@objectstack/runtime 6.8.0 → 6.8.1

package/dist/index.cjs

@@ -2213,7 +2213,19 @@ var StandaloneStackConfigSchema = import_zod.z.object({
   databaseAuthToken: import_zod.z.string().optional(),
   databaseDriver: import_zod.z.enum(["sqlite", "sqlite-wasm", "turso", "memory", "postgres", "mongodb"]).optional(),
   environmentId: import_zod.z.string().optional(),
-  artifactPath: import_zod.z.string().optional()
+  artifactPath: import_zod.z.string().optional(),
+  /**
+   * Project root directory. When set (typically by the CLI after locating
+   * `objectstack.config.ts`), the default sqlite database is placed under
+   * `<projectRoot>/.objectstack/data/standalone.db` instead of the global
+   * `~/.objectstack/data/standalone.db`. This keeps per-project data
+   * scoped to the project folder so different examples / apps don't
+   * share a single database by accident.
+   *
+   * Explicit `databaseUrl` / `OS_DATABASE_URL` / `OS_HOME` still take
+   * precedence over this default.
+   */
+  projectRoot: import_zod.z.string().optional()
 });
 function detectDriverFromUrl(dbUrl) {
   if (/^memory:\/\//i.test(dbUrl)) return "memory";
@@ -2238,7 +2250,7 @@ async function createStandaloneStack(config) {
   const environmentId = cfg.environmentId ?? process.env.OS_ENVIRONMENT_ID ?? "proj_local";
   const artifactPathInput = cfg.artifactPath ?? process.env.OS_ARTIFACT_PATH ?? (0, import_node_path2.resolve)(cwd, "dist/objectstack.json");
   const artifactPath = isHttpUrl(artifactPathInput) ? artifactPathInput : artifactPathInput.startsWith("/") ? artifactPathInput : (0, import_node_path2.resolve)(cwd, artifactPathInput);
-  const dbUrl = cfg.databaseUrl ?? process.env.OS_DATABASE_URL?.trim() ?? process.env.TURSO_DATABASE_URL?.trim() ?? `file:${(0, import_node_path2.resolve)(resolveObjectStackHome(), "data/standalone.db")}`;
+  const dbUrl = cfg.databaseUrl ?? process.env.OS_DATABASE_URL?.trim() ?? process.env.TURSO_DATABASE_URL?.trim() ?? (process.env.OS_HOME?.trim() ? `file:${(0, import_node_path2.resolve)(resolveObjectStackHome(), "data/standalone.db")}` : cfg.projectRoot ? `file:${(0, import_node_path2.resolve)(cfg.projectRoot, ".objectstack/data/standalone.db")}` : `file:${(0, import_node_path2.resolve)(resolveObjectStackHome(), "data/standalone.db")}`);
   const dbAuthToken = cfg.databaseAuthToken ?? process.env.OS_DATABASE_AUTH_TOKEN?.trim() ?? process.env.TURSO_AUTH_TOKEN?.trim();
   const explicitDriver = cfg.databaseDriver ?? process.env.OS_DATABASE_DRIVER?.trim();
   const dbDriver = explicitDriver ?? detectDriverFromUrl(dbUrl);
@@ -2456,6 +2468,13 @@ function toHeaders(input) {
   }
   return h;
 }
+function safeJsonParse2(s, fallback) {
+  try {
+    return JSON.parse(s);
+  } catch {
+    return fallback;
+  }
+}
 async function tryFind(ql, object, where, limit = 100) {
   if (!ql || typeof ql.find !== "function") return [];
   try {
@@ -2471,6 +2490,7 @@ async function resolveExecutionContext(opts) {
   const ctx = {
     roles: [],
     permissions: [],
+    systemPermissions: [],
     isSystem: false
   };
   let userId;
@@ -2579,10 +2599,38 @@ async function resolveExecutionContext(opts) {
       { id: { $in: Array.from(psIds) } },
       500
     );
+    const tabRank = {
+      hidden: 0,
+      default_off: 1,
+      default_on: 2,
+      visible: 3
+    };
+    const mergedTabs = {};
     for (const ps of psRows) {
       if (ps.name && !ctx.permissions.includes(ps.name)) {
         ctx.permissions.push(ps.name);
       }
+      const sysPerms = typeof ps.system_permissions === "string" ? safeJsonParse2(ps.system_permissions, []) : ps.system_permissions ?? ps.systemPermissions;
+      if (Array.isArray(sysPerms)) {
+        for (const p of sysPerms) {
+          if (typeof p === "string" && !ctx.systemPermissions.includes(p)) {
+            ctx.systemPermissions.push(p);
+          }
+        }
+      }
+      const tabs = typeof ps.tab_permissions === "string" ? safeJsonParse2(ps.tab_permissions, {}) : ps.tab_permissions ?? ps.tabPermissions;
+      if (tabs && typeof tabs === "object") {
+        for (const [app, val] of Object.entries(tabs)) {
+          if (typeof val !== "string" || !(val in tabRank)) continue;
+          const cur = mergedTabs[app];
+          if (!cur || tabRank[val] > tabRank[cur]) {
+            mergedTabs[app] = val;
+          }
+        }
+      }
+    }
+    if (Object.keys(mergedTabs).length > 0) {
+      ctx.tabPermissions = mergedTabs;
     }
   }
   return ctx;