@astram/guide 0.2.20 → 0.2.22

package/CAPABILITIES.md

@@ -169,7 +169,10 @@ imports: [
   `GET /identity/auth-facts` feeds the frontend's permission-gated navigation.
 - **Scoped-hierarchy tenancy** (ADR-0027): a tenant is a company node; an admin's authority covers
   its subtree. Reads, updates, deletes AND creates of subtree-scoped types are walled in the query
-  (ADR-0030, ADR-0034). Non-root admins cannot create top-level tenants.
+  (ADR-0030, ADR-0034). Non-root admins cannot create top-level tenants. With
+  `IdentityFeatureModule` wired, a session's subtree (its company and every company below) is
+  resolved at sign-in automatically (identity 0.24); pass `ShieldModule.forRoot({ scopeSubtreeResolver })`
+  only to replace identity's resolver. Without identity, reach is the active company only.
 - **No escalation**: you can grant, revoke or assign (via postings) only roles and keys you hold
   (ADR-0029); a role used outside your subtree is root-only; changing another user's email or
   status needs dominance over that user. Grant changes are audited in the same transaction.
@@ -471,10 +474,25 @@ imports: [
   (`{ announcement, personal, total }`), `POST /account/notifications/:uuid/read` (204),
   `POST /account/notifications/read-all?category=` (`{ updated }`). Another user's or company's
   notice is a 404, like a missing one. Restricted sessions (re-enrolment, mandatory 2FA) get 403.
+- **Notification center (G-035):** the list also takes `kind`, `status=unread|read|archived`
+  (absent ⇒ not archived), `from` / `to` (UTC days `YYYY-MM-DD`, inclusive) and `search` (title or
+  body, case- and accent-insensitive, ≤ 100 characters; blank ⇒ no search); rows carry
+  `kindLabel`, `severity` and `archivedAt`. `GET /account/notifications/kinds` (`{ kinds: [{ kind,
+  label, category }] }`), `POST /account/notifications/:uuid/{unread,archive,unarchive}` (204;
+  archive also marks read, archived notices are never counted as unread) and `POST
+  /account/notifications/bulk` `{ action: read|unread|archive|unarchive, uuids (1–100) }` ⇒
+  `{ updated }` (only the caller's own notices in the active company change). Archive never
+  keeps a notice past retention. The scaffold's dropdowns show unread notices only and link to
+  the `/notifications` page; `server/src/notifications/app-notifications.service.ts` is an example
+  for posting your own.
 - **Register your kinds** once: `ShieldModule.forRoot({ notificationKinds: [{ kind:
-  'naes.import_review', category: 'personal' }] })`. A kind is dotted lower-case
-  (`^[a-z][a-z0-9_]*(\.[a-z][a-z0-9_]*)+$`, ≤ 64); `shield.` is reserved. A bad or duplicate entry
-  fails boot. `category` is `announcement` (release news, notices to many) or `personal`.
+  'naes.import_review', category: 'personal', label: 'Import review', severity: 'warning' }] })`.
+  A kind is dotted lower-case (`^[a-z][a-z0-9_]*(\.[a-z][a-z0-9_]*)+$`, ≤ 64); `shield.` is
+  reserved. A bad or duplicate entry fails boot. `category` is `announcement` (release news,
+  notices to many) or `personal`. `label` (optional, 1–40 characters, plain text, shown to every
+  company: no company or person names) is the type users see; unset ⇒ made from the kind's last
+  segment (`Import review`), cut to 40 with "…", and boot logs one warning listing such kinds.
+  `severity` is `info` (default), `success` or `warning`; a bad label or severity fails boot.
 - **Post** with `NotificationService` (inject `SHIELD_NOTIFICATIONS` from `@astram/guard`):
   `post({ tenantId, recipients, kind, title, body?, link?, dedupeKey? }, { query? })` ⇒
   `{ created, skipped }`. `post` trusts its caller: take `tenantId` (and the recipients) from the
@@ -506,8 +524,8 @@ imports: [
   (directly or through `identity:<type>:*` / `identity:*`). `GET /identity/permission-announcements
   ?status=open|dismissed&page=&limit=&companyUuid=` lists the tasks the caller can act on: holders
   of `identity:role:update` whose grant ceiling covers the key, for the companies below them (their
-  own company already holds what they can grant; this needs `scopeSubtreeResolver` wired in
-  `ShieldModule.forRoot`, which the scaffold does not do yet); root sees every company. On a fresh
+  own company already holds what they can grant; the subtree comes with `IdentityFeatureModule`,
+  identity 0.24); root sees every company. On a fresh
   install the keys from the very first catalogue pass raise no task (identity 0.23). Granting the key to any of the company's roles closes the
   task on the next read; `POST /identity/permission-announcements/:companyUuid/:key/dismiss`
   ("Reviewed, not needed", audited) closes it on purpose and `…/reopen` undoes that. A key removed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astram/guide",
-  "version": "0.2.20",
+  "version": "0.2.22",
   "license": "MIT",
   "description": "Astram framework — the AI/dev GUIDE layer (ADR-0025). Ships the framework's hard rules + capabilities manifest as installed, upgrade-refreshed docs. A consumer app's CLAUDE.md references FRAMEWORK_RULES.md from this package; `npm update` replaces it wholesale so new rules arrive cleanly, while the app's own .astram/guide/ layer is never touched. This is the framework-owned FLOOR: an app rule may tighten it, never weaken it.",
   "type": "commonjs",