@happyvertical/smrt-users 0.42.7 → 0.43.1

package/dist/index.js

@@ -1,4 +1,4 @@
-import { $ as MembershipCollection, A as UserEmailKeyBackfillError, B as PermissionCatalogService, C as decodeOidcTransaction, Ct as SessionStatus, Dt as UsersCliAuthRequest, E as resolveOidcProviderConfig, Et as UserStatus, F as TenantHierarchyError, G as syncPermissionCatalog, H as deriveOperationPermissionSlug, I as MAX_TENANT_HIERARCHY_DEPTH, J as Role, K as RolePermission, L as Tenant, M as TenantPermissionOverrideCollection, N as TenantPermissionOverride, O as OidcProvisioningError, P as TenantCollection, Q as MembershipOverride, R as DEFAULT_ROLE_PERMISSION_PATTERNS, S as OidcLoginService, St as OverrideEffect, T as getUsersOidcConfig, Tt as TenantStatus, U as normalizeOperationPermissionAction, V as deriveOperationPermissionCollectionName, W as registerPermissionDefinitions, X as Permission, Y as PermissionCollection, Z as MembershipOverrideCollection, _ as readMobileBearerToken, _t as AccessRequestStatus, a as TerminalAuthRateLimitError, at as GroupCollection, b as PermissionResolver, bt as DEFAULT_TENANT_POLICY, c as assertOperationPermission, ct as UsersCliAuthApproveLimit, d as getCurrentSessionPermissionContext, dt as normalizeEmail, et as Membership, f as getRequestScopedDatabase, ft as UsersCliAuthRequestCollection, g as MobileAuthService, gt as generateSessionId, h as MobileAuthError, ht as Session, i as TerminalAuthError, it as GroupMember, j as backfillUserEmailKeys, k as UserCollection, l as checkOperationPermission, lt as User, m as withSessionPermissionContext, mt as DEFAULT_SESSION_TTL, n as DEFAULT_CLI_AUTH_REQUEST_TTL_SECONDS, nt as GroupRole, o as TerminalAuthService, ot as Group, p as withPrincipalPermissionContext, pt as SessionCollection, q as RoleCollection, r as DEFAULT_CLI_SESSION_TTL_SECONDS, rt as GroupMemberCollection, s as OperationPermissionError, st as UsersCliAuthApproveLimitCollection, t as DEFAULT_CLI_AUTH_POLL_INTERVAL_SECONDS, tt as GroupRoleCollection, u as hasOperationPermission, ut as isValidEmail, v as validateMobileRedirectUri, vt as DEFAULT_ROLES, w as encodeOidcTransaction, wt as TenantPermissionEffect, x as OidcLoginError, xt as MembershipStatus, y as SessionService, yt as DEFAULT_ROLE_SLUGS, z as RolePermissionCollection } from "./chunks/TerminalAuthService-Cnr2pnQq.js";
+import { $ as MembershipCollection, A as UserEmailKeyBackfillError, B as PermissionCatalogService, C as decodeOidcTransaction, Ct as SessionStatus, Dt as UsersCliAuthRequest, E as resolveOidcProviderConfig, Et as UserStatus, F as TenantHierarchyError, G as syncPermissionCatalog, H as deriveOperationPermissionSlug, I as MAX_TENANT_HIERARCHY_DEPTH, J as Role, K as RolePermission, L as Tenant, M as TenantPermissionOverrideCollection, N as TenantPermissionOverride, O as OidcProvisioningError, P as TenantCollection, Q as MembershipOverride, R as DEFAULT_ROLE_PERMISSION_PATTERNS, S as OidcLoginService, St as OverrideEffect, T as getUsersOidcConfig, Tt as TenantStatus, U as normalizeOperationPermissionAction, V as deriveOperationPermissionCollectionName, W as registerPermissionDefinitions, X as Permission, Y as PermissionCollection, Z as MembershipOverrideCollection, _ as readMobileBearerToken, _t as AccessRequestStatus, a as TerminalAuthRateLimitError, at as GroupCollection, b as PermissionResolver, bt as DEFAULT_TENANT_POLICY, c as assertOperationPermission, ct as UsersCliAuthApproveLimit, d as getCurrentSessionPermissionContext, dt as normalizeEmail, et as Membership, f as getRequestScopedDatabase, ft as UsersCliAuthRequestCollection, g as MobileAuthService, gt as generateSessionId, h as MobileAuthError, ht as Session, i as TerminalAuthError, it as GroupMember, j as backfillUserEmailKeys, k as UserCollection, l as checkOperationPermission, lt as User, m as withSessionPermissionContext, mt as DEFAULT_SESSION_TTL, n as DEFAULT_CLI_AUTH_REQUEST_TTL_SECONDS, nt as GroupRole, o as TerminalAuthService, ot as Group, p as withPrincipalPermissionContext, pt as SessionCollection, q as RoleCollection, r as DEFAULT_CLI_SESSION_TTL_SECONDS, rt as GroupMemberCollection, s as OperationPermissionError, st as UsersCliAuthApproveLimitCollection, t as DEFAULT_CLI_AUTH_POLL_INTERVAL_SECONDS, tt as GroupRoleCollection, u as hasOperationPermission, ut as isValidEmail, v as validateMobileRedirectUri, vt as DEFAULT_ROLES, w as encodeOidcTransaction, wt as TenantPermissionEffect, x as OidcLoginError, xt as MembershipStatus, y as SessionService, yt as DEFAULT_ROLE_SLUGS, z as RolePermissionCollection } from "./chunks/TerminalAuthService-Cd_Xy7mq.js";
 import { ObjectRegistry, SmrtCollection, SmrtObject, field, findManifestEntryByQualifiedName, isUniqueViolationError, registerRetentionTask, smrt, unregisterRetentionTask } from "@happyvertical/smrt-core";
 import { createHash } from "node:crypto";
 import { TenantScoped, tenantId } from "@happyvertical/smrt-tenancy";
@@ -953,7 +953,7 @@ var MagicLinkService = class MagicLinkService {
 	* The caller is responsible for emailing the token to the user.
 	*/
 	async generate(email) {
-		const { SignJWT } = await import("./chunks/TerminalAuthService-Cnr2pnQq.js").then((n) => n.D);
+		const { SignJWT } = await import("./chunks/TerminalAuthService-Cd_Xy7mq.js").then((n) => n.D);
 		const key = await this.getSigningKey();
 		const nonce = crypto.randomUUID();
 		const normalizedEmail = normalizeEmail(email);
@@ -982,7 +982,7 @@ var MagicLinkService = class MagicLinkService {
 	* @throws {MagicLinkError} If the token is invalid, expired, or already used
 	*/
 	async verify(token) {
-		const { jwtVerify, errors } = await import("./chunks/TerminalAuthService-Cnr2pnQq.js").then((n) => n.D);
+		const { jwtVerify, errors } = await import("./chunks/TerminalAuthService-Cd_Xy7mq.js").then((n) => n.D);
 		const key = await this.getSigningKey();
 		let payload;
 		try {

