@happyvertical/smrt-users 0.51.39 → 0.52.0

package/dist/index.js

@@ -1,4 +1,4 @@
-import { $ as deriveOperationPermissionSlug, A as DEFAULT_ANCESTOR_READ_MAX_DEPTH, B as TenantPermissionOverride, C as OidcLoginService, Ct as UsersCliAuthRequestCollection, D as resolveOidcProviderConfig, Dt as generateSessionId, E as getUsersOidcConfig, Et as Session, F as UserCollection, G as applyTenantHierarchyUpdates, H as Tenant, J as recordTenantHierarchyChanges, K as assertTenantTableName, L as UserEmailKeyBackfillError, M as isAncestorReadableSlug, N as normalizeAncestorReadPolicy, Ot as UsersCliAuthRequest, P as OidcProvisioningError, Q as deriveOperationPermissionCollectionName, R as backfillUserEmailKeys, S as OidcLoginError, St as normalizeEmail, T as encodeOidcTransaction, Tt as DEFAULT_SESSION_TTL, U as MAX_TENANT_HIERARCHY_DEPTH, V as TenantCollection, W as TenantHierarchyError, X as RolePermissionCollection, Y as DEFAULT_ROLE_PERMISSION_PATTERNS, Z as PermissionCatalogService, _ as readMobileBearerToken, _t as Group, a as TerminalAuthRateLimitError, at as Role, b as PermissionResolver, bt as User, c as assertOperationPermission, ct as MembershipOverrideCollection, d as getCurrentSessionPermissionContext, dt as Membership, et as normalizeOperationPermissionAction, f as getRequestScopedDatabase, ft as GroupRoleCollection, g as MobileAuthService, gt as GroupCollection, h as MobileAuthError, ht as GroupMember, i as TerminalAuthError, it as RoleCollection, j as getConfiguredAncestorReadPolicy, k as ANCESTOR_READ_ACTION, l as checkOperationPermission, lt as MembershipOverride, m as withSessionPermissionContext, mt as GroupMemberCollection, n as DEFAULT_CLI_AUTH_REQUEST_TTL_SECONDS, nt as syncPermissionCatalog, o as TerminalAuthService, ot as PermissionCollection, p as withPrincipalPermissionContext, pt as GroupRole, q as planTenantHierarchy, r as DEFAULT_CLI_SESSION_TTL_SECONDS, rt as RolePermission, s as OperationPermissionError, st as Permission, t as DEFAULT_CLI_AUTH_POLL_INTERVAL_SECONDS, tt as registerPermissionDefinitions, u as hasOperationPermission, ut as MembershipCollection, v as validateMobileRedirectUri, vt as UsersCliAuthApproveLimitCollection, w as decodeOidcTransaction, wt as SessionCollection, x as withoutListBounds, xt as isValidEmail, y as SessionService, yt as UsersCliAuthApproveLimit, z as TenantPermissionOverrideCollection } from "./chunks/TerminalAuthService-BDKUbg4N.js";
+import { $ as deriveOperationPermissionSlug, A as DEFAULT_ANCESTOR_READ_MAX_DEPTH, B as TenantPermissionOverride, C as OidcLoginService, Ct as UsersCliAuthRequestCollection, D as resolveOidcProviderConfig, Dt as generateSessionId, E as getUsersOidcConfig, Et as Session, F as UserCollection, G as applyTenantHierarchyUpdates, H as Tenant, J as recordTenantHierarchyChanges, K as assertTenantTableName, L as UserEmailKeyBackfillError, M as isAncestorReadableSlug, N as normalizeAncestorReadPolicy, Ot as UsersCliAuthRequest, P as OidcProvisioningError, Q as deriveOperationPermissionCollectionName, R as backfillUserEmailKeys, S as OidcLoginError, St as normalizeEmail, T as encodeOidcTransaction, Tt as DEFAULT_SESSION_TTL, U as MAX_TENANT_HIERARCHY_DEPTH, V as TenantCollection, W as TenantHierarchyError, X as RolePermissionCollection, Y as DEFAULT_ROLE_PERMISSION_PATTERNS, Z as PermissionCatalogService, _ as readMobileBearerToken, _t as Group, a as TerminalAuthRateLimitError, at as Role, b as PermissionResolver, bt as User, c as assertOperationPermission, ct as MembershipOverrideCollection, d as getCurrentSessionPermissionContext, dt as Membership, et as normalizeOperationPermissionAction, f as getRequestScopedDatabase, ft