permission_forge 0.14.1

data/app/views/permission_forge/people/_effective_tab.html.erb

@@ -0,0 +1,118 @@
+<% first_name = pf_person(@person).first_name %>
+<% flags = PermissionForge::Admin::EffectiveAccess::CRUD %>
+<div class="pf-stack pf-stack--loose">
+  <div class="pf-row pf-row--between">
+    <p class="pf-text-2"><%= t('.intro', name: first_name) %></p>
+    <div class="pf-legend" aria-label="<%= t('.legend') %>">
+      <span><b>✓</b> <%= t('permission_forge.ui.states.granted') %></span>
+      <span><b>⊘</b> <%= t('.legend_muted') %></span>
+      <span><b>–</b> <%= t('.legend_none') %></span>
+      <span><b>••</b> <%= t('permission_forge.ui.levels.masked') %></span>
+    </div>
+  </div>
+
+  <% if @conditional_sets.any? %>
+    <div class="pf-banner">
+      <span class="pf-banner__glyph" aria-hidden="true">◷</span>
+      <div class="pf-banner__body">
+        <span><%= t('.conditional', sets: @conditional_sets.map(&:name).to_sentence) %></span>
+      </div>
+    </div>
+  <% end %>
+
+  <% if @effective.empty? %>
+    <div class="pf-card"><p class="pf-empty"><%= t('permission_forge.people.access_tab.empty', name: first_name) %></p></div>
+  <% else %>
+    <div class="pf-split">
+      <div class="pf-split__main pf-card pf-scroll-x">
+        <div class="pf-effective" role="table" aria-label="<%= t('.grid_label') %>">
+          <div class="pf-matrix__head" role="row">
+            <span role="columnheader"><%= t('permission_forge.ui.resource') %></span>
+            <% flags.each do |flag| %><span role="columnheader"><%= t("permission_forge.ui.flags_short.#{flag}") %></span><% end %>
+            <span role="columnheader"><%= t('permission_forge.ui.records') %></span>
+          </div>
+          <% @effective.each do |res| %>
+            <% open = @open.include?(res.name) || @why.start_with?("#{res.name}.field.", "#{res.name}.action.") %>
+            <% plural = pf_resource_plural(res.name) %>
+            <% region = "pf-eff-#{res.name.parameterize}" %>
+            <div class="pf-effective__group">
+              <div class="pf-matrix__row" role="row">
+                <span role="rowheader">
+                  <a href="<%= permission_forge.person_path(@person, tab: 'effective', open: (open ? @open - [res.name] : @open + [res.name])) %>"
+                     class="pf-row pf-row--nowrap pf-row--top" data-pf-toggle="<%= region %>" aria-expanded="<%= open %>" aria-controls="<%= region %>">
+                    <span class="pf-disclosure<%= ' pf-disclosure--open' if open %>" aria-hidden="true">▸</span>
+                    <span class="pf-stack pf-stack--tight">
+                      <span class="pf-fw-600 pf-text-2"><%= pf_resource_label(res.name) %></span>
+                      <span class="pf-fs-12 pf-text-3"><%= t('.fields_visible', visible: res.visible_field_count, total: res.fields.size) %></span>
+                    </span>
+                  </a>
+                </span>
+                <% flags.each do |flag| %>
+                  <% outcome = res.op(flag) %>
+                  <% key = "#{res.name}.#{flag}" %>
+                  <span role="cell">
+                    <%= pf_state_cell(outcome.state, aria: "#{t("permission_forge.ui.flags_short.#{flag}")} #{plural}",
+                                      href: permission_forge.person_path(@person, tab: 'effective', why: key, open: @open),
+                                      why: key, current: @why == key) %>
+                  </span>
+                <% end %>
+                <span role="cell">
+                  <% key = "#{res.name}.records" %>
+                  <%= link_to permission_forge.person_path(@person, tab: 'effective', why: key, open: @open), class: 'pf-state pf-state--records',
+                              data: { pf_why: key }, 'aria-current': (@why == key ? 'true' : nil) do %>
+                    <% if res.records == :all %><span class="pf-text-2"><%= t('permission_forge.ui.view_all') %></span>
+                    <% elsif res.records == :rules %>
+                      <span class="pf-text-2"><%= t('permission_forge.ui.rules_count', count: res.rules.size) %></span>
+                      <% if res.rules.first %><span class="pf-fs-12 pf-text-3 pf-ellipsis"><%= pf_rule_summary(res.rules.first.rule, res.name) %></span><% end %>
+                    <% else %><span>–</span>
+                    <% end %>
+                  <% end %>
+                </span>
+              </div>
+              <div id="<%= region %>" class="pf-effective__detail" <%= 'hidden' unless open %>>
+                <% res.fields.each do |field| %>
+                  <% key = "#{res.name}.field.#{field.name}" %>
+                  <%= link_to permission_forge.person_path(@person, tab: 'effective', why: key, open: (@open + [res.name]).uniq),
+                              class: 'pf-effective__field', data: { pf_why: key }, 'aria-current': (@why == key ? 'true' : nil) do %>
+                    <span class="pf-row pf-row--tight pf-grow">
+                      <span><%= res.name.safe_constantize&.human_attribute_name(field.name) || field.name.humanize %></span>
+                      <code class="pf-mono-key"><%= field.name %></code>
+                      <% if field.virtual %><%= pf_badge(t('permission_forge.ui.badges.virtual')) %><% end %>
+                    </span>
+                    <%= pf_level_badge(field.blocked_by.any? && field.level == 'hidden' ? 'muted' : field.level,
+                                       strategy: field.level == 'masked' ? field.mask_strategy : nil,
+                                       label: (t('.hidden_by_muting') if field.blocked_by.any? && field.level == 'hidden')) %>
+                    <span class="pf-fs-12 <%= field.blocked_by.any? ? 'pf-text-block' : (field.unconfigured ? 'pf-text-warn' : 'pf-text-3') %>">
+                      <%= render 'effective_field_source', field: field %>
+                    </span>
+                  <% end %>
+                <% end %>
+                <% if res.actions.any? %>
+                  <div class="pf-row pf-mt-8">
+                    <span class="pf-eyebrow"><%= t('permission_forge.ui.actions') %></span>
+                    <% res.actions.each do |name, outcome| %>
+                      <% key = "#{res.name}.action.#{name}" %>
+                      <%= link_to permission_forge.person_path(@person, tab: 'effective', why: key, open: (@open + [res.name]).uniq),
+                                  class: "pf-state pf-state--#{outcome.state} pf-action-pill", data: { pf_why: key },
+                                  'aria-current': (@why == key ? 'true' : nil) do %>
+                        <span aria-hidden="true"><%= PermissionForge::UiHelper::STATE_GLYPHS[outcome.state] %></span> <%= name.humanize %>
+                      <% end %>
+                    <% end %>
+                  </div>
+                <% end %>
+              </div>
+            </div>
+          <% end %>
+        </div>
+      </div>
+
+      <aside class="pf-split__side pf-card" aria-live="polite" aria-label="<%= t('.why_label') %>">
+        <div class="pf-why" data-pf-why-empty <%= 'hidden' if @why.present? %>>
+          <span class="pf-eyebrow"><%= t('.why') %></span>
+          <p class="pf-fs-13 pf-text-2"><%= t('.why_empty') %></p>
+        </div>
+        <%= render 'effective_why', resources: @effective %>
+      </aside>
+    </div>
+  <% end %>
+</div>