package/dist/manifest.json

@@ -2,7 +2,7 @@
   "version": "1.0.0",
   "timestamp": 0,
   "packageName": "@happyvertical/smrt-users",
-  "packageVersion": "0.42.7",
+  "packageVersion": "0.43.1",
   "objects": {
     "@happyvertical/smrt-users:AccessRequestCollection": {
       "name": "accessrequestcollection",
@@ -3376,7 +3376,13 @@
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": true
+            "unique": true,
+            "foreignKey": {
+              "table": "users",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "attempt_count": {
             "type": "INTEGER",
@@ -3406,7 +3412,7 @@
             ]
           }
         ],
-        "version": "e9a0da34"
+        "version": "c45c02de"
       }
     },
     "@happyvertical/smrt-users:UsersCliAuthRequest": {
@@ -3553,19 +3559,37 @@
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": false,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "users",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "tenant_id": {
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": false,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "tenants",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "session_id": {
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": false,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "sessions",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "expires_at": {
             "type": "TIMESTAMP",
@@ -3618,7 +3642,7 @@
             ]
           }
         ],
-        "version": "76b0446f"
+        "version": "713ae04c"
       }
     },
     "@happyvertical/smrt-users:Group": {
@@ -3707,7 +3731,13 @@
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "tenants",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "name": {
             "type": "TEXT",
@@ -3744,7 +3774,7 @@
             ]
           }
         ],
-        "version": "5a6913b2"
+        "version": "1824c19b"
       }
     },
     "@happyvertical/smrt-users:GroupMember": {
@@ -3836,13 +3866,25 @@
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "groups",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "user_id": {
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "users",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           }
         },
         "indexes": [
@@ -3873,7 +3915,7 @@
             ]
           }
         ],
-        "version": "77f49385"
+        "version": "ed4d1187"
       }
     },
     "@happyvertical/smrt-users:GroupRole": {
@@ -3965,13 +4007,25 @@
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "groups",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "role_id": {
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "roles",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           }
         },
         "indexes": [
@@ -4002,7 +4056,7 @@
             ]
           }
         ],
-        "version": "75d06c96"
+        "version": "b1e35f93"
       }
     },
     "@happyvertical/smrt-users:UsersMagicLinkToken": {
@@ -4280,19 +4334,37 @@
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "users",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "tenant_id": {
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "tenants",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "role_id": {
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "roles",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "status": {
             "type": "TEXT",
@@ -4334,7 +4406,7 @@
             ]
           }
         ],
-        "version": "23fdb25d"
+        "version": "ebfd11e0"
       }
     },
     "@happyvertical/smrt-users:MembershipOverride": {
@@ -4448,13 +4520,25 @@
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "memberships",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "permission_id": {
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "permissions",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "effect": {
             "type": "TEXT",
@@ -4490,7 +4574,7 @@
             ]
           }
         ],
-        "version": "ab60f8f9"
+        "version": "25fe9da8"
       }
     },
     "@happyvertical/smrt-users:Permission": {
@@ -4758,7 +4842,13 @@
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": false,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "tenants",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "name": {
             "type": "TEXT",
@@ -4807,7 +4897,7 @@
             ]
           }
         ],
-        "version": "6c08582e"
+        "version": "47369d9d"
       }
     },
     "@happyvertical/smrt-users:RolePermission": {
@@ -4899,13 +4989,25 @@
