@protobase/server 0.53.4 → 0.53.6

package/dist/author.js

@@ -0,0 +1,16 @@
+//#region src/author.ts
+/**
+* The values of a create with its `.author()` field set to the signed-in user's id. No request may write the field
+* (access resolution never counts it writable, so validation refuses it as read-only), so this is its only source; a
+* create by no one signed in, such as a public form's, leaves it empty.
+*/
+const withAuthor = (access, values) => {
+	const { author } = access.full;
+	if (!author || access.session.anonymous) return values;
+	return {
+		...values,
+		[author]: access.session.user.id
+	};
+};
+//#endregion
+export { withAuthor };

package/dist/check-owners.js

@@ -1,7 +1,7 @@
 //#region src/check-owners.ts
 const holds = (field, id) => field === "text" || field === id || field === "bigint" && id === "integer";
 /**
-* Stops startup on an `.owner()` field that cannot hold the ids of the signed-in users. The authenticator's
+* Stops startup on an `.owner()` or `.author()` field that cannot hold the ids of the signed-in users. The authenticator's
 * `userIdType` declares their type; without it, the auth instance's users have Better Auth's own ids, random text,
 * unless `generateUserId` makes the ids. Without either, the ids come from the app's own authenticator, which this
 * cannot see.
@@ -13,8 +13,19 @@ const checkOwnerFields = (registry, userIdType, auth) => {
 };
 const checkAgainst = (registry, userIdType, fix) => {
 	for (const entry of registry.entries) {
-		if (entry.ownerType === void 0 || holds(entry.ownerType, userIdType)) continue;
-		throw new Error(`${entry.name}.${entry.model.owner} is the owner of its records, so it holds the signed-in user's id, but it holds ${entry.ownerType} values and ${fix(entry.ownerType)}`);
+		const fields = [{
+			role: "owner",
+			name: entry.model.owner,
+			type: entry.ownerType
+		}, {
+			role: "author",
+			name: entry.model.author,
+			type: entry.authorType
+		}];
+		for (const { role, name, type } of fields) {
+			if (type === void 0 || holds(type, userIdType)) continue;
+			throw new Error(`${entry.name}.${name} is the ${role} of its records, so it holds the signed-in user's id, but it holds ${type} values and ${fix(type)}`);
+		}
 	}
 };
 //#endregion

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.53.4";
+var version = "0.53.6";
 //#endregion
 export { version };

package/dist/registry.d.ts

@@ -12,6 +12,8 @@ export type Entry = {
   keyTypes: KeyType[];
   /** The type of the user ids its `.owner()` field holds: the field's own, or the key type of the record it points at. */
   ownerType?: KeyType;
+  /** The type of the user ids its `.author()` field holds, as `ownerType` for the owner. */
+  authorType?: KeyType;
   /** A database-managed `version` or `updated_at` column, when the table has one; otherwise ETags hash the row. */
   etag?: EtagSource;
 };

package/dist/registry.js

@@ -14,8 +14,8 @@ const etagSource = (model) => {
 	};
 };
 const isKeyType = (type) => type === "text" || type === "integer" || type === "bigint" || type === "uuid";
-const ownerType = (model, resolve) => {
-	const field = model.owner === void 0 ? void 0 : model.fields[model.owner];
+const userIdType = (model, name, resolve) => {
+	const field = name === void 0 ? void 0 : model.fields[name];
 	if (!field) return void 0;
 	if (isKeyType(field.type)) return field.type;
 	const target = field.type === "relation" && field.relation ? resolve(field.relation.resource) : void 0;
@@ -33,13 +33,15 @@ const buildRegistry = (resources) => {
 		const types = keyTypes(model, (name) => models.get(name));
 		if (types.length !== model.primaryKey.length) throw new Error(`Not implemented: resource "${model.name}" has a primary key field that points at a composite-key resource; the server maps one key part per key field`);
 		const etag = etagSource(model);
-		const owner = ownerType(model, (name) => models.get(name));
+		const owner = userIdType(model, model.owner, (name) => models.get(name));
+		const author = userIdType(model, model.author, (name) => models.get(name));
 		return {
 			name: model.name,
 			source,
 			model,
 			keyTypes: types,
 			...owner && { ownerType: owner },
+			...author && { authorType: author },
 			...etag && { etag }
 		};
 	});

package/dist/write-pipeline.js

@@ -13,6 +13,7 @@ import { encryptedValuesOf, hasEncryptedValues, sealValues } from "./encryption/
 import { validateBody } from "./validate-body.js";
 import { applyUpdate, planUpdate } from "./write-update.js";
 import { checkRankAfter } from "./rank-after.js";
+import { withAuthor } from "./author.js";
 //#region src/write-pipeline.ts
 const withOwner = (access, values) => {
 	const { owner } = access.full;
@@ -37,7 +38,7 @@ const create = async (trx, deps, access, body, removed) => {
 	const tenantValues = full.tenant && scope ? { [full.tenant]: scope.tenantValue } : {};
 	const preset = typeof body === "object" && body !== null && !Array.isArray(body) && writableFields(access, "create").includes(full.owner ?? "") ? withOwner(access, body) : body;
 	const row = {
-		...await attachFiles(access, withOwner(access, validateBody(access, "create", preset, tenantValues))),
+		...await attachFiles(access, withAuthor(access, withOwner(access, validateBody(access, "create", preset, tenantValues)))),
 		...tenantValues
 	};
 	const filter = await decide(access, "create", void 0, row);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.53.4",
+  "version": "0.53.6",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -40,9 +40,9 @@
     "@better-auth/passkey": "^1.7.12",
     "@better-auth/sso": "^1.7.12",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.53.4",
-    "@protobase/query": "0.53.4",
-    "@protobase/schema": "0.53.4",
+    "@protobase/layout": "0.53.6",
+    "@protobase/query": "0.53.6",
+    "@protobase/schema": "0.53.6",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",