data/app/views/permission_forge/people/_effective_why.html.erb

@@ -0,0 +1,48 @@
+<%# Every explanation is rendered; JS reveals one on click, the server marks ?why= active. %>
+<% resources.each do |res| %>
+  <% plural = pf_resource_plural(res.name) %>
+  <% PermissionForge::Admin::EffectiveAccess::CRUD.each do |flag| %>
+    <% outcome = res.op(flag) %>
+    <% flag_label = t("permission_forge.ui.flags_short.#{flag}") %>
+    <%= render 'why_item', key: "#{res.name}.#{flag}", title: "#{flag_label} #{plural}",
+               badge: pf_state_cell(outcome.state, aria: "#{flag_label} #{plural}"),
+               reasons: outcome.granted_by.map { |ps| ['✓', t('.flag_granted', set: ps.name, flag: flag_label), ps] } +
+                        outcome.blocked_by.map { |ps| ['⊘', t('.flag_muted', set: ps.name, flag: flag_label), ps] } +
+                        (outcome.granted_by.empty? ? [['–', t('.flag_none', flag: flag_label), nil]] : []),
+               note: outcome.blocked? ? t('.note_muting') : t('.note_add_up') %>
+  <% end %>
+
+  <% records_reasons = case res.records
+                       when :all then res.op(:view_all).granted_by.map { |ps| ['✓', t('.view_all_from', set: ps.name), ps] }
+                       when :rules then res.rules.map { |src| ['◷', pf_rule_text(src.rule, res.name), src.permission_set] }.presence || [['✓', t('.no_rules'), nil]]
+                       else [['–', t('.records_none'), nil]]
+                       end %>
+  <%= render 'why_item', key: "#{res.name}.records", title: t('.records_title', resource: plural),
+             badge: content_tag(:span, res.records == :all ? t('permission_forge.ui.view_all') : t('permission_forge.ui.rules_count', count: res.rules.size), class: 'pf-pill'),
+             reasons: records_reasons,
+             note: res.records == :rules ? t('.note_rules') : nil %>
+
+  <% res.fields.each do |field| %>
+    <% field_label = res.name.safe_constantize&.human_attribute_name(field.name) || field.name.humanize %>
+    <% reasons = field.granted_by.map { |ps| ['✓', t('.field_from', set: ps.name), ps] } %>
+    <% reasons += field.blocked_by.map { |ps| ['⊘', t('.field_muted', set: ps.name), ps] } %>
+    <% reasons << ['⚠', t('.field_unconfigured', behaviour: t("permission_forge.ui.unconfigured.#{PermissionForge.configuration.unconfigured_field_strategy}", default: t('permission_forge.ui.unconfigured.block'))), nil] if field.unconfigured %>
+    <% reasons << ['–', t('.field_capped'), nil] if field.capped %>
+    <% reasons << ['◇', t('.field_virtual'), nil] if field.implicit %>
+    <% reasons << ['↳', t('.field_variant', base: field.variant_of), nil] if field.variant_of %>
+    <% reasons << ['–', t('.field_none'), nil] if reasons.empty? %>
+    <%= render 'why_item', key: "#{res.name}.field.#{field.name}", title: "#{pf_resource_label(res.name)} › #{field_label}",
+               badge: pf_level_badge(field.level, strategy: (field.mask_strategy if field.level == 'masked'), sample_for: (field.name if field.level == 'masked')),
+               reasons: reasons,
+               note: field.blocked_by.any? ? t('.note_muting') : t('.note_fields') %>
+  <% end %>
+
+  <% res.actions.each do |name, outcome| %>
+    <%= render 'why_item', key: "#{res.name}.action.#{name}", title: "#{name.humanize} · #{plural}",
+               badge: pf_state_cell(outcome.state, aria: name.humanize),
+               reasons: outcome.granted_by.map { |ps| ['✓', t('.action_granted', set: ps.name), ps] } +
+                        outcome.blocked_by.map { |ps| ['⊘', t('.action_muted', set: ps.name), ps] } +
+                        (outcome.granted_by.empty? ? [['–', t('.action_none'), nil]] : []),
+               note: outcome.blocked? ? t('.note_muting') : t('.note_add_up') %>
+  <% end %>
+<% end %>

