feat: DB-backed user management, admin secrets provisioning, and multi-tenant isolation - #1626

Merged

ilblackdragon merged 64 commits into

feat/db-user-management

Mar 28, 2026

Commits on Mar 24, 2026

feat: complete multi-tenant isolation — per-user budgets, model selection, heartbeat cycling

ilblackdragon
and
claude
committed
9d7cdc0
Merge remote-tracking branch 'origin/staging' into feat/multi-tenant-isolation-phases-2-4
ilblackdragon
committed
8db3638
fix: use selected_model setting key to match /model command persistence

ilblackdragon
and
claude
committed
af5daca
fix: heartbeat hygiene, /model multi-tenant guard, RigAdapter model override

ilblackdragon
and
claude
committed
9ff4af5
fix: address PR review — cost model attribution, heartbeat concurrency, pruning

ilblackdragon
and
claude
committed
6dfe246
fix: /status ownership, model persistence scoping, heartbeat robustness

ilblackdragon
and
claude
committed
0d168fb
Merge remote-tracking branch 'origin/staging' into feat/multi-tenant-isolation-phases-2-4
ilblackdragon
committed
3c42e68
fix: cost pricing, fire_manual workspace, heartbeat concurrency cap

ilblackdragon
and
claude
committed
11646d2
feat: user-scoped webhook endpoint for multi-tenant isolation

ilblackdragon
and
claude
committed
746735c
feat(db): add UserStore trait with users, api_tokens, invitations tables

ilblackdragon
and
claude
committed
80cee7d
feat(web): DB-backed auth, user/token/invitation API handlers

ilblackdragon
and
claude
committed
27c43e1
feat: startup env-var user migration + UserStore integration tests

ilblackdragon
and
claude
committed
240cee8

Commits on Mar 25, 2026

refactor: remove GATEWAY_USER_TOKENS, fix review feedback

ilblackdragon
and
claude
committed
aa35c2e
feat: add role-based access control (admin/member)

ilblackdragon
and
claude
committed
29e9aeb
feat(web): add Users admin tab to web UI

ilblackdragon
and
claude
committed
b469a1b
fix: move Users to Settings subtab, bootstrap admin user on first run

ilblackdragon
and
claude
committed
18b8589
fix: user creation shows token, + Token works, no password save popup

ilblackdragon
and
claude
committed
8788627
fix: use event delegation for user action buttons (CSP compliance)

ilblackdragon
and
claude
committed
420245a
fix: add i18n for Users subtab, show login link on user creation

ilblackdragon
and
claude
committed
df42a38
fix: token hash mismatch — hash hex string, not raw bytes

ilblackdragon
and
claude
committed
34883aa
refactor: remove invitation system

ilblackdragon
and
claude
committed
e83249d
feat: user deletion, self-service profile, per-user job limits, usage API

ilblackdragon
and
claude
committed
ffe872f
feat: add TenantCtx for compile-time tenant isolation

ilblackdragon
and
claude
committed
8f1e0df
Merge remote-tracking branch 'origin/staging' into feat/multi-tenant-isolation-phases-2-4
ilblackdragon
committed
3a945a8
Merge remote-tracking branch 'origin/feat/multi-tenant-isolation-phases-2-4' into feat/db-user-management
ilblackdragon
committed
1c9a9bd

Commits on Mar 26, 2026

fix: address PR #1626 review feedback — bounded LRU cache, admin auth, FK cleanup

ilblackdragon
and
claude
committed
4006ba2
fix: update CA certificates in runtime Docker image

ilblackdragon
and
claude
committed
48d8b16
Merge remote-tracking branch 'origin/staging' into feat/db-user-management
ilblackdragon
committed
5866df1
Merge branch 'feat/db-user-management' of github.com:nearai/ironclaw into feat/db-user-management
ilblackdragon
committed
abe78f6
fix: resolve CI failures — formatting, no-panics check

ilblackdragon
and
claude
committed
aa27c72
fix: switch PostgreSQL TLS from rustls to native-tls

ilblackdragon
and
claude
committed
ea2ef15
Adding user management api
ilblackdragon
committed
964f900
feat: admin secrets provisioning API + API documentation

ilblackdragon
and
claude
committed
5692fcd
fix: add CatchPanicLayer to capture handler panics

ilblackdragon
and
claude
committed
55c8ca4
fix: address second-round review — transactional delete, overflow, error logging

ilblackdragon
and
claude
committed
af23210
fix: revert to rustls with webpki-roots fallback for PostgreSQL TLS

ilblackdragon
and
claude
committed
d20e3e5
chore: update Cargo.lock for rustls + webpki-roots

ilblackdragon
and
claude
committed
c1dfeb3
debug: add /api/debug/db-write endpoint to diagnose user insert failure

ilblackdragon
and
claude
committed
4a75c11
perf: use cargo-chef in Dockerfile for dependency caching

ilblackdragon
and
claude
committed
4bba26e
debug: add tracing to users_create_handler

ilblackdragon
and
claude
committed
27c6d1d
fix: guard created_by FK in user creation handler

ilblackdragon
and
claude
committed
6cc77fe
refactor: collapse GATEWAY_USER_ID into IRONCLAW_OWNER_ID

ilblackdragon
and
claude
committed
82a9df1
fix: hide Users tab for non-admins, remove auth hint text

ilblackdragon
and
claude
committed
e5e3335
fix: address review feedback (auth 503, token expiry, CORS PATCH)

ilblackdragon
and
claude
committed
8eb32c7
fix: harden multi-tenant isolation — review fixes from #1614

ilblackdragon
and
claude
committed
42bb52e
Merge remote-tracking branch 'origin/staging' into feat/db-user-management
ilblackdragon
committed
e808fba
feat: add Jobs, Cost, Last Active columns to admin Users table

ilblackdragon
and
claude
committed
d9ad7a9
fix: address review comments and CI formatting failures

ilblackdragon
and
claude
committed
646b63e
fix: address remaining review comments (round 2)

ilblackdragon
and
claude
committed
df40b22
feat: i18n for Users tab, atomic user+token creation, transactional delete_user

ilblackdragon
and
claude
committed
f6e0b2f
fix: revert V14 migration to match deployed checksum [skip-regression-check]

ilblackdragon
and
claude
committed
b3e0888
fix: bootstrap onboarding flow for multi-tenant users

ilblackdragon
and
claude
committed
502de8a

Commits on Mar 27, 2026