merge dev to main (v2.1.1)

package.json

@@ -1,6 +1,6 @@
 {
     "name": "zenstack-monorepo",
-    "version": "2.1.0",
+    "version": "2.1.1",
     "description": "",
     "scripts": {
         "build": "pnpm -r build",

packages/ide/jetbrains/CHANGELOG.md

@@ -2,6 +2,11 @@
 
 ## [Unreleased]
 ### Added
+- Support using ZModel type names (e.g., `DateTime`) as model field names.
+- `auth()` is resolved from all reachable schema files.
+
+## 2.0.0
+### Added
 - ZenStack V2 release!
 
 ## 1.11.0

packages/ide/jetbrains/build.gradle.kts

@@ -9,7 +9,7 @@ plugins {
 }
 
 group = "dev.zenstack"
-version = "2.1.0"
+version = "2.1.1"
 
 repositories {
     mavenCentral()

packages/ide/jetbrains/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jetbrains",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "displayName": "ZenStack JetBrains IDE Plugin",
   "description": "ZenStack JetBrains IDE plugin",
   "homepage": "https://zenstack.dev",

packages/language/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@zenstackhq/language",
-    "version": "2.1.0",
+    "version": "2.1.1",
     "displayName": "ZenStack modeling language compiler",
     "description": "ZenStack modeling language compiler",
     "homepage": "https://zenstack.dev",

packages/misc/redwood/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@zenstackhq/redwood",
     "displayName": "ZenStack RedwoodJS Integration",
-    "version": "2.1.0",
+    "version": "2.1.1",
     "description": "CLI and runtime for integrating ZenStack with RedwoodJS projects.",
     "repository": {
         "type": "git",

packages/plugins/openapi/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zenstackhq/openapi",
   "displayName": "ZenStack Plugin and Runtime for OpenAPI",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "ZenStack plugin and runtime supporting OpenAPI",
   "main": "index.js",
   "repository": {

packages/plugins/swr/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@zenstackhq/swr",
     "displayName": "ZenStack plugin for generating SWR hooks",
-    "version": "2.1.0",
+    "version": "2.1.1",
     "description": "ZenStack plugin for generating SWR hooks",
     "main": "index.js",
     "repository": {

packages/plugins/tanstack-query/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@zenstackhq/tanstack-query",
     "displayName": "ZenStack plugin for generating tanstack-query hooks",
-    "version": "2.1.0",
+    "version": "2.1.1",
     "description": "ZenStack plugin for generating tanstack-query hooks",
     "main": "index.js",
     "exports": {

packages/plugins/trpc/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@zenstackhq/trpc",
     "displayName": "ZenStack plugin for tRPC",
-    "version": "2.1.0",
+    "version": "2.1.1",
     "description": "ZenStack plugin for tRPC",
     "main": "index.js",
     "repository": {

packages/runtime/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@zenstackhq/runtime",
     "displayName": "ZenStack Runtime Library",
-    "version": "2.1.0",
+    "version": "2.1.1",
     "description": "Runtime of ZenStack for both client-side and server-side environments.",
     "repository": {
         "type": "git",

packages/runtime/res/enhance.d.ts

@@ -1 +1 @@
-export { enhance } from '.zenstack/enhance';
+export { auth, enhance } from '.zenstack/enhance';

packages/runtime/src/enhancements/policy/policy-utils.ts

@@ -960,13 +960,9 @@ export class PolicyUtil extends QueryUtils {
      * @returns
      */
     injectReadCheckSelect(model: string, args: any) {
-        if (this.hasFieldLevelPolicy(model)) {
-            // recursively inject selection for fields needed for field-level read checks
-            const readFieldSelect = this.getReadFieldSelect(model);
-            if (readFieldSelect) {
-                this.doInjectReadCheckSelect(model, args, { select: readFieldSelect });
-            }
-        }
+        // we need to recurse into relation fields before injecting the current level, because
+        // injection into current level can result in relation being selected/included, which
+        // can then cause infinite recursion when we visit relation later
 
         // recurse into relation fields
         for (const [k, v] of Object.entries<any>(args.select ?? args.include ?? {})) {
@@ -975,6 +971,14 @@ export class PolicyUtil extends QueryUtils {
                 this.injectReadCheckSelect(field.type, v);
             }
         }
+
+        if (this.hasFieldLevelPolicy(model)) {
+            // recursively inject selection for fields needed for field-level read checks
+            const readFieldSelect = this.getReadFieldSelect(model);
+            if (readFieldSelect) {
+                this.doInjectReadCheckSelect(model, args, { select: readFieldSelect });
+            }
+        }
     }
 
     private doInjectReadCheckSelect(model: string, args: any, input: any) {

packages/schema/package.json

@@ -3,7 +3,7 @@
     "publisher": "zenstack",
     "displayName": "ZenStack Language Tools",
     "description": "Build scalable web apps with minimum code by defining authorization and validation rules inside the data schema that closer to the database",
-    "version": "2.1.0",
+    "version": "2.1.1",
     "author": {
         "name": "ZenStack Team"
     },

packages/sdk/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@zenstackhq/sdk",
-    "version": "2.1.0",
+    "version": "2.1.1",
     "description": "ZenStack plugin development SDK",
     "main": "index.js",
     "scripts": {

packages/server/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@zenstackhq/server",
-    "version": "2.1.0",
+    "version": "2.1.1",
     "displayName": "ZenStack Server-side Adapters",
     "description": "ZenStack server-side adapters",
     "homepage": "https://zenstack.dev",

packages/testtools/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zenstackhq/testtools",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "ZenStack Test Tools",
   "main": "index.js",
   "private": true,

tests/regression/tests/issue-1451.test.ts

@@ -0,0 +1,58 @@
+import { loadSchema } from '@zenstackhq/testtools';
+
+describe('issue 1452', () => {
+    it('regression', async () => {
+        const { prisma, enhance } = await loadSchema(
+            `
+            model User {
+                id    String     @id
+                memberships Membership[]
+            }
+
+            model Space {
+                id           String          @id
+                memberships  Membership[]
+            }
+
+            model Membership {
+                userId            String
+                user              User       @relation(fields: [userId], references: [id], onDelete: Cascade)
+                spaceId           String
+                space             Space      @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+
+                role              String     @deny("update", auth() == user)
+                employeeReference String?    @deny("read, update", space.memberships?[auth() == user && !(role in ['owner', 'admin'])])
+
+                createdAt         DateTime   @default(now())
+                updatedAt         DateTime   @updatedAt
+
+                @@id([userId, spaceId])
+                @@allow('all', true)
+            }            
+            `,
+            { logPrismaQuery: true }
+        );
+
+        await prisma.user.create({
+            data: { id: '1' },
+        });
+
+        await prisma.space.create({
+            data: { id: '1' },
+        });
+
+        await prisma.membership.create({
+            data: {
+                user: { connect: { id: '1' } },
+                space: { connect: { id: '1' } },
+                role: 'foo',
+                employeeReference: 'xyz',
+            },
+        });
+
+        const db = enhance({ id: '1' });
+        const r = await db.membership.findMany();
+        expect(r).toHaveLength(1);
+        expect(r[0].employeeReference).toBeUndefined();
+    });
+});