5 Commits

Author	SHA1	Message	Date
ChickenPige0n	b574ef871c	refactor(org): keep archived-team grants as dead rows ... Archiving a team no longer cascade-revokes its active TEAM->PROJECT grants and memberships. The archived flag alone makes the team principal unresolvable (permissions/principals.ts refuses archived teams), so the dead grant/membership rows confer no access. listProjectTeamAccess now filters archived teams out of the project view instead of relying on a revokedAt cascade, and the org-admin teams page confirm copy is updated. archiveTeam drops the revokedGrants count from its return shape. ADR-0019 / Spec.System.Organization: principal resolution, not grant mutation, is the access boundary for archived teams.	2026-07-14 21:17:20 +08:00
hongjr03	9e954790dc	feat: add deployable alpha silo	2026-07-11 00:25:45 +08:00
hongjr03	848f913597	feat: secure organization provider credentials	2026-07-10 22:04:43 +08:00
hongjr03	d730e51c3d	fix: enforce active organization boundary	2026-07-10 18:42:12 +08:00
hongjr03	683d5674d1	feat(hub): add org members, teams, and project team-access APIs ... Manage memberships with last-OWNER protection, team lifecycle (archive revokes TEAM grants), and TEAM→PROJECT access under org admin auth.	2026-07-10 00:55:34 +08:00