@api-client/core 0.19.42 → 0.20.0

package/build/src/index.d.ts

@@ -47,4 +47,5 @@ export { type IProxyResult, default as ProxyLib } from './proxy/Proxy.js';
 export { type IHttpProjectProxyInit, type IHttpProjectStoreProxyInit, default as HttpProjectProxy, } from './proxy/HttpProjectProxy.js';
 export { type IRequestProxyInit, default as RequestProxy } from './proxy/RequestProxy.js';
 export { default as ProxyService } from './proxy/ProxyService.js';
+export { truncateIdentifier } from './modeling/helpers/runtime.js';
 //# sourceMappingURL=index.d.ts.map

package/build/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAKA,cAAc,mBAAmB,CAAA;AAEjC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAKpC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAC3C,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAC1C,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAA;AAC/C,OAAO,KAAK,IAAI,MAAM,iBAAiB,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAA;AACzC,OAAO,KAAK,aAAa,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAC3C,OAAO,KAAK,UAAU,MAAM,uBAAuB,CAAA;AACnD,cAAc,gBAAgB,CAAA;AAC9B,cAAc,uBAAuB,CAAA;AAGrC,OAAO,EACL,eAAe,EACf,KAAK,qBAAqB,EAC1B,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,GACnB,MAAM,+BAA+B,CAAA;AAKtC,OAAO,EACL,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,OAAO,EACZ,KAAK,mBAAmB,EACxB,KAAK,SAAS,EACd,KAAK,SAAS,GACf,MAAM,yCAAyC,CAAA;AAChD,cAAc,wBAAwB,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAA;AAClD,OAAO,KAAK,UAAU,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,KAAK,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;AACpF,cAAc,+BAA+B,CAAA;AAC7C,OAAO,KAAK,eAAe,MAAM,sCAAsC,CAAA;AACvE,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAA;AAC9C,OAAO,KAAK,cAAc,MAAM,+BAA+B,CAAA;AAK/D,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,UAAU,IAAI,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AAKxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAA;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAA;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAA;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAE,KAAK,WAAW,EAAE,MAAM,yCAAyC,CAAA;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAC/D,cAAc,qCAAqC,CAAA;AAKnD,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAA;AAKpF,OAAO,EACL,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,qCAAqC,CAAA;AAK5C,cAAc,4BAA4B,CAAA;AAC1C,cAAc,sBAAsB,CAAA;AAKpC,cAAc,0BAA0B,CAAA;AAKxC,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAA;AAKpE,OAAO,EAAE,KAAK,YAAY,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,OAAO,IAAI,gBAAgB,GAC5B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,KAAK,iBAAiB,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACzF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAKA,cAAc,mBAAmB,CAAA;AAEjC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAKpC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAC3C,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAC1C,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAA;AAC/C,OAAO,KAAK,IAAI,MAAM,iBAAiB,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAA;AACzC,OAAO,KAAK,aAAa,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAC3C,OAAO,KAAK,UAAU,MAAM,uBAAuB,CAAA;AACnD,cAAc,gBAAgB,CAAA;AAC9B,cAAc,uBAAuB,CAAA;AAGrC,OAAO,EACL,eAAe,EACf,KAAK,qBAAqB,EAC1B,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,GACnB,MAAM,+BAA+B,CAAA;AAKtC,OAAO,EACL,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,OAAO,EACZ,KAAK,mBAAmB,EACxB,KAAK,SAAS,EACd,KAAK,SAAS,GACf,MAAM,yCAAyC,CAAA;AAChD,cAAc,wBAAwB,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAA;AAClD,OAAO,KAAK,UAAU,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,KAAK,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;AACpF,cAAc,+BAA+B,CAAA;AAC7C,OAAO,KAAK,eAAe,MAAM,sCAAsC,CAAA;AACvE,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAA;AAC9C,OAAO,KAAK,cAAc,MAAM,+BAA+B,CAAA;AAK/D,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,UAAU,IAAI,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AAKxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAA;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAA;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAA;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAE,KAAK,WAAW,EAAE,MAAM,yCAAyC,CAAA;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAC/D,cAAc,qCAAqC,CAAA;AAKnD,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAA;AAKpF,OAAO,EACL,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,qCAAqC,CAAA;AAK5C,cAAc,4BAA4B,CAAA;AAC1C,cAAc,sBAAsB,CAAA;AAKpC,cAAc,0BAA0B,CAAA;AAKxC,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAA;AAKpE,OAAO,EAAE,KAAK,YAAY,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,OAAO,IAAI,gBAAgB,GAC5B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,KAAK,iBAAiB,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACzF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAKjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA"}

package/build/src/index.js

@@ -82,4 +82,8 @@ export { default as ProxyLib } from './proxy/Proxy.js';
 export { default as HttpProjectProxy, } from './proxy/HttpProjectProxy.js';
 export { default as RequestProxy } from './proxy/RequestProxy.js';
 export { default as ProxyService } from './proxy/ProxyService.js';
+//
+// Runtime Database helpers
+//
+export { truncateIdentifier } from './modeling/helpers/runtime.js';
 //# sourceMappingURL=index.js.map

package/build/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAE3D,EAAE;AACF,0BAA0B;AAC1B,EAAE;AACF,cAAc,mBAAmB,CAAA;AAEjC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,EAAE;AACF,SAAS;AACT,EAAE;AACF,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAC3C,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAC1C,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAA;AAC/C,OAAO,KAAK,IAAI,MAAM,iBAAiB,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAA;AACzC,OAAO,KAAK,aAAa,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAC3C,OAAO,KAAK,UAAU,MAAM,uBAAuB,CAAA;AACnD,cAAc,gBAAgB,CAAA;AAC9B,cAAc,uBAAuB,CAAA;AAErC,aAAa;AACb,OAAO,EACL,eAAe,GAOhB,MAAM,+BAA+B,CAAA;AAEtC,EAAE;AACF,OAAO;AACP,EAAE;AACF,OAAO,EACL,iBAAiB,GAOlB,MAAM,yCAAyC,CAAA;AAChD,cAAc,wBAAwB,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAA;AAClD,OAAO,KAAK,UAAU,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAA;AAChD,OAAO,EAAE,WAAW,EAA4B,MAAM,8BAA8B,CAAA;AACpF,cAAc,+BAA+B,CAAA;AAC7C,OAAO,KAAK,eAAe,MAAM,sCAAsC,CAAA;AACvE,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAA;AAC9C,OAAO,KAAK,cAAc,MAAM,+BAA+B,CAAA;AAE/D,EAAE;AACF,UAAU;AACV,EAAE;AACF,OAAO,EAAE,YAAY,EAAsB,MAAM,2BAA2B,CAAA;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,UAAU,IAAI,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AAExG,EAAE;AACF,UAAU;AACV,EAAE;AACF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAA;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAA;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAA;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAoB,MAAM,yCAAyC,CAAA;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAC/D,cAAc,qCAAqC,CAAA;AAEnD,EAAE;AACF,sBAAsB;AACtB,EAAE;AACF,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAA;AAEpF,EAAE;AACF,cAAc;AACd,EAAE;AACF,OAAO,EACL,UAAU,GAOX,MAAM,qCAAqC,CAAA;AAE5C,EAAE;AACF,UAAU;AACV,EAAE;AACF,cAAc,4BAA4B,CAAA;AAC1C,cAAc,sBAAsB,CAAA;AAEpC,EAAE;AACF,UAAU;AACV,EAAE;AACF,cAAc,0BAA0B,CAAA;AAExC,EAAE;AACF,cAAc;AACd,EAAE;AACF,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAA;AAEpE,EAAE;AACF,cAAc;AACd,EAAE;AACF,OAAO,EAAqB,OAAO,IAAI,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAGL,OAAO,IAAI,gBAAgB,GAC5B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAA0B,OAAO,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACzF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAA","sourcesContent":["// all exports that are save for NodeJS process processing.\n\n//\n// Ecosystem-shared Config\n//\nexport * from './config/index.js'\n\nexport { nanoid } from './nanoid.js'\n\n//\n// Models\n//\nexport * as Models from './models/index.js'\nexport * as Kinds from './models/kinds.js'\nexport * as Modeling from './modeling/index.js'\nexport * as Data from './data/index.js'\nexport * as Patch from './patch/index.js'\nexport * as Authorization from './authorization/index.js'\nexport * as Events from './events/index.js'\nexport * as Exceptions from './exceptions/index.js'\nexport * from './sdk/index.js'\nexport * from './sdk/StoreSdkNode.js'\n\n// Node only.\nexport {\n  RuntimeApiModel,\n  type RuntimeApiModelSchema,\n  type RoutingMap,\n  type RouteDefinition,\n  type RouteLookup,\n  type RuntimeResolvedAction,\n  type RuleEvaluator,\n} from './modeling/RuntimeApiModel.js'\n\n//\n// Libs\n//\nexport {\n  PayloadSerializer,\n  type ISafePayload,\n  type IMultipartBody,\n  type Payload,\n  type DeserializedPayload,\n  type IBlobMeta,\n  type IFileMeta,\n} from './lib/transformers/PayloadSerializer.js'\nexport * from './lib/logging/index.js'\nexport { Headers } from './lib/headers/Headers.js'\nexport * as EventUtils from './lib/events/Utils.js'\nexport { default as uuidV4 } from './lib/uuid.js'\nexport * as fs from './lib/fs/Fs.js'\nexport { UrlParser } from './lib/parsers/UrlParser.js'\nexport { UrlEncoder } from './lib/parsers/UrlEncoder.js'\nexport * as Timers from './lib/timers/Timers.js'\nexport { UriTemplate, type IUriTemplateOptions } from './lib/parsers/UriTemplate.js'\nexport * from './lib/parsers/UrlProcessor.js'\nexport * as HttpDefinitions from './lib/definitions/HttpDefinitions.js'\nexport * as Buffer from './lib/Buffer.js'\nexport * as Random from './lib/math/Random.js'\nexport * as ColorConverter from './lib/color/ColorConverter.js'\n\n//\n// Cookies\n//\nexport { CookieParser, type SameSiteValue } from './cookies/CookieParser.js'\nexport { CookieJar } from './cookies/CookieJar.js'\nexport { InMemoryCookieJar, clearStore as ClearInMemoryCookieJar } from './cookies/InMemoryCookieJar.js'\n\n//\n// Runtime\n//\nexport { VariablesProcessor } from './runtime/variables/VariablesProcessor.js'\nexport { ProjectRequestRunner } from './runtime/node/ProjectRequestRunner.js'\nexport { HttpRequestRunner } from './runtime/http-runner/HttpRequestRunner.js'\nexport { ProjectSerialRunner } from './runtime/node/ProjectSerialRunner.js'\nexport { ProjectParallelRunner, type IWorkerInfo } from './runtime/node/ProjectParallelRunner.js'\nexport { ProjectRunner } from './runtime/node/ProjectRunner.js'\nexport * from './runtime/node/InteropInterfaces.js'\n\n//\n// Execution reporters\n//\nexport { Reporter } from './runtime/reporters/Reporter.js'\nexport { ProjectRunCliReporter } from './runtime/reporters/ProjectRunCliReporter.js'\n\n//\n// HTTP engine\n//\nexport {\n  CoreEngine,\n  type HttpEngineOptions,\n  type RequestStats,\n  type HeadersReceivedDetail,\n  type BeforeRedirectDetail,\n  type ResponseErrorInit,\n  type IRequestAuthState,\n} from './runtime/http-engine/CoreEngine.js'\n\n//\n// Testing\n//\nexport * from './testing/TestCliHelper.js'\nexport * from './testing/getPort.js'\n\n//\n// Mocking\n//\nexport * from './mocking/ProjectMock.js'\n\n//\n// Calculators\n//\nexport { DataCalculator } from './lib/calculators/DataCalculator.js'\n\n//\n// Proxy logic\n//\nexport { type IProxyResult, default as ProxyLib } from './proxy/Proxy.js'\nexport {\n  type IHttpProjectProxyInit,\n  type IHttpProjectStoreProxyInit,\n  default as HttpProjectProxy,\n} from './proxy/HttpProjectProxy.js'\nexport { type IRequestProxyInit, default as RequestProxy } from './proxy/RequestProxy.js'\nexport { default as ProxyService } from './proxy/ProxyService.js'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAE3D,EAAE;AACF,0BAA0B;AAC1B,EAAE;AACF,cAAc,mBAAmB,CAAA;AAEjC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,EAAE;AACF,SAAS;AACT,EAAE;AACF,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAC3C,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAC1C,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAA;AAC/C,OAAO,KAAK,IAAI,MAAM,iBAAiB,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAA;AACzC,OAAO,KAAK,aAAa,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAC3C,OAAO,KAAK,UAAU,MAAM,uBAAuB,CAAA;AACnD,cAAc,gBAAgB,CAAA;AAC9B,cAAc,uBAAuB,CAAA;AAErC,aAAa;AACb,OAAO,EACL,eAAe,GAOhB,MAAM,+BAA+B,CAAA;AAEtC,EAAE;AACF,OAAO;AACP,EAAE;AACF,OAAO,EACL,iBAAiB,GAOlB,MAAM,yCAAyC,CAAA;AAChD,cAAc,wBAAwB,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAA;AAClD,OAAO,KAAK,UAAU,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAA;AAChD,OAAO,EAAE,WAAW,EAA4B,MAAM,8BAA8B,CAAA;AACpF,cAAc,+BAA+B,CAAA;AAC7C,OAAO,KAAK,eAAe,MAAM,sCAAsC,CAAA;AACvE,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAA;AAC9C,OAAO,KAAK,cAAc,MAAM,+BAA+B,CAAA;AAE/D,EAAE;AACF,UAAU;AACV,EAAE;AACF,OAAO,EAAE,YAAY,EAAsB,MAAM,2BAA2B,CAAA;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,UAAU,IAAI,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AAExG,EAAE;AACF,UAAU;AACV,EAAE;AACF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAA;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAA;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAA;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAoB,MAAM,yCAAyC,CAAA;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAC/D,cAAc,qCAAqC,CAAA;AAEnD,EAAE;AACF,sBAAsB;AACtB,EAAE;AACF,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAA;AAEpF,EAAE;AACF,cAAc;AACd,EAAE;AACF,OAAO,EACL,UAAU,GAOX,MAAM,qCAAqC,CAAA;AAE5C,EAAE;AACF,UAAU;AACV,EAAE;AACF,cAAc,4BAA4B,CAAA;AAC1C,cAAc,sBAAsB,CAAA;AAEpC,EAAE;AACF,UAAU;AACV,EAAE;AACF,cAAc,0BAA0B,CAAA;AAExC,EAAE;AACF,cAAc;AACd,EAAE;AACF,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAA;AAEpE,EAAE;AACF,cAAc;AACd,EAAE;AACF,OAAO,EAAqB,OAAO,IAAI,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAGL,OAAO,IAAI,gBAAgB,GAC5B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAA0B,OAAO,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACzF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAEjE,EAAE;AACF,2BAA2B;AAC3B,EAAE;AACF,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA","sourcesContent":["// all exports that are save for NodeJS process processing.\n\n//\n// Ecosystem-shared Config\n//\nexport * from './config/index.js'\n\nexport { nanoid } from './nanoid.js'\n\n//\n// Models\n//\nexport * as Models from './models/index.js'\nexport * as Kinds from './models/kinds.js'\nexport * as Modeling from './modeling/index.js'\nexport * as Data from './data/index.js'\nexport * as Patch from './patch/index.js'\nexport * as Authorization from './authorization/index.js'\nexport * as Events from './events/index.js'\nexport * as Exceptions from './exceptions/index.js'\nexport * from './sdk/index.js'\nexport * from './sdk/StoreSdkNode.js'\n\n// Node only.\nexport {\n  RuntimeApiModel,\n  type RuntimeApiModelSchema,\n  type RoutingMap,\n  type RouteDefinition,\n  type RouteLookup,\n  type RuntimeResolvedAction,\n  type RuleEvaluator,\n} from './modeling/RuntimeApiModel.js'\n\n//\n// Libs\n//\nexport {\n  PayloadSerializer,\n  type ISafePayload,\n  type IMultipartBody,\n  type Payload,\n  type DeserializedPayload,\n  type IBlobMeta,\n  type IFileMeta,\n} from './lib/transformers/PayloadSerializer.js'\nexport * from './lib/logging/index.js'\nexport { Headers } from './lib/headers/Headers.js'\nexport * as EventUtils from './lib/events/Utils.js'\nexport { default as uuidV4 } from './lib/uuid.js'\nexport * as fs from './lib/fs/Fs.js'\nexport { UrlParser } from './lib/parsers/UrlParser.js'\nexport { UrlEncoder } from './lib/parsers/UrlEncoder.js'\nexport * as Timers from './lib/timers/Timers.js'\nexport { UriTemplate, type IUriTemplateOptions } from './lib/parsers/UriTemplate.js'\nexport * from './lib/parsers/UrlProcessor.js'\nexport * as HttpDefinitions from './lib/definitions/HttpDefinitions.js'\nexport * as Buffer from './lib/Buffer.js'\nexport * as Random from './lib/math/Random.js'\nexport * as ColorConverter from './lib/color/ColorConverter.js'\n\n//\n// Cookies\n//\nexport { CookieParser, type SameSiteValue } from './cookies/CookieParser.js'\nexport { CookieJar } from './cookies/CookieJar.js'\nexport { InMemoryCookieJar, clearStore as ClearInMemoryCookieJar } from './cookies/InMemoryCookieJar.js'\n\n//\n// Runtime\n//\nexport { VariablesProcessor } from './runtime/variables/VariablesProcessor.js'\nexport { ProjectRequestRunner } from './runtime/node/ProjectRequestRunner.js'\nexport { HttpRequestRunner } from './runtime/http-runner/HttpRequestRunner.js'\nexport { ProjectSerialRunner } from './runtime/node/ProjectSerialRunner.js'\nexport { ProjectParallelRunner, type IWorkerInfo } from './runtime/node/ProjectParallelRunner.js'\nexport { ProjectRunner } from './runtime/node/ProjectRunner.js'\nexport * from './runtime/node/InteropInterfaces.js'\n\n//\n// Execution reporters\n//\nexport { Reporter } from './runtime/reporters/Reporter.js'\nexport { ProjectRunCliReporter } from './runtime/reporters/ProjectRunCliReporter.js'\n\n//\n// HTTP engine\n//\nexport {\n  CoreEngine,\n  type HttpEngineOptions,\n  type RequestStats,\n  type HeadersReceivedDetail,\n  type BeforeRedirectDetail,\n  type ResponseErrorInit,\n  type IRequestAuthState,\n} from './runtime/http-engine/CoreEngine.js'\n\n//\n// Testing\n//\nexport * from './testing/TestCliHelper.js'\nexport * from './testing/getPort.js'\n\n//\n// Mocking\n//\nexport * from './mocking/ProjectMock.js'\n\n//\n// Calculators\n//\nexport { DataCalculator } from './lib/calculators/DataCalculator.js'\n\n//\n// Proxy logic\n//\nexport { type IProxyResult, default as ProxyLib } from './proxy/Proxy.js'\nexport {\n  type IHttpProjectProxyInit,\n  type IHttpProjectStoreProxyInit,\n  default as HttpProjectProxy,\n} from './proxy/HttpProjectProxy.js'\nexport { type IRequestProxyInit, default as RequestProxy } from './proxy/RequestProxy.js'\nexport { default as ProxyService } from './proxy/ProxyService.js'\n\n//\n// Runtime Database helpers\n//\nexport { truncateIdentifier } from './modeling/helpers/runtime.js'\n"]}