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "roles",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "permission_id": {
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "permissions",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           }
         },
         "indexes": [
@@ -4936,7 +5038,7 @@
             ]
           }
         ],
-        "version": "453cc12c"
+        "version": "4dfed3ac"
       }
     },
     "@happyvertical/smrt-users:Session": {
@@ -5157,13 +5259,25 @@
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": false,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "users",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "tenant_id": {
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": false,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "tenants",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "status": {
             "type": "TEXT",
@@ -5233,7 +5347,7 @@
             ]
           }
         ],
-        "version": "692d8b0f"
+        "version": "dc55d351"
       }
     },
     "@happyvertical/smrt-users:Tenant": {
@@ -5297,6 +5411,25 @@
         }
       },
       "methods": {
+        "withDatabase": {
+          "name": "withDatabase",
+          "async": true,
+          "parameters": [
+            {
+              "name": "db",
+              "type": "DatabaseInterface",
+              "optional": false
+            },
+            {
+              "name": "operation",
+              "type": "Function",
+              "optional": false
+            }
+          ],
+          "returnType": "Promise<T>",
+          "isStatic": false,
+          "isPublic": true
+        },
         "getAiUsageSnapshot": {
           "name": "getAiUsageSnapshot",
           "async": false,
@@ -5908,7 +6041,13 @@
           "parent_tenant_id": {
             "type": "UUID",
             "referenceKind": "foreignKey",
-            "notNull": false
+            "notNull": false,
+            "foreignKey": {
+              "table": "tenants",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "hierarchy_level": {
             "type": "INTEGER",
@@ -5960,7 +6099,7 @@
             ]
           }
         ],
-        "version": "35dbdaec"
+        "version": "934f7025"
       }
     },
     "@happyvertical/smrt-users:TenantIntegration": {
@@ -6365,13 +6504,25 @@
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "tenants",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "permission_id": {
             "type": "UUID",
             "referenceKind": "foreignKey",
             "notNull": true,
-            "unique": false
+            "unique": false,
+            "foreignKey": {
+              "table": "permissions",
+              "column": "id",
+              "onDelete": "NO ACTION",
+              "onUpdate": "CASCADE"
+            }
           },
           "effect": {
             "type": "TEXT",
@@ -6407,7 +6558,7 @@
             ]
           }
         ],
-        "version": "f3bec965"
+        "version": "95b78bdd"
       }
     },
     "@happyvertical/smrt-users:User": {

package/dist/smrt-knowledge.json

@@ -3,12 +3,12 @@
   "sensitiveFieldsExcluded": true,
   "generatedAt": "1970-01-01T00:00:00.000Z",
   "packageName": "@happyvertical/smrt-users",
-  "packageVersion": "0.42.7",
+  "packageVersion": "0.43.1",
   "sourceManifestPath": "dist/manifest.json",
   "agentDocPath": "AGENTS.md",
   "sourceHashes": {
-    "manifest": "94061fb5e4dca649c0c3ad3b4fc49aab08479a7011857610eb04f2a056b61d54",
-    "packageJson": "b733ff5f5291151ba77403f5709269282c42c6b74a9a75fc28d1427b65b0416f",
+    "manifest": "72c611b1faf4967f171f9f140d1c2ec3f4cbd32043327babd58c143e6f357604",
+    "packageJson": "566165596931f697229091238b41df3ca003a3433c7b4e2ec6d20d01f4066ecb",
     "agents": "6ec265b8af7cdfa9fea1a3f128af9bf25cbcdb1353c34a81a7fc5b0d2e4a8f2b",
     "moduleDoc:agents/retention.md": "425c0a34ed33969badfef699751bfa670bdf618eda65e079e00815620aabed68"
   },
@@ -3170,7 +3170,8 @@
         "summarizeAiUsage",
         "toJSON",
         "toPlainObject",
-        "toPublicJSON"
+        "toPublicJSON",
+        "withDatabase"
       ],
       "methodSignatures": [
         {
@@ -3460,6 +3461,15 @@
             "options?: PublicJsonOptions"
           ],
           "returns": "Record<string>"
+        },
+        {
+          "name": "withDatabase",
+          "async": true,
+          "params": [
+            "db: DatabaseInterface",
+            "operation: Function"
+          ],
+          "returns": "Promise<T>"
         }
       ],
       "tableStrategy": "sti",

