Repository navigation
[CLI/TUI] Add authorized system-covered project catalogue and CLI list #663
Description
Add a bounded GET /api/v1/projects catalogue and workstream project list for the existing system-wide Project Manager, Operator, Finance Authority, and Audit Authority roles that hold project.read. Return only project ID, name, status and an actor/query-bound opaque next cursor. Access Administrator alone and exact-project-only/contributor grants must not enumerate. Keep /actors/me/projects exact-grant membership unchanged. AUTH must freshly authorize and lock the covering system grant per page with audit provenance; PROJECTS owns paged identity projection. No guide details, management facts, task search, login, or TUI runtime. Prove real PostgreSQL isolation/revocation/concurrent grant custody and CLI text/JSON/error behavior. This is a backend contract prerequisite for the terminal workspace picker; no merge/release in this issue.
Activity
Abiorh001 commentedon Oct 26, 2026
Reconciliation: PR #665 is merged at 2e6cee0. Main exposes the system-covered GET /api/v1/projects catalogue and workstream project list; cli/README.md and docs/design/cli-terminal-experience.md document its narrow authority. The current read-only contributor TUI intentionally still uses exact-grant membership, not this administrative catalogue. Backend/explicit-CLI implementation is delivered; administrative TUI integration is separate remaining work. Leaving issue closure to the owner.