@happyvertical/smrt-users 0.49.8 → 0.50.0

package/dist/index.js

@@ -1,4 +1,4 @@
-import { $ as MembershipOverride, B as RolePermissionCollection, C as decodeOidcTransaction, Ct as OverrideEffect, Dt as UserStatus, E as resolveOidcProviderConfig, Et as TenantStatus, F as TenantCollection, G as registerPermissionDefinitions, H as deriveOperationPermissionCollectionName, I as TenantHierarchyError, J as RoleCollection, K as syncPermissionCatalog, L as MAX_TENANT_HIERARCHY_DEPTH, M as backfillUserEmailKeys, N as TenantPermissionOverrideCollection, O as OidcProvisioningError, Ot as UsersCliAuthRequest, P as TenantPermissionOverride, Q as MembershipOverrideCollection, R as Tenant, S as OidcLoginService, St as MembershipStatus, T as getUsersOidcConfig, Tt as TenantPermissionEffect, U as deriveOperationPermissionSlug, V as PermissionCatalogService, W as normalizeOperationPermissionAction, X as PermissionCollection, Y as Role, Z as Permission, _ as readMobileBearerToken, _t as generateSessionId, a as TerminalAuthRateLimitError, at as GroupMember, b as PermissionResolver, bt as DEFAULT_ROLE_SLUGS, c as assertOperationPermission, ct as UsersCliAuthApproveLimitCollection, d as getCurrentSessionPermissionContext, dt as isValidEmail, et as MembershipCollection, f as getRequestScopedDatabase, ft as normalizeEmail, g as MobileAuthService, gt as Session, h as MobileAuthError, ht as DEFAULT_SESSION_TTL, i as TerminalAuthError, it as GroupMemberCollection, j as UserEmailKeyBackfillError, k as UserCollection, l as checkOperationPermission, lt as UsersCliAuthApproveLimit, m as withSessionPermissionContext, mt as SessionCollection, n as DEFAULT_CLI_AUTH_REQUEST_TTL_SECONDS, nt as GroupRoleCollection, o as TerminalAuthService, ot as GroupCollection, p as withPrincipalPermissionContext, pt as UsersCliAuthRequestCollection, q as RolePermission, r as DEFAULT_CLI_SESSION_TTL_SECONDS, rt as GroupRole, s as OperationPermissionError, st as Group, t as DEFAULT_CLI_AUTH_POLL_INTERVAL_SECONDS, tt as Membership, u as hasOperationPermission, ut as User, v as validateMobileRedirectUri, vt as AccessRequestStatus, w as encodeOidcTransaction, wt as SessionStatus, x as OidcLoginError, xt as DEFAULT_TENANT_POLICY, y as SessionService, yt as DEFAULT_ROLES, z as DEFAULT_ROLE_PERMISSION_PATTERNS } from "./chunks/TerminalAuthService-Anw8oHGQ.js";
+import { $ as MembershipOverride, B as RolePermissionCollection, C as decodeOidcTransaction, Ct as OverrideEffect, Dt as UserStatus, E as resolveOidcProviderConfig, Et as TenantStatus, F as TenantCollection, G as registerPermissionDefinitions, H as deriveOperationPermissionCollectionName, I as TenantHierarchyError, J as RoleCollection, K as syncPermissionCatalog, L as MAX_TENANT_HIERARCHY_DEPTH, M as backfillUserEmailKeys, N as TenantPermissionOverrideCollection, O as OidcProvisioningError, Ot as UsersCliAuthRequest, P as TenantPermissionOverride, Q as MembershipOverrideCollection, R as Tenant, S as OidcLoginService, St as MembershipStatus, T as getUsersOidcConfig, Tt as TenantPermissionEffect, U as deriveOperationPermissionSlug, V as PermissionCatalogService, W as normalizeOperationPermissionAction, X as PermissionCollection, Y as Role, Z as Permission, _ as readMobileBearerToken, _t as generateSessionId, a as TerminalAuthRateLimitError, at as GroupMember, b as PermissionResolver, bt as DEFAULT_ROLE_SLUGS, c as assertOperationPermission, ct as UsersCliAuthApproveLimitCollection, d as getCurrentSessionPermissionContext, dt as isValidEmail, et as MembershipCollection, f as getRequestScopedDatabase, ft as normalizeEmail, g as MobileAuthService, gt as Session, h as MobileAuthError, ht as DEFAULT_SESSION_TTL, i as TerminalAuthError, it as GroupMemberCollection, j as UserEmailKeyBackfillError, k as UserCollection, l as checkOperationPermission, lt as UsersCliAuthApproveLimit, m as withSessionPermissionContext, mt as SessionCollection, n as DEFAULT_CLI_AUTH_REQUEST_TTL_SECONDS, nt as GroupRoleCollection, o as TerminalAuthService, ot as GroupCollection, p as withPrincipalPermissionContext, pt as UsersCliAuthRequestCollection, q as RolePermission, r as DEFAULT_CLI_SESSION_TTL_SECONDS, rt as GroupRole, s as OperationPermissionError, st as Group, t as DEFAULT_CLI_AUTH_POLL_INTERVAL_SECONDS, tt as Membership, u as hasOperationPermission, ut as User, v as validateMobileRedirectUri, vt as AccessRequestStatus, w as encodeOidcTransaction, wt as SessionStatus, x as OidcLoginError, xt as DEFAULT_TENANT_POLICY, y as SessionService, yt as DEFAULT_ROLES, z as DEFAULT_ROLE_PERMISSION_PATTERNS } from "./chunks/TerminalAuthService-DmCB3dBC.js";
 import { ObjectRegistry, SmrtCollection, SmrtObject, field, findManifestEntryByQualifiedName, isUniqueViolationError, registerRetentionTask, smrt, unregisterRetentionTask } from "@happyvertical/smrt-core";
 import { PROFILE_EMAIL_KEY_BACKFILL_NAME, Person, ProfileCollection, ProfileTypeCollection, normalizeIdentityEmail } from "@happyvertical/smrt-profiles";
 import { createHash } from "node:crypto";
@@ -1075,7 +1075,7 @@ var MagicLinkService = class MagicLinkService {
 	* The caller is responsible for emailing the token to the user.
 	*/
 	async generate(email) {
-		const { SignJWT } = await import("./chunks/TerminalAuthService-Anw8oHGQ.js").then((n) => n.D);
+		const { SignJWT } = await import("./chunks/TerminalAuthService-DmCB3dBC.js").then((n) => n.D);
 		const key = await this.getSigningKey();
 		const nonce = crypto.randomUUID();
 		const normalizedEmail = normalizeEmail(email);
@@ -1104,7 +1104,7 @@ var MagicLinkService = class MagicLinkService {
 	* @throws {MagicLinkError} If the token is invalid, expired, or already used
 	*/
 	async verify(token) {
-		const { jwtVerify, errors } = await import("./chunks/TerminalAuthService-Anw8oHGQ.js").then((n) => n.D);
+		const { jwtVerify, errors } = await import("./chunks/TerminalAuthService-DmCB3dBC.js").then((n) => n.D);
 		const key = await this.getSigningKey();
 		let payload;
 		try {