package/build/src/modeling/RuntimeApiModel.d.ts

@@ -56,6 +56,11 @@ export declare class RuntimeApiModel extends ApiModel {
         password?: DomainProperty;
         role?: DomainProperty;
     };
+    /**
+     * Returns a readonly map of session properties.
+     * Note, it creates a copy of the cached map to prevent modification of the internal state.
+     */
+    get sessionProperties(): ReadonlyMap<string, DomainProperty>;
     constructor(schema: RuntimeApiModelSchema, domainSchema: DataDomainSchema);
     /**
      * Looks up the corresponding exposed entity and action for a given request.

package/build/src/modeling/RuntimeApiModel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RuntimeApiModel.d.ts","sourceRoot":"","sources":["../../../src/modeling/RuntimeApiModel.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAEjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAE5E;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,WAAW,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;AAE1D;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAC3D,UAAU,EAAE,UAAU,CAAA;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,aAAa,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC/B;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,GAAG,OAAO,GAAG,SAAS,CAAA;AAapG;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,QAAQ;;IAY3C;;OAEG;IACH,cAAc,EAAE;QACd,IAAI,CAAC,EAAE,YAAY,CAAA;KACpB,CAAK;IAEN;;OAEG;IACH,gBAAgB,EAAE;QAChB,QAAQ,CAAC,EAAE,cAAc,CAAA;QACzB,QAAQ,CAAC,EAAE,cAAc,CAAA;QACzB,IAAI,CAAC,EAAE,cAAc,CAAA;KACtB,CAAK;gBAOM,MAAM,EAAE,qBAAqB,EAAE,YAAY,EAAE,gBAAgB;IAsIzE;;;;;;OAMG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS;IAoC7E;;;;;;;;;;;;;;;;OAgBG;IACG,cAAc,CAClB,MAAM,EAAE,qBAAqB,EAC7B,SAAS,EAAE,aAAa,EACxB,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,OAAO,CAAC;IAwCV,MAAM,IAAI,qBAAqB;CAazC"}
+{"version":3,"file":"RuntimeApiModel.d.ts","sourceRoot":"","sources":["../../../src/modeling/RuntimeApiModel.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAEjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAG5E;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,WAAW,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;AAE1D;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAC3D,UAAU,EAAE,UAAU,CAAA;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,aAAa,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC/B;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,GAAG,OAAO,GAAG,SAAS,CAAA;AAapG;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,QAAQ;;IAY3C;;OAEG;IACH,cAAc,EAAE;QACd,IAAI,CAAC,EAAE,YAAY,CAAA;KACpB,CAAK;IAEN;;OAEG;IACH,gBAAgB,EAAE;QAChB,QAAQ,CAAC,EAAE,cAAc,CAAA;QACzB,QAAQ,CAAC,EAAE,cAAc,CAAA;QACzB,IAAI,CAAC,EAAE,cAAc,CAAA;KACtB,CAAK;IAYN;;;OAGG;IACH,IAAW,iBAAiB,IAAI,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAElE;gBAEW,MAAM,EAAE,qBAAqB,EAAE,YAAY,EAAE,gBAAgB;IAoJzE;;;;;;OAMG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS;IAoC7E;;;;;;;;;;;;;;;;OAgBG;IACG,cAAc,CAClB,MAAM,EAAE,qBAAqB,EAC7B,SAAS,EAAE,aAAa,EACxB,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,OAAO,CAAC;IAwCV,MAAM,IAAI,qBAAqB;CAazC"}

package/build/src/modeling/RuntimeApiModel.js

@@ -2,6 +2,7 @@ import { match, parse, exec } from '@poppinss/matchit';
 import { ApiModel } from './ApiModel.js';
 import { SemanticType } from './Semantics.js';
 import { AccessRuleExecutionPhase } from './rules/AccessRule.js';
+import { Exception } from '../exceptions/exception.js';
 /**
  * An optimized API Model subclass designed for fast runtime lookups.
  * It pre-compiles the RoutingMap into a radix tree for O(log N) or faster endpoint resolution.
@@ -28,6 +29,17 @@ export class RuntimeApiModel extends ApiModel {
      * Cached access rules for each action to avoid runtime computation overhead.
      */
     #actionRulesCache = new WeakMap();
+    /**
+     * Cached session properties for fast runtime lookup.
+     */
+    #sessionProperties = new Map();
+    /**
+     * Returns a readonly map of session properties.
+     * Note, it creates a copy of the cached map to prevent modification of the internal state.
+     */
+    get sessionProperties() {
+        return new Map(this.#sessionProperties);
+    }
     constructor(schema, domainSchema) {
         super(schema, domainSchema);
         if (schema.routingMap) {
@@ -35,6 +47,19 @@ export class RuntimeApiModel extends ApiModel {
         }
         this.#cacheEntitiesAndProperties();
         this.#precomputeAccessRules();
+        this.#precomputeSessionProperties();
+    }
+    #precomputeSessionProperties() {
+        if (!this.session || !this.domain) {
+            return;
+        }
+        for (const prop of this.session.properties) {
+            const domainProperty = this.domain.findProperty(prop.key, prop.domain);
+            if (!domainProperty) {
+                throw new Exception(`Session property ${prop.key} not found in domain`);
+            }
+            this.#sessionProperties.set(prop.key, domainProperty);
+        }
     }
     #precomputeAccessRules() {
         for (const entity of this.exposes.values()) {

