@owlmeans/create-app 0.1.18-rc.54 → 0.1.18-rc.55

package/README.md

@@ -9,7 +9,7 @@ bun create @owlmeans/app my-app
 # or
 yarn create @owlmeans/app my-app
 # or
-npx @owlmeans/create-app@^0.1.18-rc.54 my-app
+npx @owlmeans/create-app@^0.1.18-rc.55 my-app
 ```
 
 ## What it generates

package/build/args.js

@@ -5,7 +5,7 @@ Usage:
   npm create @owlmeans/app@latest <dir> [options]
   bun create @owlmeans/app <dir> [options]
   yarn create @owlmeans/app <dir> [options]
-  npx @owlmeans/create-app@^0.1.18-rc.54 <dir> [options]
+  npx @owlmeans/create-app@^0.1.18-rc.55 <dir> [options]
 
 Generates three workspaces (common + api + web) with shadcn UI navigation and
 layout, no authentication, and a session-scoped in-memory resource on the

package/build/run.js

@@ -50,7 +50,7 @@ export const run = async (args) => {
         log(args.install
             ? '\nDeploying agent skills via @owlmeans/agent-skills…'
             : '\nDeploying harness guidance via @owlmeans/agent-skills (general skills only — re-run'
-                + '\n`npx @owlmeans/agent-skills@^0.1.18-rc.45` after installing to add the package-specific ones)…');
+                + '\n`npx @owlmeans/agent-skills@^0.1.18-rc.46` after installing to add the package-specific ones)…');
         try {
             const result = await installSkills({
                 dir: dest,
@@ -62,7 +62,7 @@ export const run = async (args) => {
                 help: false,
             });
             if (result.code !== 0) {
-                process.stderr.write(`  agent-skills exited with code ${result.code} — you can re-run \`npx @owlmeans/agent-skills@^0.1.18-rc.45\` later.\n`);
+                process.stderr.write(`  agent-skills exited with code ${result.code} — you can re-run \`npx @owlmeans/agent-skills@^0.1.18-rc.46\` later.\n`);
             }
         }
         catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/create-app",
-  "version": "0.1.18-rc.54",
+  "version": "0.1.18-rc.55",
   "license": "MIT",
   "description": "Scaffold a fullstack OwlMeans Common app — common + api + web workspaces, shadcn UI navigation/layout, no auth, and a session-scoped in-memory resource, or --bare for the demo-free shell. Also usable programmatically via scaffold(). Deploys agent skills via @owlmeans/agent-skills by default.",
   "type": "module",
@@ -30,7 +30,7 @@
     "template"
   ],
   "dependencies": {
-    "@owlmeans/agent-skills": "^0.1.18-rc.45"
+    "@owlmeans/agent-skills": "^0.1.18-rc.46"
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",

package/template/AGENTS.md

@@ -94,7 +94,7 @@ from the installed `@owlmeans/*` packages. Agents load a skill by topic, or you
 explicitly. Copilot and Codex read `.agents/skills/` directly; Claude Code reads the generated
 symlinks in `.claude/skills/` (see "Claude Code" below).
 
-- After adding or updating any `@owlmeans/*` dependency, run `npx @owlmeans/agent-skills@^0.1.18-rc.45` to refresh
+- After adding or updating any `@owlmeans/*` dependency, run `npx @owlmeans/agent-skills@^0.1.18-rc.46` to refresh
   the deployed skills.
 - Deployed files carry an `AUTO-GENERATED` banner and are refreshed in place — never hand-edit them.
 - To capture your own guidance, see the `skill-authoring` skill; to turn repeatedly-used memory into

package/template/README.bare.md

@@ -53,5 +53,5 @@ them; write your own guidance as separate, un-bannered files. Refresh after addi
 `@owlmeans/*` packages:
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.45
+npx @owlmeans/agent-skills@^0.1.18-rc.46
 ```

package/template/_agents/skills/reuse-code/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: reuse-code
-description: Discovery-first, reuse-first workflow for OwlMeans projects. Use BEFORE planning or building any feature, before proposing a third-party library or a custom solution, and after writing code. Find an existing @owlmeans/* package or existing code first; extend before writing new; simplify what you write.
+description: Discovery-first, reuse-first workflow for OwlMeans projects. Use BEFORE planning or building any feature, before proposing a third-party library or a custom solution, and after writing code. Find an existing @owlmeans/* package or existing code first (membership, invitations, organizations and access come from the IAM); extend before writing new; simplify what you write.
 user-invocable: true
 metadata:
   scope: general
@@ -47,7 +47,7 @@ How you research the repo depends on whether `@owlmeans/*` is linked locally:
   **https://github.com/owlmeans/common** — `tree.md` and package READMEs — to find the right package.
 