as GroupRoleCollection, g as MobileAuthService, gt as GroupCollection, h as MobileAuthError, ht as GroupMember, i as TerminalAuthError, it as RoleCollection, j as getConfiguredAncestorReadPolicy, k as ANCESTOR_READ_ACTION, l as checkOperationPermission, lt as MembershipOverride, m as withSessionPermissionContext, mt as GroupMemberCollection, n as DEFAULT_CLI_AUTH_REQUEST_TTL_SECONDS, nt as syncPermissionCatalog, o as TerminalAuthService, ot as PermissionCollection, p as withPrincipalPermissionContext, pt as GroupRole, q as planTenantHierarchy, r as DEFAULT_CLI_SESSION_TTL_SECONDS, rt as RolePermission, s as OperationPermissionError, st as Permission, t as DEFAULT_CLI_AUTH_POLL_INTERVAL_SECONDS, tt as registerPermissionDefinitions, u as hasOperationPermission, ut as MembershipCollection, v as validateMobileRedirectUri, vt as UsersCliAuthApproveLimitCollection, w as decodeOidcTransaction, wt as SessionCollection, x as withoutListBounds, xt as isValidEmail, y as SessionService, yt as UsersCliAuthApproveLimit, z as TenantPermissionOverrideCollection } from "./chunks/TerminalAuthService-Br64vHtd.js";
 import { a as MembershipStatus, c as TenantPermissionEffect, i as DEFAULT_TENANT_POLICY, l as TenantStatus, n as DEFAULT_ROLES, o as OverrideEffect, r as DEFAULT_ROLE_SLUGS, s as SessionStatus, t as AccessRequestStatus, u as UserStatus } from "./chunks/types-DFqeph0R.js";
 import { ObjectRegistry, SmrtCollection, SmrtObject, field, findManifestEntryByQualifiedName, foreignKey, isUniqueViolationError, registerRetentionTask, smrt, unregisterRetentionTask } from "@happyvertical/smrt-core";
 import { PROFILE_EMAIL_KEY_BACKFILL_NAME, Person, ProfileCollection, ProfileTypeCollection, normalizeIdentityEmail } from "@happyvertical/smrt-profiles";
@@ -1194,7 +1194,7 @@ var MagicLinkService = class MagicLinkService {
 	* The caller is responsible for emailing the token to the user.
 	*/
 	async generate(email) {
-		const { SignJWT } = await import("./chunks/TerminalAuthService-BDKUbg4N.js").then((n) => n.O);
+		const { SignJWT } = await import("./chunks/TerminalAuthService-Br64vHtd.js").then((n) => n.O);
 		const key = await this.getSigningKey();
 		const nonce = crypto.randomUUID();
 		const normalizedEmail = normalizeEmail(email);
@@ -1223,7 +1223,7 @@ var MagicLinkService = class MagicLinkService {
 	* @throws {MagicLinkError} If the token is invalid, expired, or already used
 	*/
 	async verify(token) {
-		const { jwtVerify, errors } = await import("./chunks/TerminalAuthService-BDKUbg4N.js").then((n) => n.O);
+		const { jwtVerify, errors } = await import("./chunks/TerminalAuthService-Br64vHtd.js").then((n) => n.O);
 		const key = await this.getSigningKey();
 		let payload;
 		try {

package/dist/manifest.json

@@ -2,7 +2,7 @@
   "version": "1.0.0",
   "timestamp": 0,
   "packageName": "@happyvertical/smrt-users",
-  "packageVersion": "0.51.39",
+  "packageVersion": "0.52.0",
   "objects": {
     "@happyvertical/smrt-users:AccessRequestCollection": {
       "name": "accessrequestcollection",
@@ -509,12 +509,14 @@
         },
         "indexes": [
           {
-            "name": "users_cli_auth_requests_slug_context_idx",
+            "name": "users_cli_auth_requests_tenant_id_slug_idx",
             "columns": [
+              "tenant_id",
               "slug",
               "context"
             ],
-            "unique": true
+            "unique": true,
+            "nullsNotDistinct": true
           },
           {
             "name": "users_cli_auth_requests_expires_at_idx",
@@ -534,12 +536,6 @@
               "user_id"
             ]
           },
-          {