package/build/src/modeling/RuntimeApiModel.js.map

@@ -1 +1 @@
-{"version":3,"file":"RuntimeApiModel.js","sourceRoot":"","sources":["../../../src/modeling/RuntimeApiModel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAmB,MAAM,mBAAmB,CAAA;AACvE,OAAO,EAAE,QAAQ,EAAuB,MAAM,eAAe,CAAA;AAK7D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAG7C,OAAO,EAAc,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAiD5E;;;GAGG;AACH,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IAC3C;;;OAGG;IACH,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAA;IAE3C;;OAEG;IACH,YAAY,GAAG,IAAI,OAAO,EAAiC,CAAA;IAE3D;;OAEG;IACH,cAAc,GAEV,EAAE,CAAA;IAEN;;OAEG;IACH,gBAAgB,GAIZ,EAAE,CAAA;IAEN;;OAEG;IACH,iBAAiB,GAAG,IAAI,OAAO,EAA4B,CAAA;IAE3D,YAAY,MAA6B,EAAE,YAA8B;QACvE,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QAE3B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAC3C,CAAC;QAED,IAAI,CAAC,2BAA2B,EAAE,CAAA;QAClC,IAAI,CAAC,sBAAsB,EAAE,CAAA;IAC/B,CAAC;IAED,sBAAsB;QACpB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,sBAAsB,CAAC,MAAc,EAAE,MAAqB;QAC1D,MAAM,SAAS,GAAmB,EAAE,CAAA;QAEpC,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACnC,CAAC;QAED,IAAI,aAAa,GAA8B,MAAM,CAAA;QACrD,OAAO,aAAa,EAAE,CAAC;YACrB,IAAI,aAAa,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpE,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;YAC1C,CAAC;YACD,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/F,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACjC,CAAC;QAED,MAAM,MAAM,GAAqB;YAC/B,QAAQ,EAAE;gBACR,eAAe,EAAE,EAAE;gBACnB,cAAc,EAAE,EAAE;aACnB;YACD,KAAK,EAAE;gBACL,eAAe,EAAE,EAAE;gBACnB,cAAc,EAAE,EAAE;aACnB;YACD,SAAS,EAAE;gBACT,eAAe,EAAE,EAAE;gBACnB,cAAc,EAAE,EAAE;aACnB;SACF,CAAA;QAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;QAEnC,KAAK,MAAM,UAAU,IAAI,SAAS,EAAE,CAAC;YACnC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAA;YAC1C,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAkC,CAAC,CAAA;gBAEtE,4FAA4F;gBAC5F,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,SAAQ;gBACV,CAAC;gBAED,2FAA2F;gBAC3F,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,SAAQ;gBACV,CAAC;gBACD,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAE/B,IAAI,MAAM,CAAA;gBACV,IAAI,KAAK,KAAK,wBAAwB,CAAC,UAAU,EAAE,CAAC;oBAClD,MAAM,GAAG,MAAM,CAAC,SAAS,CAAA;gBAC3B,CAAC;qBAAM,IAAI,KAAK,KAAK,wBAAwB,CAAC,KAAK,EAAE,CAAC;oBACpD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAA;gBACvB,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAA;gBAC1B,CAAC;gBAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAClC,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACnC,CAAC;YACH,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;gBACpC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACrB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAED,2BAA2B;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAM;QACR,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1E,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAM;QACR,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,IAAI,GAAG,UAAU,CAAA;QAErC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,IAAI,CAAA;YACvC,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,IAAI,CAAA;YACvC,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,gBAAgB,CAAC,IAAI,GAAG,IAAI,CAAA;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,UAAsB;QACtC,KAAK,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,MAAM,YAAY,GAAG,EAAE,CAAA;YACvB,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC9B,6EAA6E;gBAC7E,iFAAiF;gBACjF,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;gBAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,CAAA;gBACjC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAClC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC3B,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CAAC,MAAc,EAAE,IAAY;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;QAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,wGAAwG;QACxG,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QAC9C,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAC3E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,OAAO;YACL,MAAM;YACN,MAAM;YACN,MAAM;SACP,CAAA;IACH,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,cAAc,CAClB,MAA6B,EAC7B,SAAwB,EACxB,KAA+B;QAE/B,IAAI,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC3D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,qGAAqG;YACrG,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;YACvE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QACxD,CAAC;QAED,IAAI,aAAa,CAAA;QACjB,IAAI,KAAK,KAAK,wBAAwB,CAAC,UAAU,EAAE,CAAC;YAClD,aAAa,GAAG,WAAW,CAAC,SAAS,CAAA;QACvC,CAAC;aAAM,IAAI,KAAK,KAAK,wBAAwB,CAAC,KAAK,EAAE,CAAC;YACpD,aAAa,GAAG,WAAW,CAAC,KAAK,CAAA;QACnC,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAA;QACtC,CAAC;QAED,0BAA0B;QAC1B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,cAAc,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;YACpC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAA,CAAC,iDAAiD;YAChE,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,eAAe,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;YACpC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,OAAO,KAAK,CAAA;IACd,CAAC;IAEQ,MAAM;QACb,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAA2B,CAAA;QAEpD,MAAM,UAAU,GAAe,EAAE,CAAA;QACjC,KAAK,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,UAAU,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAoB,CAAC,CAAA;QAC7F,CAAC;QAED,OAAO;YACL,GAAG,IAAI;YACP,UAAU;SACX,CAAA;IACH,CAAC;CACF","sourcesContent":["import { match, parse, exec, type RouteToken } from '@poppinss/matchit'\nimport { ApiModel, type ApiModelSchema } from './ApiModel.js'\nimport type { DataDomainSchema } from './DataDomain.js'\nimport type { ActionKind } from './actions/index.js'\nimport type { ExposedEntity } from './ExposedEntity.js'\nimport type { Action } from './actions/Action.js'\nimport { SemanticType } from './Semantics.js'\nimport type { DomainEntity } from './DomainEntity.js'\nimport type { DomainProperty } from './DomainProperty.js'\nimport { AccessRule, AccessRuleExecutionPhase } from './rules/AccessRule.js'\n\n/**\n * Identifies a specific exposed entity and its action kind.\n */\nexport interface RouteLookup {\n  exposedEntityKey: string\n  actionKind: ActionKind\n}\n\n/**\n * A routing definition mapping a path to an action lookup.\n */\nexport interface RouteDefinition {\n  path: string\n  lookup: RouteLookup\n}\n\n/**\n * A map of HTTP methods to their route definitions.\n */\nexport type RoutingMap = Record<string, RouteDefinition[]>\n\n/**\n * Schema for an API Model optimized for runtime routing.\n */\nexport interface RuntimeApiModelSchema extends ApiModelSchema {\n  routingMap: RoutingMap\n}\n\nexport interface RuntimeResolvedAction {\n  entity: ExposedEntity\n  action: Action\n  params: Record<string, string>\n}\n\nexport type RuleEvaluator = (rule: AccessRule) => Promise<boolean | undefined> | boolean | undefined\n\ninterface PhaseRules {\n  permissionRules: AccessRule[]\n  mandatoryRules: AccessRule[]\n}\n\ninterface ActionRulesCache {\n  preFetch: PhaseRules\n  fetch: PhaseRules\n  postFetch: PhaseRules\n}\n\n/**\n * An optimized API Model subclass designed for fast runtime lookups.\n * It pre-compiles the RoutingMap into a radix tree for O(log N) or faster endpoint resolution.\n */\nexport class RuntimeApiModel extends ApiModel {\n  /**\n   * The parsed radix tree for fast routing.\n   * Method -> ParsedRoutes\n   */\n  #routes = new Map<string, RouteToken[][]>()\n\n  /**\n   * Quick map from matchit parsed route format to our RouteDefinition for returning results\n   */\n  #definitions = new WeakMap<RouteToken[], RouteDefinition>()\n\n  /**\n   * Cached references to commonly used entities for fast runtime lookup.\n   */\n  cachedEntities: {\n    user?: DomainEntity\n  } = {}\n\n  /**\n   * Cached references to commonly used properties for fast runtime lookup.\n   */\n  cachedProperties: {\n    username?: DomainProperty\n    password?: DomainProperty\n    role?: DomainProperty\n  } = {}\n\n  /**\n   * Cached access rules for each action to avoid runtime computation overhead.\n   */\n  #actionRulesCache = new WeakMap<Action, ActionRulesCache>()\n\n  constructor(schema: RuntimeApiModelSchema, domainSchema: DataDomainSchema) {\n    super(schema, domainSchema)\n\n    if (schema.routingMap) {\n      this.#initializeRouter(schema.routingMap)\n    }\n\n    this.#cacheEntitiesAndProperties()\n    this.#precomputeAccessRules()\n  }\n\n  #precomputeAccessRules(): void {\n    for (const entity of this.exposes.values()) {\n      for (const action of entity.actions) {\n        this.#actionRulesCache.set(action, this.#computeEffectiveRules(action, entity))\n      }\n    }\n  }\n\n  #computeEffectiveRules(action: Action, entity: ExposedEntity): ActionRulesCache {\n    const hierarchy: AccessRule[][] = []\n\n    if (action.accessRule && action.accessRule.length > 0) {\n      hierarchy.push(action.accessRule)\n    }\n\n    let currentEntity: ExposedEntity | undefined = entity\n    while (currentEntity) {\n      if (currentEntity.accessRule && currentEntity.accessRule.length > 0) {\n        hierarchy.push(currentEntity.accessRule)\n      }\n      currentEntity = currentEntity.parent ? this.exposes.get(currentEntity.parent.key) : undefined\n    }\n\n    if (this.accessRule && this.accessRule.length > 0) {\n      hierarchy.push(this.accessRule)\n    }\n\n    const result: ActionRulesCache = {\n      preFetch: {\n        permissionRules: [],\n        mandatoryRules: [],\n      },\n      fetch: {\n        permissionRules: [],\n        mandatoryRules: [],\n      },\n      postFetch: {\n        permissionRules: [],\n        mandatoryRules: [],\n      },\n    }\n\n    const seenTypes = new Set<string>()\n\n    for (const rulesLevel of hierarchy) {\n      const typesInThisLevel = new Set<string>()\n      for (const rule of rulesLevel) {\n        const phase = rule.metadata[action.kind as keyof typeof rule.metadata]\n\n        // If the rule does not specify an execution phase for this action kind, it is not evaluated\n        if (!phase) {\n          continue\n        }\n\n        // Shadowing: If a rule of the same type was defined closer to the action, ignore this one.\n        if (seenTypes.has(rule.type)) {\n          continue\n        }\n        typesInThisLevel.add(rule.type)\n\n        let bucket\n        if (phase === AccessRuleExecutionPhase.POST_FETCH) {\n          bucket = result.postFetch\n        } else if (phase === AccessRuleExecutionPhase.FETCH) {\n          bucket = result.fetch\n        } else {\n          bucket = result.preFetch\n        }\n\n        if (rule.mandatory) {\n          bucket.mandatoryRules.push(rule)\n        } else {\n          bucket.permissionRules.push(rule)\n        }\n      }\n      for (const type of typesInThisLevel) {\n        seenTypes.add(type)\n      }\n    }\n\n    return result\n  }\n\n  #cacheEntitiesAndProperties(): void {\n    if (!this.user || !this.domain) {\n      return\n    }\n\n    const userEntity = this.domain.findEntity(this.user.key, this.user.domain)\n    if (!userEntity) {\n      return\n    }\n\n    this.cachedEntities.user = userEntity\n\n    for (const prop of userEntity.properties) {\n      if (prop.hasSemantic(SemanticType.Username)) {\n        this.cachedProperties.username = prop\n      }\n      if (prop.hasSemantic(SemanticType.Password)) {\n        this.cachedProperties.password = prop\n      }\n      if (prop.hasSemantic(SemanticType.UserRole)) {\n        this.cachedProperties.role = prop\n      }\n    }\n  }\n\n  #initializeRouter(routingMap: RoutingMap): void {\n    for (const [method, definitions] of Object.entries(routingMap)) {\n      const parsedRoutes = []\n      for (const def of definitions) {\n        // matchit's parse() transforms a route string into an object representation.\n        // It expects `:param` syntax, while our API models use OpenAPI `{param}` syntax.\n        const matchitPath = def.path.replace(/\\{([^}]+)\\}/g, ':$1')\n        const parsed = parse(matchitPath)\n        this.#definitions.set(parsed, def)\n        parsedRoutes.push(parsed)\n      }\n      this.#routes.set(method.toUpperCase(), parsedRoutes)\n    }\n  }\n\n  /**\n   * Looks up the corresponding exposed entity and action for a given request.\n   *\n   * @param method The HTTP method (e.g., 'GET', 'POST').\n   * @param path The request path (e.g., '/users/123').\n   * @returns An object with the entity, action, and extracted path parameters if a match is found.\n   */\n  lookupAction(method: string, path: string): RuntimeResolvedAction | undefined {\n    const parsedRoutes = this.#routes.get(method.toUpperCase())\n    if (!parsedRoutes) {\n      return undefined\n    }\n\n    // `match` returns the matching parsed route (which is an array of segments), or empty array if no match\n    const matchedRoute = match(path, parsedRoutes)\n    if (!matchedRoute || matchedRoute.length === 0) {\n      return undefined\n    }\n\n    const def = this.#definitions.get(matchedRoute)\n    if (!def) {\n      return undefined\n    }\n\n    const params = exec(path, matchedRoute)\n\n    const entity = this.exposes.get(def.lookup.exposedEntityKey)\n    if (!entity) {\n      return undefined\n    }\n\n    const action = entity.actions.find((a) => a.kind === def.lookup.actionKind)\n    if (!action) {\n      return undefined\n    }\n\n    return {\n      entity,\n      action,\n      params,\n    }\n  }\n\n  /**\n   * Evaluates access rules for a given action and phase.\n   *\n   * The evaluation process follows two phases per execution phase (PRE_FETCH, FETCH, POST_FETCH):\n   * 1. Mandatory Phase: All rules marked as `mandatory: true` across all levels must return true.\n   *    If any fail, the request is immediately rejected.\n   * 2. Permission Phase: Evaluation follows the hierarchy from most specific to most general:\n   *    Action -> Endpoint (ExposedEntity) -> API Model.\n   *    If an explicit allow (true) or deny (false) is hit, evaluation stops and returns the result.\n   *    If no rules match (all return undefined), the request is rejected by default.\n   *\n   * @param action The resolved action to evaluate.\n   * @param evaluator A callback that evaluates a single rule. Should return true (allow),\n   *                  false (deny), or undefined (no hit).\n   * @param phase The execution phase to evaluate.\n   * @returns A promise that resolves to true if access is granted, false if denied.\n   */\n  async evaluateAccess(\n    action: RuntimeResolvedAction,\n    evaluator: RuleEvaluator,\n    phase: AccessRuleExecutionPhase\n  ): Promise<boolean> {\n    let cachedRules = this.#actionRulesCache.get(action.action)\n    if (!cachedRules) {\n      // Fallback if somehow action is not cached (e.g. dynamically added after initialization or in tests)\n      cachedRules = this.#computeEffectiveRules(action.action, action.entity)\n      this.#actionRulesCache.set(action.action, cachedRules)\n    }\n\n    let rulesForPhase\n    if (phase === AccessRuleExecutionPhase.POST_FETCH) {\n      rulesForPhase = cachedRules.postFetch\n    } else if (phase === AccessRuleExecutionPhase.FETCH) {\n      rulesForPhase = cachedRules.fetch\n    } else {\n      rulesForPhase = cachedRules.preFetch\n    }\n\n    // Step 1: Mandatory Phase\n    for (const rule of rulesForPhase.mandatoryRules) {\n      const result = await evaluator(rule)\n      if (result !== true) {\n        return false // Immediately reject if any mandatory rule fails\n      }\n    }\n\n    // Step 2-4: Permission Phase\n    for (const rule of rulesForPhase.permissionRules) {\n      const result = await evaluator(rule)\n      if (result === true) {\n        return true\n      }\n      if (result === false) {\n        return false\n      }\n    }\n\n    // Default: no hit\n    return false\n  }\n\n  override toJSON(): RuntimeApiModelSchema {\n    const base = super.toJSON() as RuntimeApiModelSchema\n\n    const routingMap: RoutingMap = {}\n    for (const [method, parsedRoutes] of this.#routes.entries()) {\n      routingMap[method] = parsedRoutes.map((pr) => this.#definitions.get(pr) as RouteDefinition)\n    }\n\n    return {\n      ...base,\n      routingMap,\n    }\n  }\n}\n"]}
