@xmarts/genius-setup 1.13.1 → 1.13.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmarts/genius-setup",
-  "version": "1.13.1",
+  "version": "1.13.2",
   "description": "One-command, self-updating onboarding for Xmarts Genius (Brain MCP + per-turn injection + automatic session/time capture + presence heartbeat for honest time-tracking 'amarre' + plan/committee→Brain enforcement + CLAUDE.md protocol + MCP fan-out: provisions the consultant's granted MCP servers into Claude Code & Claude Desktop). Secret-free onboarding via single-use setup-token exchange. Installs once; self-updates daily so new tools/skills/features arrive with zero action.",
   "bin": {
     "genius-setup": "bin/genius-setup.js"

package/plugin/skills/genius-operator/references/provision-consultant-ui-access.md

@@ -26,6 +26,7 @@ name + xmarts.com email first (from `get_my_profile`, or the consultant record o
 
 ```python
 U = env['res.users'].sudo()
+GF = 'group_ids' if 'group_ids' in U.fields_get([]) else 'groups_id'   # v19 vs v17/18 field
 NAME, LOGIN = '<Full Name>', '<person@xmarts.com>'   # the consultant who needs access
 env.cr.execute("SELECT replace(gen_random_uuid()::text, '-', '')")
 raw = env.cr.fetchone()[0]
@@ -47,12 +48,12 @@ else:
         lg = p.login or ''
         if lg == 'admin' or lg.startswith('xma_'):
             continue                                   # skip the admin + service accounts
-        if sysg and sysg.id in p.group_ids.ids:
+        if sysg and sysg.id in p[GF].ids:
             continue                                   # never clone an admin's groups
-        n = len(p.group_ids)
+        n = len(p[GF])
         if n > best:
             best = n; peer = p
-    gids = peer.group_ids.ids if peer else []
+    gids = peer[GF].ids if peer else []
     if not gids:
         base = env.ref('base.group_user', raise_if_not_found=False)
         sales = env.ref('sales_team.group_sale_salesman', raise_if_not_found=False)
@@ -61,7 +62,7 @@ else:
     user = U.with_context(no_reset_password=True, mail_create_nosubscribe=True).create({
         'name': NAME, 'login': LOGIN, 'email': LOGIN, 'password': pw,
         'company_id': comp, 'company_ids': [Command.set([comp])],
-        'group_ids': [Command.set(gids)]})
+        GF: [Command.set(gids)]})
     status = 'created'
 result = {'status': status, 'uid': user.id, 'login': user.login, 'password': pw,
           'url': env['ir.config_parameter'].sudo().get_param('web.base.url') + '/web/login'}
@@ -80,6 +81,15 @@ Only assigned clients are reachable (`target_client` refuses unassigned). If the
 their assignments, tell them to ask an admin to assign it — that is the only gate. Nothing else
 about this should require a human hop.
 
+**If the `execute_orm` call itself errors** *before* your snippet runs — e.g. `"Client X has no
+API key configured"`, a not-reachable / timeout, or you can see `connectivity_mode: unknown` /
+`heartbeat_count: 0` on the `xma.client` record — the client is **registered but not gateway-
+connected** (the `xma_connect` agent was never activated on it). You cannot provision a UI user
+there. Tell the consultant plainly: *"\<client\> isn't connected to Genius yet — an admin needs to
+deploy xma_connect on it before UI access can be granted"* — do NOT surface the raw error or retry.
+(Confirmed 2026-07-01: PACKLIFE is `active` in the registry but has no gateway URL and 0 heartbeats,
+so `target_client="PACKLIFE"` is unreachable; Elevatrix and Edenred are connected and work.)
+
 ## The pattern (scalable, sustainable, auditable)
 
 **Per-consultant internal user in the client instance, provisioned on demand through the