@astram/guide 0.2.18 → 0.2.19
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CAPABILITIES.md +12 -2
- package/package.json +1 -1
package/CAPABILITIES.md
CHANGED
|
@@ -501,8 +501,18 @@ imports: [
|
|
|
501
501
|
change sends nothing; a notice failure never blocks the change. `bootstrap:org --apply` sends
|
|
502
502
|
none. You do not register or post this kind (apps cannot use `shield.*`); label your permissions
|
|
503
503
|
(`@ObjectType({ permissions })`) so the notices read well.
|
|
504
|
-
-
|
|
505
|
-
|
|
504
|
+
- **Admin tasks for new permissions (G-027 step 4, identity 0.22):** each company gets one open
|
|
505
|
+
task per active permission key with a first-seen date that no role owned by the company holds
|
|
506
|
+
(directly or through `identity:<type>:*` / `identity:*`). `GET /identity/permission-announcements
|
|
507
|
+
?status=open|dismissed&page=&limit=` (root may add `companyUuid`) lists the tasks the caller can
|
|
508
|
+
act on: holders of `identity:role:update` whose grant ceiling covers the key, in their active
|
|
509
|
+
company only; root sees every company. Granting the key to any of the company's roles closes the
|
|
510
|
+
task on the next read; `POST /identity/permission-announcements/:companyUuid/:key/dismiss`
|
|
511
|
+
("Reviewed, not needed", audited) closes it on purpose and `…/reopen` undoes that. A key removed
|
|
512
|
+
and re-added by a later release opens again. Framework keys count like yours. Tasks are not
|
|
513
|
+
notices: they never enter `/account/notifications`.
|
|
514
|
+
- Not yet: the frontend-core service and the scaffold bell and Announcements icon (step 5), email
|
|
515
|
+
delivery.
|
|
506
516
|
|
|
507
517
|
## Separation of duties (ADR-0048; core 1.12, engine 0.14, guard 0.21, identity 0.18)
|
|
508
518
|
- **Declare it on the type** when the people who started or asked about a record must not
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@astram/guide",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.19",
|
|
4
4
|
"license": "MIT",
|
|
5
5
|
"description": "Astram framework — the AI/dev GUIDE layer (ADR-0025). Ships the framework's hard rules + capabilities manifest as installed, upgrade-refreshed docs. A consumer app's CLAUDE.md references FRAMEWORK_RULES.md from this package; `npm update` replaces it wholesale so new rules arrive cleanly, while the app's own .astram/guide/ layer is never touched. This is the framework-owned FLOOR: an app rule may tighten it, never weaken it.",
|
|
6
6
|
"type": "commonjs",
|