Icu 18506 load resource IDs for autocomplete

[ZedLi]

Description

Added logic to handle autocompletion of IDs loaded dynamically from the DB. You can search by both name and ID which are available filtered by the allowed scope IDs on the role.

Screenshots (if appropriate)

Screen.Recording.2026-04-27.at.4.05.49.PM.mov

How to Test

Go to the role you're testing and try different scopes on the role. Try editing grants and see what ids are available.

Checklist

• I have added before and after screenshots for UI changes
• [ ] I have added JSON response output for API changes
• [ ] I have added steps to reproduce and test for bug fixes in the description
• I have commented on my code, particularly in hard-to-understand areas
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• I have added a11y-tests label to run a11y audit tests if needed

PCI review checklist

• I have documented a clear reason for, and description of, the change I am making.
• If applicable, I've documented a plan to revert these changes if they require more than reverting the pull request.
• If applicable, I've documented the impact of any changes to security controls.
  Examples of changes to security controls include using new access control methods, adding or removing logging pipelines, etc.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
boundary-ui	Ready	Preview, Comment	Apr 28, 2026 9:13pm
boundary-ui-desktop	Ready	Preview, Comment	Apr 28, 2026 9:13pm

[ZedLi]

This is something I was thinking of doing if we ever introduced global searching. With the loading of all resources for autocomplete, it's basically at that point. My main worry was the churn of loading the same resources but at different scopes.

For example, if i've loaded all targets from the global scope recursively already (i.e. all targets), do I need to re-load and hit the API for all scopes in a specific project? Ideally I should just re-use the global scope list token and check if there were any new ones and just the the sqlite DB properly filter down the right targets.

Let me know if you have any better ideas or thoughts/concerns about this pattern!