package/dist/manifest.json

@@ -2,7 +2,7 @@
   "version": "1.0.0",
   "timestamp": 0,
   "packageName": "@happyvertical/smrt-users",
-  "packageVersion": "0.49.8",
+  "packageVersion": "0.50.0",
   "objects": {
     "@happyvertical/smrt-users:AccessRequestCollection": {
       "name": "accessrequestcollection",

package/dist/smrt-knowledge.json

@@ -3,12 +3,12 @@
   "sensitiveFieldsExcluded": true,
   "generatedAt": "1970-01-01T00:00:00.000Z",
   "packageName": "@happyvertical/smrt-users",
-  "packageVersion": "0.49.8",
+  "packageVersion": "0.50.0",
   "sourceManifestPath": "dist/manifest.json",
   "agentDocPath": "AGENTS.md",
   "sourceHashes": {
-    "manifest": "ff85bdbe9f824d13f328e692ed027d2c1663eaa49fce134450c0a1ec1ea5b2bb",
-    "packageJson": "2252d9122e974a4e9d2c0a9c33b355f6fc45904ddd02acdcf5521eeff79600be",
+    "manifest": "ece0cd9f27a146e0bb2f608d37769da50b55fe6e42f225c4281f1b22d420e70a",
+    "packageJson": "174b5cc5899935cf00499e7c3576cde4bb1b4cd3e41a22b43cb221ba8aba612d",
     "agents": "ec09e41d9c5e1b55abf454eb5b88a98637094e2aa67bffce2f11db0dcb68b441",
     "moduleDoc:agents/permissions.md": "f801411ae51fc625ad99054e284fd1abc6e7b2a5555dd8797a83dfd30273db68",
     "moduleDoc:agents/oidc-provisioning.md": "5efa607ff23b9a693391e0c02670324a8cea4114d4968c9718f10a763da919c6",

