create-syncular-app 0.15.20 → 0.15.21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-syncular-app",
-  "version": "0.15.20",
+  "version": "0.15.21",
   "description": "Scaffold a new Syncular app: `create-syncular-app`",
   "license": "Apache-2.0",
   "author": "Benjamin Kniffler",
@@ -49,6 +49,6 @@
     "!dist/**/*.test.d.ts"
   ],
   "devDependencies": {
-    "@syncular/typegen": "0.15.20"
+    "@syncular/typegen": "0.15.21"
   }
 }

package/template/minimal/README.md

@@ -32,7 +32,10 @@ bun run clients           # terminal 2 — prints "✓ converged"
 1. **`src/server.ts` → `resolveScopes`** — the whole authorization story. It
    runs in your backend next to your auth. The starter returns `['*']` (see
    everything); a real one returns the scope values the authenticated actor may
-   see.
+   see. Multiple variables are independent, not correlated parent/child tuples:
+   test isolation with at least two parents and child IDs, and carry the parent
+   scope on every child table before using a child wildcard. See
+   [Scopes & authorization](https://syncular.dev/concepts-scopes/).
 2. **`src/server.ts` → `authenticate`** — plug in your real session/token
    check; return `{ actorId, partition }` or `null` for a 401.
 3. **`migrations/` + `syncular.json`** — append migrations and add tables or

package/template/tauri/README.md

@@ -77,7 +77,11 @@ On desktop, the plugin owns the database path and the transport — see
 
 1. **`src/server.ts` → `resolveScopes`** — the whole authorization story. The
    starter returns `['*']`; a real one returns the scope values the
-   authenticated actor may see.
+   authenticated actor may see. Multiple variables are independent, not
+   correlated parent/child tuples: test isolation with at least two parents and
+   child IDs, and carry the parent scope on every child table before using a
+   child wildcard. See
+   [Scopes & authorization](https://syncular.dev/concepts-scopes/).
 2. **`src/server.ts` → `authenticate`** — plug in your real session/token
    check; return `{ actorId, partition }` or `null` for a 401.
 3. **`src-tauri/src/lib.rs` → `base_url`** — point the native core at your

package/template/tauri/src-tauri/Cargo.toml

@@ -21,7 +21,7 @@ tauri = { version = "2", features = [] }
 # The syncular plugin from crates.io. `native-transport` gives the core its
 # real HTTP + WebSocket transport (ureq + tungstenite) inside the host
 # process — the webview never talks to the sync server directly.
-tauri-plugin-syncular = { version = "0.15.20", features = ["native-transport"] }
+tauri-plugin-syncular = { version = "0.15.21", features = ["native-transport"] }
 
 [features]
 default = []

package/template/web/README.md

@@ -42,7 +42,11 @@ covered by `tsc`).
 
 1. **`src/server.ts` → `resolveScopes`** — the whole authorization story. It
    runs in your backend next to your auth. The starter returns `['*']`; a real
-   one returns the scope values the authenticated actor may see.
+   one returns the scope values the authenticated actor may see. Multiple
+   variables are independent, not correlated parent/child tuples: test
+   isolation with at least two parents and child IDs, and carry the parent scope
+   on every child table before using a child wildcard. See
+   [Scopes & authorization](https://syncular.dev/concepts-scopes/).
 2. **`src/server.ts` → `authenticate`** — plug in your real session/token
    check; return `{ actorId, partition }` or `null` for a 401.
 3. **`src/frontend/main.ts`** — the UI. It queries and mutates through the