The product

A sync source feeds the directory. The AD/LDAP source is real; the Workday and SCIM sources are stubs. Each sync run upserts users and groups and marks users who are gone upstream as inactive tombstones.

Synced rows are not edited in Rolodex: the sync source owns them. Admins can also create native rows, which no sync ever touches.

The API implements the external LDAP Sync Cache contract in swagger.json: get a user by sAMAccountName, distinguishedName, DSS username, employee number or objectGUID, search users, list users and groups, and get a group with its nested groups expanded.

An SSH keys lookup returns the public SSH keys of one user, or of every member of a group, by name.

Every directory user and group is private until an admin publishes it. Published rows reach the public surface, which needs no account and shows only non-personal fields.

Directory lookups need a signed-in person with the org:contributor role or above, and they refuse service-account PATs.

An access binding says: members of this directory group get this role on this team, repo, project or group path. A reconciler compares that desired set with the platform and applies grants.

Connectors exist for GitHub, Azure DevOps, GitLab and Fleetworks. A new binding only previews until an admin confirms it, and enforcement is per target: report only, additive (the default) or full.

Service-account PATs are long-lived machine credentials with the dg_ prefix. Webhooks receive signed events such as user.public_changed, directory.synced and access.drift_detected.

Scheduled, token-gated drains send pending webhook deliveries, run sync sources and reconcile access targets.

The repo also contains an Expo mobile app and a Tauri desktop shell, each with a manual release workflow. No mobile or desktop release has been published, so this site does not offer a download.