feat: add paginated API endpoint for groups - #27603

Add a paginated, server-side searchable groups endpoint and wire the
organization Groups page to it, matching the organization Members page
pattern (useSearchParams + usePaginatedQuery + useFilter with a
presentational view rendering Filter + PaginationContainer).

- database: new PaginatedOrganizationGroups query with COUNT(*) OVER(),
  deterministic ORDER BY LOWER(name), OFFSET/LIMIT. dbauthz wrapper does a
  single org-wide ActionRead check (no post-filter) to keep LIMIT/OFFSET and
  the count consistent, mirroring PaginatedOrganizationMembers.
- codersdk: PaginatedGroupsResponse + GroupsPaginated client method.
- searchquery: minimal Groups(q) parser for free-text search.
- enterprise: paginatedGroups handler + /organizations/{organization}/paginated-groups route.
- frontend: getOrganizationPaginatedGroups API, paginatedGroupsByOrganization
  query, GroupsFilter (search-only), GroupsPageView filter + pagination,
  updated stories.

The legacy /groups endpoint and its post-filter are left untouched.

Generated with Coder Agents.

fix: hide Filter preset menu if no presets are provided

fix: move "Create group" button to GroupsPageView to match OrganizationMembersPageView

Merge remote-tracking branch 'origin/main' into aqandrew/devex-434-groups-search-pagination

docs: regenerate enterprise API reference after merging main

fix(site/src/pages/GroupsPage): keep GroupsPageView presentational

Gate the Create group button on the canCreateGroup prop the container
already passes, instead of re-deriving permissions via useGroupsSettings +
organizationsPermissions inside the view. Calling useGroupsSettings coupled
the presentational view to GroupsPageContext, which threw "useGroupsSettings
should be used inside of GroupsPageContext" in Storybook.

test: set correct pagination number labels for WithSearchAndPagination story

refactor: replace GroupsParams struct with string

fix: order PaginatedOrganizationGroups by name, then id

style: add spaces around cast operators

Merge remote-tracking branch 'origin/main' into aqandrew/devex-434-groups-search-pagination

# Conflicts:
#	site/src/api/api.ts
#	site/src/api/queries/groups.ts
#	site/src/pages/GroupsPage/GroupsPage.tsx
#	site/src/pages/GroupsPage/GroupsPageView.stories.tsx
#	site/src/pages/GroupsPage/GroupsPageView.tsx

Merge remote-tracking branch 'origin/aqandrew/devex-434-groups-search-pagination' into aqandrew/devex-434-groups-search-pagination

fix(coderd/database): restore OFFSET in PaginatedOrganizationGroups

The name+id tiebreaker commit (7f6e800) accidentally dropped the
OFFSET @offset_opt clause when it was collapsed onto the ORDER BY line,
which disabled offset pagination and removed OffsetOpt from the generated
params. Restore it alongside the id tiebreaker and regenerate.

refactor(codersdk): add PaginatedGroupsRequest and rename OrganizationGroupsPaginated

Replace UsersRequest with a dedicated PaginatedGroupsRequest (pagination +
search only) so the paginated groups client no longer advertises key:value
filters the endpoint rejects with a 400. Rename GroupsPaginated to
OrganizationGroupsPaginated for parity with OrganizationMembersPaginated and
the DB/frontend names. Addresses review comment (codersdk/groups.go).

docs(codersdk): document org-wide read requirement on OrganizationGroupsPaginated

The paginated endpoint requires organization-wide group read and is not a
drop-in for Groups (GET /groups), which authorizes per-group. Document this
on the published SDK method so consumers do not assume equivalent behavior.
Addresses review comment (dbauthz.go).

fix(coderd/searchquery): support multi-word group search

Bare search terms were added as separate 'search' values, so a multi-word
query like 'front end' tripped the duplicate-param check and returned a 400
instead of a substring match the SQL supports. Concatenate bare terms into a
single search value. Addresses review comment (searchquery/search.go).

fix(enterprise/coderd): drop dead sql.ErrNoRows check in paginatedGroups

PaginatedOrganizationGroups is a :many query that returns an empty slice,
never sql.ErrNoRows, so the errors.Is guard was dead code. The empty result
is already handled by the len(groups) == 0 branch. Addresses review comment
(groups.go).

test(enterprise/coderd): assert paginated group member hydration

test(coderd): strengthen paginated groups query and search coverage

feat(site/src/pages/GroupsPage): show filter-aware empty state

refactor(site/src/components/Filter): drop unused GroupsFilter error prop

refactor(site/src/pages/GroupsPage): use Array.from map callback in story

Merge branch 'main' into aqandrew/devex-434-groups-search-pagination

…backend

…backend

Drop the nil-organization ELSE true branch so the query's data scope matches the dbauthz ResourceGroup.InOrg authorization check. The endpoint always passes a real organization ID, and cross-org listing is not a supported mode.

…aginated

Rename PaginatedOrganizationGroups for consistency with the GetX naming used elsewhere; PaginatedOrganizationMembers was the outlier the query was originally modeled on.

Add an optional after_id cursor to the paginated groups query so callers can page without duplicated or skipped rows when groups are inserted or deleted between requests. The cursor uses a row-value comparison on (LOWER(name), id) to match the query's ORDER BY, including the id tiebreaker for case-colliding names. after_id defaults to nil, so existing offset-based callers (the dashboard) are unaffected. Adds an AfterIDCursor subtest that pages via the cursor and asserts full, in-order, duplicate-free coverage.

The paginated groups endpoint does not return member rosters, but its
response reused codersdk.Group, so generated Swagger examples and
schemas.md advertised a members array that the endpoint never populates.

Introduce codersdk.PaginatedGroup, a slim summary that omits members and
keeps total_member_count, and convert rows via db2sdk.PaginatedGroup so
the generated API examples and schemas match the actual contract.

…page (#27604)"

This reverts commit c275054.

…backend