coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Headless multi-application, multi-tenant user mangement engine.
135 commits 1 branch 0 tags 1.7 MiB
Find a file
tegwick 667ea694c2
Some checks are pending
CI Smoke / container-smoke (push) Waiting to run
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
Delegate tenant lifecycle to the tenant authority 
TEN-WP-0005 landed the authoritative metadata update and reversible
retirement contract, so USER-WP-0021-T01's deferred tenant operations are
now implementable without user-engine inventing lifecycle semantics.

TenantManagementPort gains read, update, retire, and reactivate. The HTTP
adapter echoes the record version as an If-Match ETag (never `*`), sends an
Idempotency-Key plus actor/reason/correlation_id, and surfaces
Idempotent-Replay. Authority failures map to redacted domain errors carrying
only the contract's stable error_code; its detail text never crosses the
boundary.

Platform operators get the matching API routes and a CSRF-protected browser
screen that reads the record before mutating it and hides the metadata form
for a retired tenant. Portal OpenAPI moves to 0.3.0 with TenantRecord,
UpdateTenant, and TenantLifecycleChange.

Full suite: 145 tests, 3 external-provider skips.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-16 01:28:02 +02:00
.claude/rules docs: workplan-first agent guidance prose (CUST-WP-0055 T04 batch 4) 2026-07-08 17:22:16 +02:00
.forgejo/workflows Add Forgejo CI smoke workflow (enablement template) 2026-07-08 12:38:49 +02:00
docs Expand portal onboarding and administration 2026-08-08 23:09:23 +02:00
migrations/postgres feat: add durable store conformance harness 2026-06-16 00:20:29 +02:00
openapi Delegate tenant lifecycle to the tenant authority 2026-08-16 01:28:02 +02:00
registry Draft capability entry (reuse-surface REUSE-WP-0017-T04, cohort 3) 2026-07-06 19:50:54 +02:00
src/user_engine Delegate tenant lifecycle to the tenant authority 2026-08-16 01:28:02 +02:00
tests Delegate tenant lifecycle to the tenant authority 2026-08-16 01:28:02 +02:00
wiki Established architecture blueprint 2026-05-22 19:05:13 +02:00
workplans Delegate tenant lifecycle to the tenant authority 2026-08-16 01:28:02 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-08-10 16:00:31 +02:00
.gitignore Initial commit 2026-05-22 15:54:46 +00:00
.repo-classification.yaml Add .repo-classification.yaml (CUST-WP-0050 T11 agent first-pass) 2026-06-22 17:47:43 +02:00
AGENTS.md Regenerate agent instructions from state-hub templates (CUST-WP-0055 T01) 2026-07-08 14:50:38 +02:00
CLAUDE.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
Containerfile Add KeyCape PKCE browser sessions 2026-07-28 00:06:21 +02:00
INTENT.md Align user-engine intent with identity canon 2026-06-05 15:36:47 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-30 01:12:41 +02:00
Makefile Add integrated user-engine scenarios 2026-05-22 21:39:10 +02:00
pyproject.toml Add KeyCape PKCE browser sessions 2026-07-28 00:06:21 +02:00
README.md test: add registration security conformance 2026-06-15 23:59:45 +02:00
SCOPE.md test: add registration security conformance 2026-06-15 23:59:45 +02:00
WORK-RECORDS.md Refresh work record index 2026-08-10 20:01:12 +02:00

README.md

Headless multi-application, multi-tenant user management engine.

Development

make test

See docs/development.md, docs/configuration.md, docs/contracts.md, docs/canon-mapping.md, docs/canon-interface-card.yaml, docs/evidence-gap-examples.md, docs/family-dataspace-onboarding.md, docs/netkingdom-registration-onboarding-vision.md, docs/postgres-durable-store-consumer-requirements.md, docs/examples.md, docs/registration-identity-and-factor-model.md, docs/prepared-accounts-and-entitlement-claims.md, docs/hats-realms-services-assets-access-profiles.md, docs/onboarding-journeys-and-welcome-protocols.md, docs/registration-and-access-management-ui.md, docs/scenarios.md, docs/registration-scenario-and-security-conformance.md, docs/operability.md, docs/release.md, docs/ui-contracts.md, docs/identity-domain-naming-decision.md, and docs/final-assessment.md for implementation boundaries, contracts, canon mappings, examples, and release readiness.