Changeset 0.16.0 (#74)

server/main.go

@@ -344,6 +344,10 @@ func main() {
 			teams := handlers.NewTeamHandler(keyResolver)
 			protected.GET("/teams/mine", teams.MyTeams)
 
+			// Groups (user: my groups — v0.16.0)
+			groupH := handlers.NewGroupHandler(stores)
+			protected.GET("/groups/mine", groupH.MyGroups)
+
 			// Team admin self-service
 			teamScoped := protected.Group("/teams/:teamId")
 			teamScoped.Use(middleware.RequireTeamAdmin())
@@ -354,6 +358,9 @@ func main() {
 				teamScoped.DELETE("/members/:memberId", teams.RemoveMember)
 				teamScoped.GET("/models", teams.ListAvailableModels)
 
+				// Team groups (team admins manage team-scoped groups)
+				teamScoped.GET("/groups", groupH.ListTeamGroups)
+
 				// Team providers
 				teamScoped.GET("/providers", teams.ListTeamProviders)
 				teamScoped.POST("/providers", teams.CreateTeamProvider)
@@ -455,6 +462,22 @@ func main() {
 			admin.GET("/audit", adm.ListAuditLog)
 			admin.GET("/audit/actions", adm.ListAuditActions)
 
+			// Groups (admin — v0.16.0)
+			groupAdm := handlers.NewGroupHandler(stores)
+			admin.GET("/groups", groupAdm.ListGroups)
+			admin.POST("/groups", groupAdm.CreateGroup)
+			admin.GET("/groups/:id", groupAdm.GetGroup)
+			admin.PUT("/groups/:id", groupAdm.UpdateGroup)
+			admin.DELETE("/groups/:id", groupAdm.DeleteGroup)
+			admin.GET("/groups/:id/members", groupAdm.ListMembers)
+			admin.POST("/groups/:id/members", groupAdm.AddMember)
+			admin.DELETE("/groups/:id/members/:userId", groupAdm.RemoveMember)
+
+			// Resource Grants (admin — v0.16.0)
+			admin.GET("/grants/:type/:id", groupAdm.GetResourceGrant)
+			admin.PUT("/grants/:type/:id", groupAdm.SetResourceGrant)
+			admin.DELETE("/grants/:type/:id", groupAdm.DeleteResourceGrant)
+
 			// Model Roles
 			rolesH := handlers.NewRolesHandler(stores, roleResolver)
 			admin.GET("/roles", rolesH.ListRoles)