counting feeds Status.SeatsUsed, the admission cap, and both check-in paths. Legacy first-seen timestamps count as last-seen (self-healing migration).
Seats() lists current holders newest-first; ReleaseSeat() forgets a holder immediately. New admin endpoints GET /api/v1/license/seats and POST /api/v1/license/seats/release; a release lands in the audit log as seat-release (actor = admin, path = freed holder).
Users & access gains tabs (Access | Seats) per the approved mockup: stat header with the 90-day sentence, per-holder rows with Active/Idle/Aging-out chips and last-seen, kebab release with confirm dialog, audit footer. Deep link #admin/users/seats works.
Licence page: licSeatsFoot restates the 90-day definition ×4 locales, plus a "manage seats in Users & access" link to the Seats tab.
Docs: CHANGELOG v0.6.129, licensing-faq seat definition updated.

TDD evidence in the tdd-428 run log: RED A (window assertions), RED B (api compile-red), RED C (Seats/ReleaseSeat compile-red) all watched failing before their implementations landed in the same run; full suite green after.

Implements #428 (issue stays open for live verification and the parked check-in payload question). - A seat is a person who signed in within the last 90 days. `Admit` refreshes last-seen (throttled to one write per day); windowed counting feeds `Status.SeatsUsed`, the admission cap, and both check-in paths. Legacy first-seen timestamps count as last-seen (self-healing migration). - `Seats()` lists current holders newest-first; `ReleaseSeat()` forgets a holder immediately. New admin endpoints `GET /api/v1/license/seats` and `POST /api/v1/license/seats/release`; a release lands in the audit log as `seat-release` (actor = admin, path = freed holder). - Users & access gains tabs (Access | Seats) per the approved mockup: stat header with the 90-day sentence, per-holder rows with Active/Idle/Aging-out chips and last-seen, kebab release with confirm dialog, audit footer. Deep link `#admin/users/seats` works. - Licence page: `licSeatsFoot` restates the 90-day definition ×4 locales, plus a "manage seats in Users & access" link to the Seats tab. - Docs: CHANGELOG v0.6.129, licensing-faq seat definition updated. TDD evidence in the tdd-428 run log: RED A (window assertions), RED B (api compile-red), RED C (Seats/ReleaseSeat compile-red) all watched failing before their implementations landed in the same run; full suite green after.

Cordy added 10 commits

2026-09-05 03:54:22 +00:00

#428 red: seat window tests (watched failing before implementation) 77b30e3c4a

#428 red: seats endpoint + audited release tests (compile-red before implementation) 892251e389

#428 one-shot: witnessed red -> implementation -> green (self-removing) 45839dd763

#428 one-shot: fix PY4 quoting (plain apostrophes need triple-quoted strings) + post-condition counts 1605c3a976

#428 one-shot: use /usr/local/go (1.22.5 tarball) + GOTOOLCHAIN=auto — apk go is 1.21 with GOTOOLCHAIN=local 228ddb7eea

one-shot: correct tdd-428 adm-seats guard count (self-removing) 59391ab0d5

tdd-428: adm-seats guard count is 2 (id attribute contains the quoted substring) 65b5215516

one-shot: scope tdd-428 gofmt gate to touched packages (gofmt 1.22 vs repo's 1.25 formatting) 81737f99b8

tdd-428: gofmt gate covers only touched packages (runner gofmt is 1.22, repo formatted with 1.25) 3c93c2ae3f

Seat lifecycle (#428 ): 90-day window, last-seen refresh, Seats tab, audited release

ci / test-and-build (pull_request) Successful in 42s

Details

63c63f7a83

A seat is a person who signed in within the last 90 days. Sign-ins refresh
last-seen (one write per day); aged-out seats free themselves; admins can
release a seat immediately (audit action seat-release). Users & access
gains Access|Seats tabs; the licence meter footer states the window and
links to the Seats tab. Red evidence for window aging, refresh, throttle,
release and the audit event is in this run's log, watched before the
implementation landed.