feat(mindspace): enforce PostgreSQL user data delivery

2026-07-13 15:29:29 +08:00
parent b33c943b69
commit a6620fb719
57 changed files with 2779 additions and 164 deletions
@@ -161,7 +161,7 @@ export const CAPABILITY_CATALOG = [
 ];

 /** Capabilities that must never be enabled for regular users, even via DB overrides. */
-export const USER_NON_GRANTABLE_CAPABILITIES = new Set(['extension_admin']);
+export const USER_NON_GRANTABLE_CAPABILITIES = new Set(['extension_admin', 'apps']);

 export function clampUserCapabilities(capabilities) {
  const clamped = { ...capabilities };