docs: full alignment run for v0.6.180–201 — local accounts, groups, custody, phone #554

Merged

Cordy merged 5 commits from docs-550 into main

2026-09-14 22:45:42 +00:00

Cordy commented

2026-09-14 22:44:35 +00:00

Owner

Docs-only. Inventory found the handbook current through v0.6.178 with everything since undocumented; this run brings every surface in line.

New pages: local-accounts.md — running without an identity provider (first-run wizard + token, Accounts-tab management, 50-cap, break-glass auth.users admins, #310 env admin, where the hashes live under statestore) — Manuel's request from #533. groups.md — app-owned groups beside the directory's: one namespace with refusal on collision, where each kind works (peering allow-lists without any IdP client, admin groups, filters), internal-id rename and fail-closed delete semantics, audit verbs.

Updated: users-access.md (four-tab layout, intro no longer claims "no accounts here to create", admins-list rows replaced by the Accounts-tab pointer, failing-client copy, three-way "changing who is an administrator"); peering.md group-receivers section (app groups resolve receiver-side without the client); index.md pages table (two new rows, users-access row said "Access + Seats tabs"); README (Auth modes bullet rewritten, new Accounts & groups feature bullet); ARCHITECTURE (§5.1 local as a real deployment target, new §5.5 app-owned groups with the provider-chain order); encryption.md (+ #528 custody token lifecycle); file-browser.md (+ #389 "On the phone"). Also removes the scout-docs one-shot that rode the v0.6.201 merge onto main.

Docs-only. Inventory found the handbook current through v0.6.178 with everything since undocumented; this run brings every surface in line. **New pages:** `local-accounts.md` — running without an identity provider (first-run wizard + token, Accounts-tab management, 50-cap, break-glass `auth.users` admins, #310 env admin, where the hashes live under statestore) — Manuel's request from #533. `groups.md` — app-owned groups beside the directory's: one namespace with refusal on collision, where each kind works (peering allow-lists without any IdP client, admin groups, filters), internal-id rename and fail-closed delete semantics, audit verbs. **Updated:** `users-access.md` (four-tab layout, intro no longer claims "no accounts here to create", admins-list rows replaced by the Accounts-tab pointer, failing-client copy, three-way "changing who is an administrator"); `peering.md` group-receivers section (app groups resolve receiver-side without the client); `index.md` pages table (two new rows, users-access row said "Access + Seats tabs"); README (`Auth modes` bullet rewritten, new `Accounts & groups` feature bullet); ARCHITECTURE (§5.1 local as a real deployment target, new §5.5 app-owned groups with the provider-chain order); `encryption.md` (+ #528 custody token lifecycle); `file-browser.md` (+ #389 "On the phone"). Also removes the scout-docs one-shot that rode the v0.6.201 merge onto main.

Cordy added 5 commits

2026-09-14 22:44:36 +00:00

one-shot: docs run - align all surfaces with v0.6.180-201 d6fbe1b5bd

one-shot: docs run rev2 - fixed quoting in two splices 7b321c5250

one-shot: docs finisher - index.md flexible insert + push d044e4fb50

one-shot: docs finisher rev2 - table rows in index, true counts c2cf0cdf4f

docs: align all surfaces with v0.6.180-201 (#533/#550 accounts+groups, #528 custody, #389 phone)

ci / test-and-build (pull_request) Successful in 56s

Details

4250c10735

Two new handbook pages: local-accounts.md (running without an IdP -
wizard, dashboard accounts, 50 cap, break-glass config admins,
Manuel's request from #533) and groups.md (app-owned beside
directory groups, one namespace, rename/delete semantics, peering
interplay). users-access.md rewritten for the four-tab layout and
runtime admin grants; peering.md group-receivers section updated for
app groups; index.md pages table, README (auth modes + new
accounts/groups bullet) and ARCHITECTURE (5.1 local deployment
target, new 5.5) brought in line; encryption.md gains the #528
custody token lifecycle; file-browser.md gains the #389 phone
section. Also removes the scout-docs one-shot that rode the
v0.6.201 merge.

Cordy scheduled this pull request to auto merge when all checks succeed

2026-09-14 22:44:41 +00:00