@feedmepos/mf-hrm-portal 2.0.8-dev.3 → 2.0.8-dev.4

package/dist/{index-CMFJQ1p8.js → index-C8moNYeC.js}

@@ -2,7 +2,7 @@ var oe = Object.defineProperty;
 var se = (_, h, y) => h in _ ? oe(_, h, { enumerable: !0, configurable: !0, writable: !0, value: y }) : _[h] = y;
 var ot = (_, h, y) => se(_, typeof h != "symbol" ? h + "" : h, y);
 import { readonly as Nt, ref as Rt } from "vue";
-import { c as st } from "./app-efNRBiJB.js";
+import { c as st } from "./app-C9HyG-zy.js";
 var Pt = { exports: {} };
 (function(_, h) {
   (function(y, p) {

package/dist/{iteration-BzPWNf3I.js → iteration-KLUms7Qj.js}

@@ -1,4 +1,4 @@
-import { c as U } from "./app-efNRBiJB.js";
+import { c as U } from "./app-C9HyG-zy.js";
 import { useCoreStore as To, baseClientInstance as jr, FeedMeAuth as Zs } from "@feedmepos/mf-common";
 var Ys = {}, _n = {}, _ = {}, zo = {}, $i = {}, eo = {}, ui = {};
 (function(e) {

package/dist/{lodash-rnloBy2O.js → lodash-DCsXdK6o.js}

@@ -1,4 +1,4 @@
-import { c as jt } from "./app-efNRBiJB.js";
+import { c as jt } from "./app-C9HyG-zy.js";
 var Jr = { exports: {} };
 /**
  * @license

package/dist/src/helpers/permission-set.d.ts

@@ -43,7 +43,14 @@ export declare function materializeSystemPermissionSetOverrides(overridePermissi
 /**
  * Strip positive rules whose subject would be re-injected by system permission set expansion.
  * These need not be persisted to DB — expansion re-adds them at runtime.
- * Inverted rules (explicit user denials) are always preserved.
+ *
+ * Also strips inverted rules for subjects that are ONLY reachable as non-manage via permissions[]
+ * leaf injection. Such inverted rules cannot block permissions[] injection (only visitedSetIds/
+ * permissionSets[] expansion is blockable), are useless, and cause a CASL side-effect where an
+ * inverted `manage` rule inadvertently blocks `read` access.
+ *
+ * Inverted rules targeting subjects reachable as `manage` (via permissionSets[] chaining) are
+ * always preserved — they seed visitedSetIds to block system set re-expansion.
  */
 export declare function stripSystemExpandedPositives(permissions: FdoPermissionRule[]): FdoPermissionRule[];
 export declare const REPORT_SUBJECT_PREFIX = "business::report::";

package/dist/{team-CJ3xjFT7.js → team-Cguxd_q3.js}

@@ -1,6 +1,6 @@
 import { defineStore as d } from "pinia";
 import { ref as s, computed as o } from "vue";
-import { t as f } from "./index-DPcm9B8U.js";
+import { t as f } from "./index-BRx9j4oZ.js";
 const I = d("team", () => {
   const r = s([]), a = s(!1), m = o(
     () => Object.fromEntries(r.value.map((e) => [e.doc.userId, e.name]))

package/dist/{timesheet-BABSsqqp.js → timesheet-Bg3eBf_0.js}

@@ -1,8 +1,8 @@
-import { d as i } from "./dayjs.min-O2mY8Dsx.js";
+import { d as i } from "./dayjs.min-DNbUZdFy.js";
 import { defineStore as p, storeToRefs as T } from "pinia";
 import { ref as l } from "vue";
-import { b as c, g as y, s as S } from "./iteration-BzPWNf3I.js";
-import { i as u, b as g } from "./index-DPcm9B8U.js";
+import { b as c, g as y, s as S } from "./iteration-KLUms7Qj.js";
+import { i as u, b as g } from "./index-BRx9j4oZ.js";
 const f = {
   async readTimesheets(t, e) {
     return y(await c().get(`timesheet?start=${t}&end=${e}`));