+{"version":3,"file":"RuntimeApiModel.js","sourceRoot":"","sources":["../../../src/modeling/RuntimeApiModel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAmB,MAAM,mBAAmB,CAAA;AACvE,OAAO,EAAE,QAAQ,EAAuB,MAAM,eAAe,CAAA;AAK7D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAG7C,OAAO,EAAc,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AAiDtD;;;GAGG;AACH,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IAC3C;;;OAGG;IACH,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAA;IAE3C;;OAEG;IACH,YAAY,GAAG,IAAI,OAAO,EAAiC,CAAA;IAE3D;;OAEG;IACH,cAAc,GAEV,EAAE,CAAA;IAEN;;OAEG;IACH,gBAAgB,GAIZ,EAAE,CAAA;IAEN;;OAEG;IACH,iBAAiB,GAAG,IAAI,OAAO,EAA4B,CAAA;IAE3D;;OAEG;IACM,kBAAkB,GAAG,IAAI,GAAG,EAA0B,CAAA;IAE/D;;;OAGG;IACH,IAAW,iBAAiB;QAC1B,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACzC,CAAC;IAED,YAAY,MAA6B,EAAE,YAA8B;QACvE,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QAE3B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAC3C,CAAC;QAED,IAAI,CAAC,2BAA2B,EAAE,CAAA;QAClC,IAAI,CAAC,sBAAsB,EAAE,CAAA;QAC7B,IAAI,CAAC,4BAA4B,EAAE,CAAA;IACrC,CAAC;IAED,4BAA4B;QAC1B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClC,OAAM;QACR,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;YACtE,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,SAAS,CAAC,oBAAoB,IAAI,CAAC,GAAG,sBAAsB,CAAC,CAAA;YACzE,CAAC;YACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;IAED,sBAAsB;QACpB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,sBAAsB,CAAC,MAAc,EAAE,MAAqB;QAC1D,MAAM,SAAS,GAAmB,EAAE,CAAA;QAEpC,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACnC,CAAC;QAED,IAAI,aAAa,GAA8B,MAAM,CAAA;QACrD,OAAO,aAAa,EAAE,CAAC;YACrB,IAAI,aAAa,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpE,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;YAC1C,CAAC;YACD,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/F,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACjC,CAAC;QAED,MAAM,MAAM,GAAqB;YAC/B,QAAQ,EAAE;gBACR,eAAe,EAAE,EAAE;gBACnB,cAAc,EAAE,EAAE;aACnB;YACD,KAAK,EAAE;gBACL,eAAe,EAAE,EAAE;gBACnB,cAAc,EAAE,EAAE;aACnB;YACD,SAAS,EAAE;gBACT,eAAe,EAAE,EAAE;gBACnB,cAAc,EAAE,EAAE;aACnB;SACF,CAAA;QAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;QAEnC,KAAK,MAAM,UAAU,IAAI,SAAS,EAAE,CAAC;YACnC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAA;YAC1C,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAkC,CAAC,CAAA;gBAEtE,4FAA4F;gBAC5F,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,SAAQ;gBACV,CAAC;gBAED,2FAA2F;gBAC3F,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,SAAQ;gBACV,CAAC;gBACD,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAE/B,IAAI,MAAM,CAAA;gBACV,IAAI,KAAK,KAAK,wBAAwB,CAAC,UAAU,EAAE,CAAC;oBAClD,MAAM,GAAG,MAAM,CAAC,SAAS,CAAA;gBAC3B,CAAC;qBAAM,IAAI,KAAK,KAAK,wBAAwB,CAAC,KAAK,EAAE,CAAC;oBACpD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAA;gBACvB,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAA;gBAC1B,CAAC;gBAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAClC,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACnC,CAAC;YACH,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;gBACpC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACrB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAED,2BAA2B;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAM;QACR,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1E,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAM;QACR,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,IAAI,GAAG,UAAU,CAAA;QAErC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,IAAI,CAAA;YACvC,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,IAAI,CAAA;YACvC,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,gBAAgB,CAAC,IAAI,GAAG,IAAI,CAAA;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,UAAsB;QACtC,KAAK,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,MAAM,YAAY,GAAG,EAAE,CAAA;YACvB,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC9B,6EAA6E;gBAC7E,iFAAiF;gBACjF,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;gBAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,CAAA;gBACjC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAClC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC3B,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CAAC,MAAc,EAAE,IAAY;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;QAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,wGAAwG;QACxG,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QAC9C,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAC3E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,OAAO;YACL,MAAM;YACN,MAAM;YACN,MAAM;SACP,CAAA;IACH,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,cAAc,CAClB,MAA6B,EAC7B,SAAwB,EACxB,KAA+B;QAE/B,IAAI,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC3D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,qGAAqG;YACrG,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;YACvE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QACxD,CAAC;QAED,IAAI,aAAa,CAAA;QACjB,IAAI,KAAK,KAAK,wBAAwB,CAAC,UAAU,EAAE,CAAC;YAClD,aAAa,GAAG,WAAW,CAAC,SAAS,CAAA;QACvC,CAAC;aAAM,IAAI,KAAK,KAAK,wBAAwB,CAAC,KAAK,EAAE,CAAC;YACpD,aAAa,GAAG,WAAW,CAAC,KAAK,CAAA;QACnC,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAA;QACtC,CAAC;QAED,0BAA0B;QAC1B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,cAAc,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;YACpC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAA,CAAC,iDAAiD;YAChE,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,eAAe,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;YACpC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,OAAO,KAAK,CAAA;IACd,CAAC;IAEQ,MAAM;QACb,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAA2B,CAAA;QAEpD,MAAM,UAAU,GAAe,EAAE,CAAA;QACjC,KAAK,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,UAAU,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAoB,CAAC,CAAA;QAC7F,CAAC;QAED,OAAO;YACL,GAAG,IAAI;YACP,UAAU;SACX,CAAA;IACH,CAAC;CACF","sourcesContent":["import { match, parse, exec, type RouteToken } from '@poppinss/matchit'\nimport { ApiModel, type ApiModelSchema } from './ApiModel.js'\nimport type { DataDomainSchema } from './DataDomain.js'\nimport type { ActionKind } from './actions/index.js'\nimport type { ExposedEntity } from './ExposedEntity.js'\nimport type { Action } from './actions/Action.js'\nimport { SemanticType } from './Semantics.js'\nimport type { DomainEntity } from './DomainEntity.js'\nimport type { DomainProperty } from './DomainProperty.js'\nimport { AccessRule, AccessRuleExecutionPhase } from './rules/AccessRule.js'\nimport { Exception } from '../exceptions/exception.js'\n\n/**\n * Identifies a specific exposed entity and its action kind.\n */\nexport interface RouteLookup {\n  exposedEntityKey: string\n  actionKind: ActionKind\n}\n\n/**\n * A routing definition mapping a path to an action lookup.\n */\nexport interface RouteDefinition {\n  path: string\n  lookup: RouteLookup\n}\n\n/**\n * A map of HTTP methods to their route definitions.\n */\nexport type RoutingMap = Record<string, RouteDefinition[]>\n\n/**\n * Schema for an API Model optimized for runtime routing.\n */\nexport interface RuntimeApiModelSchema extends ApiModelSchema {\n  routingMap: RoutingMap\n}\n\nexport interface RuntimeResolvedAction {\n  entity: ExposedEntity\n  action: Action\n  params: Record<string, string>\n}\n\nexport type RuleEvaluator = (rule: AccessRule) => Promise<boolean | undefined> | boolean | undefined\n\ninterface PhaseRules {\n  permissionRules: AccessRule[]\n  mandatoryRules: AccessRule[]\n}\n\ninterface ActionRulesCache {\n  preFetch: PhaseRules\n  fetch: PhaseRules\n  postFetch: PhaseRules\n}\n\n/**\n * An optimized API Model subclass designed for fast runtime lookups.\n * It pre-compiles the RoutingMap into a radix tree for O(log N) or faster endpoint resolution.\n */\nexport class RuntimeApiModel extends ApiModel {\n  /**\n   * The parsed radix tree for fast routing.\n   * Method -> ParsedRoutes\n   */\n  #routes = new Map<string, RouteToken[][]>()\n\n  /**\n   * Quick map from matchit parsed route format to our RouteDefinition for returning results\n   */\n  #definitions = new WeakMap<RouteToken[], RouteDefinition>()\n\n  /**\n   * Cached references to commonly used entities for fast runtime lookup.\n   */\n  cachedEntities: {\n    user?: DomainEntity\n  } = {}\n\n  /**\n   * Cached references to commonly used properties for fast runtime lookup.\n   */\n  cachedProperties: {\n    username?: DomainProperty\n    password?: DomainProperty\n    role?: DomainProperty\n  } = {}\n\n  /**\n   * Cached access rules for each action to avoid runtime computation overhead.\n   */\n  #actionRulesCache = new WeakMap<Action, ActionRulesCache>()\n\n  /**\n   * Cached session properties for fast runtime lookup.\n   */\n  readonly #sessionProperties = new Map<string, DomainProperty>()\n\n  /**\n   * Returns a readonly map of session properties.\n   * Note, it creates a copy of the cached map to prevent modification of the internal state.\n   */\n  public get sessionProperties(): ReadonlyMap<string, DomainProperty> {\n    return new Map(this.#sessionProperties)\n  }\n\n  constructor(schema: RuntimeApiModelSchema, domainSchema: DataDomainSchema) {\n    super(schema, domainSchema)\n\n    if (schema.routingMap) {\n      this.#initializeRouter(schema.routingMap)\n    }\n\n    this.#cacheEntitiesAndProperties()\n    this.#precomputeAccessRules()\n    this.#precomputeSessionProperties()\n  }\n\n  #precomputeSessionProperties(): void {\n    if (!this.session || !this.domain) {\n      return\n    }\n    for (const prop of this.session.properties) {\n      const domainProperty = this.domain.findProperty(prop.key, prop.domain)\n      if (!domainProperty) {\n        throw new Exception(`Session property ${prop.key} not found in domain`)\n      }\n      this.#sessionProperties.set(prop.key, domainProperty)\n    }\n  }\n\n  #precomputeAccessRules(): void {\n    for (const entity of this.exposes.values()) {\n      for (const action of entity.actions) {\n        this.#actionRulesCache.set(action, this.#computeEffectiveRules(action, entity))\n      }\n    }\n  }\n\n  #computeEffectiveRules(action: Action, entity: ExposedEntity): ActionRulesCache {\n    const hierarchy: AccessRule[][] = []\n\n    if (action.accessRule && action.accessRule.length > 0) {\n      hierarchy.push(action.accessRule)\n    }\n\n    let currentEntity: ExposedEntity | undefined = entity\n    while (currentEntity) {\n      if (currentEntity.accessRule && currentEntity.accessRule.length > 0) {\n        hierarchy.push(currentEntity.accessRule)\n      }\n      currentEntity = currentEntity.parent ? this.exposes.get(currentEntity.parent.key) : undefined\n    }\n\n    if (this.accessRule && this.accessRule.length > 0) {\n      hierarchy.push(this.accessRule)\n    }\n\n    const result: ActionRulesCache = {\n      preFetch: {\n        permissionRules: [],\n        mandatoryRules: [],\n      },\n      fetch: {\n        permissionRules: [],\n        mandatoryRules: [],\n      },\n      postFetch: {\n        permissionRules: [],\n        mandatoryRules: [],\n      },\n    }\n\n    const seenTypes = new Set<string>()\n\n    for (const rulesLevel of hierarchy) {\n      const typesInThisLevel = new Set<string>()\n      for (const rule of rulesLevel) {\n        const phase = rule.metadata[action.kind as keyof typeof rule.metadata]\n\n        // If the rule does not specify an execution phase for this action kind, it is not evaluated\n        if (!phase) {\n          continue\n        }\n\n        // Shadowing: If a rule of the same type was defined closer to the action, ignore this one.\n        if (seenTypes.has(rule.type)) {\n          continue\n        }\n        typesInThisLevel.add(rule.type)\n\n        let bucket\n        if (phase === AccessRuleExecutionPhase.POST_FETCH) {\n          bucket = result.postFetch\n        } else if (phase === AccessRuleExecutionPhase.FETCH) {\n          bucket = result.fetch\n        } else {\n          bucket = result.preFetch\n        }\n\n        if (rule.mandatory) {\n          bucket.mandatoryRules.push(rule)\n        } else {\n          bucket.permissionRules.push(rule)\n        }\n      }\n      for (const type of typesInThisLevel) {\n        seenTypes.add(type)\n      }\n    }\n\n    return result\n  }\n\n  #cacheEntitiesAndProperties(): void {\n    if (!this.user || !this.domain) {\n      return\n    }\n\n    const userEntity = this.domain.findEntity(this.user.key, this.user.domain)\n    if (!userEntity) {\n      return\n    }\n\n    this.cachedEntities.user = userEntity\n\n    for (const prop of userEntity.properties) {\n      if (prop.hasSemantic(SemanticType.Username)) {\n        this.cachedProperties.username = prop\n      }\n      if (prop.hasSemantic(SemanticType.Password)) {\n        this.cachedProperties.password = prop\n      }\n      if (prop.hasSemantic(SemanticType.UserRole)) {\n        this.cachedProperties.role = prop\n      }\n    }\n  }\n\n  #initializeRouter(routingMap: RoutingMap): void {\n    for (const [method, definitions] of Object.entries(routingMap)) {\n      const parsedRoutes = []\n      for (const def of definitions) {\n        // matchit's parse() transforms a route string into an object representation.\n        // It expects `:param` syntax, while our API models use OpenAPI `{param}` syntax.\n        const matchitPath = def.path.replace(/\\{([^}]+)\\}/g, ':$1')\n        const parsed = parse(matchitPath)\n        this.#definitions.set(parsed, def)\n        parsedRoutes.push(parsed)\n      }\n      this.#routes.set(method.toUpperCase(), parsedRoutes)\n    }\n  }\n\n  /**\n   * Looks up the corresponding exposed entity and action for a given request.\n   *\n   * @param method The HTTP method (e.g., 'GET', 'POST').\n   * @param path The request path (e.g., '/users/123').\n   * @returns An object with the entity, action, and extracted path parameters if a match is found.\n   */\n  lookupAction(method: string, path: string): RuntimeResolvedAction | undefined {\n    const parsedRoutes = this.#routes.get(method.toUpperCase())\n    if (!parsedRoutes) {\n      return undefined\n    }\n\n    // `match` returns the matching parsed route (which is an array of segments), or empty array if no match\n    const matchedRoute = match(path, parsedRoutes)\n    if (!matchedRoute || matchedRoute.length === 0) {\n      return undefined\n    }\n\n    const def = this.#definitions.get(matchedRoute)\n    if (!def) {\n      return undefined\n    }\n\n    const params = exec(path, matchedRoute)\n\n    const entity = this.exposes.get(def.lookup.exposedEntityKey)\n    if (!entity) {\n      return undefined\n    }\n\n    const action = entity.actions.find((a) => a.kind === def.lookup.actionKind)\n    if (!action) {\n      return undefined\n    }\n\n    return {\n      entity,\n      action,\n      params,\n    }\n  }\n\n  /**\n   * Evaluates access rules for a given action and phase.\n   *\n   * The evaluation process follows two phases per execution phase (PRE_FETCH, FETCH, POST_FETCH):\n   * 1. Mandatory Phase: All rules marked as `mandatory: true` across all levels must return true.\n   *    If any fail, the request is immediately rejected.\n   * 2. Permission Phase: Evaluation follows the hierarchy from most specific to most general:\n   *    Action -> Endpoint (ExposedEntity) -> API Model.\n   *    If an explicit allow (true) or deny (false) is hit, evaluation stops and returns the result.\n   *    If no rules match (all return undefined), the request is rejected by default.\n   *\n   * @param action The resolved action to evaluate.\n   * @param evaluator A callback that evaluates a single rule. Should return true (allow),\n   *                  false (deny), or undefined (no hit).\n   * @param phase The execution phase to evaluate.\n   * @returns A promise that resolves to true if access is granted, false if denied.\n   */\n  async evaluateAccess(\n    action: RuntimeResolvedAction,\n    evaluator: RuleEvaluator,\n    phase: AccessRuleExecutionPhase\n  ): Promise<boolean> {\n    let cachedRules = this.#actionRulesCache.get(action.action)\n    if (!cachedRules) {\n      // Fallback if somehow action is not cached (e.g. dynamically added after initialization or in tests)\n      cachedRules = this.#computeEffectiveRules(action.action, action.entity)\n      this.#actionRulesCache.set(action.action, cachedRules)\n    }\n\n    let rulesForPhase\n    if (phase === AccessRuleExecutionPhase.POST_FETCH) {\n      rulesForPhase = cachedRules.postFetch\n    } else if (phase === AccessRuleExecutionPhase.FETCH) {\n      rulesForPhase = cachedRules.fetch\n    } else {\n      rulesForPhase = cachedRules.preFetch\n    }\n\n    // Step 1: Mandatory Phase\n    for (const rule of rulesForPhase.mandatoryRules) {\n      const result = await evaluator(rule)\n      if (result !== true) {\n        return false // Immediately reject if any mandatory rule fails\n      }\n    }\n\n    // Step 2-4: Permission Phase\n    for (const rule of rulesForPhase.permissionRules) {\n      const result = await evaluator(rule)\n      if (result === true) {\n        return true\n      }\n      if (result === false) {\n        return false\n      }\n    }\n\n    // Default: no hit\n    return false\n  }\n\n  override toJSON(): RuntimeApiModelSchema {\n    const base = super.toJSON() as RuntimeApiModelSchema\n\n    const routingMap: RoutingMap = {}\n    for (const [method, parsedRoutes] of this.#routes.entries()) {\n      routingMap[method] = parsedRoutes.map((pr) => this.#definitions.get(pr) as RouteDefinition)\n    }\n\n    return {\n      ...base,\n      routingMap,\n    }\n  }\n}\n"]}