package/dist/sveltekit.js

@@ -1,4 +1,4 @@
-import { C as decodeOidcTransaction, E as resolveOidcProviderConfig, S as OidcLoginService, T as getUsersOidcConfig, _ as readMobileBearerToken, a as TerminalAuthRateLimitError, g as MobileAuthService, h as MobileAuthError, i as TerminalAuthError, m as withSessionPermissionContext, o as TerminalAuthService, s as OperationPermissionError, v as validateMobileRedirectUri, w as encodeOidcTransaction, x as OidcLoginError, y as SessionService } from "./chunks/TerminalAuthService-Cnr2pnQq.js";
+import { C as decodeOidcTransaction, E as resolveOidcProviderConfig, S as OidcLoginService, T as getUsersOidcConfig, _ as readMobileBearerToken, a as TerminalAuthRateLimitError, g as MobileAuthService, h as MobileAuthError, i as TerminalAuthError, m as withSessionPermissionContext, o as TerminalAuthService, s as OperationPermissionError, v as validateMobileRedirectUri, w as encodeOidcTransaction, x as OidcLoginError, y as SessionService } from "./chunks/TerminalAuthService-Cd_Xy7mq.js";
 import { DiscoveryArtifactValidationError, SMRT_APP_RESULT_CONTRACT, SMRT_APP_RESULT_SCHEMA, SMRT_APP_RESULT_VERSION, SMRT_DISCOVERY_CONFORMANCE_ARTIFACT_SCHEMA, SMRT_DISCOVERY_CONFORMANCE_SCHEMA, SMRT_DISCOVERY_CONFORMANCE_VERSION, SMRT_MCP_RESULT_METADATA_KEY, canonicalizeDiscoveryArtifact, createDiscoveryConformanceArtifact, deriveCommandRequirements, validateDiscoveryConformanceArtifact } from "./app-contract.js";
 import { ObjectRegistry } from "@happyvertical/smrt-core";
 import { createLogger } from "@happyvertical/logger";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-users",
-  "version": "0.42.7",
+  "version": "0.43.1",
   "description": "Multi-tenant user management for the SMRT framework - users, tenants, roles, permissions, groups",
   "type": "module",
   "smrtRawPrimitives": "strict",
@@ -48,13 +48,13 @@
     "@happyvertical/logger": "^0.88.0",
     "@happyvertical/sql": "^0.88.0",
     "jose": "^6.2.3",
-    "@happyvertical/smrt-config": "0.42.7",
-    "@happyvertical/smrt-core": "0.42.7",
-    "@happyvertical/smrt-profiles": "0.42.7",
-    "@happyvertical/smrt-tenancy": "0.42.7",
-    "@happyvertical/smrt-types": "0.42.7",
-    "@happyvertical/smrt-mobile-contract": "0.42.7",
-    "@happyvertical/smrt-ui": "0.42.7"
+    "@happyvertical/smrt-config": "0.43.1",
+    "@happyvertical/smrt-mobile-contract": "0.43.1",
+    "@happyvertical/smrt-profiles": "0.43.1",
+    "@happyvertical/smrt-core": "0.43.1",
+    "@happyvertical/smrt-types": "0.43.1",
+    "@happyvertical/smrt-tenancy": "0.43.1",
+    "@happyvertical/smrt-ui": "0.43.1"
   },
   "devDependencies": {
     "@sveltejs/package": "^2.5.8",
@@ -66,7 +66,7 @@
     "typescript": "5.9.3",
     "vite": "8.1.4",
     "vitest": "4.1.10",
-    "@happyvertical/smrt-vitest": "0.42.7"
+    "@happyvertical/smrt-vitest": "0.43.1"
   },
   "keywords": [
     "smrt",