@agilesyndrome/cf-genai-base 5.0.2 → 6.0.0

package/dist/data/context.js

@@ -0,0 +1,65 @@
+import { ensureUser, getAuthorizationUser, listUserGrants, listUserTenants, verifyImpersonationToken, } from "../auth/index.js";
+export async function requestDataContext(env, { state = {}, request, publicTenantId = null } = {}) {
+    let authUser = state.authUser
+        || (state.user
+            ? await ensureUser(env, state.user, { who: `user:${state.user.sub || "unknown"}` })
+            : null);
+    const actingSystem = Boolean(state.user?.auth_strategy === "http_basic" || authUser?.is_admin);
+    if (!authUser) {
+        return {
+            userId: null,
+            displayName: null,
+            tenantId: publicTenantId,
+            publicTenantId,
+            public: Boolean(publicTenantId),
+            system: false,
+        };
+    }
+    const token = request?.headers.get("X-CF-GenAI-Impersonation")
+        || readCookie(request, "__Host-cfgenai_impersonation");
+    const impersonation = actingSystem ? await verifyImpersonationToken(token, env) : null;
+    let system = actingSystem;
+    if (impersonation) {
+        const currentActorId = authUser?.id || (state.user?.auth_strategy === "http_basic" ? "admin" : null);
+        if (!currentActorId || impersonation.adminUserId !== currentActorId) {
+            throw new Error("Impersonation token does not belong to the current administrator");
+        }
+        const targetUser = await getAuthorizationUser(env, impersonation.targetUserId, {
+            who: `user:${impersonation.adminUserId}`,
+        });
+        if (!targetUser)
+            throw new Error("Impersonation target is unavailable");
+        authUser = targetUser;
+        system = false;
+    }
+    const who = `user:${authUser.id}`;
+    const [tenants, grants] = await Promise.all([
+        listUserTenants(env, authUser.id, { who }),
+        listUserGrants(env, authUser.id, { who }),
+    ]);
+    const requestedTenant = state.tenantId || request?.headers.get("X-Tenant-ID") || null;
+    const tenant = requestedTenant
+        ? tenants.find((item) => item.id === requestedTenant)
+        : tenants.length === 1 ? tenants[0] : null;
+    return {
+        userId: authUser.id,
+        displayName: authUser.display_name || authUser.email || authUser.id,
+        tenantId: tenant?.id || null,
+        publicTenantId,
+        public: false,
+        system,
+        scopes: grants.map((grant) => grant.scope_name),
+        tenants,
+        invalidTenant: Boolean(requestedTenant && !tenant),
+        impersonated: Boolean(impersonation),
+        impersonatedBy: impersonation?.adminUserId || null,
+    };
+}
+function readCookie(request, name) {
+    const value = request?.headers.get("Cookie") || "";
+    return value.split(";")
+        .map((part) => part.trim())
+        .find((part) => part.startsWith(`${name}=`))
+        ?.slice(name.length + 1) || "";
+}
+//# sourceMappingURL=context.js.map

package/dist/data/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/data/context.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAsB1B,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAA2B,EAC3B,EAAE,KAAK,GAAG,EAAE,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,EAAE,GAAmB,EAAE;IAEnE,IAAI,QAAQ,GAAG,KAAK,CAAC,QAAQ;WACxB,CAAC,KAAK,CAAC,IAAI;YACZ,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS,EAAE,EAAE,CAAC;YACnF,CAAC,CAAC,IAAI,CAAC,CAAC;IACZ,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,KAAK,YAAY,IAAI,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/F,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,cAAc;YACxB,cAAc;YACd,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC;YAC/B,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;WACzD,UAAU,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,IAAI,MAAM,GAAG,YAAY,CAAC;IAC1B,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,cAAc,GAAG,QAAQ,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrG,IAAI,CAAC,cAAc,IAAI,aAAa,CAAC,WAAW,KAAK,cAAc,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,aAAa,CAAC,YAAY,EAAE;YAC7E,GAAG,EAAE,QAAQ,aAAa,CAAC,WAAW,EAAE;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACxE,QAAQ,GAAG,UAAU,CAAC;QACtB,MAAM,GAAG,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,QAAQ,CAAC,EAAE,EAAE,CAAC;IAClC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1C,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QAC1C,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;KAC1C,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC;IACtF,MAAM,MAAM,GAAG,eAAe;QAC5B,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,eAAe,CAAC;QACrD,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7C,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,EAAE;QACnB,WAAW,EAAE,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,EAAE;QACnE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,IAAI;QAC5B,cAAc;QACd,MAAM,EAAE,KAAK;QACb,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;QAC/C,OAAO;QACP,aAAa,EAAE,OAAO,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC;QAClD,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC;QACpC,cAAc,EAAE,aAAa,EAAE,WAAW,IAAI,IAAI;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAA4B,EAAE,IAAY;IAC5D,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnD,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;SACpB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QAC5C,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC"}

