- Shipped
- October 14, 2026 at 12:10 AM UTC
- Author
- Kamo
- Commit
- 582704f
SHOW_TOUR_<APP>, one per app group — thirty-one, E-Signatures included — each a standalone root filed under its app, labelled "Show Tour", and GRANTED by default so a role created from now on offers its members every tour. It decides only whether the member is walked through that app's guided tour at sign-in and offered it on the App Shelf; each tour step is separately gated on the right behind what it shows, so the right grants no data and no capability. RoleRightType.tourRightFor(app) / isTourRight() find them by name; RoleRightHierarchyTest pins that name, app and shape agree. Counts: values 323 -> 354, standalone 46 -> 77, roots 88 -> 119. Next free id is 369.