feat: complete SHD MCP plugin workflows and widget

2026-08-24 17:25:38 +03:00
parent 39fb5c02b7
commit 08cf3672a4
86 changed files with 1707 additions and 5 deletions
@@ -0,0 +1,26 @@
+---
+name: shd-organizations-acl
+description: Use when the user asks to inspect or change SHD organizations, members, invitations, roles, access audits or two-factor policies.
+---
+
+# SHD organizations and ACL
+
+See `references/organization-acl.md` for identity resolution and mutation
+boundaries.
+
+## Inspect
+
+- Resolve the canonical organization ID; never use a guessed name as a write
+  target.
+- Read members, invitations, audit entries and the current two-factor policy
+  before explaining access.
+- Report organization, user, role, invitation state and policy as separate
+  facts. A denied or incomplete list is not proof that a member is absent.
+
+## Change access
+
+Inviting, adding, updating or removing a member, changing a two-factor policy,
+or creating, archiving or restoring an organization requires explicit intent.
+Show the exact organization and user scope before the mutation. Preserve server
+authorization, conflict checks and audit readback; never broaden access to
+make a failed request succeed.