@happyvertical/smrt-core 0.55.24 → 0.56.0

package/dist/operation-permission.d.ts

@@ -0,0 +1,10 @@
+/** Server-authored custom-action permission aliases shared by every transport. */
+export interface OperationPermissionAlias {
+    /** Existing CRUD permission in the same collection; never a permission bypass. */
+    action: 'read' | 'create' | 'update' | 'delete';
+    /** Additional SQL policy actions this permission needs for the custom method. */
+    databaseActions?: ('SELECT' | 'INSERT' | 'UPDATE' | 'DELETE')[];
+}
+/** Resolve one explicit action alias; malformed declarations fail closed. */
+export declare function resolveOperationPermissionAlias(config: unknown, action: string): OperationPermissionAlias | undefined;
+//# sourceMappingURL=operation-permission.d.ts.map

package/dist/operation-permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-permission.d.ts","sourceRoot":"","sources":["../src/operation-permission.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,MAAM,WAAW,wBAAwB;IACvC,kFAAkF;IAClF,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAChD,iFAAiF;IACjF,eAAe,CAAC,EAAE,CAAC,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC;CACjE;AAED,6EAA6E;AAC7E,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GACb,wBAAwB,GAAG,SAAS,CA+BtC"}

package/dist/operation-permission.js

@@ -0,0 +1,36 @@
+//#region src/operation-permission.ts
+/** Resolve one explicit action alias; malformed declarations fail closed. */
+function resolveOperationPermissionAlias(config, action) {
+	if (!config || typeof config !== "object") return void 0;
+	const aliases = config.operationPermissions;
+	if (aliases === void 0) return void 0;
+	if (!aliases || typeof aliases !== "object" || Array.isArray(aliases)) throw new Error("operationPermissions must be an action map");
+	if (!Object.hasOwn(aliases, action)) return void 0;
+	if ([
+		"list",
+		"get",
+		"read",
+		"create",
+		"update",
+		"delete"
+	].includes(action)) throw new Error("CRUD permissions cannot be aliased");
+	const alias = aliases[action];
+	if (!alias || typeof alias !== "object" || Array.isArray(alias)) throw new Error("Invalid operation permission alias");
+	const value = alias;
+	if (![
+		"read",
+		"create",
+		"update",
+		"delete"
+	].includes(value.action) || Object.keys(alias).some((key) => key !== "action" && key !== "databaseActions") || value.databaseActions !== void 0 && (!Array.isArray(value.databaseActions) || value.databaseActions.some((entry) => ![
+		"SELECT",
+		"INSERT",
+		"UPDATE",
+		"DELETE"
+	].includes(entry)))) throw new Error("Invalid operation permission alias");
+	return value;
+}
+//#endregion
+export { resolveOperationPermissionAlias };
+
+//# sourceMappingURL=operation-permission.js.map

package/dist/operation-permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-permission.js","names":[],"sources":["../src/operation-permission.ts"],"sourcesContent":["/** Server-authored custom-action permission aliases shared by every transport. */\nexport interface OperationPermissionAlias {\n  /** Existing CRUD permission in the same collection; never a permission bypass. */\n  action: 'read' | 'create' | 'update' | 'delete';\n  /** Additional SQL policy actions this permission needs for the custom method. */\n  databaseActions?: ('SELECT' | 'INSERT' | 'UPDATE' | 'DELETE')[];\n}\n\n/** Resolve one explicit action alias; malformed declarations fail closed. */\nexport function resolveOperationPermissionAlias(\n  config: unknown,\n  action: string,\n): OperationPermissionAlias | undefined {\n  if (!config || typeof config !== 'object') return undefined;\n  const aliases = (config as { operationPermissions?: unknown })\n    .operationPermissions;\n  if (aliases === undefined) return undefined;\n  if (!aliases || typeof aliases !== 'object' || Array.isArray(aliases)) {\n    throw new Error('operationPermissions must be an action map');\n  }\n  if (!Object.hasOwn(aliases, action)) return undefined;\n  if (['list', 'get', 'read', 'create', 'update', 'delete'].includes(action)) {\n    throw new Error('CRUD permissions cannot be aliased');\n  }\n  const alias = (aliases as Record<string, unknown>)[action];\n  if (!alias || typeof alias !== 'object' || Array.isArray(alias)) {\n    throw new Error('Invalid operation permission alias');\n  }\n  const value = alias as OperationPermissionAlias;\n  if (\n    !['read', 'create', 'update', 'delete'].includes(value.action) ||\n    Object.keys(alias).some(\n      (key) => key !== 'action' && key !== 'databaseActions',\n    ) ||\n    (value.databaseActions !== undefined &&\n      (!Array.isArray(value.databaseActions) ||\n        value.databaseActions.some(\n          (entry) => !['SELECT', 'INSERT', 'UPDATE', 'DELETE'].includes(entry),\n        )))\n  ) {\n    throw new Error('Invalid operation permission alias');\n  }\n  return value;\n}\n"],"mappings":";;AASA,SAAgB,gCACd,QACA,QACsC;CACtC,IAAI,CAAC,UAAU,OAAO,WAAW,UAAU,OAAO,KAAA;CAClD,MAAM,UAAW,OACd;CACH,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;CAClC,IAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAClE,MAAM,IAAI,MAAM,4CAA4C;CAE9D,IAAI,CAAC,OAAO,OAAO,SAAS,MAAM,GAAG,OAAO,KAAA;CAC5C,IAAI;EAAC;EAAQ;EAAO;EAAQ;EAAU;EAAU;CAAQ,CAAC,CAAC,SAAS,MAAM,GACvE,MAAM,IAAI,MAAM,oCAAoC;CAEtD,MAAM,QAAS,QAAoC;CACnD,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC5D,MAAM,IAAI,MAAM,oCAAoC;CAEtD,MAAM,QAAQ;CACd,IACE,CAAC;EAAC;EAAQ;EAAU;EAAU;CAAQ,CAAC,CAAC,SAAS,MAAM,MAAM,KAC7D,OAAO,KAAK,KAAK,CAAC,CAAC,MAChB,QAAQ,QAAQ,YAAY,QAAQ,iBACvC,KACC,MAAM,oBAAoB,KAAA,MACxB,CAAC,MAAM,QAAQ,MAAM,eAAe,KACnC,MAAM,gBAAgB,MACnB,UAAU,CAAC;EAAC;EAAU;EAAU;EAAU;CAAQ,CAAC,CAAC,SAAS,KAAK,CACrE,IAEJ,MAAM,IAAI,MAAM,oCAAoC;CAEtD,OAAO;AACT"}

