User Management

Automate user account creation by generating the canonical L2/<username>/ directory structure and initializing user.yaml, meta/password.json, and meta/logins.json files. This safely establishes user data and authentication verifiers for onboarding.

Revoke active sessions and reset passwords by overwriting the user's meta/logins.json with {} and generating sealed credential verifiers through password_generate to update meta/password.json.

Update user profile fields by editing user.yaml within the L2 directory using YAML parse and stringify helpers to modify fields like full_name, avoiding manual JSON construction or direct text manipulation.

Remove a user and clean up group membership by deleting the L2/<username>/ directory and editing L1 group.yaml files to remove the username from included_users and managing_users lists for complete deprovisioning.

You do not need to manually construct authentication verifiers. Use the password_generate function to create sealed credentials for meta/password.json during the user onboarding process.

Editing YAML via parse and stringify prevents configuration errors by ensuring structural integrity during user management. It avoids manual JSON or verifier construction, safely applying updates to canonical L2 directories.