data/app/views/permission_forge/people/_why_item.html.erb

@@ -0,0 +1,19 @@
+<div class="pf-why pf-why-item" id="pf-why-<%= key %>" <%= pf_attrs_when(@why == key, data: { pf_active: true }) %>>
+  <span class="pf-eyebrow"><%= t('permission_forge.people.effective_tab.why') %></span>
+  <h2 class="pf-h3"><%= title %></h2>
+  <div><%= badge %></div>
+  <ul class="pf-stack">
+    <% reasons.each do |glyph, text, set| %>
+      <li class="pf-why__reason">
+        <span aria-hidden="true"><%= glyph %></span>
+        <span class="pf-stack pf-stack--tight">
+          <span><%= text %></span>
+          <% if set %>
+            <%= link_to t('.open_set', set: set.name), permission_forge.permission_set_path(set), class: 'pf-fs-12' %>
+          <% end %>
+        </span>
+      </li>
+    <% end %>
+  </ul>
+  <% if note %><p class="pf-fs-12 pf-text-3"><%= note %></p><% end %>
+</div>

data/app/views/permission_forge/people/confirm_remove_all.html.erb

@@ -0,0 +1,27 @@
+<% name = pf_person(@person).name %>
+<% content_for :pf_title, t('.title', name: name) %>
+<%= pf_dialog_frame({ title: t('.title', name: name), danger: true,
+                     breadcrumb: pf_breadcrumb([t('permission_forge.nav.people'), permission_forge.people_path], [name, permission_forge.person_path(@person)], t('.crumb')) }) do %>
+  <% if @removable.empty? %>
+    <p class="pf-text-2"><%= t('.nothing', name: pf_person(@person).first_name) %></p>
+    <% if @kept.any? %><p class="pf-text-2"><%= t('.kept', sets: @kept.map { |a| a.permission_set.name }.to_sentence) %></p><% end %>
+    <div class="pf-actions pf-row--right">
+      <%= link_to t('permission_forge.ui.close'), permission_forge.person_path(@person), class: 'pf-btn', data: { pf_close: true } %>
+    </div>
+  <% else %>
+    <p class="pf-text-2">
+      <%= @lost.any? ? t('.body', name: pf_person(@person).first_name, resources: @lost.to_sentence) : t('.body_no_resources', name: pf_person(@person).first_name) %>
+    </p>
+    <ul class="pf-confirm__list">
+      <% @removable.each do |a| %><li><%= pf_set_chip(a.permission_set, href: nil, expired: a.expired?) %></li><% end %>
+    </ul>
+    <% if @kept.any? %><p class="pf-text-2"><%= t('.kept', sets: @kept.map { |a| a.permission_set.name }.to_sentence) %></p><% end %>
+    <%= form_with url: permission_forge.remove_all_person_path(@person), method: :delete, class: 'pf-confirm-form' do %>
+      <%= render 'permission_forge/shared/reason_field' %>
+      <div class="pf-actions pf-row--right">
+        <%= link_to t('permission_forge.ui.cancel'), permission_forge.person_path(@person), class: 'pf-btn', data: { pf_close: true } %>
+        <button type="submit" class="pf-btn pf-btn--danger-solid"><%= t('.confirm', count: @removable.size) %></button>
+      </div>
+    <% end %>
+  <% end %>
+<% end %>