-            "name": "users_cli_auth_requests_tenant_id_idx",
-            "columns": [
-              "tenant_id"
-            ]
-          },
           {
             "name": "users_cli_auth_requests_session_id_idx",
             "columns": [
@@ -655,8 +651,9 @@
         },
         "indexes": [
           {
-            "name": "groups_slug_context_idx",
+            "name": "groups_tenant_id_slug_idx",
             "columns": [
+              "tenant_id",
               "slug",
               "context"
             ],
@@ -667,12 +664,6 @@
             "columns": [
               "created_at"
             ]
-          },
-          {
-            "name": "groups_tenant_id_idx",
-            "columns": [
-              "tenant_id"
-            ]
           }
         ],
         "version": "1824c19b"
@@ -1444,8 +1435,9 @@
         },
         "indexes": [
           {
-            "name": "memberships_slug_context_idx",
+            "name": "memberships_tenant_id_slug_idx",
             "columns": [
+              "tenant_id",
               "slug",
               "context"
             ],
@@ -2254,24 +2246,20 @@
         },
         "indexes": [
           {
-            "name": "roles_slug_context_idx",
+            "name": "roles_tenant_id_slug_idx",
             "columns": [
+              "tenant_id",
               "slug",
               "context"
             ],
-            "unique": true
+            "unique": true,
+            "nullsNotDistinct": true
           },
           {
             "name": "roles_created_at_idx",
             "columns": [
               "created_at"
             ]
-          },
-          {
-            "name": "roles_tenant_id_idx",
-            "columns": [
-              "tenant_id"
-            ]
           }
         ],
         "version": "47369d9d"
@@ -2824,12 +2812,14 @@
         },
         "indexes": [
           {
-            "name": "sessions_slug_context_idx",
+            "name": "sessions_tenant_id_slug_idx",
             "columns": [
+              "tenant_id",
               "slug",
               "context"
             ],
-            "unique": true
+            "unique": true,
+            "nullsNotDistinct": true
           },
           {
             "name": "sessions_expires_at_idx",
@@ -2848,12 +2838,6 @@
             "columns": [
               "user_id"
             ]
-          },
-          {
-            "name": "sessions_tenant_id_idx",
-            "columns": [
-              "tenant_id"
-            ]
           }
         ],
         "version": "dc55d351"
@@ -3755,8 +3739,9 @@
         },
         "indexes": [
           {
-            "name": "tenant_permission_overrides_slug_context_idx",
+            "name": "tenant_permission_overrides_tenant_id_slug_idx",
             "columns": [
+              "tenant_id",
               "slug",
               "context"
             ],
@@ -3768,12 +3753,6 @@
               "created_at"
             ]
           },
-          {
-            "name": "tenant_permission_overrides_tenant_id_idx",
-            "columns": [
-              "tenant_id"
-            ]
-          },
           {
             "name": "tenant_permission_overrides_permission_id_idx",
             "columns": [
@@ -4518,7 +4497,12 @@
         },
         "mcp": {
           "include": []
-        }
+        },
+        "conflictColumns": [
+          "tenant_id",
+          "slug",
+          "context"
+        ]
       },
       "extends": "SmrtObject",
       "exportName": "UsersCliAuthRequest",
@@ -4628,12 +4612,14 @@
         },
         "indexes": [
           {
-            "name": "users_cli_auth_requests_slug_context_idx",
