1 files changed, 94 insertions, 0 deletions
diff --git a/core/modules/groups.sh b/core/modules/groups.sh
new file mode 100644
index 0000000..e446b12
--- /dev/null
+++ b/core/modules/groups.sh
@@ -0,0 +1,94 @@
+#!/usr/bin/env bash
+# Module: groups
+# Description: Gestiona grupos del sistema (crear, modificar, eliminar)
+# Author: Luis GuLo
+# Version: 1.1.0
+# Dependencies: getent, groupadd, groupmod, groupdel, sudo
+
+groups_task() {
+  local host="$1"; shift
+  declare -A args
+  for arg in "$@"; do key="${arg%%=*}"; value="${arg#*=}"; args["$key"]="$value"; done
+
+  local groupname="${args[groupname]}"
+  local gid="${args[gid]:-}"
+  local state="${args[state]:-create}"
+  local become="${args[become]}"
+  local prefix=""
+  [ "$become" = "true" ] && prefix="sudo"
+
+  # 🌐 Cargar traducciones
+  local lang="${shflow_vars[language]:-es}"
+  local trfile="$(dirname "${BASH_SOURCE[0]}")/groups.tr.${lang}"
+  declare -A tr
+  if [[ -f "$trfile" ]]; then
+    while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"
+  fi
+
+  # 🛡️ Validación
+  if [[ "$become" != "true" && "$EUID" -ne 0 ]]; then
+    echo "${tr[priv_required]:-❌ [groups] Se requieren privilegios para gestionar grupos. Usa 'become: true'.}"
+    return 1
+  fi
+
+  if [[ -z "$groupname" ]]; then
+    echo "${tr[missing_groupname]:-❌ [groups] Falta el parámetro obligatorio 'groupname'}"
+    return 1
+  fi
+
+  case "$state" in
+    create)
+      echo "${tr[enter_create]:-🔧 [groups] Entrando en create}"
+      if getent group "$groupname" &>/dev/null; then
+        echo "$(render_msg "${tr[exists]}" "groupname=$groupname")"
+        return 0
+      fi
+      local cmd="$prefix groupadd \"$groupname\""
+      [[ -n "$gid" ]] && cmd="$cmd -g \"$gid\""
+      eval "$cmd" && echo "$(render_msg "${tr[created]}" "groupname=$groupname")"
+      ;;
+    modify)
+      echo "${tr[enter_modify]:-🔧 [groups] Entrando en modify}"
+      if ! getent group "$groupname" &>/dev/null; then
+        echo "$(render_msg "${tr[not_exists]}" "groupname=$groupname")"
+        return 1
+      fi
+      [[ -z "$gid" ]] && echo "${tr[nothing_to_modify]:-⚠️ [groups] Nada que modificar: falta 'gid'}" && return 0
+      eval "$prefix groupmod -g \"$gid\" \"$groupname\"" && echo "$(render_msg "${tr[modified]}" "groupname=$groupname")"
+      ;;
+    absent)
+      echo "${tr[enter_absent]:-🔧 [groups] Entrando en absent}"
+      if ! getent group "$groupname" &>/dev/null; then
+        echo "$(render_msg "${tr[already_deleted]}" "groupname=$groupname")"
+        return 0
+      fi
+      eval "$prefix groupdel \"$groupname\"" && echo "$(render_msg "${tr[deleted]}" "groupname=$groupname")"
+      ;;
+    *)
+      echo "$(render_msg "${tr[unsupported_state]}" "state=$state")"
+      return 1
+      ;;
+  esac
+}
+
+check_dependencies_groups() {
+  local lang="${shflow_vars[language]:-es}"
+  local trfile="$(dirname "${BASH_SOURCE[0]}")/groups.tr.${lang}"
+  declare -A tr
+  if [[ -f "$trfile" ]]; then
+    while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"
+  fi
+
+  local missing=()
+  for cmd in getent sudo; do
+    command -v "$cmd" >/dev/null 2>&1 || missing+=("$cmd")
+  done
+
+  if [[ ${#missing[@]} -gt 0 ]]; then
+    echo "$(render_msg "${tr[missing_deps]}" "cmds=${missing[*]}")"
+    return 1
+  fi
+
+  echo "${tr[deps_ok]:-✅ [groups] Todas las dependencias están presentes}"
+  return 0
+}