data/app/views/permission_forge/people/consent_preview.html.erb

@@ -0,0 +1,39 @@
+<% label = pf_person(@person) %>
+<% content_for :pf_title, t('.title') %>
+<%= pf_dialog_frame({ title: t('.title'), danger: true,
+                     breadcrumb: pf_breadcrumb([t('permission_forge.nav.people'), permission_forge.people_path], [label.name, permission_forge.person_path(@person)], t('.title')) }) do %>
+  <p class="pf-text-2"><%= t('.intro', name: label.first_name) %></p>
+  <% if @flags.empty? %>
+    <p class="pf-text-2"><%= t('.no_flags', name: label.first_name) %></p>
+    <div class="pf-actions pf-row--right">
+      <%= link_to t('permission_forge.ui.close'), permission_forge.person_path(@person), class: 'pf-btn', data: { pf_close: true } %>
+    </div>
+  <% else %>
+    <%= form_with url: permission_forge.consent_person_path(@person), method: :get, class: 'pf-row', data: { pf_modal_refresh: true } do %>
+      <label class="pf-label" for="pf-consent-flag"><%= t('.flag') %></label>
+      <select id="pf-consent-flag" name="flag" class="pf-select pf-select--auto" data-pf-autosubmit>
+        <% @flags.each do |flag| %>
+          <option value="<%= flag %>" <%= 'selected' if flag == @flag %>><%= pf_flag_label(flag) %> (<%= flag %>)</option>
+        <% end %>
+      </select>
+      <button type="submit" class="pf-btn pf-btn--sm" data-pf-js-hide><%= t('.preview') %></button>
+    <% end %>
+    <div class="pf-dryrun">
+      <span class="pf-eyebrow"><%= t('permission_forge.ui.dry_run') %></span>
+      <% if @affected.any? %>
+        <span class="pf-fs-13"><%= t('.would_remove', count: @affected.size) %></span>
+        <ul class="pf-stack pf-stack--tight"><% @affected.each do |a| %><li><%= pf_set_chip(a.permission_set, href: nil) %></li><% end %></ul>
+      <% else %>
+        <span class="pf-fs-13"><%= t('.nothing', name: label.first_name, flag: @flag) %></span>
+      <% end %>
+    </div>
+    <%= form_with url: permission_forge.consent_person_path(@person), method: :post, class: 'pf-stack' do %>
+      <input type="hidden" name="flag" value="<%= @flag %>">
+      <%= render 'permission_forge/shared/reason_field', id: 'pf-consent-reason', value: params[:reason] %>
+      <div class="pf-actions pf-row--right">
+      <%= link_to t('permission_forge.ui.cancel'), permission_forge.person_path(@person), class: 'pf-btn', data: { pf_close: true } %>
+      <button type="submit" class="pf-btn pf-btn--danger-solid" <%= 'disabled' if @affected.empty? %>><%= t('.confirm', count: @affected.size) %></button>
+      </div>
+    <% end %>
+  <% end %>
+<% end %>

data/app/views/permission_forge/people/erasure_preview.html.erb

@@ -0,0 +1,28 @@
+<% label = pf_person(@person) %>
+<% content_for :pf_title, t('.title') %>
+<%= pf_dialog_frame({ title: t('.title_for', name: label.name), danger: true, eyebrow: t('.eyebrow'),
+                     breadcrumb: pf_breadcrumb([t('permission_forge.nav.people'), permission_forge.people_path], [label.name, permission_forge.person_path(@person)], t('.title')) }) do %>
+  <p class="pf-text-2"><%= t('.intro') %></p>
+  <div class="pf-dryrun">
+    <span class="pf-eyebrow"><%= t('permission_forge.ui.dry_run') %></span>
+    <span class="pf-fs-13">
+      <%= t('.counts', assignments: t('.assignments', count: @preview[:assignments_count].to_i),
+                       groups: t('.groups', count: @preview[:group_assignments_count].to_i)) %>
+    </span>
+    <% if @preview[:permission_sets].present? %>
+      <ul class="pf-confirm__list"><% @preview[:permission_sets].each do |name| %><li><%= name %></li><% end %></ul>
+    <% end %>
+    <span class="pf-fs-12 pf-text-3"><%= t('.untouched') %></span>
+  </div>
+  <%= form_with url: permission_forge.erasure_person_path(@person), method: :post, class: 'pf-stack' do %>
+    <label class="pf-label" for="pf-erase-confirm"><%= t('.type_to_confirm_html', name: content_tag(:strong, label.name)) %></label>
+    <input id="pf-erase-confirm" class="pf-input" type="text" name="confirmation" autocomplete="off"
+           data-pf-confirm-match="<%= label.name %>" <%= pf_attrs_when(@confirmation_error, aria: { invalid: true, describedby: 'pf-erase-error' }) %>>
+    <% if @confirmation_error %><p id="pf-erase-error" class="pf-error" role="alert"><%= t('.mismatch') %></p><% end %>
+    <%= render 'permission_forge/shared/reason_field', id: 'pf-erase-reason', value: params[:reason] %>
+    <div class="pf-actions pf-row--right">
+      <%= link_to t('permission_forge.ui.cancel'), permission_forge.person_path(@person), class: 'pf-btn', data: { pf_close: true } %>
+      <button type="submit" class="pf-btn pf-btn--danger-solid" data-pf-confirm-target><%= t('.confirm') %></button>
+    </div>
+  <% end %>
+<% end %>