+            "name": "users_cli_auth_requests_tenant_id_slug_idx",
             "columns": [
+              "tenant_id",
               "slug",
               "context"
             ],
-            "unique": true
+            "unique": true,
+            "nullsNotDistinct": true
           },
           {
             "name": "users_cli_auth_requests_expires_at_idx",
@@ -4653,12 +4639,6 @@
               "user_id"
             ]
           },
-          {
-            "name": "users_cli_auth_requests_tenant_id_idx",
-            "columns": [
-              "tenant_id"
-            ]
-          },
           {
             "name": "users_cli_auth_requests_session_id_idx",
             "columns": [
@@ -4711,7 +4691,12 @@
             "get"
           ]
         },
-        "cli": true
+        "cli": true,
+        "conflictColumns": [
+          "tenant_id",
+          "slug",
+          "context"
+        ]
       },
       "extends": "SmrtObject",
       "exportName": "Group",
@@ -4779,8 +4764,9 @@
         },
         "indexes": [
           {
-            "name": "groups_slug_context_idx",
+            "name": "groups_tenant_id_slug_idx",
             "columns": [
+              "tenant_id",
               "slug",
               "context"
             ],
@@ -4791,12 +4777,6 @@
             "columns": [
               "created_at"
             ]
-          },
-          {
-            "name": "groups_tenant_id_idx",
-            "columns": [
-              "tenant_id"
-            ]
           }
         ],
         "version": "1824c19b"
@@ -5322,6 +5302,11 @@
               "userId"
             ]
           }
+        ],
+        "conflictColumns": [
+          "tenant_id",
+          "slug",
+          "context"
         ]
       },
       "extends": "SmrtObject",
@@ -5417,8 +5402,9 @@
         },
         "indexes": [
           {
-            "name": "memberships_slug_context_idx",
+            "name": "memberships_tenant_id_slug_idx",
             "columns": [
+              "tenant_id",
               "slug",
               "context"
             ],
@@ -6104,7 +6090,12 @@
         },
         "cli": {
           "skipApiCheck": true
-        }
+        },
+        "conflictColumns": [
+          "tenant_id",
+          "slug",
+          "context"
+        ]
       },
       "extends": "SmrtObject",
       "exportName": "Role",
@@ -6177,24 +6168,20 @@
         },
         "indexes": [
           {
-            "name": "roles_slug_context_idx",
+            "name": "roles_tenant_id_slug_idx",
             "columns": [
+              "tenant_id",
               "slug",
               "context"
             ],
-            "unique": true
+            "unique": true,
+            "nullsNotDistinct": true
           },
           {
             "name": "roles_created_at_idx",
             "columns": [
               "created_at"
             ]
-          },
-          {
-            "name": "roles_tenant_id_idx",
-            "columns": [
-              "tenant_id"
-            ]
           }
         ],
         "version": "47369d9d"
@@ -6553,7 +6540,12 @@
         },
         "cli": {
           "skipApiCheck": true
-        }
+        },
+        "conflictColumns": [
+          "tenant_id",
+          "slug",
+          "context"
+        ]
       },
       "extends": "SmrtObject",
       "exportName": "Session",
@@ -6647,12 +6639,14 @@
         },
         "indexes": [
           {
-            "name": "sessions_slug_context_idx",
+            "name": "sessions_tenant_id_slug_idx",
             "columns": [
+              "tenant_id",
               "slug",
               "context"