package/dist/data/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./resources.js";
+export * from "./reader.js";
+export * from "./context.js";
+export * from "./json.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/data/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/data/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC"}

package/{src → dist}/data/index.js

@@ -1,3 +1,5 @@
 export * from "./resources.js";
 export * from "./reader.js";
 export * from "./context.js";
+export * from "./json.js";
+//# sourceMappingURL=index.js.map

package/dist/data/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/data/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC"}

package/dist/data/json.d.ts

@@ -0,0 +1,3 @@
+/** Parse persisted JSON while keeping malformed data at the caller's safe default. */
+export declare function parseJson<T>(value: unknown, fallback: T): T;
+//# sourceMappingURL=json.d.ts.map

package/dist/data/json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../src/data/json.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,wBAAgB,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAQ3D"}

package/dist/data/json.js

@@ -0,0 +1,14 @@
+/** Parse persisted JSON while keeping malformed data at the caller's safe default. */
+export function parseJson(value, fallback) {
+    if (value === null || value === undefined || value === "")
+        return fallback;
+    if (typeof value !== "string")
+        return value;
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        return fallback;
+    }
+}
+//# sourceMappingURL=json.js.map

package/dist/data/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/data/json.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,MAAM,UAAU,SAAS,CAAI,KAAc,EAAE,QAAW;IACtD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAU,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAM,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/data/model.d.ts

@@ -0,0 +1,96 @@
+export declare const DATA_SCOPES: readonly ["user", "tenant", "public", "system"];
+export declare const DATA_OPERATIONS: readonly ["read", "create", "update", "delete"];
+export type DataScope = (typeof DATA_SCOPES)[number];
+export type DataOperation = (typeof DATA_OPERATIONS)[number];
+export type DataRow = Record<string, unknown>;
+export interface DataTenant {
+    id: string;
+    name?: string;
+}
+export interface PublicReadPredicate {
+    column: string;
+    value: unknown;
+}
+export interface DataResourceInput {
+    name?: string;
+    table?: string;
+    scope?: string;
+    columns?: readonly unknown[];
+    readableColumns?: readonly unknown[];
+    filterableColumns?: readonly unknown[];
+    orderableColumns?: readonly unknown[];
+    writableColumns?: readonly unknown[];
+    idColumn?: string;
+    ownerColumn?: string;
+    tenantColumn?: string;
+    columnScopes?: Record<string, string | readonly string[]>;
+    operationScopes?: Partial<Record<DataOperation, string | readonly string[]>>;
+    operations?: readonly unknown[];
+    publicRead?: boolean | {
+        column?: string;
+        value?: unknown;
+    };
+    [key: string]: unknown;
+}
+export interface DataResource extends Omit<DataResourceInput, "name" | "table" | "scope" | "columns" | "readableColumns" | "filterableColumns" | "orderableColumns" | "writableColumns" | "idColumn" | "ownerColumn" | "tenantColumn" | "columnScopes" | "operationScopes" | "operations" | "publicRead"> {
+    name: string;
+    table: string;
+    scope: DataScope;
+    columns: string[];
+    readableColumns: string[];
+    filterableColumns: string[];
+    orderableColumns: string[];
+    writableColumns: string[];
+    idColumn: string;
+    ownerColumn: string;
+    tenantColumn: string;
+    columnScopes: Record<string, string[]>;
+    operationScopes: Partial<Record<DataOperation, string[]>>;
+    operations: DataOperation[];
+    publicRead: boolean | PublicReadPredicate;
+}
+export interface DataActorContext {
+    userId?: string | null;
+    displayName?: string | null;
+    tenantId?: string | null;
+    publicTenantId?: string | null;
+    public?: boolean;
+    system?: boolean;
+    scopes?: string[];
+    tenants?: DataTenant[];
+    invalidTenant?: boolean;
+    impersonated?: boolean;
+    impersonatedBy?: string | null;
+}
+export interface DataListOptions {
+    where?: DataRow;
+    limit?: number;
+    orderBy?: string;
+    cursor?: unknown;
+    offset?: number;
+}
+export interface DataPage<Row extends DataRow = DataRow> {
+    rows: Row[];
+    nextCursor: unknown | null;
+}
+export interface DataScopeReader<Row extends DataRow = DataRow> {
+    context(): Promise<DataActorContext>;
+    list(name: string, options?: DataListOptions): Promise<Row[]>;
+    page(name: string, options?: DataListOptions): Promise<DataPage<Row>>;
+    count(name: string, options?: Pick<DataListOptions, "where">): Promise<number>;
+    get(name: string, id: unknown): Promise<Row | null>;
+    insert(name: string, values?: DataRow): Promise<Row | DataRow>;
+    update(name: string, id: unknown, changes?: DataRow): Promise<Row | null>;
+    updateWhere(name: string, where: DataRow, changes: DataRow): Promise<number>;
+    delete(name: string, id: unknown): Promise<D1Result<unknown>>;
+    deleteWhere(name: string, where: DataRow): Promise<D1Result<unknown>>;
+}
+export interface DataReader {
+    user: DataScopeReader;
+    tenant: DataScopeReader;
+    public: DataScopeReader;
+    system: DataScopeReader;
+    context(): Promise<DataActorContext>;
+    resources: DataResource[];
+}
+//# sourceMappingURL=model.d.ts.map

