release: v0.2.4

- refactored policy checking and added more integration tests
- added new @password and @omit field attributes
- cleaned up todo sample's redundant models

Author: ymc9

.gitignore

@@ -2,3 +2,4 @@ node_modules
 dist
 .vercel
 .DS_Store
+.vscode/settings.json

.vscode/settings.json

@@ -1,8 +1,5 @@
 <div align="center">
-    <picture>
-        <source media="(prefers-color-scheme: dark)"  srcset="https://user-images.githubusercontent.com/104139426/197796502-1bcb8052-a7b1-42de-bfc8-a14e045ac1c3.png">
-        <img src="https://user-images.githubusercontent.com/104139426/197796006-52d8d334-413b-4eda-8094-4024c0eaf9b3.png" height="128">
-    </picture>
+    <img src="https://user-images.githubusercontent.com/104139426/197796006-52d8d334-413b-4eda-8094-4024c0eaf9b3.png" height="128">
     <h1>ZenStack</h1>
     <a href="https://www.npmjs.com/package/zenstack">
         <img src="https://img.shields.io/npm/v/zenstack">
@@ -13,7 +10,7 @@
     <a href="https://discord.gg/6HhebQynfz">
         <img src="https://img.shields.io/discord/1035538056146595961">
     </a>
-    <a href="/zenstackhq/zenstack/blob/dev/LICENSE">
+    <a href="/zenstackhq/zenstack/blob/main/LICENSE">
         <img src="https://img.shields.io/badge/license-MIT-green">
     </a>
 </div>

README.md

@@ -183,20 +183,20 @@ You can use `auth()` to:
 -   Check if a user is logged in
 
 ```prisma
-deny('all', auth() == null)
+@@deny('all', auth() == null)
 ```
 
 -   Access user's fields
 
 ```prisma
-allow('update', auth().role == 'ADMIN')
+@@allow('update', auth().role == 'ADMIN')
 ```
 
 -   Compare user identity
 
 ```prisma
 // owner is a relation field to User model
-allow('update', auth() == owner)
+@@allow('update', auth() == owner)
 ```
 
 ### A simple example with Post model

docs/get-started/learning-the-zmodel-language.md

@@ -1,6 +1,6 @@
 {
     "name": "zenstack-monorepo",
-    "version": "0.2.1",
+    "version": "0.2.4",
     "description": "",
     "scripts": {
         "build": "pnpm -r build",

package.json

@@ -1,6 +1,6 @@
 {
     "name": "@zenstackhq/internal",
-    "version": "0.2.1",
+    "version": "0.2.4",
     "displayName": "ZenStack Internal Library",
     "description": "ZenStack internal runtime library. This package is for supporting runtime functionality of ZenStack and not supposed to be used directly.",
     "repository": {
@@ -26,9 +26,9 @@
     ],
     "dependencies": {
         "bcryptjs": "^2.4.3",
+        "cuid": "^2.1.8",
         "deepcopy": "^2.1.0",
-        "swr": "^1.3.0",
-        "uuid": "^9.0.0"
+        "swr": "^1.3.0"
     },
     "peerDependencies": {
         "@prisma/client": "^4.4.0",

packages/internal/package.json

@@ -2,3 +2,13 @@
  * Auxiliary database field for supporting policy check for nested writes
  */
 export const TRANSACTION_FIELD_NAME = 'zenstack_transaction';
+
+/**
+ * Auxiliary database field for building up policy check queries
+ */
+export const GUARD_FIELD_NAME = 'zenstack_guard';
+
+/**
+ * Default length of password hash salt (used by bcryptjs to hash password)
+ */
+export const DEFAULT_PASSWORD_SALT_LENGTH = 12;