data/app/views/permission_forge/people/index.html.erb

@@ -0,0 +1,78 @@
+<% content_for :pf_title, t('permission_forge.nav.people') %>
+<div class="pf-page-header">
+  <div class="pf-page-header__text">
+    <h1 class="pf-h1"><%= t('permission_forge.nav.people') %></h1>
+    <p class="pf-subtitle"><%= t('.subtitle') %></p>
+  </div>
+  <div class="pf-actions">
+    <%= link_to t('.export_holdings'), permission_forge.holdings_audit_events_path(format: :csv), class: 'pf-btn',
+                title: t('permission_forge.audit_events.index.holdings_title') %>
+    <%= pf_modal_link t('permission_forge.ui.assign_set'), permission_forge.new_assignment_path, kind: 'drawer', class: 'pf-btn pf-btn--primary' %>
+  </div>
+</div>
+
+<%= form_with url: permission_forge.people_path, method: :get, role: 'search', class: 'pf-stack' do %>
+  <input type="hidden" name="filter" value="<%= @filter %>">
+  <label class="pf-sr-only" for="pf-people-q"><%= t('permission_forge.ui.search_people') %></label>
+  <input id="pf-people-q" class="pf-input pf-input--lg" type="search" name="q" value="<%= @query %>" autocomplete="off"
+         placeholder="<%= t('permission_forge.ui.search_people') %>" data-pf-live="pf-people-results">
+<% end %>
+
+<div id="pf-people-results" class="pf-stack pf-stack--loose">
+  <div class="pf-filters" role="group" aria-label="<%= t('.filter_label') %>">
+    <% PermissionForge::Admin::PeopleDirectory::FILTERS.each do |filter| %>
+      <%= pf_filter_chip t(".filters.#{filter}"), permission_forge.people_path(q: @query.presence, filter: filter),
+                         selected: @filter == filter, count: @counts[filter] %>
+    <% end %>
+  </div>
+
+  <div class="pf-card">
+    <div class="pf-table pf-table--people" role="table" aria-label="<%= t('permission_forge.nav.people') %>">
+      <div class="pf-table__head" role="row">
+        <span role="columnheader"><%= t('.columns.person') %></span>
+        <span role="columnheader"><%= t('.columns.sets') %></span>
+        <span role="columnheader"><%= t('.columns.ends') %></span>
+      </div>
+      <% @page.people.each do |person| %>
+        <% assignments = @assignments[person.id] || [] %>
+        <% live = assignments.reject(&:expired?) %>
+        <% soonest = live.filter_map(&:expires_at).min %>
+        <div class="pf-table__row pf-table__row--link" role="row">
+          <span role="cell"><%= pf_person_cell(person, href: permission_forge.person_path(person)) %></span>
+          <span role="cell" class="pf-chips">
+            <% if assignments.empty? %>
+              <span class="pf-fs-13 pf-text-3"><%= t('.no_sets') %></span>
+            <% else %>
+              <% assignments.each do |a| %>
+                <%= pf_set_chip(a.permission_set, href: nil, expired: a.expired?) %>
+              <% end %>
+            <% end %>
+          </span>
+          <span role="cell" class="pf-fs-13">
+            <% if soonest %>
+              <%= pf_expiry_tag(soonest) %>
+            <% else %>
+              <span class="pf-text-3">—</span>
+            <% end %>
+          </span>
+        </div>
+      <% end %>
+    </div>
+    <% if @page.people.empty? %>
+      <p class="pf-empty"><%= @query.present? ? t('.empty_query', query: @query) : t('.empty_filter') %></p>
+    <% end %>
+    <% if @page.total > @page.per_page %>
+      <div class="pf-card__footer pf-card__footer--muted pf-pagination">
+        <span><%= t('.showing', from: ((@page.page - 1) * @page.per_page) + 1, to: @page.shown, total: @page.total) %></span>
+        <span class="pf-actions">
+          <% if @page.page > 1 %>
+            <%= link_to t('permission_forge.ui.previous'), permission_forge.people_path(q: @query.presence, filter: @filter, page: @page.page - 1), class: 'pf-btn pf-btn--xs' %>
+          <% end %>
+          <% if @page.more? %>
+            <%= link_to t('permission_forge.ui.next'), permission_forge.people_path(q: @query.presence, filter: @filter, page: @page.page + 1), class: 'pf-btn pf-btn--xs' %>
+          <% end %>
+        </span>
+      </div>
+    <% end %>
+  </div>
+</div>