package/build/src/modeling/helpers/runtime.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Deterministically truncates long PostgreSQL identifiers to the 63-byte limit.
+ */
+export declare function truncateIdentifier(name: string): string;
+//# sourceMappingURL=runtime.d.ts.map

package/build/src/modeling/helpers/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../src/modeling/helpers/runtime.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIvD"}

package/build/src/modeling/helpers/runtime.js

@@ -0,0 +1,12 @@
+// Only here all NodeJS runtime helpers are allowed
+import crypto from 'node:crypto';
+/**
+ * Deterministically truncates long PostgreSQL identifiers to the 63-byte limit.
+ */
+export function truncateIdentifier(name) {
+    if (name.length <= 63)
+        return name;
+    const hash = crypto.createHash('md5').update(name).digest('hex').substring(0, 8);
+    return `${name.substring(0, 54)}_${hash}`;
+}
+//# sourceMappingURL=runtime.js.map

package/build/src/modeling/helpers/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../../src/modeling/helpers/runtime.ts"],"names":[],"mappings":"AAAA,mDAAmD;AAEnD,OAAO,MAAM,MAAM,aAAa,CAAA;AAEhC;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAChF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAA;AAC3C,CAAC","sourcesContent":["// Only here all NodeJS runtime helpers are allowed\n\nimport crypto from 'node:crypto'\n\n/**\n * Deterministically truncates long PostgreSQL identifiers to the 63-byte limit.\n */\nexport function truncateIdentifier(name: string): string {\n  if (name.length <= 63) return name\n  const hash = crypto.createHash('md5').update(name).digest('hex').substring(0, 8)\n  return `${name.substring(0, 54)}_${hash}`\n}\n"]}

package/build/src/modeling/types.d.ts

@@ -318,12 +318,11 @@ export interface SessionConfiguration {
      */
     secret: string;
     /**
-     * The properties from the `User` entity to be encoded into the session payload (JWT/cookie).
+     * The properties to be set on the session `User` object.
      * These properties become available in the `request.auth` object at runtime.
-     *
-     * In practice, these are the ids of the properties in the `User` entity.
+     * The properties are coming from the `User` entity (marked by the Semantic model).
      */
-    properties: string[];
+    properties: AssociationTarget[];
     /**
      * The cookie-based session transport configuration.
      */

