@ai-matrx/associations 0.9.33 → 0.10.0

package/dist/core/index.d.cts

@@ -372,9 +372,19 @@ type EntityRowResult = {
 interface CreateEntityRowArgs {
     /** The new row's human name — written to the registry `titleColumn`. */
     title: string;
-    /** Org to stamp (skipped when the token has no org column). */
+    /**
+     * The organization the new row belongs to. REQUIRED by
+     * `public.entity_row_create`: every creatable token's table carries
+     * `organization_id`, and the door refuses a row with nobody owning it.
+     */
     orgId?: string | null;
-    /** Required NOT NULL columns the registry conventions can't know about. */
+    /**
+     * 🚨 NO LONGER WRITABLE THROUGH THIS SERVICE (DOORS-ONLY-4). The door writes the
+     * name, the owner and the organization and nothing else, so a non-empty value here
+     * is REFUSED with the columns named rather than dropped on the floor. A token whose
+     * table needs more than a name is created by its own feature's create service; this
+     * generic path then only renames it.
+     */
     extraColumns?: Record<string, unknown>;
 }
 interface EntityRowsServiceApi {

package/dist/core/index.d.ts

@@ -372,9 +372,19 @@ type EntityRowResult = {
 interface CreateEntityRowArgs {
     /** The new row's human name — written to the registry `titleColumn`. */
     title: string;
-    /** Org to stamp (skipped when the token has no org column). */
+    /**
+     * The organization the new row belongs to. REQUIRED by
+     * `public.entity_row_create`: every creatable token's table carries
+     * `organization_id`, and the door refuses a row with nobody owning it.
+     */
     orgId?: string | null;
-    /** Required NOT NULL columns the registry conventions can't know about. */
+    /**
+     * 🚨 NO LONGER WRITABLE THROUGH THIS SERVICE (DOORS-ONLY-4). The door writes the
+     * name, the owner and the organization and nothing else, so a non-empty value here
+     * is REFUSED with the columns named rather than dropped on the floor. A token whose
+     * table needs more than a name is created by its own feature's create service; this
+     * generic path then only renames it.
+     */
     extraColumns?: Record<string, unknown>;
 }
 interface EntityRowsServiceApi {

