@web-ts-toolkit/access-router 0.54.0 → 0.55.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +311 -8
- package/advanced.d.mts +1 -1
- package/advanced.d.ts +1 -1
- package/advanced.js +612 -155
- package/advanced.mjs +586 -129
- package/index.d.mts +5 -2
- package/index.d.ts +5 -2
- package/index.js +3046 -1904
- package/index.mjs +2954 -1812
- package/llms.txt +2 -0
- package/package.json +3 -3
- package/{parsers-ZSrF7SNu.d.mts → parsers-BrVRL2fg.d.mts} +609 -471
- package/{parsers-ZSrF7SNu.d.ts → parsers-BrVRL2fg.d.ts} +609 -471
package/llms.txt
CHANGED
|
@@ -35,6 +35,8 @@
|
|
|
35
35
|
- [Includes/count cardinality](README.md#include-cardinality) · [Bounded numeric Map counts and Set-to-number migration](README.md#numeric-grouped-count-service-api-breaking-migration) · [Source/attachment provenance](README.md#safe-include-output-paths)
|
|
36
36
|
- [Correlated includes and literal escapes](README.md#correlated-includes) · [Nested writes and trusted hooks](README.md#nested-updates-and-trusted-hooks)
|
|
37
37
|
- [Virtuals, literal-filter preservation and output compatibility](README.md#virtuals-computed-fields) · [Request/runtime reentrant hook chains](README.md#hook-admission-and-reentrant-service-calls) · [Separate persistence limits](README.md#persistence-concurrency-and-resource-limits)
|
|
38
|
+
- [Private populated dependencies](README.md#private-populated-dependencies) · [Runnable three-shape example](README.md#runnable-private-dependency-example): server virtual `dependsOnPopulate: [{ path, select? }]`, automatically retained scope-local static ObjectId ref/1D array, eagerly registered same-runtime/same-connection target. Explicit `ModelVirtualDescriptor<Source, Value, { ref: Target }>` types only optional getter argument four (`populated = {}`); argument one/local dependsOn and persisted/write/public types stay unchanged. New root/advanced types: ModelVirtualPopulateDependency, ModelVirtualPopulateInputs. No client/query authority or new entrypoint.
|
|
39
|
+
- [Private target/read/selection rules](README.md#target-authority-selection-and-reconstruction): original actor's captured base read and request tenant rows, independent from public match/access/authorization.related; compatible fetch union never changes original public output. Ordinary populate returns its authorized original mask, otherwise restore exact selected/permitted IDs/arrays or omit hidden refs. Each getter gets only its declared mask; no implicit DTO/handle/metadata/hook/task transport, only its authorized deliberate return. No recursive private target virtuals; unavailable private inputs omit virtuals without retrying successful writes. See README for 1/-1/empty selection, errors, inheritance, fixed hydration differences and measured compatible-group batching (not constant across independent correlated queries).
|
|
38
40
|
|
|
39
41
|
## Additional examples
|
|
40
42
|
|
package/package.json
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
"name": "@web-ts-toolkit/access-router",
|
|
3
3
|
"description": "ACL-aware Express routers and in-memory data services for Mongoose-backed APIs",
|
|
4
4
|
"homepage": "https://web-ts-toolkit.pages.dev/docs/packages/access-router",
|
|
5
|
-
"version": "0.
|
|
5
|
+
"version": "0.55.0",
|
|
6
6
|
"sideEffects": [
|
|
7
7
|
"./**/index.js",
|
|
8
8
|
"./**/index.mjs",
|
|
@@ -57,8 +57,8 @@
|
|
|
57
57
|
"node": ">=22"
|
|
58
58
|
},
|
|
59
59
|
"dependencies": {
|
|
60
|
-
"@web-ts-toolkit/express-json-router": "0.
|
|
61
|
-
"@web-ts-toolkit/utils": "0.
|
|
60
|
+
"@web-ts-toolkit/express-json-router": "0.55.0",
|
|
61
|
+
"@web-ts-toolkit/utils": "0.55.0",
|
|
62
62
|
"just-diff": "^6.0.2",
|
|
63
63
|
"mongoose-schema-jsonschema": "^4.0.1",
|
|
64
64
|
"sift": "^17.1.3",
|