Fix WG/IG modeling gaps - #170
Open
claude[bot] wants to merge 1 commit into
Open
Conversation
Add the enterprise-managed-authorization IG, the two active auth sub-WGs (tool scopes and fine-grained authorization), an agents WG Discord role, and auth IG memberships from the charter. Convert skills-over-mcp from IG to WG and security from WG to IG per their charters, updating team names and all references. Add ochafik to the MCP Apps WG and pcarleton to the security IG. Remove the server-identity-wg and agents-ig roles, whose Discord channels are archived or gone. Fix the README link to src/config/roles.ts. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VRxNJh9HqnkTYdpALP5Vhf
Pulumi PreviewClick to expand preview output |
LucaButBoring
approved these changes
Aug 17, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Requested by David Soria Parra · Slack thread
Aligns the modeled roles with the WG/IG charters in
docs/community/working-groups/anddocs/community/interest-groups/at 4df2d6b. Pulumi preview has no local credentials in this workflow, so the plan comment the preview workflow posts on this PR is the thing to review before merging.Before / After
Before: two chartered groups had no artifacts here, two groups were modeled with the wrong type, three charter-listed people were missing from their groups, two roles pointed at Discord channels that are archived or deleted, and the README linked to a file that does not exist.
After: every chartered group in the docs repo has a matching role of the correct type, charter leadership is reflected in memberships, roles for dead Discord channels are gone, and the uncharted roles that remain are flagged below for a maintainer decision.
Changes
Adds
enterprise-managed-authorization-igrole (Discord only, matching the other IGs without a repo). Members from the charter leadership: @pcarleton and @aaronpk.auth-wg-tool-scopesandauth-wg-fine-grained-authz, as GitHub teams underworking-groupsplus synced Discord roles. Their charters are still pending, so no members are assigned yet. The four completed sub-WGs are intentionally not added, and none of them were ever modeled here before.agents working group (synced)), which previously had a GitHub team only.Renames (see fallout warning below)
skills-over-mcp-igbecomesskills-over-mcp-wg. The charter converted the group from IG to WG on 2026-04-16. The team moves from theinterest-groupsparent toworking-groups, the Discord role is renamed, and theexperimental-ext-skillsgrant now references the new team name.security-wgbecomessecurity-ig. The group is chartered as an interest group. The team moves from theworking-groupsparent tointerest-groupsand all sixrepoAccess.tsreferences are updated to the new name with permissions unchanged. Reviewing the breadth of itsadmingrants is a separate workstream.Membership fixes
Removals
server-identity-wg: its Discord channel is archived (#server-identity-wg-archived) and no charter exists. The sole membership reference (@nickcoai) is removed.agents-ig: its Discord channel no longer exists at all, no charter exists, and the group's successor is the chartered agents WG. The sole membership reference (@LucaButBoring, who is already in the agents WG) is removed. Pulumi will delete the now-unmanagedagents interest group (synced)Discord role.Docs
src/config/roles.tsinstead of the nonexistentsrc/config/groups.ts.Rename fallout warning
In this program a GitHub team rename is a delete and recreate: the Team resource URN is the team name and membership URNs embed it, with no aliases. For
skills-over-mcp-igandsecurity-wgthis means:users.tswill be dropped and only the IaC-defined members will be re-added..github/CODEOWNERS) and found no references outside this repo, all of which are updated here. Checking CODEOWNERS files, rulesets, and branch protections across the rest of the org was not possible from this session, so please scan for@modelcontextprotocol/skills-over-mcp-igand@modelcontextprotocol/security-wgbefore or right after merging.Flagged, not changed
transport-wg: no charter yet, kept because a Transports WG charter is planned and the agents WG charter references it as live. Its#transports-wgchannel is active.client-implementor-ig: no charter, kept because#client-implementors-igis an active channel. Needs a maintainer decision on chartering or retiring.gateways-ig: no charter, kept because#gateways-igis an active channel. Same decision needed.security-igrepo grants: the team keepsadminon six repos, carried over fromsecurity-wgunchanged. Reducing those permissions is out of scope here.#security-igchannel is active, so adding one is a candidate follow-up. Not added here because the charter membership table lists Discord handles for people who have nousers.tsentry, and inventing identities was out of scope.🤖 Generated with Claude Code
https://claude.ai/code/session_01VRxNJh9HqnkTYdpALP5Vhf
Generated by Claude Code