feat(authz): replace bespoke FGA with embedded OpenFGA ReBAC engine#625

Merged

lakhansamani merged 39 commits into

mainfrom

feat/fga-engine-spi

Jun 12, 2026

Commits on Jun 8, 2026

feat(authz): replace bespoke FGA with embedded OpenFGA ReBAC engine
lakhansamani
committed
docs(authz): OpenFGA migration plan, agentic-auth design, enterprise model
lakhansamani
committed
feat(authz): add _fga_list_users/_fga_expand and trust-gated subject on FGA checks
lakhansamani
committed
test(authz): close FGA coverage gaps
lakhansamani
committed
fix(authz): _fga_get_model returns model id; cover validate_jwt_token relations
lakhansamani
committed
refactor(authz): drop --authorization-engine flag; enable FGA via store config
lakhansamani
committed
refactor(authz): drop external-mode + dead old-engine flags; embed-only FGA
lakhansamani
committed
fix(dashboard): correct FGA "not enabled" message; polish empty states
lakhansamani
committed
feat(authz): FGA reuses the main database; --fga-store is now an override
lakhansamani
committed
test(authz): FGA disabled (and instance works) for unsupported DBs without store
lakhansamani
committed
feat(dashboard): visual authorization-model builder (no DSL needed)
lakhansamani
committed
feat(dashboard): guided 3-step FGA flow, worked examples, collapsible nav
lakhansamani
committed
refactor(dashboard): replace fragile model builder with react-arborist tree
lakhansamani
committed
feat(dashboard): simple example-driven model editor with a full example catalog
lakhansamani
committed
fix(dashboard): Authorization nav no longer looks disabled
lakhansamani
committed
feat(dashboard): FGA docs links, grant-pattern examples, accurate stepper
lakhansamani
committed
docs(dashboard): explain model versioning in the model editor
lakhansamani
committed
feat(fga): add guarded reset for the authorization model
lakhansamani
committed

Commits on Jun 9, 2026

Commits on Jun 10, 2026

Commits on Jun 11, 2026