v0.1.0

0.1.0 (2026-05-21)

⚠ BREAKING CHANGES

• roles: passing a role name to assignRole/removeRole/syncRoles without an active organisation context now throws unless global: true is set. Existing call sites that relied on the implicit fallback must either pass global: true, set the organisation context, or assign by Role instance / primary key (both bypass scope resolution).

Features

• add spatie/laravel-permission migration command and bulk role assignment API (#4) (7e352dc)
• gate pbac:migrate-from-spatie behind an opt-in config flag (dd36c8d)
• roles: require explicit global flag for cross-scope role mutations (24098be)
• scaffold laravel-pbac package (4395272)
• trace: implement decision trace redaction, logging and accessors (b15d71c)

Performance

• authorizer: introduce request-scoped PermissionResolver cache (0c32645)

Documentation

• add CLAUDE.md with architecture and tooling guide (3414430)
• add code of conduct (b9c3eff)
• add contributing guide (2012fa3)
• add migration guide from spatie/laravel-permission (e12a49a)
• add security policy (5ca398b)
• explain cascade-on-delete behaviour for role/permission deletions (9c50db0)
• polish README with hero, badges, and feature highlights (f308074)
• replace em-dashes with hyphens (8a2a878)
• restore em-dashes, use colons for step headings, add no-warranty notice (9cbe83d)

Refactor

• spatie-migration: extract SpatieMigrationService from console command (0eed0ae)