             ],
-            "unique": true
+            "unique": true,
+            "nullsNotDistinct": true
           },
           {
             "name": "sessions_expires_at_idx",
@@ -6671,12 +6665,6 @@
             "columns": [
               "user_id"
             ]
-          },
-          {
-            "name": "sessions_tenant_id_idx",
-            "columns": [
-              "tenant_id"
-            ]
           }
         ],
         "version": "dc55d351"
@@ -7331,7 +7319,12 @@
         },
         "cli": {
           "skipApiCheck": true
-        }
+        },
+        "conflictColumns": [
+          "tenant_id",
+          "slug",
+          "context"
+        ]
       },
       "extends": "SmrtObject",
       "exportName": "TenantPermissionOverride",
@@ -7409,8 +7402,9 @@
         },
         "indexes": [
           {
-            "name": "tenant_permission_overrides_slug_context_idx",
+            "name": "tenant_permission_overrides_tenant_id_slug_idx",
             "columns": [
+              "tenant_id",
               "slug",
               "context"
             ],
@@ -7422,12 +7416,6 @@
               "created_at"
             ]
           },
-          {
-            "name": "tenant_permission_overrides_tenant_id_idx",
-            "columns": [
-              "tenant_id"
-            ]
-          },
           {
             "name": "tenant_permission_overrides_permission_id_idx",
             "columns": [

package/dist/smrt-knowledge.json

@@ -3,12 +3,12 @@
   "sensitiveFieldsExcluded": true,
   "generatedAt": "1970-01-01T00:00:00.000Z",
   "packageName": "@happyvertical/smrt-users",
-  "packageVersion": "0.51.39",
+  "packageVersion": "0.52.0",
   "sourceManifestPath": "dist/manifest.json",
   "agentDocPath": "AGENTS.md",
   "sourceHashes": {
-    "manifest": "19ba052694414c0a46e25dc2500c99a39886ac821a02b5ceb7ad5e900a528f1c",
-    "packageJson": "1a986f013f79d7f2bd0da8ea4d29d258a57489c8240695bf676b3b37bded4a13",
+    "manifest": "bf43eb6941f3d30ddd5106bf17478d7b05ecda56fa632bdc32e34c46d5285b1c",
+    "packageJson": "56710fe63eb927dc3f6632196acaaf149389a1efcce248bff1bd2b583ee4973d",
     "agents": "c1bd1dcae5f1662f31d01d0cff19cb3f774715eb71ecfd249eb429e5f64a3eb7",
     "moduleDoc:agents/permissions.md": "b5be3f5b84b409cb6e62080e2d7a75b67e0763266c11054045c5c401b84f8dd6",
     "moduleDoc:agents/oidc-provisioning.md": "5efa607ff23b9a693391e0c02670324a8cea4114d4968c9718f10a763da919c6",
@@ -41,7 +41,7 @@
     "@sveltejs/vite-plugin-svelte": "^7.3.0",
     "@types/node": "24.13.6",
     "fast-glob": "^3.3.3",
-    "svelte": "^5.57.1",
+    "svelte": "^5.57.0",
     "svelte-check": "^4.7.6",
     "typescript": "6.0.3",
     "vite": "8.1.4",
@@ -4313,6 +4313,11 @@
         }
       ],
       "methods": [],
+      "conflictColumns": [
+        "tenant_id",
+        "slug",
+        "context"
+      ],
       "surfaces": [],
       "relationshipFeatures": [
         "foreignKey",
@@ -4361,6 +4366,11 @@
         }
       ],
       "methods": [],
+      "conflictColumns": [
+        "tenant_id",
+        "slug",
+        "context"
+      ],
       "surfaces": [
         {
           "kind": "api",
@@ -4832,6 +4842,11 @@
           "returns": "boolean"
         }
       ],
+      "conflictColumns": [
+        "tenant_id",
+        "slug",
+        "context"
+      ],
       "surfaces": [
         {
           "kind": "api",
@@ -5497,6 +5512,11 @@
           "returns": "boolean"
         }
       ],
+      "conflictColumns": [
+        "tenant_id",
+        "slug",
+        "context"
+      ],
       "surfaces": [
         {
           "kind": "api",
@@ -5870,6 +5890,11 @@
