@ai-matrx/data 0.24.0 → 0.25.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.25.0 — created_by stamped; listAll keeps the database's error
+
+- **A signed-in `insert` stamps `created_by`** with the session's person when the table has a
+  `created_by` column and the row omits it (row security on `workbench.notes` / `note_folders` and
+  similar tables refuses an insert whose `created_by` is not `auth.uid()`). An explicit value is kept;
+  the service role never stamps. Descriptors carry `createdBy: boolean` (generated from the columns).
+- **`listAll` throws a `DatabaseError`** carrying the database's own error (message, code, details) —
+  it used to surface as a re-worded `readAllRows(...)` `Error` without the code.
+
+Consumer action: run `matrx-data generate` again (`pnpm db:generate`) so descriptors carry `createdBy`;
+code that matched `listAll` failures by the `readAllRows(` message should check `instanceof DatabaseError`.
+
 ## 0.24.0 — doors hardened (independent review)
 
 - **Every write on a versioned table is guarded.** `remove` (and `archive` / `restore`) take the same

package/bin/generate.mjs

@@ -94,6 +94,7 @@ function tableDescriptor(schema, name, t) {
     readOnlyColumns: reg?.clientReadOnlyColumns ?? [],
     listScope: reg?.listScope ?? null,
     realtime: (t.realtime ?? []).includes("supabase_realtime"),
+    createdBy: t.columns.some((c) => c.name === "created_by"),
   };
   return flags;
 }

package/dist/db.cjs

@@ -1074,7 +1074,10 @@ async function listAll(db, table, where, opts = {}) {
     ({ from: lo, to: hi }) => {
       let q = live(from(db, table).select(selectOf(opts.columns), { count: "exact" }), table, opts.includeDeleted);
       if (where) q = where(q);
-      return ordered(q, table, opts.orderBy).range(lo, hi);
+      return Promise.resolve(ordered(q, table, opts.orderBy).range(lo, hi)).then((res) => {
+        if (res.error) throw new DatabaseError(`listAll ${qualified(table)}`, res.error);
+        return res;
+      });
     },
     {
       label: `listAll ${qualified(table)}`,
@@ -1120,7 +1123,12 @@ function withOrganization(db, table, values) {
 async function insert(db, table, values) {
   assertDoor(db, table, "insert");
   const many = Array.isArray(values);
-  const rows = (many ? values : [values]).map((v) => withOrganization(db, table, v));
+  let rows = (many ? values : [values]).map((v) => withOrganization(db, table, v));
+  if (table.createdBy && db.role === "user" && rows.some((r) => r.created_by == null) && db.client.auth) {
+    const { data } = await db.client.auth.getSession();
+    const person = data.session?.user?.id;
+    if (person) rows = rows.map((r) => r.created_by == null ? { ...r, created_by: person } : r);
+  }
   const res = await from(db, table).insert(rows).select("*");
   const stored = check(`insert ${qualified(table)}`, res);
   return many ? stored : stored[0];