agentlang 0.0.32 → 0.0.34

package/src/runtime/resolvers/sqldb/database.ts

@@ -19,7 +19,12 @@ import {
 } from '../../module.js';
 import pgvector from 'pgvector';
 import { isString } from '../../util.js';
-import { DeletedFlagAttributeName, PathAttributeName, UnauthorisedError } from '../../defs.js';
+import {
+  DeletedFlagAttributeName,
+  ForceReadPermFlag,
+  PathAttributeName,
+  UnauthorisedError,
+} from '../../defs.js';
 
 export let defaultDataSource: DataSource | undefined;
 
@@ -110,6 +115,10 @@ export class DbContext {
   isInKernelMode(): boolean {
     return this.inKernelMode;
   }
+
+  forceReadPermission(): boolean {
+    return this.activeEnv.lookup(ForceReadPermFlag);
+  }
 }
 
 export type JoinOn = {
@@ -400,6 +409,8 @@ export async function insertRows(
     if (!doUpsert) {
       if (!ctx.isInKernelMode()) {
         await createOwnership(tableName, rows, ctx);
+      } else if (ctx.forceReadPermission()) {
+        await createReadPermission(tableName, rows, ctx);
       }
       if (ctx.rbacRules) {
         for (let i = 0; i < ctx.rbacRules.length; ++i) {
@@ -479,6 +490,16 @@ async function createOwnership(tableName: string, rows: object[], ctx: DbContext
   await createLimitedOwnership(tableName, rows, ctx.authInfo.userId, AllPerms, ctx);
 }
 
+const ReadPermOnly = new Set<RbacPermissionFlag>().add(RbacPermissionFlag.READ);
+
+async function createReadPermission(
+  tableName: string,
+  rows: object[],
+  ctx: DbContext
+): Promise<void> {
+  await createLimitedOwnership(tableName, rows, ctx.authInfo.userId, ReadPermOnly, ctx);
+}
+
 async function createLimitedOwnership(
   tableName: string,
   rows: object[],

package/src/runtime/resolvers/sqldb/impl.ts

@@ -217,15 +217,17 @@ export class SqlDbResolver extends Resolver {
       inst.addQuery(col, '=', connectedInstance.lookup(PathAttributeName));
       return await this.queryInstances(inst, false);
     } else {
+      const from = relationship.getAliasFor(connectedInstance);
+      const to = relationship.getInverseAliasFor(connectedInstance);
       await getAllConnected(
         asTableReference(inst.moduleName, inst.name),
         inst.queryAttributesAsObject(),
         inst.queryAttributeValuesAsObject(),
         {
           connectionTable: asTableReference(inst.moduleName, relationship.name),
-          fromColumn: relationship.node1.alias,
+          fromColumn: from,
           fromValue: `'${connectedInstance.lookup(PathAttributeName)}'`,
-          toColumn: relationship.node2.alias,
+          toColumn: to,
           toRef: PathAttributeName,
         },
         this.getDbContext(inst.getFqName())