@lunora/server 1.0.0-alpha.26 → 1.0.0-alpha.27

package/dist/index.mjs

@@ -20,7 +20,7 @@ export { ValidationError, v } from '@lunora/values';
 export { buildRlsReadRegistry, composeShapeReadWhere } from './packem_shared/buildRlsReadRegistry-D54vUQe4.mjs';
 export { createPolicyDsl, definePermission, definePolicies, definePolicy, defineRole } from './packem_shared/createPolicyDsl-By3QB4he.mjs';
 export { defineStorageRule, defineStorageRules } from './packem_shared/defineStorageRule-B5nL4Z1P.mjs';
-export { mask } from './packem_shared/mask-DSBtA3qp.mjs';
+export { mask } from './packem_shared/mask-CZuu9WAF.mjs';
 export { rls } from './packem_shared/rls-B_ZWgslr.mjs';
 export { storageRules } from './packem_shared/storageRules-6QxzDOcx.mjs';
 

package/dist/packem_shared/{mask-DSBtA3qp.mjs → mask-CZuu9WAF.mjs}

@@ -208,6 +208,20 @@ const wrapDatabase = (base, perTable, context) => {
   };
   const wrapped = {
     ...base,
+    async deleteWhere(tableName, where, options) {
+      assertWhereAllowed(tableName, where, "deleteMany({ where })");
+      if (base.deleteWhere === void 0) {
+        throw new LunoraError("INTERNAL", `ctx.db.${tableName}.deleteMany({ where }) is unavailable: this writer has no where-based delete`);
+      }
+      return base.deleteWhere(tableName, where, options);
+    },
+    async patchWhere(tableName, args, options) {
+      assertWhereAllowed(tableName, args.where, "patchMany({ where })");
+      if (base.patchWhere === void 0) {
+        throw new LunoraError("INTERNAL", `ctx.db.${tableName}.patchMany({ where }) is unavailable: this writer has no where-based patch`);
+      }
+      return base.patchWhere(tableName, args, options);
+    },
     aggregate(tableName, options) {
       assertReductionAllowed(tableName, [options.field], "aggregate");
       assertWhereAllowed(tableName, options.where, "aggregate");
@@ -224,6 +238,7 @@ const wrapDatabase = (base, perTable, context) => {
     },
     async findFirst(tableName, args) {
       assertWhereAllowed(tableName, args?.where, "findFirst");
+      assertWhereAllowed(tableName, args?.baseWhere, "findFirst");
       assertOrderByAllowed(tableName, args?.orderBy, "findFirst");
       const row = await base.findFirst(tableName, args);
       const columns = perTable.get(tableName);
@@ -231,6 +246,7 @@ const wrapDatabase = (base, perTable, context) => {
     },
     async findFirstOrThrow(tableName, args) {
       assertWhereAllowed(tableName, args?.where, "findFirstOrThrow");
+      assertWhereAllowed(tableName, args?.baseWhere, "findFirstOrThrow");
       assertOrderByAllowed(tableName, args?.orderBy, "findFirstOrThrow");
       const row = await base.findFirstOrThrow(tableName, args);
       const columns = perTable.get(tableName);
@@ -238,6 +254,7 @@ const wrapDatabase = (base, perTable, context) => {
     },
     async findMany(tableName, args) {
       assertWhereAllowed(tableName, args?.where, "findMany");
+      assertWhereAllowed(tableName, args?.baseWhere, "findMany");
       assertOrderByAllowed(tableName, args?.orderBy, "findMany");
       const page = await base.findMany(tableName, args);
       const columns = perTable.get(tableName);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/server",
-  "version": "1.0.0-alpha.26",
+  "version": "1.0.0-alpha.27",
   "description": "Server primitives for Lunora: defineSchema, defineTable, query, mutation, and action",
   "keywords": [
     "backend",