package/dist/sveltekit.js

@@ -1,4 +1,4 @@
-import { C as decodeOidcTransaction, E as resolveOidcProviderConfig, S as OidcLoginService, T as getUsersOidcConfig, _ as readMobileBearerToken, a as TerminalAuthRateLimitError, g as MobileAuthService, h as MobileAuthError, i as TerminalAuthError, m as withSessionPermissionContext, o as TerminalAuthService, s as OperationPermissionError, v as validateMobileRedirectUri, w as encodeOidcTransaction, x as OidcLoginError, y as SessionService } from "./chunks/TerminalAuthService-Anw8oHGQ.js";
+import { C as decodeOidcTransaction, E as resolveOidcProviderConfig, S as OidcLoginService, T as getUsersOidcConfig, _ as readMobileBearerToken, a as TerminalAuthRateLimitError, g as MobileAuthService, h as MobileAuthError, i as TerminalAuthError, m as withSessionPermissionContext, o as TerminalAuthService, s as OperationPermissionError, v as validateMobileRedirectUri, w as encodeOidcTransaction, x as OidcLoginError, y as SessionService } from "./chunks/TerminalAuthService-DmCB3dBC.js";
 import { DiscoveryArtifactValidationError, SMRT_APP_RESULT_CONTRACT, SMRT_APP_RESULT_SCHEMA, SMRT_APP_RESULT_VERSION, SMRT_DISCOVERY_CONFORMANCE_ARTIFACT_SCHEMA, SMRT_DISCOVERY_CONFORMANCE_SCHEMA, SMRT_DISCOVERY_CONFORMANCE_VERSION, SMRT_MCP_RESULT_METADATA_KEY, canonicalizeDiscoveryArtifact, createDiscoveryConformanceArtifact, deriveCommandRequirements, validateDiscoveryConformanceArtifact } from "./app-contract.js";
 import { ObjectRegistry, createClassNamePredicate, resolveCustomActionMetadata, resolveEffectiveActionMetadata } from "@happyvertical/smrt-core";
 import { createLogger } from "@happyvertical/logger";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-users",
-  "version": "0.49.8",
+  "version": "0.50.0",
   "smrtJsdoc": "strict",
   "description": "Multi-tenant user management for the SMRT framework - users, tenants, roles, permissions, groups",
   "type": "module",
@@ -46,19 +46,19 @@
     }
   },
   "dependencies": {
-    "@happyvertical/logger": "^0.89.6",
-    "@happyvertical/smrt-config": "0.49.8",
-    "@happyvertical/smrt-core": "0.49.8",
-    "@happyvertical/smrt-mobile-contract": "0.49.8",
-    "@happyvertical/smrt-profiles": "0.49.8",
-    "@happyvertical/smrt-tenancy": "0.49.8",
-    "@happyvertical/smrt-types": "0.49.8",
-    "@happyvertical/smrt-ui": "0.49.8",
-    "@happyvertical/sql": "^0.89.6",
+    "@happyvertical/logger": "^0.89.9",
+    "@happyvertical/smrt-config": "0.50.0",
+    "@happyvertical/smrt-core": "0.50.0",
+    "@happyvertical/smrt-mobile-contract": "0.50.0",
+    "@happyvertical/smrt-profiles": "0.50.0",
+    "@happyvertical/smrt-tenancy": "0.50.0",
+    "@happyvertical/smrt-types": "0.50.0",
+    "@happyvertical/smrt-ui": "0.50.0",
+    "@happyvertical/sql": "^0.89.9",
     "jose": "^6.2.3"
   },
   "devDependencies": {
-    "@happyvertical/smrt-vitest": "0.49.8",
+    "@happyvertical/smrt-vitest": "0.50.0",
     "@sveltejs/package": "^2.5.8",
     "@sveltejs/vite-plugin-svelte": "^7.1.2",
     "@types/node": "24.13.2",