@protobase/server 0.54.5 → 0.54.6

package/dist/check-views.js

@@ -21,7 +21,7 @@ const actionFields = (run) => {
 const sensitiveErrors = (view, model) => {
 	const sensitive = (name) => Boolean(model.fields[name]?.sensitive);
 	return [
-		["the title", view.title === void 0 ? [] : [view.title]],
+		["the title", [...view.title === void 0 ? [] : [view.title], ...view.titleFrom?.fields ?? []]],
 		["the search result", [...view.searchResult?.title ?? [], ...view.searchResult?.subtitle ? [view.searchResult.subtitle] : []]],
 		["a list column, sort or search", [
 			...view.list?.columns ?? [],

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.54.5";
+var version = "0.54.6";
 //#endregion
 export { version };

package/dist/view-access.js

@@ -316,6 +316,11 @@ const viewShape = (resource, model, models, prompted, createPages, writeOnly) =>
 		resource: shapes.data,
 		roles: shapes.data,
 		title: shapes.field,
+		titleFrom: shapes.map((from) => from.fields.every((name) => Object.hasOwn(model.fields, name)) ? from : {
+			rule: from.rule,
+			fields: [],
+			unreadable: true
+		}),
 		searchResult: shapes.object({
 			title: shapes.list(shapes.field, { nonEmpty: true }),
 			subtitle: shapes.field
@@ -354,7 +359,7 @@ const viewShape = (resource, model, models, prompted, createPages, writeOnly) =>
 };
 /**
 * The view with every reference to a field the caller cannot read removed: list columns, sort, search and displays,
-* field hints, filter widgets, record sections, maps, galleries and custom components' props, the chart, title and search result, the
+* field hints, filter widgets, record sections, maps, galleries and custom components' props, the chart, title, derived title and search result, the
 * actions that set or read one, and the sidebar's `recent` group. Nothing in it may name a hidden field. Related sections, charts of related records, related list columns
 * and links are checked against `models`, the caller's view of every resource, and so are `searchesOf`, cards' favorite
 * buttons and the "Save search" button; the buttons stay for a visitor when their resource is one of `prompted`, those

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.54.5",
+  "version": "0.54.6",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -40,9 +40,9 @@
     "@better-auth/passkey": "^1.7.12",
     "@better-auth/sso": "^1.7.12",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.54.5",
-    "@protobase/query": "0.54.5",
-    "@protobase/schema": "0.54.5",
+    "@protobase/layout": "0.54.6",
+    "@protobase/query": "0.54.6",
+    "@protobase/schema": "0.54.6",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",