apiblaze 0.19.5 → 0.19.7

package/dist/index.js

@@ -933,7 +933,7 @@ var import_commander = require("commander");
 var import_chalk44 = __toESM(require("chalk"));
 
 // package.json
-var version = "0.19.5";
+var version = "0.19.7";
 
 // src/index.ts
 init_types();
@@ -5297,7 +5297,17 @@ async function runGroupMembers(name, opts) {
 }
 async function runGroupAddUser(userRef, groupName, opts) {
   const t = await resolveTransport(opts);
-  const [g, u] = [await groupByName(t, groupName), await userByRef(t, userRef)];
+  const g = await groupByName(t, groupName);
+  let u;
+  try {
+    u = await userByRef(t, userRef);
+  } catch (e) {
+    if (!userRef.includes("@")) throw e;
+    const created = await t.call("/v1/admin/users", "POST", { email: userRef.trim().toLowerCase() });
+    if (!created?.abz_sub) throw e;
+    console.log(import_chalk34.default.dim(`  ${userRef} wasn't a user yet \u2014 created.`));
+    u = { abz_sub: created.abz_sub, email: created.email ?? userRef, display_name: null };
+  }
   const role = opts.role === "admin" ? "admin" : "member";
   const spinner = (0, import_ora17.default)(`Adding ${label2(u)} to ${g.name}...`).start();
   try {

package/dist/react/index.js

@@ -144,9 +144,15 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
   const [groups, setGroups] = React.useState(null);
   const [groupTotal, setGroupTotal] = React.useState(0);
   const [groupQuery, setGroupQuery] = React.useState("");
+  const [users, setUsers] = React.useState([]);
+  const [userTotal, setUserTotal] = React.useState(0);
+  const [userQuery, setUserQuery] = React.useState("");
   const [observed, setObserved] = React.useState([]);
+  const [observedTotal, setObservedTotal] = React.useState(0);
+  const [observedQuery, setObservedQuery] = React.useState("");
   const [observedNew, setObservedNew] = React.useState(0);
   const [observedLoaded, setObservedLoaded] = React.useState(false);
+  const [showObserved, setShowObserved] = React.useState(false);
   const [loadError, setLoadError] = React.useState(null);
   const [open, setOpen] = React.useState(null);
   const [detail, setDetail] = React.useState(null);
@@ -176,6 +182,9 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
       setMyEmail(d.email ?? null);
       setGroups(d.groups ?? []);
       setGroupTotal(d.groupTotal ?? (d.groups?.length ?? 0));
+      setUsers(d.users ?? []);
+      setUserTotal(d.userTotal ?? (d.users?.length ?? 0));
+      setUserQuery("");
       setObservedNew(d.observedNew ?? 0);
       setObservedLoaded(false);
       setGroupQuery("");
@@ -203,11 +212,30 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
     setGroups((prev) => [...prev ?? [], ...d.groups ?? []]);
     if (typeof d.total === "number") setGroupTotal(d.total);
   }, [call, groupQuery, groups]);
-  const loadObserved = React.useCallback(async () => {
-    const d = await call({ action: "list-observed", offset: 0 });
+  const searchUsers = React.useCallback(async (q) => {
+    setUserQuery(q);
+    const d = await call({ action: "search-users", q, limit: 25, offset: 0 });
+    setUsers(d.users ?? []);
+    setUserTotal(d.total ?? (d.users?.length ?? 0));
+  }, [call]);
+  const loadMoreUsers = React.useCallback(async () => {
+    const d = await call({ action: "search-users", q: userQuery, limit: 25, offset: users.length });
+    setUsers((prev) => [...prev, ...d.users ?? []]);
+    if (typeof d.total === "number") setUserTotal(d.total);
+  }, [call, userQuery, users]);
+  const searchObserved = React.useCallback(async (q) => {
+    setObservedQuery(q);
+    const d = await call({ action: "list-observed", q, offset: 0 });
     setObserved(d.identities ?? []);
+    setObservedTotal(d.total ?? (d.identities?.length ?? 0));
     setObservedLoaded(true);
   }, [call]);
+  const loadObserved = React.useCallback(() => searchObserved(""), [searchObserved]);
+  const loadMoreObserved = React.useCallback(async () => {
+    const d = await call({ action: "list-observed", q: observedQuery, offset: observed.length });
+    setObserved((prev) => [...prev, ...d.identities ?? []]);
+    if (typeof d.total === "number") setObservedTotal(d.total);
+  }, [call, observedQuery, observed]);
   const loadDetail = React.useCallback(async (groupId) => {
     setDetailLoading(true);
     setDetail(null);
@@ -278,7 +306,8 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
     if (!ref2) return;
     await act("create-user", { action: "create-user", ref: ref2 }, async () => {
       setNewUserRef("");
-      await loadObserved();
+      setShowNewUser(false);
+      await searchUsers("");
     });
   }
   const vars = {
@@ -322,10 +351,8 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { style: { fontSize: 15 }, children: title }),
         access === "ok" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { display: "flex", gap: 8 }, children: [
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { style: btn("ghost", true), disabled: busy, onClick: () => {
-            const nv = !showNewUser;
-            setShowNewUser(nv);
+            setShowNewUser((v) => !v);
             setShowCreate(false);
-            if (nv && !observedLoaded) loadObserved();
           }, "aria-label": "Add a new user", children: "+ New user" }),
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { style: btn("primary", true), disabled: busy, onClick: () => {
             setShowCreate((v) => !v);
@@ -380,8 +407,12 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
           setNewName("");
         }, children: "Cancel" })
       ] }),
-      access === "ok" && showNewUser && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { padding: "12px 16px", borderBottom: `1px solid ${t.border}` }, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { display: "flex", gap: 8 }, children: [
+      access === "ok" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { borderBottom: `1px solid ${t.border}` }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { display: "flex", gap: 8, alignItems: "center", padding: "12px 16px 6px" }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { style: { fontSize: 13 }, children: "Users" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: chip, children: userTotal })
+        ] }),
+        showNewUser && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { display: "flex", gap: 8, padding: "6px 16px" }, children: [
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
             "input",
             {
@@ -390,7 +421,8 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
               value: newUserRef,
               onChange: (e) => setNewUserRef(e.target.value),
               onKeyDown: (e) => e.key === "Enter" && createUser(),
-              "aria-label": "New user email or id"
+              "aria-label": "New user email or id",
+              autoFocus: true
             }
           ),
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { style: btn("primary", true), disabled: busy || !newUserRef.trim(), onClick: createUser, children: "Add" }),
@@ -399,22 +431,77 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
             setNewUserRef("");
           }, children: "Cancel" })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { fontSize: 12, color: t.muted, marginTop: 6 }, children: [
-          "An ",
-          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: "email" }),
-          " is pre-approved \u2014 they join with their real identity the first time they sign in. A ",
-          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: "user id" }),
-          " is provisioned now."
