@happyvertical/smrt-users 0.40.59 → 0.40.61

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/AGENTS.md +6 -1
  2. package/dist/chunks/{TerminalAuthService-lgAT1_KU.js → TerminalAuthService-h7XBwJLh.js} +34 -3
  3. package/dist/chunks/TerminalAuthService-h7XBwJLh.js.map +1 -0
  4. package/dist/collections/RoleCollection.d.ts +2 -0
  5. package/dist/collections/RoleCollection.d.ts.map +1 -1
  6. package/dist/collections/RolePermissionCollection.d.ts +9 -0
  7. package/dist/collections/RolePermissionCollection.d.ts.map +1 -1
  8. package/dist/index.js +3 -3
  9. package/dist/manifest.json +29 -1
  10. package/dist/smrt-knowledge.json +7 -5
  11. package/dist/sveltekit.js +1 -1
  12. package/package.json +9 -9
  13. package/dist/chunks/TerminalAuthService-lgAT1_KU.js.map +0 -1
package/AGENTS.md CHANGED
@@ -132,7 +132,12 @@ Setup: README → *Manifest-derived permission catalog* and *Postgres RLS enforc
132
132
  intentionally exclude users/RBAC authority and security resources (`users`,
133
133
  `tenants`, `roles`, `permissions`, memberships, groups, sessions, magic-link
134
134
  tokens, and related join/override tables). Re-seeding is additive and
135
- idempotent; pruning stale mappings requires `{ prune: true }`.
135
+ idempotent; pruning stale mappings requires `{ prune: true }`. When a
136
+ contributing package registers a new built-in self-personalization
137
+ permission after system roles already exist, call the explicit,
138
+ idempotent `RolePermissionCollection.seedDefaultRolePersonalizationPermissions()`
139
+ upgrade helper; it targets owner/admin/member/viewer only and never grants
140
+ custom roles.
136
141
 
137
142
  **Critical**: `getGroupIdsForTenant(userId, tenantId)` (joins with groups table to scope by tenant). Never use `getGroupIds()` — it's cross-tenant.
138
143