What problem does it solve?
Manage admin user accounts—creating users, updating profile metadata, resetting SCRAM password verifiers, and revoking sessions—without breaking the logical L2 storage structure or membership expectations.
Core Features & Use Cases
- Create users with canonical storage layout: Writes the user logical root, user module root, user.yaml metadata, sealed SCRAM verifier, and session verifier file.
- Update user profile metadata: Reads and updates user.yaml fields like full_name while keeping paths logical and consistent.
- Reset passwords and revoke sessions correctly: Generates a fresh verifier via password_generate, overwrites meta/password.json, and clears logins.json with {} to revoke sessions.
- Remove users and handle downstream memberships: Deletes the user root directory and, when needed, updates group configs so the user disappears from manager/member lists.
Quick Start
Create an admin-capable user by instructing the skill to create user account storage under L2/<username>/, initialize user.yaml with full_name, generate a sealed verifier for the chosen password, and write an empty logins.json to the user’s meta directory.