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { display: "flex", gap: 8, alignItems: "center", padding: "6px 16px" }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+            "input",
+            {
+              style: { ...inputStyle, flex: 1 },
+              placeholder: "Search users\u2026",
+              defaultValue: userQuery,
+              onChange: (e) => searchUsers(e.target.value),
+              "aria-label": "Search users"
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { style: { fontSize: 12, color: t.muted, whiteSpace: "nowrap" }, children: [
+            users.length,
+            " of ",
+            userTotal
+          ] })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { marginTop: 12 }, children: [
-          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { fontSize: 12, color: t.muted, marginBottom: 6 }, children: [
-            "\u2026or add someone already seen in your API traffic",
-            observedNew ? ` (${observedNew} new)` : "",
-            ":"
+        users.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { padding: "6px 16px 12px", fontSize: 13, color: t.muted }, children: userQuery ? `No users match \u201C${userQuery}\u201D.` : "No users yet \u2014 add one with + New user." }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("ul", { style: { listStyle: "none", margin: 0, padding: "0 16px 8px" }, children: users.map((u) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("li", { style: { display: "flex", gap: 8, alignItems: "center", padding: "5px 0", flexWrap: "wrap" }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: { flex: 1, minWidth: 140, fontSize: 13 }, children: userLabel(u) }),
+          u.email && u.email !== userLabel(u) && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: { fontSize: 12, color: t.muted, fontFamily: t.monoFontFamily }, children: u.email }),
+          u.source_label && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: chip, children: u.source_label }),
+          u.status && u.status !== "active" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: { ...chip, color: t.danger, borderColor: t.danger }, children: u.status })
+        ] }, u.abz_sub)) }),
+        users.length < userTotal && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { padding: "0 16px 12px" }, children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("button", { style: btn("ghost", true), disabled: busy, onClick: loadMoreUsers, children: [
+          "Load more (",
+          users.length,
+          " of ",
+          userTotal,
+          ")"
+        ] }) })
+      ] }),
+      access === "ok" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { borderBottom: `1px solid ${t.border}` }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(
+          "button",
+          {
+            onClick: () => {
+              const nv = !showObserved;
+              setShowObserved(nv);
+              if (nv && !observedLoaded) loadObserved();
+            },
+            "aria-expanded": showObserved,
+            style: { display: "flex", width: "100%", gap: 10, alignItems: "center", padding: "12px 16px", background: "transparent", border: "none", cursor: "pointer", color: t.text, fontFamily: "inherit", fontSize: 13, textAlign: "left" },
+            children: [
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { "aria-hidden": "true", style: { color: t.muted, fontSize: 11 }, children: showObserved ? "\u25BE" : "\u25B8" }),
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { style: { flex: 1 }, children: "Candidates seen in traffic" }),
+              observedNew > 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: chip, children: observedNew })
+            ]
+          }
+        ),
+        showObserved && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { padding: "0 16px 12px 34px" }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { display: "flex", gap: 8, alignItems: "center", marginBottom: 6 }, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+              "input",
+              {
+                style: { ...inputStyle, flex: 1 },
+                placeholder: "Search candidates\u2026",
+                defaultValue: observedQuery,
+                onChange: (e) => searchObserved(e.target.value),
+                "aria-label": "Search candidates seen in traffic"
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { style: { fontSize: 12, color: t.muted, whiteSpace: "nowrap" }, children: [
+              observed.length,
+              " of ",
+              observedTotal
+            ] })
           ] }),
           !observedLoaded && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { fontSize: 12, color: t.muted }, children: "Loading\u2026" }),
-          observedLoaded && observed.filter((o) => !o.provisioned).length === 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { fontSize: 12, color: t.muted }, children: "No new identities in traffic \u2014 they appear here after their first API call." }),
-          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("ul", { style: { listStyle: "none", margin: 0, padding: 0 }, children: observed.filter((o) => !o.provisioned).map((o) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("li", { style: { display: "flex", gap: 8, alignItems: "center", padding: "5px 0", flexWrap: "wrap" }, children: [
+          observedLoaded && observed.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { fontSize: 12, color: t.muted }, children: observedQuery ? `No candidates match \u201C${observedQuery}\u201D.` : "Nothing yet \u2014 identities appear here after their first API call." }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("ul", { style: { listStyle: "none", margin: 0, padding: 0 }, children: observed.map((o) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("li", { style: { display: "flex", gap: 8, alignItems: "center", padding: "5px 0", flexWrap: "wrap" }, children: [
             /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: { flex: 1, minWidth: 140, fontFamily: t.monoFontFamily, fontSize: 13 }, children: o.email || o.abz_sub }),
             o.source_label && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: chip, children: o.source_label }),
             o.last_seen && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { style: { fontSize: 11, color: t.muted }, children: [
@@ -422,17 +509,31 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
               relTime(o.last_seen),
               o.seen_count ? ` \xB7 ${o.seen_count}\xD7` : ""
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+            o.provisioned ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: { ...chip, color: t.success, borderColor: t.success }, children: "user \u2713" }) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
               "button",
               {
                 style: btn("ghost", true),
                 disabled: busy,
                 "aria-label": `Add ${o.email || o.abz_sub} as a user`,
