User scopes

@if (page(); as p) {

Managing scopes for {{ p.user.displayName }} ({{ p.user.email ?? '—' }}, {{ p.user.oid }}). Every grant emits admin.scope_granted and every revoke emits admin.scope_revoked — scope-management is itself auditable per ADR-0013.

}

@if (loading()) { Loading… } @else if (error(); as msg) { {{ msg }} }

@if (page(); as p) {

Current scopes

@if (p.scopes.length === 0) {

No scopes granted to this user yet.

} @else {

@for (scope of p.scopes; track scope.id) { }

Scope	Source	Granted	Expires	Actions
`{{ formatScope(scope.kind, scope.value) }}`	{{ scope.source }}	{{ formatTimestamp(scope.createdAt) }}	{{ formatTimestamp(scope.expiresAt) }}

}

Grant a new scope

}