package/build/src/modeling/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/modeling/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAA;AACjE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kCAAkC,CAAA;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EAClB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAA;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAElD,MAAM,WAAW,uBAAuB;IACtC;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;;;;;;;OAYG;IACH,IAAI,EAAE,aAAa,GAAG,UAAU,GAAG,QAAQ,CAAA;CAC5C;AAED,MAAM,MAAM,mBAAmB,GAAG,eAAe,GAAG,WAAW,GAAG,YAAY,GAAG,cAAc,GAAG,iBAAiB,CAAA;AAEnH;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAA;AAClD;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,aAAa,CAAA;AAC3C;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,CAAA;AACjC;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,KAAK,CAAA;AACrC;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,CAAA;AACjC;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,eAAe,GAAG,aAAa,GAAG,iBAAiB,GAAG,aAAa,CAAA;AAEjH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,IAAI,EAAE,SAAS,GAAG,UAAU,CAAA;IAC5B;;;OAGG;IACH,KAAK,EAAE,MAAM,GAAG,aAAa,CAAA;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf;;;OAGG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAA;IACjC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAA;AAClF;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAA;AAEzE;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;IAEZ;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,sBAAsB,GAC9B,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,QAAQ,GACR,UAAU,GACV,OAAO,CAAA;AAEX;;;GAGG;AACH,UAAU,gBAAgB;IACxB;;OAEG;IACH,OAAO,EAAE,OAAO,CAAA;IAChB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,gBAAgB;IAC3D,IAAI,EAAE,QAAQ,CAAA;IACd;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;;OAKG;IACH,QAAQ,EAAE,OAAO,CAAA;IACjB;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAA;IACf;;;;;;;OAOG;IACH,QAAQ,EAAE,MAAM,GAAG,KAAK,CAAA;IACxB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACxD,IAAI,EAAE,KAAK,CAAA;IACX;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;;;;OAKG;IACH,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB;;OAEG;IACH,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAE5B;;OAEG;IACH,GAAG,CAAC,EAAE,gBAAgB,CAAA;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;;;;OAQG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,uBAAwB,SAAQ,0BAA0B;IACzE,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,MAAM,qBAAqB,GAAG,uBAAuB,CAAA;AAE3D;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,6BAA8B,SAAQ,2BAA2B;IAChF,QAAQ,EAAE,kBAAkB,CAAA;CAC7B;AAED,MAAM,MAAM,sBAAsB,GAAG,6BAA6B,CAAA;AAElE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,iBAAiB,CAAA;IAC9B;;;;;;;;;;;;;;;OAeG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;OAEG;IACH,MAAM,EAAE,iBAAiB,CAAA;IACzB;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAA;IACtB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAA;IAEpB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAEhB;;OAEG;IACH,MAAM,CAAC,EAAE,eAAe,CAAA;IAExB;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAE7B;;OAEG;IACH,OAAO,EAAE,YAAY,EAAE,CAAA;IAEvB;;OAEG;IACH,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAE/B;;OAEG;IACH,YAAY,CAAC,EAAE,+BAA+B,CAAA;IAE9C;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB;;OAEG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;;OAGG;IACH,WAAW,EAAE,iBAAiB,CAAA;IAC9B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAClE,IAAI,EAAE,QAAQ,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAClE,IAAI,EAAE,QAAQ,CAAA;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B;;OAEG;IACH,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,EAAE,CAAA;CAC7D;AAED,MAAM,MAAM,iBAAiB,GACzB,OAAO,mBAAmB,GAC1B,OAAO,gBAAgB,GACvB,OAAO,eAAe,GACtB,OAAO,kBAAkB,GACzB,OAAO,qBAAqB,GAC5B,OAAO,cAAc,CAAA;AAEzB;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;;OAGG;IACH,IAAI,EAAE,iBAAiB,CAAA;IACvB;;OAEG;IACH,MAAM,EAAE,gBAAgB,EAAE,CAAA;IAC1B;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;;;OAIG;IACH,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC1B;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAA;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,IAAI,CAAC,EAAE,mBAAmB,CAAA;IAC1B;;;OAGG;IACH,IAAI,CAAC,EAAE,eAAe,CAAA;IACtB;;OAEG;IACH,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;CAC5B;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEtD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,IAAI,EAAE,cAAc,GAAG,cAAc,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,iBAAiB,GAAG,cAAc,CAAA;IACpH;;OAEG;IACH,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAA;IACtC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IACf;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,KAAK,EAAE,eAAe,CAAA;IACtB;;OAEG;IACH,MAAM,EAAE,oBAAoB,EAAE,CAAA;IAC9B;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,OAAO,mBAAmB,GAC1B,OAAO,eAAe,GACtB,OAAO,gBAAgB,GACvB,OAAO,kBAAkB,GACzB,OAAO,qBAAqB,CAAA;AAEhC;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAEvB;;OAEG;IACH,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAA;IAEhC;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAE/B;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,IAAI,EAAE,mBAAmB,CAAA;IAEzB;;OAEG;IACH,aAAa,EAAE,CAAC,MAAM,GAAG,aAAa,GAAG,aAAa,CAAC,EAAE,CAAA;IAEzD;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IAEX;;OAEG;IACH,SAAS,EAAE,OAAO,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IACf;;OAEG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB;;OAEG;IACH,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAA;IACtC;;OAEG;IACH,OAAO,EAAE,yBAAyB,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAA;IAChB;;OAEG;IACH,MAAM,EAAE,sBAAsB,EAAE,CAAA;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;;;;;;;;;;;;;;OAgBG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,CAAA;CAChD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/modeling/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAA;AACjE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kCAAkC,CAAA;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EAClB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAA;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAElD,MAAM,WAAW,uBAAuB;IACtC;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;;;;;;;OAYG;IACH,IAAI,EAAE,aAAa,GAAG,UAAU,GAAG,QAAQ,CAAA;CAC5C;AAED,MAAM,MAAM,mBAAmB,GAAG,eAAe,GAAG,WAAW,GAAG,YAAY,GAAG,cAAc,GAAG,iBAAiB,CAAA;AAEnH;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAA;AAClD;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,aAAa,CAAA;AAC3C;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,CAAA;AACjC;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,KAAK,CAAA;AACrC;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,CAAA;AACjC;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,eAAe,GAAG,aAAa,GAAG,iBAAiB,GAAG,aAAa,CAAA;AAEjH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,IAAI,EAAE,SAAS,GAAG,UAAU,CAAA;IAC5B;;;OAGG;IACH,KAAK,EAAE,MAAM,GAAG,aAAa,CAAA;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf;;;OAGG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAA;IACjC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAA;AAClF;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAA;AAEzE;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;IAEZ;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,sBAAsB,GAC9B,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,QAAQ,GACR,UAAU,GACV,OAAO,CAAA;AAEX;;;GAGG;AACH,UAAU,gBAAgB;IACxB;;OAEG;IACH,OAAO,EAAE,OAAO,CAAA;IAChB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,gBAAgB;IAC3D,IAAI,EAAE,QAAQ,CAAA;IACd;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;;OAKG;IACH,QAAQ,EAAE,OAAO,CAAA;IACjB;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAA;IACf;;;;;;;OAOG;IACH,QAAQ,EAAE,MAAM,GAAG,KAAK,CAAA;IACxB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACxD,IAAI,EAAE,KAAK,CAAA;IACX;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;;;OAIG;IACH,UAAU,EAAE,iBAAiB,EAAE,CAAA;IAC/B;;OAEG;IACH,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAE5B;;OAEG;IACH,GAAG,CAAC,EAAE,gBAAgB,CAAA;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;;;;OAQG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,uBAAwB,SAAQ,0BAA0B;IACzE,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,MAAM,qBAAqB,GAAG,uBAAuB,CAAA;AAE3D;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,6BAA8B,SAAQ,2BAA2B;IAChF,QAAQ,EAAE,kBAAkB,CAAA;CAC7B;AAED,MAAM,MAAM,sBAAsB,GAAG,6BAA6B,CAAA;AAElE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,iBAAiB,CAAA;IAC9B;;;;;;;;;;;;;;;OAeG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;OAEG;IACH,MAAM,EAAE,iBAAiB,CAAA;IACzB;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAA;IACtB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAA;IAEpB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAEhB;;OAEG;IACH,MAAM,CAAC,EAAE,eAAe,CAAA;IAExB;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAE7B;;OAEG;IACH,OAAO,EAAE,YAAY,EAAE,CAAA;IAEvB;;OAEG;IACH,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAE/B;;OAEG;IACH,YAAY,CAAC,EAAE,+BAA+B,CAAA;IAE9C;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB;;OAEG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;;OAGG;IACH,WAAW,EAAE,iBAAiB,CAAA;IAC9B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAClE,IAAI,EAAE,QAAQ,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAClE,IAAI,EAAE,QAAQ,CAAA;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B;;OAEG;IACH,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,EAAE,CAAA;CAC7D;AAED,MAAM,MAAM,iBAAiB,GACzB,OAAO,mBAAmB,GAC1B,OAAO,gBAAgB,GACvB,OAAO,eAAe,GACtB,OAAO,kBAAkB,GACzB,OAAO,qBAAqB,GAC5B,OAAO,cAAc,CAAA;AAEzB;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;;OAGG;IACH,IAAI,EAAE,iBAAiB,CAAA;IACvB;;OAEG;IACH,MAAM,EAAE,gBAAgB,EAAE,CAAA;IAC1B;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;;;OAIG;IACH,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC1B;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAA;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,IAAI,CAAC,EAAE,mBAAmB,CAAA;IAC1B;;;OAGG;IACH,IAAI,CAAC,EAAE,eAAe,CAAA;IACtB;;OAEG;IACH,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;CAC5B;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEtD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,IAAI,EAAE,cAAc,GAAG,cAAc,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,iBAAiB,GAAG,cAAc,CAAA;IACpH;;OAEG;IACH,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAA;IACtC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IACf;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,KAAK,EAAE,eAAe,CAAA;IACtB;;OAEG;IACH,MAAM,EAAE,oBAAoB,EAAE,CAAA;IAC9B;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,OAAO,mBAAmB,GAC1B,OAAO,eAAe,GACtB,OAAO,gBAAgB,GACvB,OAAO,kBAAkB,GACzB,OAAO,qBAAqB,CAAA;AAEhC;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAEvB;;OAEG;IACH,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAA;IAEhC;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAE/B;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,IAAI,EAAE,mBAAmB,CAAA;IAEzB;;OAEG;IACH,aAAa,EAAE,CAAC,MAAM,GAAG,aAAa,GAAG,aAAa,CAAC,EAAE,CAAA;IAEzD;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IAEX;;OAEG;IACH,SAAS,EAAE,OAAO,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IACf;;OAEG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB;;OAEG;IACH,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAA;IACtC;;OAEG;IACH,OAAO,EAAE,yBAAyB,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAA;IAChB;;OAEG;IACH,MAAM,EAAE,sBAAsB,EAAE,CAAA;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;;;;;;;;;;;;;;OAgBG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,CAAA;CAChD"}