-                onClick: () => act(`provision:${o.abz_sub}`, { action: "provision-observed", consumerUserId: o.abz_sub, email: o.email ?? void 0 }, loadObserved),
+                onClick: () => act(
+                  `provision:${o.abz_sub}`,
+                  { action: "provision-observed", consumerUserId: o.abz_sub, email: o.email ?? void 0 },
+                  async () => {
+                    await searchObserved(observedQuery);
+                    await searchUsers("");
+                  }
+                ),
                 children: "Add"
               }
             )
-          ] }, o.abz_sub)) })
+          ] }, o.abz_sub)) }),
+          observed.length < observedTotal && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("button", { style: { ...btn("ghost", true), marginTop: 6 }, disabled: busy, onClick: loadMoreObserved, children: [
+            "Load more (",
+            observed.length,
+            " of ",
+            observedTotal,
+            ")"
+          ] })
         ] })
       ] }),
       access === "ok" && groups === null && !loadError && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { "aria-busy": "true", style: { padding: 24, color: t.muted }, children: "Loading groups\u2026" }),
@@ -441,24 +542,30 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
         " ",
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { style: { ...btn("ghost", true), marginLeft: 6 }, onClick: load, children: "Retry" })
       ] }),
-      access === "ok" && groups !== null && (groupTotal > groups.length || groupQuery) && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { display: "flex", gap: 8, alignItems: "center", padding: "10px 16px", borderBottom: `1px solid ${t.border}` }, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
-          "input",
-          {
-            style: { ...inputStyle, flex: 1 },
-            placeholder: "Search groups\u2026",
-            defaultValue: groupQuery,
-            onChange: (e) => {
-              const v = e.target.value;
-              searchGroups(v);
-            },
-            "aria-label": "Search groups"
-          }
-        ),
-        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { style: { fontSize: 12, color: t.muted, whiteSpace: "nowrap" }, children: [
-          groups.length,
-          " of ",
-          groupTotal
+      access === "ok" && groups !== null && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { display: "flex", gap: 8, alignItems: "center", padding: "12px 16px 6px" }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { style: { fontSize: 13 }, children: "Groups" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: chip, children: groupTotal })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { display: "flex", gap: 8, alignItems: "center", padding: "6px 16px 10px", borderBottom: `1px solid ${t.border}` }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+            "input",
+            {
+              style: { ...inputStyle, flex: 1 },
+              placeholder: "Search groups\u2026",
+              defaultValue: groupQuery,
+              onChange: (e) => {
+                const v = e.target.value;
+                searchGroups(v);
+              },
+              "aria-label": "Search groups"
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { style: { fontSize: 12, color: t.muted, whiteSpace: "nowrap" }, children: [
+            groups.length,
+            " of ",
+            groupTotal
+          ] })
         ] })
       ] }),
       access === "ok" && groups !== null && groups.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { padding: "28px 20px", textAlign: "center", color: t.muted }, children: groupQuery ? `No groups match \u201C${groupQuery}\u201D.` : "No groups yet. Create one to start organizing your users." }),
@@ -731,6 +838,8 @@ var ApiKeyWidget = React2.forwardRef(function ApiKeyWidget2({ endpoint = "/api/a
   const [confirming, setConfirming] = React2.useState(null);
   const [rowError, setRowError] = React2.useState(null);
   const [copied, setCopied] = React2.useState(false);
+  const [keyQuery, setKeyQuery] = React2.useState("");
+  const [visibleCount, setVisibleCount] = React2.useState(10);
   const call = React2.useCallback(async (body) => {
     const res = await fetch(endpoint, body ? { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body) } : { cache: "no-store" });
     const data = await res.json().catch(() => ({}));
@@ -914,7 +1023,20 @@ var ApiKeyWidget = React2.forwardRef(function ApiKeyWidget2({ endpoint = "/api/a
           /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("button", { style: { ...btn("primary"), ...disabledStyle(creating) }, disabled: creating, onClick: create, children: creating ? "Creating\u2026" : "Create API key" })
         ] })
       ] }),
-      !denied && keys !== null && keys.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("ul", { style: { listStyle: "none", margin: 0, padding: 0 }, children: keys.map((k) => {
+      !denied && keys !== null && keys.length > 5 && /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("div", { style: { display: "flex", gap: 8, alignItems: "center", padding: "10px 16px", borderBottom: `1px solid ${t.border}` }, children: /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(
+        "input",
+        {
+          value: keyQuery,
+          onChange: (e) => {
+            setKeyQuery(e.target.value);
+            setVisibleCount(10);
+          },
+          placeholder: "Search keys\u2026",
+          "aria-label": "Search keys",
+          style: { flex: 1, fontFamily: "inherit", fontSize: 13, padding: "6px 10px", borderRadius: 8, border: `1px solid ${t.border}`, background: t.surface, color: t.text, minWidth: 0 }
+        }
+      ) }),
+      !denied && keys !== null && keys.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("ul", { style: { listStyle: "none", margin: 0, padding: 0 }, children: keys.filter(matchesKeyQuery(keyQuery)).slice(0, visibleCount).map((k) => {
         const anyBusy = busyAny;
         const used = relTime2(k.last_used);
         const created = k.created_at ? new Date(k.created_at).toLocaleDateString() : null;
@@ -973,6 +1095,24 @@ var ApiKeyWidget = React2.forwardRef(function ApiKeyWidget2({ endpoint = "/api/a
           rowError?.keyId === k.key_id && /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("div", { role: "alert", style: { fontSize: 12, color: t.danger, marginTop: 6 }, children: rowError.msg })
         ] }, k.key_id);
       }) }),
+      !denied && keys !== null && keys.length > 0 && (() => {
+        const matched = keys.filter(matchesKeyQuery(keyQuery));
+        if (matched.length === 0) {
+          return /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)("div", { style: { padding: "14px 16px", fontSize: 13, color: t.muted }, children: [
+            "No keys match \u201C",
+            keyQuery,
+            "\u201D."
