node-type-registry 0.41.0 → 0.43.0

package/authz/authz-app-membership.js

@@ -12,25 +12,25 @@ exports.AuthzAppMembership = {
         properties: {
             permission: {
                 type: 'string',
-                description: 'Single permission name to check (resolved to bitstring mask)',
+                description: 'Single permission name to check (resolved to bitstring mask)'
             },
             permissions: {
                 type: 'array',
                 items: {
-                    type: 'string',
+                    type: 'string'
                 },
-                description: 'Multiple permission names to check (ORed together into mask)',
+                description: 'Multiple permission names to check (ORed together into mask)'
             },
             is_admin: {
                 type: 'boolean',
-                description: 'If true, require is_admin flag',
+                description: 'If true, require is_admin flag'
             },
             is_owner: {
                 type: 'boolean',
-                description: 'If true, require is_owner flag',
-            },
+                description: 'If true, require is_owner flag'
+            }
         },
-        required: [],
+        required: []
     },
-    tags: ['membership', 'authz'],
+    tags: ['membership', 'authz']
 };

package/authz/authz-member-owner.d.ts

@@ -0,0 +1,2 @@
+import type { NodeTypeDefinition } from '../types';
+export declare const AuthzMemberOwner: NodeTypeDefinition;

package/authz/authz-member-owner.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthzMemberOwner = void 0;
+exports.AuthzMemberOwner = {
+    name: 'AuthzMemberOwner',
+    slug: 'authz_member_owner',
+    category: 'authz',
+    display_name: 'Member Owner',
+    description: 'Compound policy: the row must be owned by the current user (owner_field = current_user_id) AND the current user must be a member of the entity referenced by entity_field. Combines direct ownership with entity membership — the actor can only access rows they own within entities they belong to.',
+    parameter_schema: {
+        type: 'object',
+        properties: {
+            owner_field: {
+                type: 'string',
+                format: 'column-ref',
+                description: 'Column name containing the owner user ID (e.g., owner_id)',
+                default: 'owner_id'
+            },
+            entity_field: {
+                type: 'string',
+                format: 'column-ref',
+                description: 'Column name referencing the entity (e.g., entity_id)',
+                default: 'entity_id'
+            },
+            sel_field: {
+                type: 'string',
+                description: 'SPRT column to select for the entity match',
+                default: 'entity_id'
+            },
+            membership_type: {
+                type: ['integer', 'string'],
+                description: 'Scope: 1=app, 2=org, 3+=dynamic entity types (or string name resolved via membership_types_module)'
+            },
+            entity_type: {
+                type: 'string',
+                description: "Entity type prefix (e.g. 'channel', 'department'). Resolved to membership_type integer via memberships_module lookup."
+            },
+            permission: {
+                type: 'string',
+                description: 'Single permission name to check (resolved to bitstring mask)'
+            },
+            permissions: {
+                type: 'array',
+                items: { type: 'string' },
+                description: 'Multiple permission names to check (ORed together into mask)'
+            }
+        },
+        required: ['owner_field', 'entity_field']
+    },
+    tags: ['ownership', 'membership', 'authz']
+};

package/authz/index.d.ts

@@ -2,11 +2,12 @@ export { AuthzAllowAll } from './authz-allow-all';
 export { AuthzAppMembership } from './authz-app-membership';
 export { AuthzComposite } from './authz-composite';
 export { AuthzDenyAll } from './authz-deny-all';
-export { AuthzFilePath } from './authz-file-path';
 export { AuthzDirectOwner } from './authz-direct-owner';
 export { AuthzDirectOwnerAny } from './authz-direct-owner-any';
 export { AuthzEntityMembership } from './authz-entity-membership';
+export { AuthzFilePath } from './authz-file-path';
 export { AuthzMemberList } from './authz-member-list';
+export { AuthzMemberOwner } from './authz-member-owner';
 export { AuthzNotReadOnly } from './authz-not-read-only';
 export { AuthzOrgHierarchy } from './authz-org-hierarchy';
 export { AuthzPeerOwnership } from './authz-peer-ownership';