data/app/views/permission_forge/people/show.html.erb

@@ -0,0 +1,54 @@
+<% label = pf_person(@person) %>
+<% content_for :pf_title, label.name %>
+<%= pf_breadcrumb([t('permission_forge.nav.people'), permission_forge.people_path], label.name) %>
+
+<div class="pf-page-header">
+  <div class="pf-person-header">
+    <%= pf_avatar(@person, size: 'lg') %>
+    <div class="pf-stack pf-stack--tight">
+      <h1 class="pf-h1"><%= label.name %></h1>
+      <% if label.secondary %><span class="pf-text-2"><%= label.secondary %></span><% end %>
+    </div>
+  </div>
+  <div class="pf-actions">
+    <%= pf_modal_link t('.add_set'), permission_forge.new_assignment_path(user_id: @person.id), kind: 'drawer', class: 'pf-btn pf-btn--primary' %>
+    <details class="pf-menu">
+      <summary class="pf-btn" aria-haspopup="menu"><%= t('.actions') %> ▾</summary>
+      <div class="pf-menu__panel" role="menu" aria-label="<%= t('.actions_label') %>">
+        <%= pf_modal_link permission_forge.new_assignment_path(user_id: @person.id), kind: 'drawer', class: 'pf-menu__item', role: 'menuitem' do %>
+          <span class="pf-menu__title"><%= t('.menu.add.title') %></span>
+          <span class="pf-menu__desc"><%= t('.menu.add.desc') %></span>
+        <% end %>
+        <%= pf_modal_link permission_forge.remove_all_person_path(@person), class: 'pf-menu__item pf-menu__item--danger', role: 'menuitem' do %>
+          <span class="pf-menu__title"><%= t('.menu.remove_all.title') %></span>
+          <span class="pf-menu__desc"><%= t('.menu.remove_all.desc') %></span>
+        <% end %>
+        <%= pf_modal_link permission_forge.consent_person_path(@person), class: 'pf-menu__item', role: 'menuitem' do %>
+          <span class="pf-menu__title"><%= t('.menu.consent.title') %></span>
+          <span class="pf-menu__desc"><%= t('.menu.consent.desc') %></span>
+        <% end %>
+        <%= pf_modal_link permission_forge.erasure_person_path(@person), class: 'pf-menu__item pf-menu__item--danger', role: 'menuitem' do %>
+          <span class="pf-menu__title"><%= t('.menu.erasure.title') %></span>
+          <span class="pf-menu__desc"><%= t('.menu.erasure.desc') %></span>
+        <% end %>
+        <div class="pf-menu__sep" role="separator"></div>
+        <div class="pf-menu__label"><%= t('.menu.troubleshooting') %></div>
+        <%= button_to permission_forge.refresh_cache_person_path(@person), method: :post, params: { tab: @tab },
+                      class: 'pf-menu__item', form_class: 'pf-inline-form', role: 'menuitem' do %>
+          <span class="pf-menu__title"><%= t('.menu.refresh.title') %></span>
+          <span class="pf-menu__desc"><%= t('.menu.refresh.desc') %></span>
+        <% end %>
+      </div>
+    </details>
+  </div>
+</div>
+
+<nav class="pf-tabs" role="tablist" aria-label="<%= t('.tabs_label') %>">
+  <%= pf_tab t('.tabs.access'), permission_forge.person_path(@person), selected: @tab == 'access', count: @assignments.size %>
+  <%= pf_tab t('.tabs.effective'), permission_forge.person_path(@person, tab: 'effective'), selected: @tab == 'effective' %>
+  <%= pf_tab t('.tabs.audit'), permission_forge.person_path(@person, tab: 'audit'), selected: @tab == 'audit' %>
+</nav>
+
+<div role="tabpanel">
+  <%= render "#{@tab}_tab" %>
+</div>

data/app/views/permission_forge/permission_set_groups/confirm_destroy.html.erb

@@ -0,0 +1,12 @@
+<% content_for :pf_title, t('.title', name: @group.name) %>
+<%= pf_dialog_frame({ title: t('.title', name: @group.name), danger: true,
+                     breadcrumb: pf_breadcrumb([t('permission_forge.nav.groups'), permission_forge.groups_path], [@group.name, permission_forge.group_path(@group)], t('.crumb')) }) do %>
+  <p class="pf-text-2"><%= t('.body', count: @group.permission_sets.count) %></p>
+  <%= form_with url: permission_forge.group_path(@group), method: :delete, class: 'pf-confirm-form' do %>
+    <%= render 'permission_forge/shared/reason_field' %>
+    <div class="pf-actions pf-row--right">
+      <%= link_to t('permission_forge.ui.cancel'), permission_forge.group_path(@group), class: 'pf-btn', data: { pf_close: true } %>
+      <button type="submit" class="pf-btn pf-btn--danger-solid"><%= t('.confirm') %></button>
+    </div>
+  <% end %>
+<% end %>