+          ] });
+        }
+        if (matched.length <= visibleCount) return null;
+        return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("div", { style: { padding: "10px 16px", borderTop: `1px solid ${t.border}` }, children: /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)("button", { style: btn("ghost", true), onClick: () => setVisibleCount((v) => v + 10), children: [
+          "Show more (",
+          Math.min(visibleCount, matched.length),
+          " of ",
+          matched.length,
+          ")"
+        ] }) });
+      })(),
       !denied && rowError && rowError.keyId === "" && /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("div", { role: "alert", style: { padding: "0 16px 14px", fontSize: 12, color: t.danger }, children: rowError.msg })
     ] })
   ] });
@@ -980,6 +1120,11 @@ var ApiKeyWidget = React2.forwardRef(function ApiKeyWidget2({ endpoint = "/api/a
 function byNewest(a, b) {
   return new Date(b.created_at ?? 0).getTime() - new Date(a.created_at ?? 0).getTime();
 }
+function matchesKeyQuery(q) {
+  const term = q.trim().toLowerCase();
+  if (!term) return () => true;
+  return (k) => `${k.key_prefix ?? ""} ${k.key_suffix ?? ""} ${k.environment ?? ""} ${k.key_id}`.toLowerCase().includes(term);
+}
 var react_default = ApiKeyWidget;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/react/index.mjs

@@ -109,9 +109,15 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
   const [groups, setGroups] = React.useState(null);
   const [groupTotal, setGroupTotal] = React.useState(0);
   const [groupQuery, setGroupQuery] = React.useState("");
+  const [users, setUsers] = React.useState([]);
+  const [userTotal, setUserTotal] = React.useState(0);
+  const [userQuery, setUserQuery] = React.useState("");
   const [observed, setObserved] = React.useState([]);
+  const [observedTotal, setObservedTotal] = React.useState(0);
+  const [observedQuery, setObservedQuery] = React.useState("");
   const [observedNew, setObservedNew] = React.useState(0);
   const [observedLoaded, setObservedLoaded] = React.useState(false);
+  const [showObserved, setShowObserved] = React.useState(false);
   const [loadError, setLoadError] = React.useState(null);
   const [open, setOpen] = React.useState(null);
   const [detail, setDetail] = React.useState(null);
@@ -141,6 +147,9 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
       setMyEmail(d.email ?? null);
       setGroups(d.groups ?? []);
       setGroupTotal(d.groupTotal ?? (d.groups?.length ?? 0));
+      setUsers(d.users ?? []);
+      setUserTotal(d.userTotal ?? (d.users?.length ?? 0));
+      setUserQuery("");
       setObservedNew(d.observedNew ?? 0);
       setObservedLoaded(false);
       setGroupQuery("");
@@ -168,11 +177,30 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
     setGroups((prev) => [...prev ?? [], ...d.groups ?? []]);
     if (typeof d.total === "number") setGroupTotal(d.total);
   }, [call, groupQuery, groups]);
-  const loadObserved = React.useCallback(async () => {
-    const d = await call({ action: "list-observed", offset: 0 });
+  const searchUsers = React.useCallback(async (q) => {
+    setUserQuery(q);
+    const d = await call({ action: "search-users", q, limit: 25, offset: 0 });
+    setUsers(d.users ?? []);
+    setUserTotal(d.total ?? (d.users?.length ?? 0));
+  }, [call]);
+  const loadMoreUsers = React.useCallback(async () => {
+    const d = await call({ action: "search-users", q: userQuery, limit: 25, offset: users.length });
+    setUsers((prev) => [...prev, ...d.users ?? []]);
+    if (typeof d.total === "number") setUserTotal(d.total);
+  }, [call, userQuery, users]);
+  const searchObserved = React.useCallback(async (q) => {
+    setObservedQuery(q);
+    const d = await call({ action: "list-observed", q, offset: 0 });
     setObserved(d.identities ?? []);
+    setObservedTotal(d.total ?? (d.identities?.length ?? 0));
     setObservedLoaded(true);
   }, [call]);
+  const loadObserved = React.useCallback(() => searchObserved(""), [searchObserved]);
+  const loadMoreObserved = React.useCallback(async () => {
+    const d = await call({ action: "list-observed", q: observedQuery, offset: observed.length });
+    setObserved((prev) => [...prev, ...d.identities ?? []]);
+    if (typeof d.total === "number") setObservedTotal(d.total);
+  }, [call, observedQuery, observed]);
   const loadDetail = React.useCallback(async (groupId) => {
     setDetailLoading(true);
     setDetail(null);
@@ -243,7 +271,8 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
     if (!ref2) return;
     await act("create-user", { action: "create-user", ref: ref2 }, async () => {
       setNewUserRef("");
-      await loadObserved();
+      setShowNewUser(false);
+      await searchUsers("");
     });
   }
   const vars = {
@@ -287,10 +316,8 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
         /* @__PURE__ */ jsx("strong", { style: { fontSize: 15 }, children: title }),
         access === "ok" && /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: 8 }, children: [
           /* @__PURE__ */ jsx("button", { style: btn("ghost", true), disabled: busy, onClick: () => {
-            const nv = !showNewUser;
-            setShowNewUser(nv);