package/dist/registry/class-registration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"class-registration.d.ts","sourceRoot":"","sources":["../../src/registry/class-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAwBH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAW,CAAC;AACvC,OAAO,KAAK,EAKV,qBAAqB,EAGtB,MAAM,qBAAqB,CAAC;AAsD7B,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,iBAAiB,EAElB,MAAM,YAAY,CAAC;AAkDpB;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAS3E;AA4BD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAeT;AAstBD;;;;GAIG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE,OAAO,UAAU,EACvB,MAAM,GAAE,iBAAsB,GAC7B,IAAI,CASN;AA8nCD,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAMlB,qBAAqB,EAAE,WAAW,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,GAC3E,IAAI,CAeN;AA+BD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EACpC,kBAAkB,EAAE,eAAe,CAAC,oBAAoB,CAAC,GAAG,SAAS,GACpE,IAAI,CAyCN;AAoHD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,eAAe,EACzB,gBAAgB,CAAC,EAAE;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACA,IAAI,CA4CN;AA0LD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,qBAAqB,EAChC,mBAAmB,CAAC,EAAE,MAAM,GAC3B,IAAI,CAUN"}
+{"version":3,"file":"class-registration.d.ts","sourceRoot":"","sources":["../../src/registry/class-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAwBH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAW,CAAC;AACvC,OAAO,KAAK,EAKV,qBAAqB,EAGtB,MAAM,qBAAqB,CAAC;AAsD7B,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,iBAAiB,EAElB,MAAM,YAAY,CAAC;AA0EpB;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAS3E;AA4BD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAeT;AAstBD;;;;GAIG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE,OAAO,UAAU,EACvB,MAAM,GAAE,iBAAsB,GAC7B,IAAI,CASN;AA+nCD,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAMlB,qBAAqB,EAAE,WAAW,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,GAC3E,IAAI,CAeN;AA+BD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EACpC,kBAAkB,EAAE,eAAe,CAAC,oBAAoB,CAAC,GAAG,SAAS,GACpE,IAAI,CAyCN;AAoHD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,eAAe,EACzB,gBAAgB,CAAC,EAAE;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACA,IAAI,CA4CN;AA0LD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,qBAAqB,EAChC,mBAAmB,CAAC,EAAE,MAAM,GAC3B,IAAI,CAUN"}

package/dist/registry/class-registration.js

@@ -65,6 +65,17 @@ function inheritedStiCollection(ctor) {
 	}
 	return base?.collection;
 }
+function assertRegisteredStiParent(ctor) {
+	const directParent = Object.getPrototypeOf(ctor);
+	if (!directParent || directParent === SmrtObject || getConstructorIndex().has(directParent)) return;
+	for (let ancestor = Object.getPrototypeOf(directParent); ancestor && ancestor !== SmrtObject && ancestor !== Function.prototype; ancestor = Object.getPrototypeOf(ancestor)) {
+		const key = getConstructorIndex().get(ancestor);
+		if (key && getClasses().get(key)?.config.tableStrategy === "sti") throw new ConfigurationError(`STI descendant ${ctor.name} has unregistered direct parent ${directParent.name}; decorate the intermediate with @smrt()`, "CONFIG_STI_UNREGISTERED_PARENT", {
+			className: ctor.name,
+			parentName: directParent.name
+		});
+	}
+}
 /**
 * Shared bundled-context detector. Source files in these output
 * directories come from a bundler (Vite library mode, webpack, Next.js,
@@ -860,6 +871,7 @@ function registerUntracked(ctor, config = {}) {
 	if (validationRules === void 0) validators = compileValidators(name, fields);
 	else verboseLog(`[registry] Using ${validationRules.length} pre-computed validation rules for ${name}`);
 	let extendsClass = manifestEntry?.extendsQualified ?? manifestEntry?.extends;
+	assertRegisteredStiParent(ctor);
 	if (!extendsClass) {
 		const proto = Object.getPrototypeOf(ctor);
 		if (proto?.name && proto.name !== "SmrtObject" && proto.name !== "Object") extendsClass = proto.name;