package/build/src/modeling/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/modeling/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { GraphJson } from '@api-client/graph/graph/types.js'\nimport type { Graph } from '@api-client/graph/graph/Graph.js'\nimport type { DomainAssociation } from './DomainAssociation.js'\nimport type { DomainEntity } from './DomainEntity.js'\nimport type { DomainModel } from './DomainModel.js'\nimport type { DomainNamespace } from './DomainNamespace.js'\nimport type { DomainProperty } from './DomainProperty.js'\nimport type {\n  DomainNamespaceKind,\n  DomainEntityKind,\n  DomainModelKind,\n  DomainPropertyKind,\n  DomainAssociationKind,\n  DataDomainKind,\n  ExposedEntityKind,\n} from '../models/kinds.js'\nimport type { DataDomain } from './DataDomain.js'\nimport { AccessRuleSchema } from './rules/AccessRule.js'\nimport { RateLimitingConfigurationSchema } from './rules/RateLimitingConfiguration.js'\nimport { ActionSchema } from './actions/Action.js'\n\nexport interface DataDomainRemoveOptions {\n  /**\n   * When true, the object will be forcibly removed.\n   * The resolution defined in the `ImpactResolution` class will be applied.\n   *\n   * For example, when removing an entity that is a parent to another entity, it will\n   * removed itself as a parent from the child entity.\n   *\n   * Note, this option should only be used when the DomainImpactAnalysis has been performed\n   * and the user was informed of the impact.\n   */\n  force?: boolean\n}\n\nexport interface DomainGraphEdge {\n  /**\n   * Indicates that the edge is to or from a foreign domain.\n   */\n  foreign?: boolean\n  /**\n   * The key of the foreign domain. Always set with the `foreign` property.\n   */\n  domain?: string\n  /**\n   * The type of the edge.\n   * - `association` The edge is to an association object.\n   *   - When coming **from** an entity (the `v` property), that entity owns the association.\n   *   - When coming **to** an entity (the `w` property), that entity is the target of the association.\n   *     An association can have multiple targets.\n   * - `property` The edge is to a property object. Can only be created between an entity and a property.\n   *   - The **from** (`v`) is the entity.\n   *   - The **to** (`w`) is the property.\n   * - `parent` The edge is to a parent object.\n   *   - The **from** (`v`) is the child entity.\n   *   - The **to** (`w`) is the parent entity.\n   */\n  type: 'association' | 'property' | 'parent'\n}\n\nexport type DomainGraphNodeType = DomainNamespace | DomainModel | DomainEntity | DomainProperty | DomainAssociation\n\n/**\n * An interface that describes the data domain dependency.\n */\nexport interface ForeignDomainDependency {\n  /**\n   * The system registered key of the foreign domain.\n   */\n  key: string\n  /**\n   * The version of the foreign domain used in this domain.\n   */\n  version: string\n}\n\nexport interface AssociationTarget {\n  /**\n   * The key of the target entity.\n   */\n  key: string\n  /**\n   * The key of the target data domain.\n   * This is only set when the target is in a different data domain.\n   */\n  domain?: string\n}\n\n/**\n * The list of functions supported for string properties.\n */\nexport type StringFunctions = 'random' | 'uuid-v4'\n/**\n * The list of functions supported for number properties.\n */\nexport type NumberFunctions = 'incremental'\n/**\n * The list of functions supported for date properties.\n */\nexport type DateFunctions = 'now'\n/**\n * The list of functions supported for datetime properties.\n */\nexport type DateTimeFunctions = 'now'\n/**\n * The list of functions supported for time properties.\n */\nexport type TimeFunctions = 'now'\n/**\n * The list of all functions that can be used as default values for properties.\n */\nexport type FunctionValue = StringFunctions | NumberFunctions | DateFunctions | DateTimeFunctions | TimeFunctions\n\n/**\n * Describes the default value set on a property schema.\n */\nexport interface SchemaDefaultValue {\n  /**\n   * The type of the default value.\n   *\n   * - `literal` The `value` should be used as-is.\n   * - `function` The value represents the name of the function to be used.\n   */\n  type: 'literal' | 'function'\n  /**\n   * The actual value type depends on the `type`.\n   * It is always a string and it has to be casted to the property's data type.\n   */\n  value: string | FunctionValue\n}\n\n/**\n * A general schema definition for a property.\n * This is propagated to all bindings (when they support these properties).\n */\nexport interface PropertySchema {\n  /**\n   * The minimum value of the property.\n   *\n   * By default it is inclusive value. Use the `exclusiveMinimum` property to make it exclusive.\n   *\n   * Used with:\n   * - string\n   * - number\n   * - date\n   * - time\n   * - datetime\n   */\n  minimum?: number\n  /**\n   * The maximum value of the property.\n   *\n   * By default it is inclusive value. Use the `exclusiveMaximum` property to make it exclusive.\n   *\n   * Used with:\n   * - string\n   * - number\n   * - date\n   * - time\n   * - datetime\n   */\n  maximum?: number\n  /**\n   * When set, the minimum value is exclusive.\n   *\n   * - When `false`: value ≥ minimum.\n   * - When `true`: value > minimum.\n   */\n  exclusiveMinimum?: boolean\n  /**\n   * When set, the exclusiveMaximum value is exclusive.\n   *\n   * - When `false`: value ≤ maximum.\n   * - When `true`: value < minimum.\n   */\n  exclusiveMaximum?: boolean\n  /**\n   * The multiplier value for a number scalar.\n   *\n   * Examples:\n   * - if `1` then every integer is allowed\n   * - if `2` than every even number is allowed\n   * - if `0.5` than every number dividable by `0.5` is allowed\n   */\n  multipleOf?: number\n  /**\n   * The enum values for the property.\n   * They are always encoded as strings. The actual type is defined in the `dataType` property.\n   */\n  enum?: string[]\n  /**\n   * The default value for the property.\n   * This is always encoded as a string. The actual type is defined in the `dataType` property.\n   */\n  defaultValue?: SchemaDefaultValue\n  /**\n   * The example values for the property.\n   * They are always encoded as strings. The actual type is defined in the `dataType` property.\n   */\n  examples?: string[]\n  /**\n   * The pattern to use with a string scalar.\n   */\n  pattern?: string\n}\n\n/**\n * The shortcut type for the data domain graph.\n */\nexport type DataDomainGraph = Graph<unknown, DomainGraphNodeType, DomainGraphEdge>\n/**\n * The serialized version of the data domain graph.\n */\nexport type SerializedGraph = GraphJson<unknown, object, DomainGraphEdge>\n\n/**\n * Represents a standardized, machine-readable error response body\n * as defined by RFC 7807 for HTTP APIs.\n */\nexport interface ProblemDetails {\n  /**\n   * A URI that identifies the specific problem type. Should resolve to human-readable docs.\n   * e.g., \"https://docs.apinow.app/errors/validation-failed\"\n   */\n  type: string\n\n  /**\n   * A short, human-readable summary of the problem type.\n   * e.g., \"Validation Error\"\n   */\n  title: string\n\n  /**\n   * The HTTP status code generated by the origin server for this problem.\n   */\n  status?: number\n\n  /**\n   * A human-readable explanation specific to this occurrence of the problem.\n   */\n  detail?: string\n\n  /**\n   * A URI that identifies the specific occurrence of the problem.\n   * Can be the API request path that caused the error.\n   */\n  instance: string\n}\n\n/**\n * The set of supported filter operators for the List and search action.\n * These are used in query parameters, e.g., ?price[gte]=100\n *\n * - eq: Equal\n * - neq: Not Equal\n * - in: Value is one of the elements in the provided array\n * - nin: Value is not one of the elements in the provided array\n * - lt: Less Than\n * - lte: Less Than or Equal\n * - gt: Greater Than\n * - gte: Greater Than or Equal\n * - exists: Checks if the field exists\n *\n * Search filters only:\n * - contains: String contains substring / Array contains element (Substring Match)\n * - match: Lexical Match, multi-word queries against long text.\n */\nexport type ResourceFilterOperator =\n  | 'eq' // Equal\n  | 'neq' // Not equal\n  | 'in' // Value is one of the elements in the provided array\n  | 'nin' // Value is not one of the elements in the provided array\n  | 'lt' // Less than\n  | 'lte' // Less than or equal\n  | 'gt' // Greater than\n  | 'gte' // Greater than or equal\n  | 'exists' // Checks if the field exists\n  | 'contains' // String contains substring / Array contains element (Substring Match)\n  | 'match' // Lexical Match, multi-word queries against long text.\n\n/**\n * The session transport configuration interface.\n * This defines the properties that are common to all session transports.\n */\ninterface SessionTransport {\n  /**\n   * Whether the session transport is enabled.\n   */\n  enabled: boolean\n  /**\n   * The kind of session transport. Each interface defines its own kind.\n   */\n  kind: string\n}\n\n/**\n * Configuration for cookie-based session transport.\n */\nexport interface CookieConfiguration extends SessionTransport {\n  kind: 'cookie'\n  /**\n   * The lifetime of the cookie session.\n   * This is a string representing the duration, e.g., \"7d\" for 7 days or \"24h\" for 24 hours.\n   *\n   * @default \"7d\"\n   */\n  lifetime: string\n  /**\n   * Whether the cookie can only be accessed by the server.\n   * This is a security feature to prevent client-side scripts from accessing the cookie.\n   * If set to false, the cookie can be accessed by client-side scripts.\n   * @default true\n   */\n  httpOnly: boolean // Defaults to true\n  /**\n   * Whether the cookie should only be sent over secure connections (HTTPS).\n   * This is a security feature to prevent the cookie from being sent over unencrypted connections.\n   * @default true\n   */\n  secure: boolean\n  /**\n   * The SameSite attribute of the cookie.\n   * This attribute controls whether the cookie is sent with cross-site requests.\n   * - 'none' means the cookie is sent with cross-site requests.\n   * - 'lax' means the cookie is sent with top-level navigations and will be sent along with GET\n   *   requests initiated by third-party websites.\n   * @default 'none'\n   */\n  sameSite: 'none' | 'lax'\n  /**\n   * The name of the cookie.\n   * This is the key under which the session data will be stored in the cookie.\n   * @default 'as' - 'as' stands for \"api session\"\n   */\n  name: string\n}\n\n/**\n * Configuration for JWT-based session transport.\n */\nexport interface JwtConfiguration extends SessionTransport {\n  kind: 'jwt'\n  /**\n   * The lifetime of the JWT token.\n   * This is a string representing the duration, e.g., \"7d\" for 7 days or \"15m\" for 15 minutes.\n   *\n   * @default \"7d\"\n   */\n  lifetime: string\n}\n\nexport interface SessionConfiguration {\n  /**\n   * The secret used to sign the JWT and cookies. Should be handled securely.\n   * Not visible in the UI after being set.\n   */\n  secret: string\n  /**\n   * The properties from the `User` entity to be encoded into the session payload (JWT/cookie).\n   * These properties become available in the `request.auth` object at runtime.\n   *\n   * In practice, these are the ids of the properties in the `User` entity.\n   */\n  properties: string[]\n  /**\n   * The cookie-based session transport configuration.\n   */\n  cookie?: CookieConfiguration\n\n  /**\n   * The JWT-based session transport configuration.\n   */\n  jwt?: JwtConfiguration\n}\n\n/**\n * Defines the authorization strategy for the API.\n * It is a base interface that can be extended for different strategies.\n * For MVP, we will start with Roles-Based Access Control (RBAC).\n */\nexport interface AuthorizationConfiguration {\n  /**\n   * The authorization strategy. For MVP, we will start with RBAC.\n   * Post-MVP will include Permission-Based Access Control (PBAC).\n   * The strategy determines how users are granted access to resources.\n   *\n   * - RBAC (Roles-Based Access Control): Users are assigned roles, and permissions are granted to those roles.\n   * - PBAC (Permission-Based Access Control): Users are granted permissions directly, allowing for more\n   *   granular control.\n   */\n  strategy: string\n}\n\nexport interface RolesBasedAccessControl extends AuthorizationConfiguration {\n  strategy: 'RBAC'\n}\n\nexport type AuthorizationStrategy = RolesBasedAccessControl\n\n/**\n * Configures the strategy for authenticating end-users.\n * An API can only support one authentication strategy at a time.\n * This is a base interface that can be extended for different strategies.\n */\nexport interface AuthenticationConfiguration {\n  /**\n   * The authentication method. For MVP, this is focused on username/password.\n   * This can be extended in the future to include 'SSO'.\n   */\n  strategy: string\n}\n\n/**\n * Configuration for username/password authentication.\n * This is the primary authentication method for the API (MVP).\n */\nexport interface UsernamePasswordConfiguration extends AuthenticationConfiguration {\n  strategy: 'UsernamePassword'\n}\n\nexport type AuthenticationStrategy = UsernamePasswordConfiguration\n\n/**\n * Represents a Data Entity from the Data Domain that the API will expose and operate upon.\n */\nexport interface ExposedEntitySchema {\n  kind: typeof ExposedEntityKind\n  /**\n   * The unique identifier for this exposure instance.\n   * In the exposure model, we need to uniquely identify each exposure instance, because\n   * an entity can be exposed multiple times in different contexts. Consider the following structure:\n   *\n   * ```\n   * /categories/{categoryId}\n   * /products/{productId}/categories\n   * /products/{productId}/categories/{categoryId}\n   * /promotions/{promotionId}/categories\n   * /promotions/{promotionId}/categories/{categoryId}\n   * ```\n   *\n   * The `category` entity would be exposed multiple times (as root and nested under products and promotions).\n   * We need a way to distinguish between these different exposure instances.\n   */\n  key: string\n  /**\n   * A pointer to a Data Entity from the Data Domain.\n   */\n  entity: AssociationTarget\n  /**\n   * Indicates whether this exposure has a collection endpoint.\n   * A collection endpoint is optional for nested exposures where the association is 1:1\n   * and the schema is embedded directly under the parent resource.\n   */\n  hasCollection: boolean\n  /**\n   * A path to the collection endpoint for this exposure.\n   * Starts with '/'. Not set for 1:1 nested exposures where collection does not exist.\n   */\n  collectionPath?: string\n\n  /**\n   * A path to the resource endpoint for this exposure.\n   * Starts with '/'. For 1:1 nested exposures the resource path typically does not include an id segment.\n   */\n  resourcePath: string\n\n  /**\n   * Whether this exposure is a root exposure (top-level collection).\n   * If this is set then the `parent` reference must be populated.\n   */\n  isRoot?: boolean\n\n  /**\n   * Parent reference when this exposure was created via following an association.\n   */\n  parent?: ExposeParentRef\n\n  /**\n   * Expose-time config used to create this exposure (persisted for auditing/UI).\n   * This is only populated for the root exposure. All children exposures inherit this config.\n   */\n  exposeOptions?: ExposeOptions\n\n  /**\n   * The list of enabled API actions for this exposure (List/Read/Create/etc.)\n   */\n  actions: ActionSchema[]\n\n  /**\n   * Optional array of access rules that define the access control policies for this exposure.\n   */\n  accessRule?: AccessRuleSchema[]\n\n  /**\n   * Optional configuration for rate limiting for this exposure.\n   */\n  rateLimiting?: RateLimitingConfigurationSchema\n\n  /**\n   * When true, generation for this exposure hit configured limits\n   */\n  truncated?: boolean\n  /**\n   * Pagination contract for this exposure.\n   */\n  paginationContract?: PaginationContract\n}\n\n/**\n * Parent reference stored on a nested exposure\n */\nexport interface ExposeParentRef {\n  /**\n   * The key of the parent exposed entity. This references the `ExposedEntity.key` property.\n   */\n  key: string\n  /**\n   * The association from the parent that produced this exposure.\n   * A sub-entity must always have a parent association.\n   */\n  association: AssociationTarget\n  /**\n   * The numeric depth from the root exposure (root = 0)\n   */\n  depth?: number\n}\n\n/**\n * Options passed when creating a new exposure\n */\nexport interface ExposeOptions {\n  /**\n   * Whether to follow associations when creating the exposure.\n   * When not set, it only exposes the passed entity.\n   */\n  followAssociations?: boolean\n  /**\n   * The maximum depth to follow associations when creating the exposure.\n   */\n  maxDepth?: number\n}\n\n/**\n * Represents a pagination strategy for API actions that return collections of resources.\n * This is a base interface that can be extended for different pagination strategies.\n */\nexport interface PaginationStrategy {\n  /**\n   * The kind of pagination strategy. This is used to identify the specific pagination method.\n   * For example, 'cursor' for cursor-based pagination or 'offset' for offset-based pagination.\n   */\n  kind: string\n  /**\n   * The default page size for the pagination strategy.\n   * This is the number of items returned per page when no specific page size is requested.\n   */\n  defaultLimit?: number\n  /**\n   * The maximum page size for the pagination strategy.