+            setShowNewUser((v) => !v);
             setShowCreate(false);
-            if (nv && !observedLoaded) loadObserved();
           }, "aria-label": "Add a new user", children: "+ New user" }),
           /* @__PURE__ */ jsx("button", { style: btn("primary", true), disabled: busy, onClick: () => {
             setShowCreate((v) => !v);
@@ -345,8 +372,12 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
           setNewName("");
         }, children: "Cancel" })
       ] }),
-      access === "ok" && showNewUser && /* @__PURE__ */ jsxs("div", { style: { padding: "12px 16px", borderBottom: `1px solid ${t.border}` }, children: [
-        /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: 8 }, children: [
+      access === "ok" && /* @__PURE__ */ jsxs("div", { style: { borderBottom: `1px solid ${t.border}` }, children: [
+        /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: 8, alignItems: "center", padding: "12px 16px 6px" }, children: [
+          /* @__PURE__ */ jsx("strong", { style: { fontSize: 13 }, children: "Users" }),
+          /* @__PURE__ */ jsx("span", { style: chip, children: userTotal })
+        ] }),
+        showNewUser && /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: 8, padding: "6px 16px" }, children: [
           /* @__PURE__ */ jsx(
             "input",
             {
@@ -355,7 +386,8 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
               value: newUserRef,
               onChange: (e) => setNewUserRef(e.target.value),
               onKeyDown: (e) => e.key === "Enter" && createUser(),
-              "aria-label": "New user email or id"
+              "aria-label": "New user email or id",
+              autoFocus: true
             }
           ),
           /* @__PURE__ */ jsx("button", { style: btn("primary", true), disabled: busy || !newUserRef.trim(), onClick: createUser, children: "Add" }),
@@ -364,22 +396,77 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
             setNewUserRef("");
           }, children: "Cancel" })
         ] }),
-        /* @__PURE__ */ jsxs("div", { style: { fontSize: 12, color: t.muted, marginTop: 6 }, children: [
-          "An ",
-          /* @__PURE__ */ jsx("strong", { children: "email" }),
-          " is pre-approved \u2014 they join with their real identity the first time they sign in. A ",
-          /* @__PURE__ */ jsx("strong", { children: "user id" }),
-          " is provisioned now."
+        /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: 8, alignItems: "center", padding: "6px 16px" }, children: [
+          /* @__PURE__ */ jsx(
+            "input",
+            {
+              style: { ...inputStyle, flex: 1 },
+              placeholder: "Search users\u2026",
+              defaultValue: userQuery,
+              onChange: (e) => searchUsers(e.target.value),
+              "aria-label": "Search users"
+            }
+          ),
+          /* @__PURE__ */ jsxs("span", { style: { fontSize: 12, color: t.muted, whiteSpace: "nowrap" }, children: [
+            users.length,
+            " of ",
+            userTotal
+          ] })
         ] }),
-        /* @__PURE__ */ jsxs("div", { style: { marginTop: 12 }, children: [
-          /* @__PURE__ */ jsxs("div", { style: { fontSize: 12, color: t.muted, marginBottom: 6 }, children: [
-            "\u2026or add someone already seen in your API traffic",
-            observedNew ? ` (${observedNew} new)` : "",
-            ":"
+        users.length === 0 && /* @__PURE__ */ jsx("div", { style: { padding: "6px 16px 12px", fontSize: 13, color: t.muted }, children: userQuery ? `No users match \u201C${userQuery}\u201D.` : "No users yet \u2014 add one with + New user." }),
+        /* @__PURE__ */ jsx("ul", { style: { listStyle: "none", margin: 0, padding: "0 16px 8px" }, children: users.map((u) => /* @__PURE__ */ jsxs("li", { style: { display: "flex", gap: 8, alignItems: "center", padding: "5px 0", flexWrap: "wrap" }, children: [
+          /* @__PURE__ */ jsx("span", { style: { flex: 1, minWidth: 140, fontSize: 13 }, children: userLabel(u) }),
+          u.email && u.email !== userLabel(u) && /* @__PURE__ */ jsx("span", { style: { fontSize: 12, color: t.muted, fontFamily: t.monoFontFamily }, children: u.email }),
+          u.source_label && /* @__PURE__ */ jsx("span", { style: chip, children: u.source_label }),
+          u.status && u.status !== "active" && /* @__PURE__ */ jsx("span", { style: { ...chip, color: t.danger, borderColor: t.danger }, children: u.status })
+        ] }, u.abz_sub)) }),
+        users.length < userTotal && /* @__PURE__ */ jsx("div", { style: { padding: "0 16px 12px" }, children: /* @__PURE__ */ jsxs("button", { style: btn("ghost", true), disabled: busy, onClick: loadMoreUsers, children: [
+          "Load more (",
+          users.length,
+          " of ",
+          userTotal,
+          ")"
+        ] }) })
+      ] }),
+      access === "ok" && /* @__PURE__ */ jsxs("div", { style: { borderBottom: `1px solid ${t.border}` }, children: [
+        /* @__PURE__ */ jsxs(
+          "button",
+          {
+            onClick: () => {
+              const nv = !showObserved;
+              setShowObserved(nv);