package/dist/data/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/data/model.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,YAAI,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAC3E,eAAO,MAAM,eAAe,YAAI,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAE/E,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AACrD,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7D,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE9C,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC7B,eAAe,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACrC,iBAAiB,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACvC,gBAAgB,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,eAAe,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAAC;IAC1D,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7E,UAAU,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,OAAO,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC5D,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,YAAa,SAAQ,IAAI,CAAC,iBAAiB,EAC1D,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,iBAAiB,GAAG,mBAAmB,GAC9E,kBAAkB,GAAG,iBAAiB,GAAG,UAAU,GAAG,aAAa,GAAG,cAAc,GACpF,cAAc,GAAG,iBAAiB,GAAG,YAAY,GAAG,YAAY,CACnE;IACC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACvC,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1D,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,UAAU,EAAE,OAAO,GAAG,mBAAmB,CAAC;CAC3C;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,QAAQ,CAAC,GAAG,SAAS,OAAO,GAAG,OAAO;IACrD,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe,CAAC,GAAG,SAAS,OAAO,GAAG,OAAO;IAC5D,OAAO,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC;IAC/D,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAC1E,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7E,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,eAAe,CAAC;IACtB,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrC,SAAS,EAAE,YAAY,EAAE,CAAC;CAC3B"}

package/dist/data/model.js

@@ -0,0 +1,3 @@
+export const DATA_SCOPES = ["user", "tenant", "public", "system"];
+export const DATA_OPERATIONS = ["read", "create", "update", "delete"];
+//# sourceMappingURL=model.js.map

package/dist/data/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/data/model.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC"}

package/dist/data/policy.d.ts

@@ -0,0 +1,14 @@
+import type { DataActorContext, DataOperation, DataResource, DataRow, DataScope } from "./model.js";
+export declare function isAllowed(resource: DataResource, requestedScope: DataScope, actor: DataActorContext, operation: DataOperation): boolean;
+export declare function assertWritable(resource: DataResource, requestedScope: DataScope, actor: DataActorContext, operation: Extract<DataOperation, "create" | "update" | "delete">): void;
+export declare function assertColumnScopes(resource: DataResource, actor: DataActorContext, columns: readonly string[]): void;
+export declare function addScopePredicate(resource: DataResource, requestedScope: DataScope, actor: DataActorContext, predicates: string[], bindings: unknown[]): void;
+export declare function addFilters(resource: DataResource, where: DataRow, predicates: string[], bindings: unknown[]): void;
+export declare function cleanWritableValues(resource: DataResource, values: DataRow, { includeId, includeOwnership }?: {
+    includeId?: boolean | undefined;
+    includeOwnership?: boolean | undefined;
+}): DataRow;
+export declare function addOwnedValue(resource: DataResource, requestedScope: DataScope, actor: DataActorContext, data: DataRow): void;
+export declare function actorLabel(actor: DataActorContext): string;
+export declare function quote(identifier: string): string;
+//# sourceMappingURL=policy.d.ts.map

package/dist/data/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/data/policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,OAAO,EACP,SAAS,EACV,MAAM,YAAY,CAAC;AAGpB,wBAAgB,SAAS,CACvB,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,SAAS,EACzB,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,aAAa,GACvB,OAAO,CAwBT;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,SAAS,EACzB,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC,GAChE,IAAI,CAIN;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,IAAI,CAQN;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,SAAS,EACzB,KAAK,EAAE,gBAAgB,EACvB,UAAU,EAAE,MAAM,EAAE,EACpB,QAAQ,EAAE,OAAO,EAAE,GAClB,IAAI,CAiBN;AAED,wBAAgB,UAAU,CACxB,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,OAAO,EACd,UAAU,EAAE,MAAM,EAAE,EACpB,QAAQ,EAAE,OAAO,EAAE,GAClB,IAAI,CAWN;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,OAAO,EACf,EAAE,SAAiB,EAAE,gBAAwB,EAAE;;;CAAK,GACnD,OAAO,CAQT;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,SAAS,EACzB,KAAK,EAAE,gBAAgB,EACvB,IAAI,EAAE,OAAO,GACZ,IAAI,CAGN;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAE1D;AAED,wBAAgB,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEhD"}