data/app/views/permission_forge/permission_set_groups/index.html.erb

@@ -0,0 +1,55 @@
+<% content_for :pf_title, t('permission_forge.nav.groups') %>
+<div class="pf-page-header">
+  <div class="pf-page-header__text">
+    <h1 class="pf-h1"><%= t('permission_forge.nav.groups') %></h1>
+    <p class="pf-subtitle"><%= t('.subtitle') %></p>
+  </div>
+  <%= link_to "+ #{t('.new')}", permission_forge.groups_path(new: 1, anchor: 'pf-new-group'), class: 'pf-btn pf-btn--primary' %>
+</div>
+
+<%= pf_help_banner('groups', term: t('.help_term'), text: t('.help_text')) %>
+
+<% if @new_open %>
+  <%= form_with url: permission_forge.groups_path, method: :post, id: 'pf-new-group', class: 'pf-card pf-card__body pf-row pf-row--end' do %>
+    <div class="pf-field pf-grow">
+      <label class="pf-label" for="pf-group-name"><%= t('.name') %></label>
+      <input id="pf-group-name" class="pf-input" type="text" name="name" value="<%= params[:name] %>" autofocus maxlength="255"
+             <%= pf_attrs_when(@new_error, aria: { invalid: true }) %>>
+      <% if @new_error %><p class="pf-error" role="alert"><%= @new_error %></p><% end %>
+    </div>
+    <%= render 'permission_forge/shared/reason_field', compact: true, id: 'pf-new-group-reason', value: params[:reason] %>
+    <div class="pf-actions">
+      <%= link_to t('permission_forge.ui.cancel'), permission_forge.groups_path, class: 'pf-btn' %>
+      <button type="submit" class="pf-btn pf-btn--primary"><%= t('.create') %></button>
+    </div>
+  <% end %>
+<% end %>
+
+<% if @groups.empty? %>
+  <div class="pf-card"><p class="pf-empty"><%= t('.empty') %></p></div>
+<% else %>
+  <div class="pf-grid-groups">
+    <% @groups.each do |group| %>
+      <%= link_to permission_forge.group_path(group), class: 'pf-group-card' do %>
+        <span class="pf-row">
+          <b><%= group.name %></b>
+          <span class="pf-fs-13 pf-text-3"><%= t('.sets_count', count: group.permission_sets.size) %></span>
+          <%= pf_off_badge unless group.is_active %>
+          <%= pf_lock_badge if pf_locked_record?(group) %>
+        </span>
+        <% if group.description.present? %><span class="pf-fs-13 pf-text-2"><%= group.description %></span><% end %>
+        <span class="pf-chips"><% group.permission_sets.sort_by(&:name).each do |ps| %><%= pf_set_chip(ps, href: nil) %><% end %></span>
+        <% if group.permission_set_group_users.any? %>
+          <span class="pf-fs-12 pf-text-warn">⚠ <%= t('.members_warning', count: group.permission_set_group_users.size) %></span>
+        <% end %>
+      <% end %>
+    <% end %>
+  </div>
+<% end %>
+
+<% if @ungrouped.any? %>
+  <section class="pf-stack" aria-labelledby="pf-ungrouped">
+    <h2 class="pf-h2" id="pf-ungrouped"><%= t('.ungrouped') %></h2>
+    <div class="pf-chips"><% @ungrouped.each do |ps| %><%= pf_set_chip(ps) %><% end %></div>
+  </section>
+<% end %>