+              if (nv && !observedLoaded) loadObserved();
+            },
+            "aria-expanded": showObserved,
+            style: { display: "flex", width: "100%", gap: 10, alignItems: "center", padding: "12px 16px", background: "transparent", border: "none", cursor: "pointer", color: t.text, fontFamily: "inherit", fontSize: 13, textAlign: "left" },
+            children: [
+              /* @__PURE__ */ jsx("span", { "aria-hidden": "true", style: { color: t.muted, fontSize: 11 }, children: showObserved ? "\u25BE" : "\u25B8" }),
+              /* @__PURE__ */ jsx("strong", { style: { flex: 1 }, children: "Candidates seen in traffic" }),
+              observedNew > 0 && /* @__PURE__ */ jsx("span", { style: chip, children: observedNew })
+            ]
+          }
+        ),
+        showObserved && /* @__PURE__ */ jsxs("div", { style: { padding: "0 16px 12px 34px" }, children: [
+          /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: 8, alignItems: "center", marginBottom: 6 }, children: [
+            /* @__PURE__ */ jsx(
+              "input",
+              {
+                style: { ...inputStyle, flex: 1 },
+                placeholder: "Search candidates\u2026",
+                defaultValue: observedQuery,
+                onChange: (e) => searchObserved(e.target.value),
+                "aria-label": "Search candidates seen in traffic"
+              }
+            ),
+            /* @__PURE__ */ jsxs("span", { style: { fontSize: 12, color: t.muted, whiteSpace: "nowrap" }, children: [
+              observed.length,
+              " of ",
+              observedTotal
+            ] })
           ] }),
           !observedLoaded && /* @__PURE__ */ jsx("div", { style: { fontSize: 12, color: t.muted }, children: "Loading\u2026" }),
-          observedLoaded && observed.filter((o) => !o.provisioned).length === 0 && /* @__PURE__ */ jsx("div", { style: { fontSize: 12, color: t.muted }, children: "No new identities in traffic \u2014 they appear here after their first API call." }),
-          /* @__PURE__ */ jsx("ul", { style: { listStyle: "none", margin: 0, padding: 0 }, children: observed.filter((o) => !o.provisioned).map((o) => /* @__PURE__ */ jsxs("li", { style: { display: "flex", gap: 8, alignItems: "center", padding: "5px 0", flexWrap: "wrap" }, children: [
+          observedLoaded && observed.length === 0 && /* @__PURE__ */ jsx("div", { style: { fontSize: 12, color: t.muted }, children: observedQuery ? `No candidates match \u201C${observedQuery}\u201D.` : "Nothing yet \u2014 identities appear here after their first API call." }),
+          /* @__PURE__ */ jsx("ul", { style: { listStyle: "none", margin: 0, padding: 0 }, children: observed.map((o) => /* @__PURE__ */ jsxs("li", { style: { display: "flex", gap: 8, alignItems: "center", padding: "5px 0", flexWrap: "wrap" }, children: [
             /* @__PURE__ */ jsx("span", { style: { flex: 1, minWidth: 140, fontFamily: t.monoFontFamily, fontSize: 13 }, children: o.email || o.abz_sub }),
             o.source_label && /* @__PURE__ */ jsx("span", { style: chip, children: o.source_label }),
             o.last_seen && /* @__PURE__ */ jsxs("span", { style: { fontSize: 11, color: t.muted }, children: [
@@ -387,17 +474,31 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
               relTime(o.last_seen),
               o.seen_count ? ` \xB7 ${o.seen_count}\xD7` : ""
             ] }),
-            /* @__PURE__ */ jsx(
+            o.provisioned ? /* @__PURE__ */ jsx("span", { style: { ...chip, color: t.success, borderColor: t.success }, children: "user \u2713" }) : /* @__PURE__ */ jsx(
               "button",
               {
                 style: btn("ghost", true),
                 disabled: busy,
                 "aria-label": `Add ${o.email || o.abz_sub} as a user`,
-                onClick: () => act(`provision:${o.abz_sub}`, { action: "provision-observed", consumerUserId: o.abz_sub, email: o.email ?? void 0 }, loadObserved),
+                onClick: () => act(
+                  `provision:${o.abz_sub}`,
+                  { action: "provision-observed", consumerUserId: o.abz_sub, email: o.email ?? void 0 },
+                  async () => {
+                    await searchObserved(observedQuery);
+                    await searchUsers("");
+                  }
+                ),
                 children: "Add"
               }
             )
-          ] }, o.abz_sub)) })
+          ] }, o.abz_sub)) }),
+          observed.length < observedTotal && /* @__PURE__ */ jsxs("button", { style: { ...btn("ghost", true), marginTop: 6 }, disabled: busy, onClick: loadMoreObserved, children: [
+            "Load more (",
+            observed.length,
+            " of ",
+            observedTotal,
+            ")"
+          ] })
         ] })
       ] }),
       access === "ok" && groups === null && !loadError && /* @__PURE__ */ jsx("div", { "aria-busy": "true", style: { padding: 24, color: t.muted }, children: "Loading groups\u2026" }),
@@ -406,24 +507,30 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
         " ",
         /* @__PURE__ */ jsx("button", { style: { ...btn("ghost", true), marginLeft: 6 }, onClick: load, children: "Retry" })
       ] }),