package/dist/data/policy.js

@@ -0,0 +1,89 @@
+import { auditLog } from "../core/events/index.js";
+import { DataScopeError } from "./resources.js";
+export function isAllowed(resource, requestedScope, actor, operation) {
+    const scopeAllowed = requestedScope === "system"
+        ? Boolean(actor.system)
+        : requestedScope === resource.scope && (requestedScope === "user"
+            ? Boolean(actor.userId)
+            : requestedScope === "public"
+                ? Boolean(actor.publicTenantId && operation === "read")
+                : actor.public
+                    ? Boolean(actor.tenantId && resource.publicRead && operation === "read")
+                    : Boolean(actor.tenantId && actor.userId));
+    const requiredScopes = resource.operationScopes[operation] || [];
+    const operationAllowed = actor.system
+        || requiredScopes.every((scope) => actor.scopes?.includes(scope));
+    if (!scopeAllowed || !resource.operations.includes(operation) || !operationAllowed) {
+        auditLog({
+            who: actorLabel(actor),
+            operation: "deny",
+            resource: `data:${resource.name}:${requestedScope}:${operation}`,
+        });
+        return false;
+    }
+    return true;
+}
+export function assertWritable(resource, requestedScope, actor, operation) {
+    if (!isAllowed(resource, requestedScope, actor, operation)) {
+        throw new DataScopeError(`Data scope ${requestedScope} cannot ${operation} resource ${resource.name}`);
+    }
+}
+export function assertColumnScopes(resource, actor, columns) {
+    if (actor.system)
+        return;
+    for (const column of columns) {
+        const required = resource.columnScopes[column] || [];
+        if (required.some((scope) => !actor.scopes?.includes(scope))) {
+            throw new DataScopeError(`Missing scope to write ${resource.name}.${column}`);
+        }
+    }
+}
+export function addScopePredicate(resource, requestedScope, actor, predicates, bindings) {
+    if (requestedScope === "user") {
+        predicates.push(`${quote(resource.ownerColumn)}=?`);
+        bindings.push(actor.userId);
+    }
+    if (requestedScope === "public") {
+        predicates.push(`${quote(resource.tenantColumn)}=?`);
+        bindings.push(actor.publicTenantId);
+    }
+    if (requestedScope === "tenant") {
+        predicates.push(`${quote(resource.tenantColumn)}=?`);
+        bindings.push(actor.tenantId);
+        if (actor.public && resource.publicRead && typeof resource.publicRead === "object") {
+            predicates.push(`${quote(resource.publicRead.column)}=?`);
+            bindings.push(resource.publicRead.value);
+        }
+    }
+}
+export function addFilters(resource, where, predicates, bindings) {
+    for (const [column, value] of Object.entries(where || {})) {
+        if (!resource.filterableColumns.includes(column)) {
+            throw new TypeError(`Column ${column} cannot filter ${resource.name}`);
+        }
+        if (value === null)
+            predicates.push(`${quote(column)} IS NULL`);
+        else {
+            predicates.push(`${quote(column)}=?`);
+            bindings.push(value);
+        }
+    }
+}
+export function cleanWritableValues(resource, values, { includeId = false, includeOwnership = false } = {}) {
+    return Object.fromEntries(Object.entries(values || {}).filter(([column]) => (resource.writableColumns.includes(column)
+        || (includeOwnership && [resource.ownerColumn, resource.tenantColumn].includes(column)))
+        && (includeId || column !== resource.idColumn)));
+}
+export function addOwnedValue(resource, requestedScope, actor, data) {
+    if (requestedScope === "user")
+        data[resource.ownerColumn] = actor.userId;
+    if (requestedScope === "tenant")
+        data[resource.tenantColumn] = actor.tenantId;
+}
+export function actorLabel(actor) {
+    return actor.system ? "system:data" : `user:${actor.userId || "unknown"}`;
+}
+export function quote(identifier) {
+    return `"${identifier}"`;
+}
+//# sourceMappingURL=policy.js.map

