@stacksjs/orm 0.74.1 → 0.74.3

package/dist/auto-crud.d.ts

@@ -57,6 +57,36 @@ export declare function teamOwnershipField(model: {
   attributes?: Record<string, unknown>
   belongsTo?: unknown[]
 } | null | undefined): string | null;
+/**
+ * Resolve the database column used for automatic per-user ownership.
+ *
+ * The same principle `teamOwnershipField` applies to tenants, applied to the
+ * rows a single caller owns: a model carrying `user_id` (declared, or created
+ * by a `belongsTo: ['User']` relation during model-driven migration) has a
+ * per-row owner already, so it does not need to repeat that fact as an
+ * `ownership` config just to get API isolation.
+ *
+ * Ten of the framework's own models are in this shape - Card, Comment,
+ * Notification, Subscriber and friends - and every one of them published
+ * mutating routes that any authenticated caller could point at any row
+ * (stacksjs/stacks#2375).
+ */
+export declare function userOwnershipField(model: {
+  attributes?: Record<string, unknown>
+  belongsTo?: unknown[]
+} | null | undefined): string | null;
+/**
+ * A model that has declared, in as many words, that its rows have no per-caller
+ * owner: `ownership: false`.
+ *
+ * This is what separates "considered, and there is genuinely nothing to scope
+ * by" - a public catalog table - from "nobody thought about it", which is the
+ * state `security.api.rowScoping: 'deny'` refuses to generate writes for. The
+ * two were indistinguishable before, which is why denying by default needed
+ * this to exist first: without it the safe default also punishes every model
+ * that is legitimately unscoped.
+ */
+export declare function ownershipDeclaredUnscoped(model: { ownership?: unknown } | null | undefined): boolean;
 /**
  * Remove every client spelling of an ownership field, then apply the trusted
  * value resolved from the authenticated request. Array ownership is used for

package/dist/generate-database-schema.d.ts

@@ -16,6 +16,7 @@ export declare interface GenerateSchemaOptions {
   dryRun?: boolean
   target?: SchemaTarget
   dialect?: 'sqlite' | 'mysql' | 'postgres'
+  migrationsDir?: string | false
 }
 export declare interface GenerateSchemaResult {
   outFile: string

package/dist/index.d.ts

@@ -280,6 +280,9 @@ export { createLikeableMethods } from './traits/likeable';
 // `@stacksjs/auth`'s './rbac-store-bqb' for back-compat; `mapWriteError`
 // powers the auto-CRUD store/update 409 mapping.
 export { filterFillable, getWritableFields, isUniqueViolation, mapWriteError, toSnakeCaseKeys } from './auto-crud';
+// Ready-made `ownership` resolvers for models whose owner is one hop away
+// (stacksjs/stacks#2375).
+export { customerOwnership, parentOwnership, selfOwnership, siteOwnership, teamMembershipOwnership } from './ownership';
 export * from './batch-loader';
 export * from './db';
 export * from './subquery';