@aooth/arbac-moost 0.1.73 → 0.1.75

package/dist/{user.provider-NMSzynGK.d.mts → user.provider-D0ySI_-A.d.mts}

@@ -1,8 +1,8 @@
-import { Mate, TClassConstructor, TMateParamMeta, TMoostMetadata } from "moost";
 import { ControlGate, TProjection, TProjectionChildren, TScopeFieldRules, TScopeFilter } from "@aooth/arbac";
-import { TDbRemoveGuardContext, TDbWriteAction, TDbWriteCheckContext, TDbWriteGuardContext, TMetaResponse } from "@atscript/db";
-import { AsDbController, TDbControlsType, TDbRequestContext } from "@atscript/moost-db";
-import { NavPropsOf, OwnPropsOf, TAtscriptAnnotatedType, TAtscriptDataType } from "@atscript/typescript/utils";
+import { Mate, TClassConstructor, TMateParamMeta, TMoostMetadata } from "moost";
+import { FilterExpr, TDbRemoveGuardContext, TDbWriteAction, TDbWriteCheckContext, TDbWriteGuardContext, TMetaResponse, UniqueryControls } from "@atscript/db";
+import { AsDbController, TDbActionScopeContext, TDbControlsType, TDbRequestContext } from "@atscript/moost-db";
+import { NavPropsOf, OwnPropsOf, TAtscriptAnnotatedType, TAtscriptDataType, TSerializedAnnotatedType } from "@atscript/typescript/utils";
 //#region src/arbac.mate.d.ts
 /**
  * ARBAC metadata fields attached to classes and methods by ARBAC decorators.
@@ -124,6 +124,7 @@ type ControlsOf<T> = IsUnknown<T> extends true ? Record<string, ControlGate> : {
 declare function applyAllowedFieldsAndSet(data: unknown, scopes: ArbacDbScope[], preserveFields?: readonly string[], isMergePatch?: (objectPath: string) => boolean): unknown;
 //#endregion
 //#region src/db/as-arbac-db-controller.d.ts
+type TSelect = UniqueryControls["$select"];
 /**
  * Contract returned by an ARBAC role's scope predicate on a DB-backed resource.
  *
@@ -269,8 +270,20 @@ declare class AsArbacDbController<T extends TAtscriptAnnotatedType = TAtscriptAn
    * is resolved for the requested relations.
    */
   protected prepareRequest(ctx: TDbRequestContext): Promise<void>;
-  protected transformFilter(filter: Record<string, unknown> | undefined): Record<string, unknown>;
-  protected transformProjection(projection?: TProjection): TProjection | undefined;
+  /**
+   * The request filter ∧ the union of the scopes' `filter`s. Computed
+   * synchronously, but typed with moost-db's async-capable contract
+   * (`FilterExpr | Promise<FilterExpr>`) so a subclass may override it
+   * `async` — `await super.transformFilter(filter)` — and moost-db awaits it.
+   */
+  protected transformFilter(filter: Record<string, unknown> | undefined): FilterExpr | Promise<FilterExpr>;
+  /** A client relational predicate's operand ∧ the related rows the caller may see ({@link arbacRelationFilter}). Since 0.1.74. */
+  protected transformRelationFilter(path: string, filter: FilterExpr): FilterExpr | Promise<FilterExpr>;
+  /**
+   * `$select` restricted to the scopes' projection union. Synchronous, typed
+   * async-capable like {@link transformFilter}.
+   */
+  protected transformProjection(projection?: TSelect): TSelect | undefined | Promise<TSelect | undefined>;
   /**
    * Translate `@uniqu/url` parser failures into HTTP 400 instead of letting them
    * bubble as 500. The base `parseQueryString` calls `parseUrl()` directly with
@@ -301,6 +314,12 @@ declare class AsArbacDbController<T extends TAtscriptAnnotatedType = TAtscriptAn
    */
   protected validateControls(controls: Record<string, unknown>, type: TDbControlsType): string | undefined;
   protected applyMetaOverlay(meta: TMetaResponse): Promise<TMetaResponse>;
+  /**
+   * `GET /meta/form/:name` under the `/meta` overlay's pointer rule: a form
+   * prop's `ref` / `ui.valueHelp` binding to a table the caller cannot read
+   * (or whose named fields they cannot see) is stripped.
+   */
+  metaForm(name: string): Promise<TSerializedAnnotatedType>;
   /**
    * `GET /meta/form/:name` serves a form only when the caller may run at
    * least one of the actions taking it as input (else the unknown-form 404).
@@ -308,10 +327,22 @@ declare class AsArbacDbController<T extends TAtscriptAnnotatedType = TAtscriptAn
   protected authorizeForm(_name: string, actionNames: readonly string[]): Promise<boolean>;
   /**
    * The rows each `@DbAction` may run on: the caller's grant on that action
-   * (see `arbacActionRowScope`). Enforced by the action gate and reflected
-   * in `$actions` and `GET /meta/actions/:id`. Since 0.1.72.
+   * ({@link arbacActionRowScope} — several grants union, attenuation
+   * intersects). Enforced by the action gate and reflected in `$actions` and
+   * `GET /meta/actions/:id`. Since 0.1.72.
+   *
+   * The grant does not depend on `ctx` (the candidate rows, since 0.1.74).
+   * To bound an action further by the candidates, override and AND your
+   * filter onto `super`'s — it must never replace it:
+   *
+   * ```ts
+   * protected async actionRowScope(name: string, ctx: TDbActionScopeContext) {
+   *   const grant = await super.actionRowScope(name, ctx);
+   *   return conjoinScopeFilters(grant, await myCandidateScope(name, ctx));
+   * }
+   * ```
    */
-  protected actionRowScope(name: string): Promise<Record<string, unknown> | undefined>;
+  protected actionRowScope(name: string, _ctx?: TDbActionScopeContext): Promise<Record<string, unknown> | undefined>;
   /**
    * The row-level actions `$actions` and `GET /meta/actions/:id` may list:
    * those the caller holds a grant on (the `/meta` overlay's rule, without