package/dist/data/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/data/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAQnD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,UAAU,SAAS,CACvB,QAAsB,EACtB,cAAyB,EACzB,KAAuB,EACvB,SAAwB;IAExB,MAAM,YAAY,GAAG,cAAc,KAAK,QAAQ;QAC9C,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QACvB,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,KAAK,IAAI,CACrC,cAAc,KAAK,MAAM;YACvB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YACvB,CAAC,CAAC,cAAc,KAAK,QAAQ;gBAC3B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,SAAS,KAAK,MAAM,CAAC;gBACvD,CAAC,CAAC,KAAK,CAAC,MAAM;oBACZ,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,IAAI,SAAS,KAAK,MAAM,CAAC;oBACxE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,CAChD,CAAC;IACJ,MAAM,cAAc,GAAG,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM;WAChC,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACnF,QAAQ,CAAC;YACP,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC;YACtB,SAAS,EAAE,MAAM;YACjB,QAAQ,EAAE,QAAQ,QAAQ,CAAC,IAAI,IAAI,cAAc,IAAI,SAAS,EAAE;SACjE,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAAsB,EACtB,cAAyB,EACzB,KAAuB,EACvB,SAAiE;IAEjE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,cAAc,CAAC,cAAc,cAAc,WAAW,SAAS,aAAa,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACzG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAsB,EACtB,KAAuB,EACvB,OAA0B;IAE1B,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO;IACzB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,cAAc,CAAC,0BAA0B,QAAQ,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAAsB,EACtB,cAAyB,EACzB,KAAuB,EACvB,UAAoB,EACpB,QAAmB;IAEnB,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnF,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1D,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,QAAsB,EACtB,KAAc,EACd,UAAoB,EACpB,QAAmB;IAEnB,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,SAAS,CAAC,UAAU,MAAM,kBAAkB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,KAAK,KAAK,IAAI;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;aAC3D,CAAC;YACJ,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAsB,EACtB,MAAe,EACf,EAAE,SAAS,GAAG,KAAK,EAAE,gBAAgB,GAAG,KAAK,EAAE,GAAG,EAAE;IAEpD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CACzE,CACE,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC;WACtC,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACxF;WACE,CAAC,SAAS,IAAI,MAAM,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAC/C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,QAAsB,EACtB,cAAyB,EACzB,KAAuB,EACvB,IAAa;IAEb,IAAI,cAAc,KAAK,MAAM;QAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACzE,IAAI,cAAc,KAAK,QAAQ;QAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAuB;IAChD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,UAAkB;IACtC,OAAO,IAAI,UAAU,GAAG,CAAC;AAC3B,CAAC"}

package/dist/data/reader.d.ts

@@ -0,0 +1,9 @@
+import { type D1Environment } from "../core/database/index.js";
+import type { DataActorContext, DataReader, DataResourceInput } from "./model.js";
+interface DataReaderOptions {
+    resources?: readonly DataResourceInput[];
+    context?: DataActorContext | (() => DataActorContext | Promise<DataActorContext>);
+}
+export declare function createDataReader(env: D1Environment, { resources, context }?: DataReaderOptions): DataReader;
+export {};
+//# sourceMappingURL=reader.d.ts.map

package/dist/data/reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reader.d.ts","sourceRoot":"","sources":["../../src/data/reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EACV,gBAAgB,EAEhB,UAAU,EAEV,iBAAiB,EAIlB,MAAM,YAAY,CAAC;AAcpB,UAAU,iBAAiB;IACzB,SAAS,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACzC,OAAO,CAAC,EAAE,gBAAgB,GAAG,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;CACnF;AAID,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,aAAa,EAClB,EAAE,SAAc,EAAE,OAAO,EAAE,GAAE,iBAAsB,GAClD,UAAU,CAsPZ"}