package/authz/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthzTemporal = exports.AuthzRelatedPeerOwnership = exports.AuthzRelatedMemberList = exports.AuthzRelatedEntityMembership = exports.AuthzPublishable = exports.AuthzPeerOwnership = exports.AuthzOrgHierarchy = exports.AuthzNotReadOnly = exports.AuthzMemberList = exports.AuthzEntityMembership = exports.AuthzDirectOwnerAny = exports.AuthzDirectOwner = exports.AuthzFilePath = exports.AuthzDenyAll = exports.AuthzComposite = exports.AuthzAppMembership = exports.AuthzAllowAll = void 0;
+exports.AuthzTemporal = exports.AuthzRelatedPeerOwnership = exports.AuthzRelatedMemberList = exports.AuthzRelatedEntityMembership = exports.AuthzPublishable = exports.AuthzPeerOwnership = exports.AuthzOrgHierarchy = exports.AuthzNotReadOnly = exports.AuthzMemberOwner = exports.AuthzMemberList = exports.AuthzFilePath = exports.AuthzEntityMembership = exports.AuthzDirectOwnerAny = exports.AuthzDirectOwner = exports.AuthzDenyAll = exports.AuthzComposite = exports.AuthzAppMembership = exports.AuthzAllowAll = void 0;
 var authz_allow_all_1 = require("./authz-allow-all");
 Object.defineProperty(exports, "AuthzAllowAll", { enumerable: true, get: function () { return authz_allow_all_1.AuthzAllowAll; } });
 var authz_app_membership_1 = require("./authz-app-membership");
@@ -9,16 +9,18 @@ var authz_composite_1 = require("./authz-composite");
 Object.defineProperty(exports, "AuthzComposite", { enumerable: true, get: function () { return authz_composite_1.AuthzComposite; } });
 var authz_deny_all_1 = require("./authz-deny-all");
 Object.defineProperty(exports, "AuthzDenyAll", { enumerable: true, get: function () { return authz_deny_all_1.AuthzDenyAll; } });
-var authz_file_path_1 = require("./authz-file-path");
-Object.defineProperty(exports, "AuthzFilePath", { enumerable: true, get: function () { return authz_file_path_1.AuthzFilePath; } });
 var authz_direct_owner_1 = require("./authz-direct-owner");
 Object.defineProperty(exports, "AuthzDirectOwner", { enumerable: true, get: function () { return authz_direct_owner_1.AuthzDirectOwner; } });
 var authz_direct_owner_any_1 = require("./authz-direct-owner-any");
 Object.defineProperty(exports, "AuthzDirectOwnerAny", { enumerable: true, get: function () { return authz_direct_owner_any_1.AuthzDirectOwnerAny; } });
 var authz_entity_membership_1 = require("./authz-entity-membership");
 Object.defineProperty(exports, "AuthzEntityMembership", { enumerable: true, get: function () { return authz_entity_membership_1.AuthzEntityMembership; } });
+var authz_file_path_1 = require("./authz-file-path");
+Object.defineProperty(exports, "AuthzFilePath", { enumerable: true, get: function () { return authz_file_path_1.AuthzFilePath; } });
 var authz_member_list_1 = require("./authz-member-list");
 Object.defineProperty(exports, "AuthzMemberList", { enumerable: true, get: function () { return authz_member_list_1.AuthzMemberList; } });
+var authz_member_owner_1 = require("./authz-member-owner");
+Object.defineProperty(exports, "AuthzMemberOwner", { enumerable: true, get: function () { return authz_member_owner_1.AuthzMemberOwner; } });
 var authz_not_read_only_1 = require("./authz-not-read-only");
 Object.defineProperty(exports, "AuthzNotReadOnly", { enumerable: true, get: function () { return authz_not_read_only_1.AuthzNotReadOnly; } });
 var authz_org_hierarchy_1 = require("./authz-org-hierarchy");