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aooth/arbac-moost",
-  "version": "0.1.73",
+  "version": "0.1.75",
   "description": "Moost RBAC integration for aoothjs (migrated from @moostjs/arbac)",
   "keywords": [
     "abac",
@@ -60,31 +60,31 @@
     "access": "public"
   },
   "dependencies": {
-    "@uniqu/core": "^0.1.11",
-    "@aooth/arbac": "0.1.73",
-    "@aooth/arbac-core": "0.1.73",
-    "@aooth/user": "0.1.73"
+    "@uniqu/core": "^0.1.13",
+    "@aooth/arbac": "0.1.75",
+    "@aooth/user": "0.1.75",
+    "@aooth/arbac-core": "0.1.75"
   },
   "devDependencies": {
-    "@atscript/core": "^0.1.98",
-    "@atscript/db": "^0.1.146",
-    "@atscript/db-sql-tools": "^0.1.146",
-    "@atscript/db-sqlite": "^0.1.146",
-    "@atscript/moost-db": "^0.1.146",
-    "@atscript/typescript": "^0.1.98",
-    "@moostjs/event-http": "^0.6.42",
+    "@atscript/core": "^0.1.100",
+    "@atscript/db": "^0.1.148",
+    "@atscript/db-sql-tools": "^0.1.148",
+    "@atscript/db-sqlite": "^0.1.148",
+    "@atscript/moost-db": "^0.1.148",
+    "@atscript/typescript": "^0.1.100",
+    "@moostjs/event-http": "^0.6.45",
     "@types/better-sqlite3": "^7.6.13",
     "better-sqlite3": "^12.6.2",
-    "unplugin-atscript": "^0.1.98"
+    "unplugin-atscript": "^0.1.100"
   },
   "peerDependencies": {
-    "@atscript/db": "^0.1.146",
-    "@atscript/moost-db": "^0.1.146",
-    "@atscript/typescript": "^0.1.98",
-    "@moostjs/event-http": "^0.6.42",
-    "@wooksjs/event-core": "^0.7.25",
-    "@wooksjs/event-http": "^0.7.25",
-    "moost": "^0.6.42"
+    "@atscript/db": "^0.1.148",
+    "@atscript/moost-db": "^0.1.148",
+    "@atscript/typescript": "^0.1.100",
+    "@moostjs/event-http": "^0.6.45",
+    "@wooksjs/event-core": "^0.7.26",
+    "@wooksjs/event-http": "^0.7.26",
+    "moost": "^0.6.45"
   },
   "peerDependenciesMeta": {
     "@atscript/db": {