data/app/views/permission_forge/permission_set_groups/show.html.erb

@@ -0,0 +1,100 @@
+<% group = @group %>
+<% locked = pf_locked_record?(group) %>
+<% content_for :pf_title, group.name %>
+<%= pf_breadcrumb([t('permission_forge.nav.groups'), permission_forge.groups_path], group.name) %>
+<%= render 'permission_forge/shared/mode_banners', record: group, muting: false %>
+
+<%= form_with url: permission_forge.group_path(group), method: :patch, scope: :group, class: 'pf-page-header' do %>
+  <div class="pf-page-header__text">
+    <h1 class="pf-sr-only"><%= group.name %></h1>
+    <label class="pf-sr-only" for="pf-group-title"><%= t('.name') %></label>
+    <input id="pf-group-title" class="pf-title-input" type="text" name="group[name]" value="<%= group.name %>" required maxlength="255" <%= 'readonly' if locked %>>
+    <label class="pf-sr-only" for="pf-group-desc"><%= t('.description') %></label>
+    <input id="pf-group-desc" class="pf-desc-input" type="text" name="group[description]" value="<%= group.description %>"
+           placeholder="<%= t('.description_placeholder') %>" <%= 'readonly' if locked %>>
+    <span class="pf-fs-12 pf-text-3"><%= t('.organisational') %></span>
+  </div>
+  <div class="pf-actions">
+    <label class="pf-switch">
+      <input type="hidden" name="group[is_active]" value="0">
+      <input type="checkbox" role="switch" name="group[is_active]" value="1" <%= 'checked' if group.is_active %> <%= 'disabled' if locked %> data-pf-autosubmit>
+      <span class="pf-switch__track" aria-hidden="true"></span>
+      <span class="pf-switch__on"><%= t('permission_forge.shared.active') %></span>
+      <span class="pf-switch__off"><%= t('permission_forge.ui.badges.off') %></span>
+    </label>
+    <% unless locked %><button type="submit" class="pf-btn pf-btn--sm"><%= t('.save') %></button><% end %>
+    <%# Duplicate posts this form (and its reason) to the duplicate action, which reads nothing else from it. %>
+    <button type="submit" formaction="<%= permission_forge.duplicate_group_path(group) %>" formmethod="post" name="_method" value="post"
+            formnovalidate class="pf-btn pf-btn--sm" title="<%= t('.duplicate_title', count: @sets.size) %>"><%= t('.duplicate') %></button>
+    <%= render 'permission_forge/shared/reason_field', compact: true, id: 'pf-group-reason' %>
+    <% unless locked %>
+      <%= pf_modal_link t('permission_forge.ui.delete'), permission_forge.delete_group_path(group), class: 'pf-btn pf-btn--sm pf-btn--danger' %>
+    <% end %>
+  </div>
+<% end %>
+
+<section class="pf-card" aria-labelledby="pf-group-sets">
+  <div class="pf-card__header">
+    <h2 class="pf-h2" id="pf-group-sets"><%= t('.sets') %></h2>
+    <% unless locked || @other_sets.empty? %>
+      <%= form_with url: permission_forge.add_set_group_path(group), method: :post, class: 'pf-row pf-row--tight pf-reason-form' do %>
+        <label class="pf-sr-only" for="pf-group-add-set"><%= t('.add_set') %></label>
+        <select id="pf-group-add-set" name="permission_set_id" class="pf-select pf-select--sm pf-select--auto" data-pf-autosubmit required>
+          <option value=""><%= t('.add_set') %>…</option>
+          <% @other_sets.each do |ps| %>
+            <option value="<%= ps.id %>"><%= ps.name %><%= " (#{t('.in_group', group: ps.permission_set_group.name)})" if ps.permission_set_group %></option>
+          <% end %>
+        </select>
+        <button type="submit" class="pf-btn pf-btn--xs" data-pf-js-hide><%= t('permission_forge.ui.apply') %></button>
+        <%= render 'permission_forge/shared/reason_field', compact: true, id: "pf-add-set-reason-#{group.id}" %>
+      <% end %>
+    <% end %>
+  </div>
+  <% @sets.each do |ps| %>
+    <div class="pf-card__row">
+      <span class="pf-stack pf-stack--tight pf-grow">
+        <span><%= pf_set_chip(ps) %></span>
+        <% if ps.description.present? %><span class="pf-fs-13 pf-text-2"><%= ps.description %></span><% end %>
+      </span>
+      <span class="pf-fs-13 pf-text-3"><%= pf_people_text(@people_counts.fetch(ps.id, 0)) %></span>
+      <% unless locked %>
+        <%= form_with url: permission_forge.remove_set_group_path(group), method: :delete, class: 'pf-reason-form' do %>
+          <input type="hidden" name="permission_set_id" value="<%= ps.id %>">
+          <button type="submit" class="pf-btn pf-btn--ghost pf-btn--xs"><%= t('.remove_set') %></button>
+          <%= render 'permission_forge/shared/reason_field', compact: true, id: "pf-remove-set-reason-#{ps.id}" %>
+        <% end %>
+      <% end %>
+    </div>
+  <% end %>
+  <% if @sets.empty? %><p class="pf-card__row pf-text-3"><%= t('.no_sets') %></p><% end %>
+</section>
+
+<section class="pf-card" aria-labelledby="pf-group-members">
+  <div class="pf-card__header">
+    <h2 class="pf-h2" id="pf-group-members"><%= t('.members') %></h2>
+    <%= form_with url: permission_forge.group_members_path(group), method: :post, class: 'pf-row pf-row--tight pf-reason-form' do %>
+      <%= render 'permission_forge/shared/user_select', users: @candidates, id_suffix: "group-#{group.id}" %>
+      <button type="submit" class="pf-btn pf-btn--xs"><%= t('.add_member') %></button>
+      <%= render 'permission_forge/shared/reason_field', compact: true, id: "pf-member-reason-#{group.id}" %>
+    <% end %>
+  </div>
+  <div class="pf-card__body">
+    <div class="pf-banner pf-banner--warn" role="note">
+      <span class="pf-banner__glyph" aria-hidden="true">!</span>
+      <div class="pf-banner__body"><span><%= t('.members_note_html') %></span></div>
+    </div>
+  </div>
+  <% @members.each do |m| %>
+    <div class="pf-card__row">
+      <span class="pf-grow"><%= pf_person_cell(m.user, href: permission_forge.person_path(m.user_id)) %></span>
+      <%= form_with url: permission_forge.group_member_path(group, m), method: :delete, class: 'pf-reason-form' do %>
+        <button type="submit" class="pf-btn pf-btn--ghost-danger"><%= t('permission_forge.ui.remove') %></button>
+        <%= render 'permission_forge/shared/reason_field', compact: true, id: "pf-member-remove-reason-#{m.id}" %>
+      <% end %>
+    </div>
+  <% end %>
+  <% if @members.empty? %><p class="pf-card__row pf-text-3"><%= t('.no_members') %></p><% end %>
+</section>
+
+<%= pf_tech_details(group) %>
+<%= pf_audit_footer(group) %>