rust-store-node 2.6.0 → 3.0.0

package/index.d.ts

@@ -61,8 +61,24 @@ export declare class Registry {
   mergeOwnerCondition(model: string, ctx?: any | undefined | null, condition?: any | undefined | null): any
   readableFields(model: string, ctx?: any | undefined | null): any
   readableRelations(model: string, ctx?: any | undefined | null): any
+  /** 可读计算列（read 白名单判决与 fields/relations 同构；`ctx=None` → None 不裁剪） */
+  readableComputes(model: string, ctx?: any | undefined | null): any
   writableFields(model: string, ctx?: any | undefined | null): any
   filterWritableData(model: string, ctx: any | undefined | null, data: any): any
+  /**
+   * RBAC 动作判决：`action ∈ {read, insert, update, remove}`。
+   * 策略未注入 / RBAC 不介入 → true（与 plan 链路的实际拦截结果一致）。
+   */
+  rbacCan(model: string, action: string, ctx?: any | undefined | null): boolean
+  /** RBAC 叠加后的可读字段集（静态 ∩ readFields）；`ctx=null` → null 不裁剪 */
+  rbacReadableFields(model: string, ctx?: any | undefined | null): any
+  /** RBAC 叠加后的可写字段集（静态 ∩ writeFields）；`ctx=null` → null 不裁剪 */
+  rbacWritableFields(model: string, ctx?: any | undefined | null): any
+  /**
+   * RBAC 行级条件（ownerOnly / condition 的 OR 合并体）；null = 无行级收紧。
+   * `action ∈ {read, update, remove}`（insert 无行级语义）。
+   */
+  rbacRowCondition(model: string, action: string, ctx?: any | undefined | null): any
   /**
    * 生成插入命令；`now` / `newId` 由 Host 提供（core 无时钟与随机源）
    *
@@ -127,6 +143,8 @@ export declare class Registry {
   register(defn: any): void
   has(name: string): boolean
   list(): Array<string>
+  /** 清空 schema 注册表（测试隔离 / 动态重建；不动 requireContext / profile 配置开关） */
+  clearSchemas(): void
   /** 注册同步计算列回调（schema 里 `fn: true` 的 `fnRef`，缺省为计算列名） */
   setFn(fnRef: string, callback: (arg: any) => any): void
   clearFns(): void
@@ -145,4 +163,17 @@ export declare class Registry {
   setProfile(profile: string): void
   /** 当前查询档位字符串（`"standard"` / `"text2query"`） */
   profile(): string
+  /**
+   * 注入/清除 RBAC 动态策略（object 或 null）；解析失败抛错（fail-fast）。
+   * 判决唯一在 core：宿主仅透传配置与查询面，plan 链路拦截自动生效。
+   */
+  setRbac(policy?: any | undefined | null): void
+  /** RBAC 策略是否已注入 */
+  rbacEnabled(): boolean
+  /** 豁免角色清单（命中者在一切判决环节直接放行）。判决唯一在 core：本层零判决。 */
+  setExemptRoles(roles: Array<string>): void
+  /** 拒写角色清单（命中者一切写路径拒绝，读不受影响） */
+  setDenyWriteRoles(roles: Array<string>): void
+  /** 未配置姿态（"open" / "closed"）；未知值抛错（fail-fast，对齐 setRbac） */
+  setUnconfiguredPolicy(policy: string): void
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rust-store-node",
-  "version": "2.6.0",
+  "version": "3.0.0",
   "description": "Node.js binding (napi-rs) for the rust-store multi-backend data engine: GQL parsing, permissions, computed columns and SQL dialect translation for MongoDB, MySQL, SQLite and PostgreSQL",
   "main": "index.js",
   "types": "index.d.ts",
@@ -32,7 +32,7 @@
     "build:debug": "napi build --platform",
     "artifacts": "napi artifacts",
     "prepublishOnly": "napi prepublish -t npm --skip-gh-release",
-    "test": "node --test test/parity.test.js test/dialect.smoke.test.js test/t2q.skill.test.js"
+    "test": "node --test test/parity.test.js test/dialect.smoke.test.js test/t2q.skill.test.js test/perm.bindings.test.js test/registry.bindings.test.js"
   },
   "keywords": [
     "rust-store",
@@ -68,10 +68,10 @@
     "sql.js": "^1.8.0"
   },
   "optionalDependencies": {
-    "rust-store-node-win32-x64-msvc": "2.6.0",
-    "rust-store-node-linux-x64-gnu": "2.6.0",
-    "rust-store-node-linux-arm64-gnu": "2.6.0",
-    "rust-store-node-darwin-x64": "2.6.0",
-    "rust-store-node-darwin-arm64": "2.6.0"
+    "rust-store-node-win32-x64-msvc": "3.0.0",
+    "rust-store-node-linux-x64-gnu": "3.0.0",
+    "rust-store-node-linux-arm64-gnu": "3.0.0",
+    "rust-store-node-darwin-x64": "3.0.0",
+    "rust-store-node-darwin-arm64": "3.0.0"
   }
 }