package/dist/data/reader.js

@@ -0,0 +1,203 @@
+import { createD1 } from "../core/database/index.js";
+import { actorLabel, addFilters, addOwnedValue, addScopePredicate, assertColumnScopes, assertWritable, cleanWritableValues, isAllowed, quote, } from "./policy.js";
+import { normalizeDataResources } from "./resources.js";
+export function createDataReader(env, { resources = [], context } = {}) {
+    const registry = new Map(normalizeDataResources(resources).map((resource) => [resource.name, resource]));
+    const getContext = typeof context === "function"
+        ? async () => context()
+        : async () => context || {};
+    function scope(requestedScope) {
+        return {
+            context: getContext,
+            list: (name, options) => readList(name, requestedScope, options),
+            page: (name, options) => readPage(name, requestedScope, options),
+            count: (name, options) => readCount(name, requestedScope, options),
+            get: async (name, id) => {
+                const resource = getResource(name);
+                return (await readList(name, requestedScope, {
+                    where: { [resource.idColumn]: id },
+                    limit: 1,
+                }))[0] || null;
+            },
+            insert: (name, values) => writeInsert(name, requestedScope, values),
+            update: (name, id, changes) => writeUpdate(name, requestedScope, id, changes),
+            updateWhere: (name, where, changes) => writeUpdateWhere(name, requestedScope, where, changes),
+            delete: (name, id) => writeDelete(name, requestedScope, id),
+            deleteWhere: (name, where) => writeDeleteWhere(name, requestedScope, where),
+        };
+    }
+    async function readList(name, requestedScope, options = {}) {
+        return (await readPage(name, requestedScope, options)).rows;
+    }
+    async function readPage(name, requestedScope, { where = {}, limit = 100, orderBy, cursor, offset = 0 } = {}) {
+        const resource = getResource(name);
+        const actor = await getContext();
+        if (!isAllowed(resource, requestedScope, actor, "read")) {
+            return { rows: [], nextCursor: null };
+        }
+        const predicates = [];
+        const bindings = [];
+        addScopePredicate(resource, requestedScope, actor, predicates, bindings);
+        addFilters(resource, where, predicates, bindings);
+        const [orderColumn, rawDirection = "ASC"] = orderBy
+            ? String(orderBy).split(/\s+/, 2)
+            : [resource.idColumn, "ASC"];
+        if (orderBy && !resource.orderableColumns.includes(orderColumn)) {
+            throw new TypeError(`Column ${orderColumn} cannot order ${resource.name}`);
+        }
+        const direction = rawDirection.toUpperCase() === "DESC" ? "DESC" : "ASC";
+        if (cursor !== undefined && cursor !== null) {
+            if (orderColumn !== resource.idColumn) {
+                throw new TypeError(`Cursor pagination for ${resource.name} requires ${resource.idColumn} ordering`);
+            }
+            predicates.push(`${quote(resource.idColumn)}${direction === "DESC" ? "<" : ">"}?`);
+            bindings.push(cursor);
+        }
+        const safeLimit = Math.min(Math.max(Number(limit) || 100, 1), 1000);
+        const safeOffset = Math.max(Number(offset) || 0, 0);
+        let sql = `SELECT ${resource.readableColumns.map(quote).join(",")} FROM ${quote(resource.table)}`
+            + `${predicates.length ? ` WHERE ${predicates.join(" AND ")}` : ""}`
+            + ` ORDER BY ${quote(orderColumn)} ${direction} LIMIT ${safeLimit} OFFSET ${safeOffset}`;
+        const result = await createD1(env, { who: actorLabel(actor) })
+            .prepare(sql)
+            .bind(...bindings)
+            .all();
+        const rows = result.results || [];
+        return {
+            rows,
+            nextCursor: orderColumn === resource.idColumn && rows.length === safeLimit
+                ? rows.at(-1)?.[resource.idColumn] ?? null
+                : null,
+        };
+    }
+    async function readCount(name, requestedScope, { where = {} } = {}) {
+        const resource = getResource(name);
+        const actor = await getContext();
+        if (!isAllowed(resource, requestedScope, actor, "read"))
+            return 0;
+        const predicates = [];
+        const bindings = [];
+        addScopePredicate(resource, requestedScope, actor, predicates, bindings);
+        addFilters(resource, where, predicates, bindings);
+        const sql = `SELECT COUNT(*) AS count FROM ${quote(resource.table)}`
+            + `${predicates.length ? ` WHERE ${predicates.join(" AND ")}` : ""}`;
+        const result = await createD1(env, { who: actorLabel(actor) })
+            .prepare(sql)
+            .bind(...bindings)
+            .first();
+        return Number(result?.count || 0);
+    }
+    async function writeInsert(name, requestedScope, values = {}) {
+        const resource = getResource(name);
+        const actor = await getContext();
+        assertWritable(resource, requestedScope, actor, "create");
+        const data = cleanWritableValues(resource, values, {
+            includeId: true,
+            includeOwnership: requestedScope === "system",
