@happyvertical/smrt-users 0.55.12 → 0.55.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (26) hide show
  1. package/AGENTS.md +5 -2
  2. package/dist/chunks/{TerminalAuthService-45O05z-G.js → TerminalAuthService-D7ub2Snn.js} +71 -68
  3. package/dist/chunks/TerminalAuthService-D7ub2Snn.js.map +1 -0
  4. package/dist/index.js +30 -14
  5. package/dist/index.js.map +1 -1
  6. package/dist/manifest.json +200 -60
  7. package/dist/models/Group.d.ts.map +1 -1
  8. package/dist/models/GroupMember.d.ts.map +1 -1
  9. package/dist/models/GroupRole.d.ts.map +1 -1
  10. package/dist/models/MagicLinkToken.d.ts.map +1 -1
  11. package/dist/models/Membership.d.ts.map +1 -1
  12. package/dist/models/MembershipOverride.d.ts.map +1 -1
  13. package/dist/models/Permission.d.ts.map +1 -1
  14. package/dist/models/ResourceGrant.d.ts.map +1 -1
  15. package/dist/models/Role.d.ts.map +1 -1
  16. package/dist/models/RolePermission.d.ts.map +1 -1
  17. package/dist/models/Session.d.ts.map +1 -1
  18. package/dist/models/Tenant.d.ts.map +1 -1
  19. package/dist/models/TenantIntegration.d.ts.map +1 -1
  20. package/dist/models/TenantPermissionOverride.d.ts.map +1 -1
  21. package/dist/models/User.d.ts.map +1 -1
  22. package/dist/services/PermissionCatalogService.d.ts.map +1 -1
  23. package/dist/smrt-knowledge.json +146 -1690
  24. package/dist/sveltekit.js +1 -1
  25. package/package.json +11 -11
  26. package/dist/chunks/TerminalAuthService-45O05z-G.js.map +0 -1
package/AGENTS.md CHANGED
@@ -55,8 +55,11 @@ are not prerequisites for unrelated user-package work.
55
55
  - Generated REST/MCP operations on identity/RBAC models are list/get only.
56
56
  Route authentication does not authorize authority mutations, and these models
57
57
  are not tenant-scoped. Use permission-gated services or explicitly checked
58
- consumer handlers. CLI remains a local-operator surface. Preserve the
59
- registry assertions in `security-audit-1400.test.ts`.
58
+ consumer handlers. Generated CLI is list/get or closed (`cli: false` for
59
+ credential/grant models) because agents shell out to it; a `cli` without
60
+ `include` is full CRUD (#3742). Their catalog slugs stay full via
61
+ `USERS_AUTHORITY_CATALOG_MODELS`. Preserve the registry assertions in
62
+ `security-audit-1400.test.ts` and `issue-3742-cli-surface-lockdown.test.ts`.
60
63
  - Resource guards take the resource tenant, not the session tenant. Omit a
61
64
  session membership when targeting a different tenant; mismatches fail closed.
62
65
  `loadSessionContext().tenantAuthorization` must be checked by required-tenant