@oimlsmart/platform-server 0.1.0 → 0.1.1

package/migrations/0017_org_member_cones.sql

@@ -0,0 +1,28 @@
+-- Migration 0017 — the org-member DATA CONE (TODO.identity-features/09,
+-- wave A). Every org membership gains a nullable cone: the org
+-- administrator's answer to "what can this member see and do" —
+-- org-wide (the default; every existing membership keeps it SILENTLY,
+-- NULL reads as org-wide) / assigned (the member sees the org's rows
+-- only where NAMED — the operator on the test run, the assignment's
+-- performer, the engagement's inquirer) / read-only (the orthogonal
+-- modifier, composable: the member reads per the scope, the write gate
+-- refuses them). The canonical spellings: NULL | 'assigned' |
+-- 'read-only' | 'assigned+read-only' (the kernel's parseOrgMemberCone
+-- owns the grammar; a malformed cell fails CLOSED — the narrowest cone,
+-- never a silent re-widen).
+--
+-- EXPAND-ONLY, as every file in this set: a new nullable column, never
+-- a renumber, never a rewrite — wrangler keys the live registry's
+-- bookkeeping on the file name.
+--
+-- THE MONOREPO MIRROR: this file is authored HERE (this repo owns the
+-- live D1 since the wave-03 cutover); the byte-identical mirror in the
+-- smart monorepo's browser/server/db/migrations/ + the kernel's
+-- schema.sql end-state land as the coordinator's follow-up in the
+-- kernel-extraction wave (agent-585's re-home of packages/platform-
+-- server). Until then the kernel's defensive ensures (the
+-- migrateAuthTables / ensureMembershipSupport posture) grow the column
+-- on the platform's dev/test stores, and the byte-identity tripwire
+-- (src/__tests__/id-migrations-ssot.test.ts) carries this file as a
+-- dated, wave-referenced local-only allowance.
+ALTER TABLE org_memberships ADD COLUMN cone TEXT;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oimlsmart/platform-server",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "The OIML SMART platform server kernel: the store seam (ServerStore + the D1 and SQLite implementations), the canonical D1 migration set both deployments apply, the instance profile, the mailer, the RBAC map, the OIDC/OAuth client cones, and the shared role/permission vocabulary. Consumed by the smart monorepo (browser/) and the identity service.",
   "type": "module",
   "repository": {

package/src/store/sqlite/schema.sql

@@ -522,6 +522,12 @@ CREATE TABLE IF NOT EXISTS org_memberships (
   activated_at TEXT,
   disabled_at TEXT,
   disabled_by TEXT,
+  -- TODO.identity-features/09 wave A — the org-member DATA CONE
+  -- (migration 0017): NULL (org-wide, the default) | 'assigned' |
+  -- 'read-only' | 'assigned+read-only'; the kernel's
+  -- parseOrgMemberCone owns the grammar; a malformed cell fails
+  -- CLOSED to the narrowest cone.
+  cone TEXT,
   UNIQUE (user_id, org_id)
 );
 CREATE INDEX IF NOT EXISTS idx_org_memberships_org ON org_memberships (org_id, state);