Org access control: members, roles, and per-user feature/agent access

ai-company-brain/AGENTS.md

@@ -1,7 +1,7 @@
 # AGENTS.md — Planning Folder Navigation Guide
 
 > **For AI agents:** Read this file first. It tells you what this project is, what has been built, and which file to read for each concern.
-> **Organisation:** Fracktal Works · **Project:** CommandCenter · **Last updated:** 2026-07-07
+> **Organisation:** Fracktal Works · **Project:** CommandCenter · **Last updated:** 2026-07-29
 
 ---
 
@@ -56,6 +56,7 @@ Operators interact via a thin **Control Plane** (Next.js browser UI) with chat Q
 | **Email app — multi-account client (Gmail/Outlook/IMAP) + AI assistant** | 🔄 In progress | M2.9 — `workbench/control_plane/src/app/email/`, gateway `routes/email/` (layered pkg), `apps/services/email_ingestion/`. Consolidated plan + roadmap: [`specs/email_app_master_plan.md`](specs/email_app_master_plan.md) |
 | **App Workshop / Custom Apps — chat-built small software deployed in-platform** | 🔄 Phase 0–3b + T2 built | RFC + mockups: `docs/app-workshop/`. Gateway `routes/apps/` (lifecycle/files/publish+conformance-scan/runtime incl. budgeted `ai/complete`, sharing+consent, manifest `actions`), migration `114_custom_apps.sql`, `agent-app-builder` + executor `allow_session_workspace` binding, workbench `/build/apps` (gallery · Workshop · run page · `window.cc` bridge), granted apps registered as orchestrator agent tools (`orchestrator/app_tools.py`), live per-app token tracking in `/observability`. **T2 (real React apps)** built: `agent-app-builder/build/build_t2.mjs` (esbuild against a shared, deploy-provisioned react/react-dom/esbuild vendor cache — zero per-app `npm install`), manifest `entry`/`tier` already-existing dynamic resolution now covers `dist/bundle.html`. **T3 (server-side backend compute) scoped, not built** — gated behind BO-7 (platform-wide sandbox hardening, still ✖/absent); RFC's already-decided T3 substrate is Deno subprocesses, not containers. Platform contract is binding (§4.0): CommandCenter is the only backbone |
 | **Task Manager app — GTD-philosophy client + `task-manager` agent (PM-agnostic: any tool via API or MCP)** | 🔄 capture/clarify live end-to-end | Frontend slices 1–2.5 + the capture/clarify **backend**: migration `48_task_manager_gtd.sql`, gateway `routes/tasks/` (20 endpoints), provider interface layer + **ClickUp connector** (multi-workspace `task_accounts`, encrypted tokens), `apps/skill-task-gtd/` + rewritten `apps/agent-task-manager/`, frontend wired live with mock fallback; **org-knowledge layer live** (`gtd_people` from agent-project-manager HR data → capability-aware delegation, §6.1). Resume: Slice 3 (Engage) · `/tasks/sync` pull. See [`specs/task_manager_app.md`](specs/task_manager_app.md) §9.1 |
+| **Org access control — multi-user members, roles, per-user access** | 🔄 Phase 1 built | `infra/postgres/128_org_access_control.sql`, `packages/acb_auth/` (permissions.py + access.py + `require_permission`), gateway `routes/admin/` + `/auth/me`, workbench `/settings/members` + `/settings/roles` + nav/route gating. Spec: [`specs/org_access_control.md`](specs/org_access_control.md). Deliberately NOT yet done: modules/teams, memory + credential scoping, entity-graph RLS |
 | `agent-sales` + `skill-zoho-ingest` | 🔲 Phase 2 | Phase 2 (WBS 2.2) |
 | `agent-triage` + `skill-gmail-capture` | 🔲 Phase 2 | Phase 2 (WBS 2.3) |
 | Meeting bot (Vexa + WhisperX) | 🔲 Phase 3 | Phase 3 (WBS 3.1) |
@@ -111,7 +112,8 @@ to it and to `competitive_hardening_2026-07.md` (CH-*) rather than re-describe t
 | [`task_manager_harness_2026-07.md`](specs/task_manager_harness_2026-07.md) | Task-manager × harness engineering (app-layer sibling) | 🔄 Tier 1 shipped (2026-07-03); Tier 2 planned |
 | [`llm_caching_memory.md`](specs/llm_caching_memory.md) | Prompt caching (ADR-008) + session memory | 🔄 caching **shipped & wired**; session-memory shipped but **inert by default** (→ BO-21); Phase 7 open |
 | [`mcp_plugin_integration.md`](specs/mcp_plugin_integration.md) | MCP servers vs Claude plugins vs REST | 🔄 MCP half **built** (`_inject_mcp_servers`); plugin store not started |
-| [`multi_user_organization_research.md`](specs/multi_user_organization_research.md) | Multi-user / org account research — identity, roles, tenancy | 🔲 research done, not implemented |
+| [`org_access_control.md`](specs/org_access_control.md) | **Org access control (implementation)** — members, roles, per-user allow/deny overrides, feature + agent gating, five enforcement seams. The buildable subset of the research doc below | 🔄 Phase 1 shipped (schema 128, `acb_auth` permission engine, `/admin` + `/auth/me`, nav/route/agent-run gating, Members + Roles UI) |
+| [`multi_user_organization_research.md`](specs/multi_user_organization_research.md) | Multi-user / org account research — identity, roles, tenancy, memory + credential scoping, SaaS multi-tenancy | 🔄 §4 identity/roles now implemented via `org_access_control.md`; §5 modules, §7 memory scoping, §8 credential scoping, §9 entity-graph RLS and §17 SaaS remain research |
 | [`chat_agent_framework_review_2026-07.md`](specs/chat_agent_framework_review_2026-07.md) | **Chat + agent framework review** — dual-runtime verdict (MAF framework, Copilot as coding engine), orchestration/memory/artifact/HITL/co-authoring gaps, prioritized plan | 🟢 review complete |
 | [`single_agent_chat_bug_audit_2026-07.md`](specs/single_agent_chat_bug_audit_2026-07.md) | **Single-agent chat bug audit** — past issues verified fixed; 7 confirmed live bugs (Tier-1 loop-trip crash, Copilot retry duplication, unbounded resumed-session context, relay truncation/ack holes) + fix plan | 🟢 audit complete |
 | [`generative_ui_2.md`](specs/generative_ui_2.md) | **Generative UI 2.0** — immersive HITL UI: surface(panel)/hitl(blocking) on emit_generative_ui, 11-template library (recipe/flight/train/form/optionPicker…), side-panel genUI tabs, scenario→element map | 🔄 Phase 1 shipped |