@happyvertical/smrt-users 0.43.9 → 0.44.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +3 -0
- package/README.md +1 -1
- package/dist/chunks/{TerminalAuthService-CMcU598G.js → TerminalAuthService-BZ2GaC1d.js} +77 -37
- package/dist/chunks/TerminalAuthService-BZ2GaC1d.js.map +1 -0
- package/dist/collections/SessionCollection.d.ts +1 -0
- package/dist/collections/SessionCollection.d.ts.map +1 -1
- package/dist/index.js +3 -3
- package/dist/manifest.json +55 -2
- package/dist/models/Session.d.ts +3 -0
- package/dist/models/Session.d.ts.map +1 -1
- package/dist/services/SessionService.d.ts +9 -0
- package/dist/services/SessionService.d.ts.map +1 -1
- package/dist/smrt-knowledge.json +37 -6
- package/dist/svelte/components/InviteUserModal.svelte +6 -0
- package/dist/svelte/components/InviteUserModal.svelte.d.ts +6 -0
- package/dist/svelte/components/InviteUserModal.svelte.d.ts.map +1 -1
- package/dist/svelte/components/UserAvatar.svelte +3 -0
- package/dist/svelte/components/UserAvatar.svelte.d.ts +3 -0
- package/dist/svelte/components/UserAvatar.svelte.d.ts.map +1 -1
- package/dist/svelte/components/UserCard.svelte +6 -0
- package/dist/svelte/components/UserCard.svelte.d.ts +6 -0
- package/dist/svelte/components/UserCard.svelte.d.ts.map +1 -1
- package/dist/svelte/components/UserForm.svelte +5 -0
- package/dist/svelte/components/UserForm.svelte.d.ts +5 -0
- package/dist/svelte/components/UserForm.svelte.d.ts.map +1 -1
- package/dist/svelte/components/UserList.svelte +6 -0
- package/dist/svelte/components/UserList.svelte.d.ts +6 -0
- package/dist/svelte/components/UserList.svelte.d.ts.map +1 -1
- package/dist/sveltekit.js +1 -1
- package/package.json +10 -9
- package/dist/chunks/TerminalAuthService-CMcU598G.js.map +0 -1
package/AGENTS.md
CHANGED
|
@@ -70,6 +70,9 @@ Which membership feeds step 2 above:
|
|
|
70
70
|
3. **No qualifying ancestor** → empty set (byte-identical to the
|
|
71
71
|
pre-inheritance resolver; with no role flagged, nothing changes).
|
|
72
72
|
|
|
73
|
+
`loadSessionContext()` exposes `tenantAuthorization`; required-tenant consumers
|
|
74
|
+
must validate it because `membership: null` can mean inherited authority.
|
|
75
|
+
|
|
73
76
|
All later layers run unchanged against the **target** tenant: the tenant
|
|
74
77
|
cascade and tenant-DENY hard block come from the target tenant (a child can
|
|
75
78
|
carve authority out of an inherited role), group roles stay exact-tenant (only
|
package/README.md
CHANGED
|
@@ -677,7 +677,7 @@ TenantService supports three modes: `flexible` (no auto-create), `personal` (aut
|
|
|
677
677
|
| `PermissionCatalogService`, `syncPermissionCatalog()` | Discovers manifest/config/runtime permissions and upserts them into `Permission` rows. |
|
|
678
678
|
| `registerPermissionDefinitions()` | Register app or integration permissions at runtime and receive an unregister cleanup function. |
|
|
679
679
|
| `generatePostgresPermissionSql()`, `applyPostgresPermissionPolicies()` | Preview or apply Postgres RLS helper functions and table policies. |
|
|
680
|
-
| `SessionService` | High-level session management. `createSession()`, `loadSessionContext()`, `destroySession()
|
|
680
|
+
| `SessionService` | High-level session management. `createSession()`, `loadSessionContext()`, `destroySession()`; tenant contexts include direct or inherited membership provenance. |
|
|
681
681
|
| `OidcLoginService` | Generic OIDC authorization-code login with PKCE for Kanidm, Dex, and other standards-compliant providers. |
|
|
682
682
|
| `backfillUserEmailKeys` | Idempotently populate durable normalized-email keys after migrating legacy Users; fails closed on duplicates. |
|
|
683
683
|
| `OidcProfileResolver` | Transaction-bound pre-provision hook for application identity reconciliation. |
|