#533 Wave 3: Users & access write half — local accounts + directory admins (v0.6.196) #547

Merged

Cordy merged 4 commits from fix-533c into main

2026-09-14 16:12:07 +00:00

Cordy commented

2026-09-14 16:10:59 +00:00

Owner

The Access tab grows its write half per the approved mockup:

Local accounts section: 50-cap meter, per-account rows (role chip, created, last sign-in, "you"), actions Reset password / Make–Remove admin / Remove; add dialog with a generated show-once password (execCommand copy on the visible input — the #136 http-origin lesson), reset dialog likewise. Empty state for a fresh instance. Server guards (last admin, self) surface through the error banner.
Directory accounts section (IdP instances): the seats seen-list minus local accounts, with Make/Remove admin via directory-admins — no IdP admin client needed. The note says plainly that a group-granted role stays until the person leaves the group (union semantics).
Truthful lead: the old "Cairn does not store passwords" line is now false, so the page lead and body describe both kinds of account.
i18n ×4 (~30 new keys), fence gate + node checks green, go build green. CHANGELOG v0.6.196.

The Access tab grows its write half per the approved mockup: - **Local accounts section**: 50-cap meter, per-account rows (role chip, created, last sign-in, "you"), actions Reset password / Make–Remove admin / Remove; add dialog with a generated show-once password (execCommand copy on the visible input — the #136 http-origin lesson), reset dialog likewise. Empty state for a fresh instance. Server guards (last admin, self) surface through the error banner. - **Directory accounts section** (IdP instances): the seats seen-list minus local accounts, with Make/Remove admin via `directory-admins` — no IdP admin client needed. The note says plainly that a group-granted role stays until the person leaves the group (union semantics). - **Truthful lead**: the old "Cairn does not store passwords" line is now false, so the page lead and body describe both kinds of account. - i18n ×4 (~30 new keys), fence gate + node checks green, `go build` green. CHANGELOG v0.6.196.

Cordy added 4 commits

2026-09-14 16:11:00 +00:00

scout: loadUsers tail, i18n anchor, dialog + helper patterns (never commits) e8c8b99496

one-shot: #533c - Access tab local accounts + directory admins UI (v0.6.196) ec7e8ecb1f

one-shot: #533c finisher - dot-aware counts, gates, ship 18ae7ebda2

feat(#533 ): Users & access write half - local accounts + directory admins

ci / test-and-build (pull_request) Successful in 55s

Details

669f5a7101

Access tab per the approved mockup: local-accounts section with the
50-cap meter, add dialog (generated show-once password, execCommand
copy per the #136 http-origin lesson), reset dialog, promote/demote
and remove with server-guard errors surfaced; directory-accounts
section (seats seen-list) granting/removing the runtime admin role;
truthful page lead now that Cairn stores local passwords. i18n x4.
CHANGELOG v0.6.196.

Cordy scheduled this pull request to auto merge when all checks succeed

2026-09-14 16:11:06 +00:00