 This is the same dev-linked detection `@owlmeans/agent-skills` uses (see its `detectLinked`). After
-adding an `@owlmeans/*` dependency, run `npx @owlmeans/agent-skills@^0.1.18-rc.45` to deploy its
+adding an `@owlmeans/*` dependency, run `npx @owlmeans/agent-skills@^0.1.18-rc.46` to deploy its
 skill. Prefer an `@owlmeans/*` package over a third-party library or bespoke code whenever one fits.
 
 ### Never add an OwlMeans dependency without an explicit range
@@ -74,6 +74,23 @@ If an installed package nearly fits, **configure or extend it** rather than writ
 its resources, services, entrypoints, and helpers. A small extension of a framework package beats a new
 parallel implementation.
 
+### People, organizations and access come from the IAM
+
+An application that signs its people in through an OwlMeans IAM provider already has accounts,
+organizations, memberships, invitations and grants — the provider keeps them. Before writing a
+members table, an invitation flow, a role column or an organization picker:
+
+- **Server** (`@owlmeans/server-iam`): `iamRuntime(context, request)` lists the person's
+  organizations, creates one, lists / adds (find-or-create by e-mail) / updates / removes members,
+  and lists, assigns and revokes grants — as the signed-in person, with owner and member rights
+  decided by the provider. `organizationOf` / `organizationsOf` read the session's organizations;
+  gates and `hasPermission` enforce access; `requireEntityKey(req)` is the tenant key to store
+  records by.
+- **Browser** (`@owlmeans/client-iam`): `listOrganizations` / `switchOrganization` — the acting
+  organization is session state, never a per-request parameter.
+- If the project's own scaffold already ships an organization switcher or a people / access screen,
+  extend it rather than adding a second one.
+
 ## 3. No package? Reuse code and extract an abstraction
 
 When no package solves it, search the codebase for code that already solves a **similar** problem.

package/template/sources/api/package.json

@@ -11,7 +11,7 @@
     "typecheck": "tsc -b"
   },
   "dependencies": {
-    "@owlmeans/server-app": "^0.1.18-rc.48",
+    "@owlmeans/server-app": "^0.1.18-rc.49",
     "@owlmeans/static-resource": "^0.1.18-rc.36",
     "__APP_SLUG__-common": "workspace:^"
   },

package/template/sources/common/package.json

@@ -19,8 +19,8 @@
     "typecheck": "tsc -b"
   },
   "dependencies": {
-    "@owlmeans/config": "^0.1.18-rc.40",
-    "@owlmeans/entrypoint": "^0.1.18-rc.38",
+    "@owlmeans/config": "^0.1.18-rc.41",
+    "@owlmeans/entrypoint": "^0.1.18-rc.39",
     "@owlmeans/error": "^0.1.18-rc.36",
     "@owlmeans/resource": "^0.1.18-rc.37",
     "@owlmeans/route": "^0.1.18-rc.33",

package/template/sources/web/package.json

@@ -11,16 +11,16 @@
     "preview": "vite preview"
   },
   "dependencies": {
-    "@owlmeans/client": "^0.1.18-rc.47",
-    "@owlmeans/client-config": "^0.1.18-rc.40",
-    "@owlmeans/client-context": "^0.1.18-rc.44",
-    "@owlmeans/client-entrypoint": "^0.1.18-rc.43",
-    "@owlmeans/client-i18n": "^0.1.18-rc.46",
-    "@owlmeans/entrypoint": "^0.1.18-rc.38",
+    "@owlmeans/client": "^0.1.18-rc.48",
+    "@owlmeans/client-config": "^0.1.18-rc.41",
+    "@owlmeans/client-context": "^0.1.18-rc.45",
+    "@owlmeans/client-entrypoint": "^0.1.18-rc.44",
+    "@owlmeans/client-i18n": "^0.1.18-rc.47",
+    "@owlmeans/entrypoint": "^0.1.18-rc.39",
     "@owlmeans/route": "^0.1.18-rc.33",
     "@owlmeans/state": "^0.1.18-rc.36",
-    "@owlmeans/web-client": "^0.1.18-rc.57",
-    "@owlmeans/web-panel": "^0.1.18-rc.67",
+    "@owlmeans/web-client": "^0.1.18-rc.58",
+    "@owlmeans/web-panel": "^0.1.18-rc.68",
     "@radix-ui/react-label": "^2.1.0",
     "@radix-ui/react-navigation-menu": "^1.2.14",
     "@radix-ui/react-progress": "^1.1.0",