@7365admin1/core 3.72.1-staging.319 → 3.72.1-staging.320

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/.changeset/people-create-reach-enforce.md +5 -0
  2. package/dist/index.js +1 -1
  3. package/dist/index.js.map +1 -1
  4. package/dist/index.mjs +1 -1
  5. package/dist/index.mjs.map +1 -1
  6. package/package.json +1 -1
  7. package/test/e2e/person-write-scope.e2e.test.mjs +57 -0
  8. package/test/people-create-gate.test.mjs +16 -13
package/.changeset/people-create-reach-enforce.md ADDED
@@ -0,0 +1,5 @@
1
+ ---
2
+ "@7365admin1/core": patch
3
+ ---
4
+
5
+ Enforce the reach check on `POST /api/people` by default: a signed-in caller can only create a person at a site (or organisation) they belong to or serve. `PEOPLE_CREATE_REACH_MODE=log` switches back to counting without refusing.
package/dist/index.js CHANGED
@@ -57210,7 +57210,7 @@ var import_node_server_utils149 = require("@7365admin1/node-server-utils");
57210
57210
  var import_node_server_utils150 = require("@7365admin1/node-server-utils");
57211
57211
 
57212
57212
  // src/utils/people-create-gate.util.ts
57213
- var PEOPLE_CREATE_REACH_MODE_DEFAULT = "log";
57213
+ var PEOPLE_CREATE_REACH_MODE_DEFAULT = "enforce";
57214
57214
  function peopleCreateReachMode(env2 = process.env) {
57215
57215
  return gateMode(
57216
57216
  env2.PEOPLE_CREATE_REACH_MODE,