           "returns": "void"
         }
       ],
+      "conflictColumns": [
+        "tenant_id",
+        "slug",
+        "context"
+      ],
       "surfaces": [
         {
           "kind": "api",
@@ -6712,6 +6737,11 @@
           "returns": "boolean"
         }
       ],
+      "conflictColumns": [
+        "tenant_id",
+        "slug",
+        "context"
+      ],
       "surfaces": [
         {
           "kind": "api",

package/dist/sveltekit.js

@@ -1,4 +1,4 @@
-import { C as OidcLoginService, D as resolveOidcProviderConfig, E as getUsersOidcConfig, S as OidcLoginError, T as encodeOidcTransaction, _ as readMobileBearerToken, a as TerminalAuthRateLimitError, g as MobileAuthService, h as MobileAuthError, i as TerminalAuthError, m as withSessionPermissionContext, o as TerminalAuthService, s as OperationPermissionError, v as validateMobileRedirectUri, w as decodeOidcTransaction, y as SessionService } from "./chunks/TerminalAuthService-BDKUbg4N.js";
+import { C as OidcLoginService, D as resolveOidcProviderConfig, E as getUsersOidcConfig, S as OidcLoginError, T as encodeOidcTransaction, _ as readMobileBearerToken, a as TerminalAuthRateLimitError, g as MobileAuthService, h as MobileAuthError, i as TerminalAuthError, m as withSessionPermissionContext, o as TerminalAuthService, s as OperationPermissionError, v as validateMobileRedirectUri, w as decodeOidcTransaction, y as SessionService } from "./chunks/TerminalAuthService-Br64vHtd.js";
 import { DiscoveryArtifactValidationError, SMRT_APP_RESULT_CONTRACT, SMRT_APP_RESULT_SCHEMA, SMRT_APP_RESULT_VERSION, SMRT_DISCOVERY_CONFORMANCE_ARTIFACT_SCHEMA, SMRT_DISCOVERY_CONFORMANCE_SCHEMA, SMRT_DISCOVERY_CONFORMANCE_VERSION, SMRT_MCP_RESULT_METADATA_KEY, canonicalizeDiscoveryArtifact, createDiscoveryConformanceArtifact, deriveCommandRequirements, validateDiscoveryConformanceArtifact } from "./app-contract.js";
 import { ObjectRegistry, createClassNamePredicate, resolveCustomActionMetadata, resolveEffectiveActionMetadata } from "@happyvertical/smrt-core";
 import { createLogger } from "@happyvertical/logger";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-users",
-  "version": "0.51.39",
+  "version": "0.52.0",
   "smrtJsdoc": "strict",
   "description": "Multi-tenant user management for the SMRT framework - users, tenants, roles, permissions, groups",
   "type": "module",
@@ -39,7 +39,7 @@
     "agents"
   ],
   "peerDependencies": {
-    "svelte": "^5.57.1"
+    "svelte": "^5.57.0"
   },
   "peerDependenciesMeta": {
     "svelte": {
@@ -47,19 +47,19 @@
     }
   },
   "dependencies": {
-    "@happyvertical/logger": "^0.96.0",
-    "@happyvertical/smrt-config": "0.51.39",
-    "@happyvertical/smrt-core": "0.51.39",
-    "@happyvertical/smrt-mobile-contract": "0.51.39",
-    "@happyvertical/smrt-profiles": "0.51.39",
-    "@happyvertical/smrt-tenancy": "0.51.39",
-    "@happyvertical/smrt-types": "0.51.39",
-    "@happyvertical/smrt-ui": "0.51.39",
-    "@happyvertical/sql": "^0.96.0",
+    "@happyvertical/logger": "^0.96.1",
+    "@happyvertical/smrt-config": "0.52.0",
+    "@happyvertical/smrt-core": "0.52.0",
+    "@happyvertical/smrt-mobile-contract": "0.52.0",
+    "@happyvertical/smrt-profiles": "0.52.0",
+    "@happyvertical/smrt-tenancy": "0.52.0",
+    "@happyvertical/smrt-types": "0.52.0",
+    "@happyvertical/smrt-ui": "0.52.0",
+    "@happyvertical/sql": "^0.96.1",
     "jose": "^6.2.12"
   },
   "devDependencies": {
-    "@happyvertical/smrt-vitest": "0.51.39",
+    "@happyvertical/smrt-vitest": "0.52.0",
     "@sveltejs/package": "^2.5.8",
     "@sveltejs/vite-plugin-svelte": "^7.3.0",
     "@types/node": "24.13.6",