@astram/guide 0.2.21 → 0.2.22

package/CAPABILITIES.md

@@ -474,10 +474,25 @@ imports: [
   (`{ announcement, personal, total }`), `POST /account/notifications/:uuid/read` (204),
   `POST /account/notifications/read-all?category=` (`{ updated }`). Another user's or company's
   notice is a 404, like a missing one. Restricted sessions (re-enrolment, mandatory 2FA) get 403.
+- **Notification center (G-035):** the list also takes `kind`, `status=unread|read|archived`
+  (absent ⇒ not archived), `from` / `to` (UTC days `YYYY-MM-DD`, inclusive) and `search` (title or
+  body, case- and accent-insensitive, ≤ 100 characters; blank ⇒ no search); rows carry
+  `kindLabel`, `severity` and `archivedAt`. `GET /account/notifications/kinds` (`{ kinds: [{ kind,
+  label, category }] }`), `POST /account/notifications/:uuid/{unread,archive,unarchive}` (204;
+  archive also marks read, archived notices are never counted as unread) and `POST
+  /account/notifications/bulk` `{ action: read|unread|archive|unarchive, uuids (1–100) }` ⇒
+  `{ updated }` (only the caller's own notices in the active company change). Archive never
+  keeps a notice past retention. The scaffold's dropdowns show unread notices only and link to
+  the `/notifications` page; `server/src/notifications/app-notifications.service.ts` is an example
+  for posting your own.
 - **Register your kinds** once: `ShieldModule.forRoot({ notificationKinds: [{ kind:
-  'naes.import_review', category: 'personal' }] })`. A kind is dotted lower-case
-  (`^[a-z][a-z0-9_]*(\.[a-z][a-z0-9_]*)+$`, ≤ 64); `shield.` is reserved. A bad or duplicate entry
-  fails boot. `category` is `announcement` (release news, notices to many) or `personal`.
+  'naes.import_review', category: 'personal', label: 'Import review', severity: 'warning' }] })`.
+  A kind is dotted lower-case (`^[a-z][a-z0-9_]*(\.[a-z][a-z0-9_]*)+$`, ≤ 64); `shield.` is
+  reserved. A bad or duplicate entry fails boot. `category` is `announcement` (release news,
+  notices to many) or `personal`. `label` (optional, 1–40 characters, plain text, shown to every
+  company: no company or person names) is the type users see; unset ⇒ made from the kind's last
+  segment (`Import review`), cut to 40 with "…", and boot logs one warning listing such kinds.
+  `severity` is `info` (default), `success` or `warning`; a bad label or severity fails boot.
 - **Post** with `NotificationService` (inject `SHIELD_NOTIFICATIONS` from `@astram/guard`):
   `post({ tenantId, recipients, kind, title, body?, link?, dedupeKey? }, { query? })` ⇒
   `{ created, skipped }`. `post` trusts its caller: take `tenantId` (and the recipients) from the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astram/guide",
-  "version": "0.2.21",
+  "version": "0.2.22",
   "license": "MIT",
   "description": "Astram framework — the AI/dev GUIDE layer (ADR-0025). Ships the framework's hard rules + capabilities manifest as installed, upgrade-refreshed docs. A consumer app's CLAUDE.md references FRAMEWORK_RULES.md from this package; `npm update` replaces it wholesale so new rules arrive cleanly, while the app's own .astram/guide/ layer is never touched. This is the framework-owned FLOOR: an app rule may tighten it, never weaken it.",
   "type": "commonjs",