@ai-matrx/data 0.24.0 → 0.25.0

package/dist/db.d.cts

@@ -842,6 +842,12 @@ interface TableDescriptor<Row = Record<string, unknown>, Insert = Record<string,
     readonly readOnlyColumns: readonly string[];
     readonly listScope: string | null;
     readonly realtime: boolean;
+    /**
+     * The table has a `created_by` column. A signed-in insert that omits it is stamped with the
+     * session's person (row security on tables like `workbench.notes` refuses an insert whose
+     * `created_by` is not `auth.uid()`). Optional: descriptors generated before 0.25.0 lack it.
+     */
+    readonly createdBy?: boolean;
     readonly [ROW]?: {
         row: Row;
         insert: Insert;
@@ -903,6 +909,9 @@ interface SupabaseLike {
             data: {
                 session: {
                     access_token: string;
+                    user?: {
+                        id: string;
+                    } | null;
                 } | null;
             };
         }>;

package/dist/db.d.ts

@@ -842,6 +842,12 @@ interface TableDescriptor<Row = Record<string, unknown>, Insert = Record<string,
     readonly readOnlyColumns: readonly string[];
     readonly listScope: string | null;
     readonly realtime: boolean;
+    /**
+     * The table has a `created_by` column. A signed-in insert that omits it is stamped with the
+     * session's person (row security on tables like `workbench.notes` refuses an insert whose
+     * `created_by` is not `auth.uid()`). Optional: descriptors generated before 0.25.0 lack it.
+     */
+    readonly createdBy?: boolean;
     readonly [ROW]?: {
         row: Row;
         insert: Insert;
@@ -903,6 +909,9 @@ interface SupabaseLike {
             data: {
                 session: {
                     access_token: string;
+                    user?: {
+                        id: string;
+                    } | null;
                 } | null;
             };
         }>;

package/dist/db.js

@@ -995,7 +995,10 @@ async function listAll(db, table, where, opts = {}) {
     ({ from: lo, to: hi }) => {
       let q = live(from(db, table).select(selectOf(opts.columns), { count: "exact" }), table, opts.includeDeleted);
       if (where) q = where(q);
-      return ordered(q, table, opts.orderBy).range(lo, hi);
+      return Promise.resolve(ordered(q, table, opts.orderBy).range(lo, hi)).then((res) => {
+        if (res.error) throw new DatabaseError(`listAll ${qualified(table)}`, res.error);
+        return res;
+      });
     },
     {
       label: `listAll ${qualified(table)}`,
@@ -1041,7 +1044,12 @@ function withOrganization(db, table, values) {
 async function insert(db, table, values) {
   assertDoor(db, table, "insert");
   const many = Array.isArray(values);
-  const rows = (many ? values : [values]).map((v) => withOrganization(db, table, v));
+  let rows = (many ? values : [values]).map((v) => withOrganization(db, table, v));
+  if (table.createdBy && db.role === "user" && rows.some((r) => r.created_by == null) && db.client.auth) {
+    const { data } = await db.client.auth.getSession();
+    const person = data.session?.user?.id;
+    if (person) rows = rows.map((r) => r.created_by == null ? { ...r, created_by: person } : r);
+  }
   const res = await from(db, table).insert(rows).select("*");
   const stored = check(`insert ${qualified(table)}`, res);
   return many ? stored : stored[0];