@sequenceholdings/orm 2.8.3 → 2.8.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/authoring.cjs +31 -8
- package/dist/authoring.cjs.map +1 -1
- package/dist/authoring.d.cts +8 -2
- package/dist/authoring.d.ts +8 -2
- package/dist/authoring.js +31 -8
- package/dist/authoring.js.map +1 -1
- package/dist/canonical.cjs +1 -1
- package/dist/canonical.cjs.map +1 -1
- package/dist/canonical.d.cts +1 -1
- package/dist/canonical.d.ts +1 -1
- package/dist/canonical.js +1 -1
- package/dist/canonical.js.map +1 -1
- package/dist/cli.cjs +1 -1
- package/dist/cli.cjs.map +1 -1
- package/dist/cli.js +1 -1
- package/dist/cli.js.map +1 -1
- package/dist/compiler.cjs +1 -1
- package/dist/compiler.cjs.map +1 -1
- package/dist/compiler.d.cts +4 -4
- package/dist/compiler.d.ts +4 -4
- package/dist/compiler.js +1 -1
- package/dist/compiler.js.map +1 -1
- package/dist/index.cjs +31 -8
- package/dist/index.cjs.map +1 -1
- package/dist/index.d.cts +7 -9
- package/dist/index.d.ts +7 -9
- package/dist/index.js +31 -8
- package/dist/index.js.map +1 -1
- package/dist/ir.cjs +1 -1
- package/dist/ir.cjs.map +1 -1
- package/dist/ir.d.cts +2 -2
- package/dist/ir.d.ts +2 -2
- package/dist/ir.js +1 -1
- package/dist/ir.js.map +1 -1
- package/dist/{naming-CU9ThP_E.d.cts → naming-BMZKFO0W.d.cts} +1 -2
- package/dist/{naming-CPfx7EfF.d.ts → naming-DUk7AcXs.d.ts} +1 -2
- package/dist/predicate-v2.cjs +1 -1
- package/dist/predicate-v2.cjs.map +1 -1
- package/dist/predicate-v2.d.cts +3 -3
- package/dist/predicate-v2.d.ts +3 -3
- package/dist/predicate-v2.js +1 -1
- package/dist/predicate-v2.js.map +1 -1
- package/dist/sdl.cjs +1 -1
- package/dist/sdl.cjs.map +1 -1
- package/dist/sdl.d.cts +2 -2
- package/dist/sdl.d.ts +2 -2
- package/dist/sdl.js +1 -1
- package/dist/sdl.js.map +1 -1
- package/package.json +1 -1
- package/src/codegen-gql/apollo-hooks.cjs +1 -1
- package/src/codegen-gql/server-fns.cjs +1 -1
- package/templates/orm-namespace/graphql/example/queries.ts +1 -1
package/dist/predicate-v2.d.cts
CHANGED
|
@@ -104,9 +104,9 @@ declare function parsePolicy(source: string): ParsedPolicy;
|
|
|
104
104
|
* - a comparison must reference exactly ONE column side (column↔column and
|
|
105
105
|
* claims↔literal comparisons have no PredIr shape in v2.0);
|
|
106
106
|
* - `col = null` / `col != null` normalize to the isNull operator;
|
|
107
|
-
* - verified-
|
|
107
|
+
* - verified external-principal claims (`claim('ext_subject')`, `claim('ext_email')`)
|
|
108
108
|
* are text: they compare to a text column with `=` only, never under
|
|
109
|
-
* not(), so no negation, ordering or pattern can widen a
|
|
109
|
+
* not(), so no negation, ordering or pattern can widen a principal's rows;
|
|
110
110
|
* - variant `when` guards are claims-only: capability()/role() under
|
|
111
111
|
* and/or/not. (claim() comparisons in `when` are not representable in the
|
|
112
112
|
* v2.0 IR — a targeted error says so.)
|
|
@@ -123,7 +123,7 @@ interface PolicyColumnInfo {
|
|
|
123
123
|
readonly columnName: string;
|
|
124
124
|
/**
|
|
125
125
|
* The column's IR type when the resolver knows it (TableMetaIr always does).
|
|
126
|
-
* Required for a verified-
|
|
126
|
+
* Required for a verified external-principal claim comparison: unknown is refused.
|
|
127
127
|
*/
|
|
128
128
|
readonly type?: unknown;
|
|
129
129
|
}
|
package/dist/predicate-v2.d.ts
CHANGED
|
@@ -104,9 +104,9 @@ declare function parsePolicy(source: string): ParsedPolicy;
|
|
|
104
104
|
* - a comparison must reference exactly ONE column side (column↔column and
|
|
105
105
|
* claims↔literal comparisons have no PredIr shape in v2.0);
|
|
106
106
|
* - `col = null` / `col != null` normalize to the isNull operator;
|
|
107
|
-
* - verified-
|
|
107
|
+
* - verified external-principal claims (`claim('ext_subject')`, `claim('ext_email')`)
|
|
108
108
|
* are text: they compare to a text column with `=` only, never under
|
|
109
|
-
* not(), so no negation, ordering or pattern can widen a
|
|
109
|
+
* not(), so no negation, ordering or pattern can widen a principal's rows;
|
|
110
110
|
* - variant `when` guards are claims-only: capability()/role() under
|
|
111
111
|
* and/or/not. (claim() comparisons in `when` are not representable in the
|
|
112
112
|
* v2.0 IR — a targeted error says so.)
|
|
@@ -123,7 +123,7 @@ interface PolicyColumnInfo {
|
|
|
123
123
|
readonly columnName: string;
|
|
124
124
|
/**
|
|
125
125
|
* The column's IR type when the resolver knows it (TableMetaIr always does).
|
|
126
|
-
* Required for a verified-
|
|
126
|
+
* Required for a verified external-principal claim comparison: unknown is refused.
|
|
127
127
|
*/
|
|
128
128
|
readonly type?: unknown;
|
|
129
129
|
}
|
package/dist/predicate-v2.js
CHANGED
|
@@ -670,7 +670,7 @@ var canonicalTableSchema = z.object({
|
|
|
670
670
|
table: identifier2,
|
|
671
671
|
displayName: z.string().trim().min(1).max(120).optional(),
|
|
672
672
|
description: z.string().max(2e3).optional(),
|
|
673
|
-
/** Table-level rename hint
|
|
673
|
+
/** Table-level rename hint. */
|
|
674
674
|
renamedFrom: identifier2.optional(),
|
|
675
675
|
/** Synced/reflected read-only tables (`source: schema.table`) — v1 semantics. */
|
|
676
676
|
source: z.string().regex(QUALIFIED_TABLE_PATTERN).optional(),
|