+        });
+        assertColumnScopes(resource, actor, Object.keys(data));
+        addOwnedValue(resource, requestedScope, actor, data);
+        const columns = Object.keys(data);
+        if (!columns.length)
+            throw new TypeError(`No writable values supplied for ${resource.name}`);
+        const sql = `INSERT INTO ${quote(resource.table)} (${columns.map(quote).join(",")})`
+            + ` VALUES (${columns.map(() => "?").join(",")})`;
+        const result = await createD1(env, { who: actorLabel(actor) })
+            .prepare(sql)
+            .bind(...columns.map((column) => data[column]))
+            .run();
+        const insertedId = data[resource.idColumn] === undefined
+            ? result.meta?.last_row_id
+            : data[resource.idColumn];
+        if (insertedId === undefined)
+            return data;
+        return (await readList(name, requestedScope, {
+            where: { [resource.idColumn]: insertedId },
+            limit: 1,
+        }))[0] || { ...data, [resource.idColumn]: insertedId };
+    }
+    async function writeUpdate(name, requestedScope, id, changes = {}) {
+        const resource = getResource(name);
+        const actor = await getContext();
+        assertWritable(resource, requestedScope, actor, "update");
+        const data = cleanWritableValues(resource, changes, {
+            includeOwnership: requestedScope === "system",
+        });
+        assertColumnScopes(resource, actor, Object.keys(data));
+        const columns = Object.keys(data);
+        if (!columns.length)
+            throw new TypeError(`No writable values supplied for ${resource.name}`);
+        const predicates = [`${quote(resource.idColumn)}=?`];
+        const bindings = [id];
+        addScopePredicate(resource, requestedScope, actor, predicates, bindings);
+        await createD1(env, { who: actorLabel(actor) })
+            .prepare(`UPDATE ${quote(resource.table)} SET ${columns.map((column) => `${quote(column)}=?`).join(",")} WHERE ${predicates.join(" AND ")}`)
+            .bind(...columns.map((column) => data[column]), ...bindings)
+            .run();
+        return (await readList(name, requestedScope, {
+            where: { [resource.idColumn]: id },
+            limit: 1,
+        }))[0] || null;
+    }
+    async function writeDelete(name, requestedScope, id) {
+        const resource = getResource(name);
+        const actor = await getContext();
+        assertWritable(resource, requestedScope, actor, "delete");
+        const predicates = [`${quote(resource.idColumn)}=?`];
+        const bindings = [id];
+        addScopePredicate(resource, requestedScope, actor, predicates, bindings);
+        return createD1(env, { who: actorLabel(actor) })
+            .prepare(`DELETE FROM ${quote(resource.table)} WHERE ${predicates.join(" AND ")}`)
+            .bind(...bindings)
+            .run();
+    }
+    async function writeUpdateWhere(name, requestedScope, where, changes) {
+        const resource = getResource(name);
+        const actor = await getContext();
+        assertWritable(resource, requestedScope, actor, "update");
+        const data = cleanWritableValues(resource, changes, {
+            includeOwnership: requestedScope === "system",
+        });
+        assertColumnScopes(resource, actor, Object.keys(data));
+        const columns = Object.keys(data);
+        if (!columns.length)
+            throw new TypeError(`No writable values supplied for ${resource.name}`);
+        const predicates = [];
+        const bindings = [];
+        addScopePredicate(resource, requestedScope, actor, predicates, bindings);
+        addFilters(resource, where, predicates, bindings);
+        const result = await createD1(env, { who: actorLabel(actor) })
+            .prepare(`UPDATE ${quote(resource.table)} SET ${columns.map((column) => `${quote(column)}=?`).join(",")} WHERE ${predicates.join(" AND ")}`)
+            .bind(...columns.map((column) => data[column]), ...bindings)
+            .run();
+        return Number(result.meta?.changes || 0);
+    }
+    async function writeDeleteWhere(name, requestedScope, where) {
+        const resource = getResource(name);
+        const actor = await getContext();
+        assertWritable(resource, requestedScope, actor, "delete");
+        const predicates = [];
+        const bindings = [];
+        addScopePredicate(resource, requestedScope, actor, predicates, bindings);
+        addFilters(resource, where, predicates, bindings);
+        return createD1(env, { who: actorLabel(actor) })
+            .prepare(`DELETE FROM ${quote(resource.table)} WHERE ${predicates.join(" AND ")}`)
+            .bind(...bindings)
+            .run();
+    }
+    function getResource(name) {
+        const resource = registry.get(String(name));
+        if (!resource)
+            throw new TypeError(`Unknown data resource: ${name}`);
+        return resource;
+    }
+    return {
+        user: scope("user"),
+        tenant: scope("tenant"),
+        public: scope("public"),
+        system: scope("system"),
+        context: getContext,
+        resources: [...registry.values()],
+    };
+}
+//# sourceMappingURL=reader.js.map

