@base44-preview/cli 0.1.29-pr.655.1f8f35a → 0.1.29-pr.656.58d97d4

package/dist/cli/index.js

@@ -261311,7 +261311,7 @@ function shardOf(group, response, verdict, options) {
     gzipBytes: verdict.gzipBytes,
     ...response.activation ? { activation: response.activation } : {},
     wrapper: {
-      secrets: response.activation ? `blob_${response.activation}` : "binding",
+      secrets: response.activation ? `blob-${response.activation}` : "binding",
       postResponseTelemetry: options.postResponseTelemetry ?? false,
       staticEgress: STATIC_EGRESS_ARTIFACT_MARKER
     }
@@ -264197,8 +264197,10 @@ In order to complete registration use this verification code: ${otpCode}
 // src/cli/dev/dev-server/routes/entities/entities-router.ts
 var import_express4 = __toESM(require_express(), 1);
 
-// src/cli/dev/dev-server/db/rls.ts
+// src/cli/dev/dev-server/db/fls-write.ts
 import { isDeepStrictEqual as isDeepStrictEqual5 } from "node:util";
+
+// src/cli/dev/dev-server/db/rls.ts
 function getRLSFieldValue(key, source) {
   const DATA_FIELD_PREFIX = "data.";
   return source[key.startsWith(DATA_FIELD_PREFIX) ? key.slice(DATA_FIELD_PREFIX.length) : key];
@@ -264316,18 +264318,38 @@ function applyFLS(record, schema, user, operation) {
   return result;
 }
 
+// src/cli/dev/dev-server/db/fls-write.ts
 class FLSWriteError extends Error {
   constructor(operation, deniedFields) {
     const verb = operation === "create" ? "set" : "modify";
     super(`You're not allowed to ${verb} the following fields: ${deniedFields.join(", ")}`);
   }
 }
+var isPlainObject4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var flattenToDataPaths = (record, prefix = "data") => Object.entries(record).flatMap(([key, value]) => isPlainObject4(value) ? flattenToDataPaths(value, `${prefix}.${key}`) : [[`${prefix}.${key}`, value]]);
+var collectFieldRules = (properties, prefix = "data") => Object.entries(properties).flatMap(([key, property]) => {
+  const path = `${prefix}.${key}`;
+  const own = property.rls ? [[path, property.rls]] : [];
+  return [...own, ...collectFieldRules(property.properties ?? {}, path)];
+});
+var findClosestRule = (rules, path) => {
+  const segments = path.split(".");
+  for (let length = segments.length;length > 1; length--) {
+    const rule = rules.get(segments.slice(0, length).join("."));
+    if (rule)
+      return rule;
+  }
+  return;
+};
+var isUnchanged = (before, after) => isDeepStrictEqual5(before ?? null, after ?? null);
 function assertFLSWrite(changes, context, schema, user, operation) {
-  const denied = Object.entries(changes).filter(([key, value]) => {
-    const rls = schema.properties[key]?.rls;
+  const rules = new Map(collectFieldRules(schema.properties));
+  const before = new Map(flattenToDataPaths(context));
+  const denied = flattenToDataPaths(changes).filter(([path, value]) => {
+    const rls = findClosestRule(rules, path);
     const rule = rls?.[operation] ?? rls?.write;
-    return rule !== undefined && !isDeepStrictEqual5(context[key], value) && !checkRLS(rule, context, user);
-  }).map(([key]) => `data.${key}`);
+    return rule !== undefined && !isUnchanged(before.get(path), value) && !checkRLS(rule, context, user);
+  }).map(([path]) => path);
   if (denied.length > 0) {
     throw new FLSWriteError(operation, denied);
   }
@@ -267647,7 +267669,7 @@ function isBuiltin4(candidate, className) {
 function isEvent(candidate) {
   return !isUndefined(Event) && isInstanceOf(candidate, Event);
 }
-function isPlainObject4(candidate) {
+function isPlainObject5(candidate) {
   return isBuiltin4(candidate, "Object");
 }
 function isInstanceOf(candidate, base) {
@@ -270783,7 +270805,7 @@ class PostHogBackendClient extends PostHogCoreStateless {
     const personProperties = {};
     const groupProperties = {};
     for (const [key, value] of Object.entries(eventProperties))
-      if (isPlainObject4(value) && groups && key in groups) {
+      if (isPlainObject5(value) && groups && key in groups) {
         const groupProps = {};
         for (const [groupKey, groupValue] of Object.entries(value))
           groupProps[String(groupKey)] = String(groupValue);
@@ -271260,4 +271282,4 @@ export {
   runCLI
 };
 
-//# debugId=E5E7C98F673394D264756E2164756E21
+//# debugId=397A39E710CEFAB564756E2164756E21