@happyvertical/smrt-template-sveltekit 0.51.10 → 0.51.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/package.json +15 -15
  2. package/template/README.md +8 -4
  3. package/template/package.json +11 -11
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@happyvertical/smrt-template-sveltekit",
3
- "version": "0.51.10",
3
+ "version": "0.51.11",
4
4
  "description": "Minimal SvelteKit project template with s-m-r-t framework integration",
5
5
  "type": "module",
6
6
  "main": "index.js",
@@ -29,22 +29,22 @@
29
29
  "directory": "packages/template-sveltekit"
30
30
  },
31
31
  "peerDependencies": {
32
- "@happyvertical/smrt-core": "0.51.10"
32
+ "@happyvertical/smrt-core": "0.51.11"
33
33
  },
34
34
  "devDependencies": {
35
- "@happyvertical/smrt-app-runtime": "0.51.10",
36
- "@happyvertical/smrt-assets": "0.51.10",
37
- "@happyvertical/smrt-cli": "0.51.10",
38
- "@happyvertical/smrt-config": "0.51.10",
39
- "@happyvertical/smrt-jobs": "0.51.10",
40
- "@happyvertical/smrt-playbooks": "0.51.10",
41
- "@happyvertical/smrt-profiles": "0.51.10",
42
- "@happyvertical/smrt-scanner": "0.51.10",
43
- "@happyvertical/smrt-svelte": "0.51.10",
44
- "@happyvertical/smrt-tenancy": "0.51.10",
45
- "@happyvertical/smrt-ui": "0.51.10",
46
- "@happyvertical/smrt-users": "0.51.10",
47
- "@happyvertical/smrt-web": "0.51.10",
35
+ "@happyvertical/smrt-app-runtime": "0.51.11",
36
+ "@happyvertical/smrt-assets": "0.51.11",
37
+ "@happyvertical/smrt-cli": "0.51.11",
38
+ "@happyvertical/smrt-config": "0.51.11",
39
+ "@happyvertical/smrt-jobs": "0.51.11",
40
+ "@happyvertical/smrt-playbooks": "0.51.11",
41
+ "@happyvertical/smrt-profiles": "0.51.11",
42
+ "@happyvertical/smrt-scanner": "0.51.11",
43
+ "@happyvertical/smrt-svelte": "0.51.11",
44
+ "@happyvertical/smrt-tenancy": "0.51.11",
45
+ "@happyvertical/smrt-ui": "0.51.11",
46
+ "@happyvertical/smrt-users": "0.51.11",
47
+ "@happyvertical/smrt-web": "0.51.11",
48
48
  "@happyvertical/sql": "^0.89.4",
49
49
  "@modelcontextprotocol/server": "^2.0.0",
50
50
  "@playwright/test": "^1.61.1",
package/template/README.md CHANGED
@@ -179,10 +179,14 @@ passes the session's exact `locals.permissions` snapshot to
179
179
  `assertOperationPermission()`. Keep that pattern for custom SvelteKit actions,
180
180
  endpoints, jobs running as a principal, and other in-process writes.
181
181
 
182
- Generated REST routes are authentication-gated and tenant-scoped. On SQLite,
183
- authentication is not a substitute for your app's operation policy. Put
184
- permission-checked mutations behind app-owned handlers, or use the framework's
185
- Postgres RLS setup when moving to a production database.
182
+ Generated REST routes are authentication-gated and tenant-scoped, and their
183
+ writes (POST/PUT/DELETE and mutating custom actions) also require the
184
+ `<collection>.<action>` permission in the session's `locals.permissions`
185
+ snapshot, failing closed with 403. Local owner onboarding seeds the default
186
+ role matrix over the catalog; run the sync and seed above again after adding
187
+ objects so existing roles receive the new slugs. Reads are not permission-gated
188
+ beyond field read permissions, so keep sensitive reads behind app-owned handlers
189
+ or the framework's Postgres RLS setup.
186
190
 
187
191
  ## 7. Load data into a SvelteKit page
188
192
 
package/template/package.json CHANGED
@@ -37,19 +37,19 @@
37
37
  "svelte-check": "^4.7.2",
38
38
  "typescript": "^6.0.3",
39
39
  "vite": "^8.1.4",
40
- "@happyvertical/smrt-cli": "^0.51.10"
40
+ "@happyvertical/smrt-cli": "^0.51.11"
41
41
  },
42
42
  "dependencies": {
43
- "@happyvertical/smrt-app-runtime": "^0.51.10",
44
- "@happyvertical/smrt-config": "^0.51.10",
45
- "@happyvertical/smrt-core": "^0.51.10",
46
- "@happyvertical/smrt-jobs": "^0.51.10",
47
- "@happyvertical/smrt-profiles": "^0.51.10",
48
- "@happyvertical/smrt-svelte": "^0.51.10",
49
- "@happyvertical/smrt-tenancy": "^0.51.10",
50
- "@happyvertical/smrt-ui": "^0.51.10",
51
- "@happyvertical/smrt-users": "^0.51.10",
52
- "@happyvertical/smrt-web": "^0.51.10",
43
+ "@happyvertical/smrt-app-runtime": "^0.51.11",
44
+ "@happyvertical/smrt-config": "^0.51.11",
45
+ "@happyvertical/smrt-core": "^0.51.11",
46
+ "@happyvertical/smrt-jobs": "^0.51.11",
47
+ "@happyvertical/smrt-profiles": "^0.51.11",
48
+ "@happyvertical/smrt-svelte": "^0.51.11",
49
+ "@happyvertical/smrt-tenancy": "^0.51.11",
50
+ "@happyvertical/smrt-ui": "^0.51.11",
51
+ "@happyvertical/smrt-users": "^0.51.11",
52
+ "@happyvertical/smrt-web": "^0.51.11",
53
53
  "@happyvertical/sql": "^0.89.4",
54
54
  "@modelcontextprotocol/server": "^2.0.0"
55
55
  }