-      access === "ok" && groups !== null && (groupTotal > groups.length || groupQuery) && /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: 8, alignItems: "center", padding: "10px 16px", borderBottom: `1px solid ${t.border}` }, children: [
-        /* @__PURE__ */ jsx(
-          "input",
-          {
-            style: { ...inputStyle, flex: 1 },
-            placeholder: "Search groups\u2026",
-            defaultValue: groupQuery,
-            onChange: (e) => {
-              const v = e.target.value;
-              searchGroups(v);
-            },
-            "aria-label": "Search groups"
-          }
-        ),
-        /* @__PURE__ */ jsxs("span", { style: { fontSize: 12, color: t.muted, whiteSpace: "nowrap" }, children: [
-          groups.length,
-          " of ",
-          groupTotal
+      access === "ok" && groups !== null && /* @__PURE__ */ jsxs(Fragment, { children: [
+        /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: 8, alignItems: "center", padding: "12px 16px 6px" }, children: [
+          /* @__PURE__ */ jsx("strong", { style: { fontSize: 13 }, children: "Groups" }),
+          /* @__PURE__ */ jsx("span", { style: chip, children: groupTotal })
+        ] }),
+        /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: 8, alignItems: "center", padding: "6px 16px 10px", borderBottom: `1px solid ${t.border}` }, children: [
+          /* @__PURE__ */ jsx(
+            "input",
+            {
+              style: { ...inputStyle, flex: 1 },
+              placeholder: "Search groups\u2026",
+              defaultValue: groupQuery,
+              onChange: (e) => {
+                const v = e.target.value;
+                searchGroups(v);
+              },
+              "aria-label": "Search groups"
+            }
+          ),
+          /* @__PURE__ */ jsxs("span", { style: { fontSize: 12, color: t.muted, whiteSpace: "nowrap" }, children: [
+            groups.length,
+            " of ",
+            groupTotal
+          ] })
         ] })
       ] }),
       access === "ok" && groups !== null && groups.length === 0 && /* @__PURE__ */ jsx("div", { style: { padding: "28px 20px", textAlign: "center", color: t.muted }, children: groupQuery ? `No groups match \u201C${groupQuery}\u201D.` : "No groups yet. Create one to start organizing your users." }),
@@ -696,6 +803,8 @@ var ApiKeyWidget = React2.forwardRef(function ApiKeyWidget2({ endpoint = "/api/a
   const [confirming, setConfirming] = React2.useState(null);
   const [rowError, setRowError] = React2.useState(null);
   const [copied, setCopied] = React2.useState(false);
+  const [keyQuery, setKeyQuery] = React2.useState("");
+  const [visibleCount, setVisibleCount] = React2.useState(10);
   const call = React2.useCallback(async (body) => {
     const res = await fetch(endpoint, body ? { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body) } : { cache: "no-store" });
     const data = await res.json().catch(() => ({}));
@@ -879,7 +988,20 @@ var ApiKeyWidget = React2.forwardRef(function ApiKeyWidget2({ endpoint = "/api/a
           /* @__PURE__ */ jsx2("button", { style: { ...btn("primary"), ...disabledStyle(creating) }, disabled: creating, onClick: create, children: creating ? "Creating\u2026" : "Create API key" })
         ] })
       ] }),
-      !denied && keys !== null && keys.length > 0 && /* @__PURE__ */ jsx2("ul", { style: { listStyle: "none", margin: 0, padding: 0 }, children: keys.map((k) => {
+      !denied && keys !== null && keys.length > 5 && /* @__PURE__ */ jsx2("div", { style: { display: "flex", gap: 8, alignItems: "center", padding: "10px 16px", borderBottom: `1px solid ${t.border}` }, children: /* @__PURE__ */ jsx2(
+        "input",
+        {
+          value: keyQuery,
+          onChange: (e) => {
+            setKeyQuery(e.target.value);
+            setVisibleCount(10);
+          },
+          placeholder: "Search keys\u2026",
+          "aria-label": "Search keys",
+          style: { flex: 1, fontFamily: "inherit", fontSize: 13, padding: "6px 10px", borderRadius: 8, border: `1px solid ${t.border}`, background: t.surface, color: t.text, minWidth: 0 }
+        }
+      ) }),
+      !denied && keys !== null && keys.length > 0 && /* @__PURE__ */ jsx2("ul", { style: { listStyle: "none", margin: 0, padding: 0 }, children: keys.filter(matchesKeyQuery(keyQuery)).slice(0, visibleCount).map((k) => {
         const anyBusy = busyAny;
         const used = relTime2(k.last_used);
         const created = k.created_at ? new Date(k.created_at).toLocaleDateString() : null;
@@ -938,6 +1060,24 @@ var ApiKeyWidget = React2.forwardRef(function ApiKeyWidget2({ endpoint = "/api/a
           rowError?.keyId === k.key_id && /* @__PURE__ */ jsx2("div", { role: "alert", style: { fontSize: 12, color: t.danger, marginTop: 6 }, children: rowError.msg })
         ] }, k.key_id);
       }) }),
+      !denied && keys !== null && keys.length > 0 && (() => {
+        const matched = keys.filter(matchesKeyQuery(keyQuery));
+        if (matched.length === 0) {
+          return /* @__PURE__ */ jsxs2("div", { style: { padding: "14px 16px", fontSize: 13, color: t.muted }, children: [
+            "No keys match \u201C",
+            keyQuery,
+            "\u201D."