package/dist/data/reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reader.js","sourceRoot":"","sources":["../../src/data/reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAsB,MAAM,2BAA2B,CAAC;AAWzE,OAAO,EACL,UAAU,EACV,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,SAAS,EACT,KAAK,GACN,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AASxD,MAAM,UAAU,gBAAgB,CAC9B,GAAkB,EAClB,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,EAAE,GAAsB,EAAE;IAEnD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,sBAAsB,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAC/E,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,UAAU;QAC9C,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE;QACvB,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;IAE9B,SAAS,KAAK,CAAC,cAAyB;QACtC,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC;YAChE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC;YAChE,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC;YAClE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;gBACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;gBACnC,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE;oBAC3C,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE;oBAClC,KAAK,EAAE,CAAC;iBACT,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YACjB,CAAC;YACD,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC;YACnE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,OAAO,CAAC;YAC7E,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,CAAC;YAC7F,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;YAC3D,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC;SAC5E,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,QAAQ,CACrB,IAAY,EACZ,cAAyB,EACzB,OAAO,GAAoB,EAAE;QAE7B,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAED,KAAK,UAAU,QAAQ,CACrB,IAAY,EACZ,cAAyB,EACzB,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,GAAG,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,GAAoB,EAAE;QAE9E,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,iBAAiB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzE,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,EAAE,YAAY,GAAG,KAAK,CAAC,GAAG,OAAO;YACjD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,SAAS,CAAC,UAAU,WAAW,iBAAiB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACzE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5C,IAAI,WAAW,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtC,MAAM,IAAI,SAAS,CAAC,yBAAyB,QAAQ,CAAC,IAAI,aAAa,QAAQ,CAAC,QAAQ,WAAW,CAAC,CAAC;YACvG,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YACnF,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,IAAI,GAAG,GAAG,UAAU,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;cAC7F,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;cAClE,aAAa,KAAK,CAAC,WAAW,CAAC,IAAI,SAAS,UAAU,SAAS,WAAW,UAAU,EAAE,CAAC;QAE3F,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;aAC3D,OAAO,CAAC,GAAG,CAAC;aACZ,IAAI,CAAC,GAAG,QAAQ,CAAC;aACjB,GAAG,EAAW,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAClC,OAAO;YACL,IAAI;YACJ,UAAU,EAAE,WAAW,KAAK,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBACxE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI;gBAC1C,CAAC,CAAC,IAAI;SACT,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,SAAS,CACtB,IAAY,EACZ,cAAyB,EACzB,EAAE,KAAK,GAAG,EAAE,EAAE,GAAmC,EAAE;QAEnD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC;YAAE,OAAO,CAAC,CAAC;QAElE,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,iBAAiB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzE,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,iCAAiC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;cAChE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;aAC3D,OAAO,CAAC,GAAG,CAAC;aACZ,IAAI,CAAC,GAAG,QAAQ,CAAC;aACjB,KAAK,EAAY,CAAC;QACrB,OAAO,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,cAAyB,EACzB,MAAM,GAAY,EAAE;QAEpB,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;QACjC,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE;YACjD,SAAS,EAAE,IAAI;YACf,gBAAgB,EAAE,cAAc,KAAK,QAAQ;SAC9C,CAAC,CAAC;QACH,kBAAkB,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAE7F,MAAM,GAAG,GAAG,eAAe,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;cAChF,YAAY,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;aAC3D,OAAO,CAAC,GAAG,CAAC;aACZ,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;aAC9C,GAAG,EAAE,CAAC;QACT,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,SAAS;YACtD,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW;YAC1B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE;YAC3C,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE;YAC1C,KAAK,EAAE,CAAC;SACT,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,cAAyB,EACzB,EAAW,EACX,OAAO,GAAY,EAAE;QAErB,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;QACjC,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE;YAClD,gBAAgB,EAAE,cAAc,KAAK,QAAQ;SAC9C,CAAC,CAAC;QACH,kBAAkB,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAE7F,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAc,CAAC,EAAE,CAAC,CAAC;QACjC,iBAAiB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzE,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;aAC5C,OAAO,CAAC,UAAU,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;aAC3I,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC;aAC3D,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE;YAC3C,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE;YAClC,KAAK,EAAE,CAAC;SACT,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACjB,CAAC;IAED,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,cAAyB,EACzB,EAAW;QAEX,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;QACjC,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAc,CAAC,EAAE,CAAC,CAAC;QACjC,iBAAiB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;aAC7C,OAAO,CAAC,eAAe,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;aACjF,IAAI,CAAC,GAAG,QAAQ,CAAC;aACjB,GAAG,EAAE,CAAC;IACX,CAAC;IAED,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,cAAyB,EACzB,KAAc,EACd,OAAgB;QAEhB,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;QACjC,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE;YAClD,gBAAgB,EAAE,cAAc,KAAK,QAAQ;SAC9C,CAAC,CAAC;QACH,kBAAkB,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAE7F,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,iBAAiB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzE,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;aAC3D,OAAO,CAAC,UAAU,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;aAC3I,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC;aAC3D,GAAG,EAAE,CAAC;QACT,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,cAAyB,EACzB,KAAc;QAEd,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;QACjC,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,iBAAiB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzE,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;aAC7C,OAAO,CAAC,eAAe,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;aACjF,IAAI,CAAC,GAAG,QAAQ,CAAC;aACjB,GAAG,EAAE,CAAC;IACX,CAAC;IAED,SAAS,WAAW,CAAC,IAAY;QAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;QACrE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;QACvB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;QACvB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;QACvB,OAAO,EAAE,UAAU;QACnB,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC"}

package/dist/data/resources.d.ts

@@ -0,0 +1,9 @@
+import { type DataResource, type DataResourceInput } from "./model.js";
+export { DATA_OPERATIONS, DATA_SCOPES } from "./model.js";
+export type * from "./model.js";
+export declare class DataScopeError extends Error {
+    constructor(message: string);
+}
+/** Validate once at application composition time; query builders can then stay simple. */
+export declare function normalizeDataResources(resources?: readonly DataResourceInput[]): DataResource[];
+//# sourceMappingURL=resources.d.ts.map

package/dist/data/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../src/data/resources.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,iBAAiB,EAGvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC1D,mBAAmB,YAAY,CAAC;AAEhC,qBAAa,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,0FAA0F;AAC1F,wBAAgB,sBAAsB,CACpC,SAAS,GAAE,SAAS,iBAAiB,EAAO,GAC3C,YAAY,EAAE,CAGhB"}