nodejs-store 2.7.0 → 3.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodejs-store",
-  "version": "2.7.0",
+  "version": "3.0.0",
   "description": "Multi-backend data layer for Node.js (MongoDB, MySQL, SQLite, PostgreSQL): pure JSON schemas, GQL tree queries compiled to a single native query, GROUP BY/HAVING aggregation, computed columns, soft-delete and role-based access control",
   "main": "src/index.js",
   "files": [
@@ -65,7 +65,7 @@
     "mongodb": "^6.21.0",
     "mysql2": "^3.24.4",
     "pg": "^8.23.0",
-    "rust-store-node": "^2.7.0"
+    "rust-store-node": "^3.0.0"
   },
   "devDependencies": {
     "@eslint/js": "^9.39.2",

package/src/index.js

@@ -344,6 +344,19 @@ class Store {
   rbacRowCondition(model, action, ctx) {
     return permission.rbacRowCondition(model, action, ctx);
   }
+
+  // ── 角色清单与未配置姿态（清单化语义，判决唯一在 core；本层仅透传配置） ──
+  setExemptRoles(roles) {
+    return permission.setExemptRoles(roles);
+  }
+
+  setDenyWriteRoles(roles) {
+    return permission.setDenyWriteRoles(roles);
+  }
+
+  setUnconfiguredPolicy(policy) {
+    return permission.setUnconfiguredPolicy(policy);
+  }
 }
 
 /** 自定义权限错误（实例可被 store.PermissionError 捕获） */

package/src/permission.js

@@ -133,6 +133,20 @@ function rbacRowCondition(model, action, ctx) {
   return core.rbacRowCondition(_model(model), action, ctx ?? null);
 }
 
+// ── 角色清单与未配置姿态（清单化语义，判决唯一在 core；本层仅透传） ──
+
+function setExemptRoles(roles) {
+  return core.setExemptRoles(roles);
+}
+
+function setDenyWriteRoles(roles) {
+  return core.setDenyWriteRoles(roles);
+}
+
+function setUnconfiguredPolicy(policy) {
+  return core.setUnconfiguredPolicy(policy);
+}
+
 // ─── 自定义错误 ──────────────────────────────────────────────
 
 class PermissionError extends Error {
@@ -165,5 +179,8 @@ module.exports = {
   rbacReadableFields,
   rbacWritableFields,
   rbacRowCondition,
+  setExemptRoles,
+  setDenyWriteRoles,
+  setUnconfiguredPolicy,
   PermissionError,
 };

package/src/schema.js

@@ -127,6 +127,21 @@ function setRequireContext(needCtx = true) {
   core.setRequireContext(Boolean(needCtx));
 }
 
+/** 豁免角色清单（命中者在一切判决环节直接放行）。默认空——无豁免（清单化语义） */
+function setExemptRoles(roles) {
+  core.setExemptRoles(roles);
+}
+
+/** 拒写角色清单（命中者一切写路径拒绝，读不受影响）。默认空——无拒写 */
+function setDenyWriteRoles(roles) {
+  core.setDenyWriteRoles(roles);
+}
+
+/** schema 白名单缺失/为空时的默认姿态：'open'（默认，放行）| 'closed'（全拒） */
+function setUnconfiguredPolicy(policy) {
+  core.setUnconfiguredPolicy(policy);
+}
+
 /** 「上下文强制」开关当前值（对齐 py_store.schema.require_context） */
 function requireContext() {
   return core.requireContext();
@@ -160,6 +175,9 @@ module.exports = {
   list,
   setRequireContext,
   requireContext,
+  setExemptRoles,
+  setDenyWriteRoles,
+  setUnconfiguredPolicy,
   setProfile,
   getProfile,
   getAsyncFn,