+          ] });
+        }
+        if (matched.length <= visibleCount) return null;
+        return /* @__PURE__ */ jsx2("div", { style: { padding: "10px 16px", borderTop: `1px solid ${t.border}` }, children: /* @__PURE__ */ jsxs2("button", { style: btn("ghost", true), onClick: () => setVisibleCount((v) => v + 10), children: [
+          "Show more (",
+          Math.min(visibleCount, matched.length),
+          " of ",
+          matched.length,
+          ")"
+        ] }) });
+      })(),
       !denied && rowError && rowError.keyId === "" && /* @__PURE__ */ jsx2("div", { role: "alert", style: { padding: "0 16px 14px", fontSize: 12, color: t.danger }, children: rowError.msg })
     ] })
   ] });
@@ -945,6 +1085,11 @@ var ApiKeyWidget = React2.forwardRef(function ApiKeyWidget2({ endpoint = "/api/a
 function byNewest(a, b) {
   return new Date(b.created_at ?? 0).getTime() - new Date(a.created_at ?? 0).getTime();
 }
+function matchesKeyQuery(q) {
+  const term = q.trim().toLowerCase();
+  if (!term) return () => true;
+  return (k) => `${k.key_prefix ?? ""} ${k.key_suffix ?? ""} ${k.environment ?? ""} ${k.key_id}`.toLowerCase().includes(term);
+}
 var react_default = ApiKeyWidget;
 export {
   ApiKeyWidget,

package/dist/server/index.js

@@ -109,17 +109,26 @@ function createApiblazeGroups(cfg) {
   async function run(user, op) {
     const { tenant } = await context(user);
     if (op.action === "snapshot") {
-      const [groupsRes, observedRes] = await Promise.all([
+      const [groupsRes, usersRes, observedRes] = await Promise.all([
         iam("GET", "/groups", user, tenant, void 0, { limit: "25" }),
+        iam("GET", "/users", user, tenant, void 0, { limit: "25" }),
         iam("GET", "/observed-identities", user, tenant, void 0, { limit: "1" })
       ]);
-      if (groupsRes.status === 403) return { status: 200, data: { access: "pending", email: user.email ?? null, groups: [], groupTotal: 0, observedNew: 0 } };
+      if (groupsRes.status === 403) return { status: 200, data: { access: "pending", email: user.email ?? null, groups: [], groupTotal: 0, users: [], userTotal: 0, observedNew: 0 } };
       if (!groupsRes.ok) return { status: groupsRes.status, data: { error: await safeErr(groupsRes) } };
       const g = await groupsRes.json();
+      const u = usersRes.ok ? await usersRes.json() : {};
       const o = observedRes.ok ? await observedRes.json() : {};
       return {
         status: 200,
-        data: { access: "ok", groups: g.groups ?? [], groupTotal: g.total ?? (g.groups?.length ?? 0), observedNew: o.total ?? 0 }
+        data: {
+          access: "ok",
+          groups: g.groups ?? [],
+          groupTotal: g.total ?? (g.groups?.length ?? 0),
+          users: u.users ?? [],
+          userTotal: u.total ?? (u.users?.length ?? 0),
+          observedNew: o.total ?? 0
+        }
       };
     }
     switch (op.action) {

package/dist/server/index.mjs

@@ -81,17 +81,26 @@ function createApiblazeGroups(cfg) {
   async function run(user, op) {
     const { tenant } = await context(user);
     if (op.action === "snapshot") {
-      const [groupsRes, observedRes] = await Promise.all([
+      const [groupsRes, usersRes, observedRes] = await Promise.all([
         iam("GET", "/groups", user, tenant, void 0, { limit: "25" }),
+        iam("GET", "/users", user, tenant, void 0, { limit: "25" }),
         iam("GET", "/observed-identities", user, tenant, void 0, { limit: "1" })
       ]);
-      if (groupsRes.status === 403) return { status: 200, data: { access: "pending", email: user.email ?? null, groups: [], groupTotal: 0, observedNew: 0 } };
+      if (groupsRes.status === 403) return { status: 200, data: { access: "pending", email: user.email ?? null, groups: [], groupTotal: 0, users: [], userTotal: 0, observedNew: 0 } };
       if (!groupsRes.ok) return { status: groupsRes.status, data: { error: await safeErr(groupsRes) } };
       const g = await groupsRes.json();
+      const u = usersRes.ok ? await usersRes.json() : {};
       const o = observedRes.ok ? await observedRes.json() : {};
       return {
         status: 200,
-        data: { access: "ok", groups: g.groups ?? [], groupTotal: g.total ?? (g.groups?.length ?? 0), observedNew: o.total ?? 0 }
+        data: {
+          access: "ok",
+          groups: g.groups ?? [],
+          groupTotal: g.total ?? (g.groups?.length ?? 0),
+          users: u.users ?? [],
+          userTotal: u.total ?? (u.users?.length ?? 0),
+          observedNew: o.total ?? 0
+        }
       };
     }
     switch (op.action) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apiblaze",
-  "version": "0.19.5",
+  "version": "0.19.7",
   "description": "APIblaze CLI — Chat with your APIs, Manage your API keys, users and groups with the APIblaze serverless proxy",
   "keywords": [
     "apiblaze",