package/dist/core/index.js

@@ -3143,31 +3143,7 @@ function createTitlesService(deps, candidates) {
 
 // src/core/entityRows.ts
 function createEntityRowsService(deps, titles) {
-  const { dataSource, identity, registry, errorSink } = deps;
-  function tableFor(token, schema, table) {
-    if (schema && schema !== "public") {
-      if (!dataSource.schema) {
-        const error = `dataSource has no schema() capability \u2014 entity-row writes for "${token}" (${schema}.${table}) need a table-capable dataSource (a real supabase-js client)`;
-        errorSink({
-          code: "datasource_missing_table_capability",
-          message: `[entityRows] ${error}`,
-          context: { token, schema, table }
-        });
-        return { ok: false, error };
-      }
-      return { ok: true, query: dataSource.schema(schema).from(table) };
-    }
-    if (!dataSource.from) {
-      const error = `dataSource has no from() capability \u2014 entity-row writes for "${token}" need a table-capable dataSource (a real supabase-js client)`;
-      errorSink({
-        code: "datasource_missing_table_capability",
-        message: `[entityRows] ${error}`,
-        context: { token, schema, table }
-      });
-      return { ok: false, error };
-    }
-    return { ok: true, query: dataSource.from(table) };
-  }
+  const { dataSource, registry, errorSink } = deps;
   function requireTitleColumn(token, op) {
     const info = registry.getEntityInfo(token);
     if (!info.titleColumn) {
@@ -3179,43 +3155,68 @@ function createEntityRowsService(deps, titles) {
       });
       return { ok: false, error };
     }
-    return { ok: true, titleColumn: info.titleColumn };
+    return { ok: true };
   }
   return {
     /**
-     * Insert one row of `token`'s backing table named `title`, owned by the
-     * current user (when the table has an owner column). Returns the new
-     * row's id + title. The caller wires associations afterwards — this
-     * layer never writes edges.
+     * Create one row of `token`'s backing table named `title`, through
+     * `public.entity_row_create`. The door stamps `created_by` from `auth.uid()`,
+     * checks the caller can act in the organization, and refuses machinery tokens and
+     * tables with no organization by name. Returns the new row's id + title. The
+     * caller wires associations afterwards — this layer never writes edges.
      */
     async createEntityRow(token, args) {
       const gate = requireTitleColumn(token, "creating rows");
       if (!gate.ok) return gate;
-      const info = registry.getEntityInfo(token);
       const title = args.title.trim();
       if (!title) return { ok: false, error: "Name is required" };
+      const extras = Object.keys(args.extraColumns ?? {});
+      if (extras.length > 0) {
+        const error = `A new ${registry.getEntityInfo(token).label} cannot be created here with ${extras.join(", ")}: the shared create door writes the name, the owner and the organization and nothing else. Create it with this feature's own create service, then attach it.`;
+        errorSink({
+          code: "entity_row_extra_columns_unsupported",
+          message: `[createEntityRow] extraColumns are not writable through entity_row_create for "${token}": ${extras.join(", ")}`,
+          context: { token, extras }
+        });
+        return { ok: false, error };
+      }
+      if (!args.orgId) {
+        const error = `Name the organization this ${registry.getEntityInfo(token).label} belongs to.`;
+        errorSink({
+          code: "entity_row_missing_organization",
+          message: `[createEntityRow] no organization supplied for "${token}"; entity_row_create requires one`,
+          context: { token }
+        });
+        return { ok: false, error };
+      }
       try {
-        const userId = identity.requireUserId();
-        const table = tableFor(token, info.schema, info.table);
-        if (!table.ok) return table;
-        const row = {
-          [gate.titleColumn]: title,
-          ...info.ownerColumn ? { [info.ownerColumn]: userId } : {},
-          ...info.orgColumn && args.orgId ? { [info.orgColumn]: args.orgId } : {},
-          ...args.extraColumns ?? {}
-        };
-        const { data, error } = await table.query.insert(row).select("id").single();
+        const { data, error } = await dataSource.rpc("entity_row_create", {
+          p_token: token,
+          p_title: title,
+          p_organization_id: args.orgId
+        });
         if (error) {
           errorSink({
             code: "entity_row_insert_failed",
-            message: `[createEntityRow] insert failed for "${token}": ${error.message}`,
+            message: `[createEntityRow] entity_row_create failed for "${token}": ${error.message}`,
             context: { token, detail: error }
           });
           return { ok: false, error: error.message };
         }
-        const id = String(data.id);
-        titles.prime(token, id, title);
-        return { ok: true, data: { id, title } };
+        const row = data;
+        if (!row || typeof row.id !== "string" || !row.id) {
+          const msg = "The create door returned no record.";
+          errorSink({
+            code: "entity_row_insert_failed",
+            message: `[createEntityRow] entity_row_create returned no id for "${token}"`,
+            context: { token, detail: data }
+          });
+          return { ok: false, error: msg };
+        }
+        const id = row.id;
+        const named = typeof row.title === "string" && row.title ? row.title : title;
+        titles.prime(token, id, named);
+        return { ok: true, data: { id, title: named } };
       } catch (e) {
         const msg = e instanceof Error ? e.message : "Failed to create";
         errorSink({
@@ -3226,21 +3227,27 @@ function createEntityRowsService(deps, titles) {
         return { ok: false, error: msg };
       }
     },
-    /** Update the registry `titleColumn` of one row of `token`'s table. */
+    /**
+     * Rename one row of `token`'s table through `public.entity_row_rename`. The door
+     * decides on the one ladder — the row's author, `editor` on the row, or a platform
+     * admin — and answers "there is no such thing here" rather than telling a caller
+     * that somebody else's row exists.
+     */
     async renameEntityRow(token, id, title) {
       const gate = requireTitleColumn(token, "renaming rows");
       if (!gate.ok) return gate;
-      const info = registry.getEntityInfo(token);
       const trimmed = title.trim();
       if (!trimmed) return { ok: false, error: "Name is required" };
       try {
-        const table = tableFor(token, info.schema, info.table);
-        if (!table.ok) return table;
-        const { error } = await table.query.update({ [gate.titleColumn]: trimmed }).eq("id", id);
+        const { error } = await dataSource.rpc("entity_row_rename", {
+          p_token: token,
+          p_id: id,
+          p_title: trimmed
+        });
         if (error) {
           errorSink({
             code: "entity_row_update_failed",
-            message: `[renameEntityRow] update failed for "${token}": ${error.message}`,
+            message: `[renameEntityRow] entity_row_rename failed for "${token}": ${error.message}`,
             context: { token, id, detail: error }
           });
           return { ok: false, error: error.message };