@softr/sdk 0.0.46-alpha.3 → 0.0.46

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/dist/package.js +1 -1
  2. package/package.json +1 -1
  3. package/skills/softr-sdk/record-mutations/SKILL.md +2 -0
package/dist/package.js CHANGED
@@ -1,5 +1,5 @@
1
1
  //#region package.json
2
- var version = "0.0.46-alpha.1";
2
+ var version = "0.0.46";
3
3
 
4
4
  //#endregion
5
5
  export { version };
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@softr/sdk",
3
- "version": "0.0.46-alpha.3",
3
+ "version": "0.0.46",
4
4
  "type": "module",
5
5
  "exports": {
6
6
  ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },
package/skills/softr-sdk/record-mutations/SKILL.md CHANGED
@@ -53,6 +53,8 @@ The declaration follows the same rules as a read, spelled out in [record-queries
53
53
 
54
54
  The mutation's `fields` bound the write: `data` can only name them, and the returned record only carries them. A delete mutation declares no `fields`, and giving it some is a type error.
55
55
 
56
+ An update or a delete must not be open to visitors: its `permissions` must be `{ userGroup: 'LOGGED_IN_USERS' }`. A visitor who is not logged in must never change or remove a record, so `ALL_USERS` and `NON_LOGGED_IN_USERS` are rejected for these two operations. A create may stay open to visitors, for a sign-up or a contact form.
57
+
56
58
  ## Core Patterns
57
59
 
58
60
  ### Create a record