\n   * This is the maximum number of items that can be returned per page.\n   * The API runtime defined the upper limit to prevent abuse.\n   */\n  maxLimit?: number\n}\n\n/**\n * Represents the cursor-based pagination strategy.\n */\nexport interface CursorPaginationStrategy extends PaginationStrategy {\n  kind: 'cursor'\n}\n\n/**\n * Represents the offset-based pagination strategy.\n */\nexport interface OffsetPaginationStrategy extends PaginationStrategy {\n  kind: 'offset'\n}\n\n/**\n * Represents the contract for pagination. Defines which fields can be used for filtering, sorting,\n * and searching.\n */\nexport interface PaginationContract {\n  /**\n   * The list of fields (property keys) that can be used for filtering.\n   */\n  filterableFields: string[]\n  /**\n   * The list of fields (property keys) that can be used for sorting.\n   */\n  sortableFields: string[]\n  /**\n   * The list of fields (property keys) that can be used for searching.\n   * Note that these properties must be of type string or array of strings.\n   */\n  searchableFields: string[]\n  /**\n   * The default sort order for the pagination strategy.\n   * This is the sort order that will be used when no sort order is specified.\n   */\n  defaultSort?: { field: string; direction: 'asc' | 'desc' }[]\n}\n\nexport type DomainImpactKinds =\n  | typeof DomainNamespaceKind\n  | typeof DomainEntityKind\n  | typeof DomainModelKind\n  | typeof DomainPropertyKind\n  | typeof DomainAssociationKind\n  | typeof DataDomainKind\n\n/**\n * The impact analysis report\n */\nexport interface DomainImpactReport {\n  /**\n   * The key of the impacted data object.\n   * This is the key of the object that is being changed.\n   */\n  key: string\n  /**\n   * The kind of the impacted data object.\n   * This is the kind of the object that is being changed.\n   */\n  kind: DomainImpactKinds\n  /**\n   * The list of impacted data objects.\n   */\n  impact: DomainImpactItem[]\n  /**\n   * Whether it is possible to proceed with the change.\n   * If the change is not possible, the reason will be in the impact list.\n   */\n  canProceed: boolean\n}\n\nexport interface DomainImpactItem {\n  /**\n   * The key of the impacted data object.\n   */\n  key: string\n  /**\n   * The kind of the impacted data object.\n   */\n  kind: string\n  /**\n   * The type of the impact.\n   *\n   * - `delete` - The data object would be deleted.\n   */\n  type: 'delete' | 'publish'\n  /**\n   * The impact description.\n   * Explains what will happen to the impacted data object.\n   * This is a human-readable description of the impact.\n   * It should be clear and concise.\n   */\n  impact: string\n  /**\n   * The severity of the impact.\n   *\n   * - `info` - The impact is informational.\n   * - `warning` - The impact can potentially cause problems but is not a blocker.\n   * - `error` - The impact is a blocker and needs to be resolved before proceeding.\n   */\n  severity: 'info' | 'warning' | 'error'\n  /**\n   * The type of the relationship between two impacted objects.\n   */\n  relationship?: 'child'\n  /**\n   * The resolution of the conflict if the change will be forced.\n   */\n  resolution?: string\n  /**\n   * The optional parent of the impacted data object.\n   * For example, if the impacted item is a property, this will be the entity it belongs to.\n   */\n  parent?: string\n}\n\nexport interface DeserializeOptions {\n  /**\n   * The mode to use for deserialization.\n   */\n  mode?: DeserializationMode\n  /**\n   * The serialized graph to deserialize.\n   * This is the JSON representation of the graph.\n   */\n  json?: SerializedGraph\n  /**\n   * The list of foreign domains that this domain depends on.\n   */\n  dependencies?: DataDomain[]\n}\n\n/**\n * Describes the mode for deserializing a domain graph.\n */\nexport type DeserializationMode = 'strict' | 'lenient'\n\n/**\n * Describes an issue found during deserialization.\n */\nexport interface DeserializationIssue {\n  /**\n   * The type of issue encountered.\n   */\n  type: 'missing_node' | 'missing_edge' | 'invalid_parent' | 'missing_dependency' | 'malformed_entry' | 'unknown_kind'\n  /**\n   * The severity of the issue.\n   */\n  severity: 'error' | 'warning' | 'info'\n  /**\n   * A human-readable description of the issue.\n   */\n  message: string\n  /**\n   * The key of the affected node, edge, or entity if applicable.\n   */\n  affectedKey?: string\n  /**\n   * Additional context about the issue.\n   */\n  context?: Record<string, unknown>\n  /**\n   * The action taken to handle this issue in lenient mode.\n   */\n  resolution?: string\n}\n\n/**\n * The result of a deserialization operation.\n */\nexport interface DeserializationResult {\n  /**\n   * The deserialized graph.\n   */\n  graph: DataDomainGraph\n  /**\n   * Issues encountered during deserialization.\n   */\n  issues: DeserializationIssue[]\n  /**\n   * Whether the deserialization was successful.\n   * This is set to true when a critical failures occurred.\n   */\n  success: boolean\n}\n\n/**\n * Available node types for search filtering.\n */\nexport type SearchableNodeType =\n  | typeof DomainNamespaceKind\n  | typeof DomainModelKind\n  | typeof DomainEntityKind\n  | typeof DomainPropertyKind\n  | typeof DomainAssociationKind\n\n/**\n * Search criteria for filtering domain nodes.\n */\nexport interface DomainSearchCriteria {\n  /**\n   * Text query to search for in name, displayName, and description fields.\n   * Can be a string for exact match or RegExp for pattern matching.\n   */\n  query?: string | RegExp\n\n  /**\n   * Filter by specific node types. If not provided, all node types are included.\n   */\n  nodeTypes?: SearchableNodeType[]\n\n  /**\n   * Whether to include nodes from foreign domains in the search results.\n   * Defaults to false.\n   */\n  includeForeignDomains?: boolean\n\n  /**\n   * Case-sensitive search when using string query.\n   * Defaults to false (case-insensitive).\n   */\n  caseSensitive?: boolean\n}\n\n/**\n * A search result containing a matching domain node and metadata.\n */\nexport interface DomainSearchResult {\n  /**\n   * The matching domain node.\n   */\n  node: DomainGraphNodeType\n\n  /**\n   * The field(s) that matched the search query.\n   */\n  matchedFields: ('name' | 'displayName' | 'description')[]\n\n  /**\n   * The key used to identify this node in the graph.\n   */\n  key: string\n\n  /**\n   * Whether this node belongs to a foreign domain.\n   */\n  isForeign: boolean\n}\n\n/**\n * Contextual information about where the API Model validation issue occurred.\n * This allows the UI to trace back a validation error to a specific module or component.\n */\nexport interface ApiModelValidationContext {\n  /**\n   * The key of the ApiModel itself.\n   */\n  apiModelKey: string\n  /**\n   * The kind of the affected component (e.g., 'ApiModel', 'ExposedEntity', 'Action').\n   */\n  kind: string\n  /**\n   * The key of the specific entity or action where the issue occurred.\n   * If the error is at the root API model, this might be the ApiModel's key.\n   */\n  key: string\n  /**\n   * The specific property being validated, if applicable.\n   */\n  property?: string\n  /**\n   * The key of the parent ExposedEntity, if this issue occurred on a nested entity or an action.\n   */\n  parentExposedEntityKey?: string\n}\n\n/**\n * Represents a single validation issue found within an ApiModel.\n */\nexport interface ApiModelValidationItem {\n  /**\n   * A unique code identifying the type of validation error. This enables\n   * programmatic handling or auto-fixing in the UI (e.g., 'API_MISSING_NAME', 'LIST_ACTION_MISSING_PAGINATION').\n   */\n  code: string\n  /**\n   * A human-readable description of the problem.\n   */\n  message: string\n  /**\n   * A human-readable suggestion on how to fix the issue.\n   */\n  suggestion: string\n  /**\n   * The severity of the validation issue.\n   */\n  severity: 'error' | 'warning' | 'info'\n  /**\n   * Contextual information to trace the issue back to its source component.\n   */\n  context: ApiModelValidationContext\n}\n\n/**\n * The consolidated result of validating an entire ApiModel or a subset of it.\n */\nexport interface ApiModelValidationResult {\n  /**\n   * A boolean indicating whether the model is structurally sound and ready for publication.\n   * Typically true if there are no 'error' severity issues.\n   */\n  isValid: boolean\n  /**\n   * The aggregated list of all validation issues found.\n   */\n  issues: ApiModelValidationItem[]\n}\n\n/**\n * Schema definition for an association.\n *\n * This is used to define how an association is represented in the schema.\n */\nexport interface AssociationSchema {\n  /**\n   * Whether the target entity should be embedded under the property name.\n   * When false, this association is just an information that one entity depend on another.\n   * When true, it changes the definition of the schema having this association to\n   * add the target schema properties inline with this property.\n   *\n   * **When true**\n   *\n   * ```javascript\n   * // generated schema for `address` association\n   * {\n   *  \"name\": \"example value\",\n   *  \"address\": {\n   *    \"city\": \"example value\",\n   *    ...\n   *  }\n   * }\n   * ```\n   *\n   * **When false**\n   *\n   * ```javascript\n   * // generated schema for `address` association\n   * {\n   *  \"name\": \"example value\",\n   *  \"address\": \"the key of the referenced schema\"\n   * }\n   * ```\n   */\n  embedded?: boolean\n  /**\n   * When the association has multiple targets the union type should be\n   * set to describe which union this is.\n   *\n   * Possible values are:\n   *\n   * - allOf - To validate against `allOf`, the given data must be valid against\n   *   all of the given sub-schemas. When generating, it's a sum of all properties.\n   * - anyOf - To validate against `anyOf`, the given data must be valid against\n   *   any (one or more) of the given sub-schemas. When generation a schema, it takes first union schema.\n   * - oneOf - To validate against `oneOf`, the given data must be valid against\n   *   exactly one of the given sub-schemas. It behaves the same as `anyOf` when generating a schema\n   * - not - The `not` keyword declares that an instance validates if it doesn’t\n   *   validate against the given sub-schema. It has no use when generating a schema.\n   *\n   * @default anyOf\n   */\n  unionType?: 'allOf' | 'anyOf' | 'oneOf' | 'not'\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/modeling/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { GraphJson } from '@api-client/graph/graph/types.js'\nimport type { Graph } from '@api-client/graph/graph/Graph.js'\nimport type { DomainAssociation } from './DomainAssociation.js'\nimport type { DomainEntity } from './DomainEntity.js'\nimport type { DomainModel } from './DomainModel.js'\nimport type { DomainNamespace } from './DomainNamespace.js'\nimport type { DomainProperty } from './DomainProperty.js'\nimport type {\n  DomainNamespaceKind,\n  DomainEntityKind,\n  DomainModelKind,\n  DomainPropertyKind,\n  DomainAssociationKind,\n  DataDomainKind,\n  ExposedEntityKind,\n} from '../models/kinds.js'\nimport type { DataDomain } from './DataDomain.js'\nimport { AccessRuleSchema } from './rules/AccessRule.js'\nimport { RateLimitingConfigurationSchema } from './rules/RateLimitingConfiguration.js'\nimport { ActionSchema } from './actions/Action.js'\n\nexport interface DataDomainRemoveOptions {\n  /**\n   * When true, the object will be forcibly removed.\n   * The resolution defined in the `ImpactResolution` class will be applied.\n   *\n   * For example, when removing an entity that is a parent to another entity, it will\n   * removed itself as a parent from the child entity.\n   *\n   * Note, this option should only be used when the DomainImpactAnalysis has been performed\n   * and the user was informed of the impact.\n   */\n  force?: boolean\n}\n\nexport interface DomainGraphEdge {\n  /**\n   * Indicates that the edge is to or from a foreign domain.\n   */\n  foreign?: boolean\n  /**\n   * The key of the foreign domain. Always set with the `foreign` property.\n   */\n  domain?: string\n  /**\n   * The type of the edge.\n   * - `association` The edge is to an association object.\n   *   - When coming **from** an entity (the `v` property), that entity owns the association.\n   *   - When coming **to** an entity (the `w` property), that entity is the target of the association.\n   *     An association can have multiple targets.\n   * - `property` The edge is to a property object. Can only be created between an entity and a property.\n   *   - The **from** (`v`) is the entity.\n   *   - The **to** (`w`) is the property.\n   * - `parent` The edge is to a parent object.\n   *   - The **from** (`v`) is the child entity.\n   *   - The **to** (`w`) is the parent entity.\n   */\n  type: 'association' | 'property' | 'parent'\n}\n\nexport type DomainGraphNodeType = DomainNamespace | DomainModel | DomainEntity | DomainProperty | DomainAssociation\n\n/**\n * An interface that describes the data domain dependency.\n */\nexport interface ForeignDomainDependency {\n  /**\n   * The system registered key of the foreign domain.\n   */\n  key: string\n  /**\n   * The version of the foreign domain used in this domain.\n   */\n  version: string\n}\n\nexport interface AssociationTarget {\n  /**\n   * The key of the target entity.\n   */\n  key: string\n  /**\n   * The key of the target data domain.\n   * This is only set when the target is in a different data domain.\n   */\n  domain?: string\n}\n\n/**\n * The list of functions supported for string properties.\n */\nexport type StringFunctions = 'random' | 'uuid-v4'\n/**\n * The list of functions supported for number properties.\n */\nexport type NumberFunctions = 'incremental'\n/**\n * The list of functions supported for date properties.\n */\nexport type DateFunctions = 'now'\n/**\n * The list of functions supported for datetime properties.\n */\nexport type DateTimeFunctions = 'now'\n/**\n * The list of functions supported for time properties.\n */\nexport type TimeFunctions = 'now'\n/**\n * The list of all functions that can be used as default values for properties.\n */\nexport type FunctionValue = StringFunctions | NumberFunctions | DateFunctions | DateTimeFunctions | TimeFunctions\n\n/**\n * Describes the default value set on a property schema.\n */\nexport interface SchemaDefaultValue {\n  /**\n   * The type of the default value.\n   *\n   * - `literal` The `value` should be used as-is.\n   * - `function` The value represents the name of the function to be used.\n   */\n  type: 'literal' | 'function'\n  /**\n   * The actual value type depends on the `type`.\n   * It is always a string and it has to be casted to the property's data type.\n   */\n  value: string | FunctionValue\n}\n\n/**\n * A general schema definition for a property.\n * This is propagated to all bindings (when they support these properties).\n */\nexport interface PropertySchema {\n  /**\n   * The minimum value of the property.\n   *\n   * By default it is inclusive value. Use the `exclusiveMinimum` property to make it exclusive.\n   *\n   * Used with:\n   * - string\n   * - number\n   * - date\n   * - time\n   * - datetime\n   */\n  minimum?: number\n  /**\n   * The maximum value of the property.\n   *\n   * By default it is inclusive value. Use the `exclusiveMaximum` property to make it exclusive.\n   *\n   * Used with:\n   * - string\n   * - number\n   * - date\n   * - time\n   * - datetime\n   */\n  maximum?: number\n  /**\n   * When set, the minimum value is exclusive.\n   *\n   * - When `false`: value ≥ minimum.\n   * - When `true`: value > minimum.\n   */\n  exclusiveMinimum?: boolean\n  /**\n   * When set, the exclusiveMaximum value is exclusive.\n   *\n   * - When `false`: value ≤ maximum.\n   * - When `true`: value < minimum.\n   */\n  exclusiveMaximum?: boolean\n  /**\n   * The multiplier value for a number scalar.\n   *\n   * Examples:\n   * - if `1` then every integer is allowed\n   * - if `2` than every even number is allowed\n   * - if `0.5` than every number dividable by `0.5` is allowed\n   */\n  multipleOf?: number\n  /**\n   * The enum values for the property.\n   * They are always encoded as strings. The actual type is defined in the `dataType` property.\n   */\n  enum?: string[]\n  /**\n   * The default value for the property.\n   * This is always encoded as a string. The actual type is defined in the `dataType` property.\n   */\n  defaultValue?: SchemaDefaultValue\n  /**\n   * The example values for the property.\n   * They are always encoded as strings. The actual type is defined in the `dataType` property.\n   */\n  examples?: string[]\n  /**\n   * The pattern to use with a string scalar.\n   */\n  pattern?: string\n}\n\n/**\n * The shortcut type for the data domain graph.\n */\nexport type DataDomainGraph = Graph<unknown, DomainGraphNodeType, DomainGraphEdge>\n/**\n * The serialized version of the data domain graph.\n */\nexport type SerializedGraph = GraphJson<unknown, object, DomainGraphEdge>\n\n/**\n * Represents a standardized, machine-readable error response body\n * as defined by RFC 7807 for HTTP APIs.\n */\nexport interface ProblemDetails {\n  /**\n   * A URI that identifies the specific problem type. Should resolve to human-readable docs.\n   * e.g., \"https://docs.apinow.app/errors/validation-failed\"\n   */\n  type: string\n\n  /**\n   * A short, human-readable summary of the problem type.\n   * e.g., \"Validation Error\"\n   */\n  title: string\n\n  /**\n   * The HTTP status code generated by the origin server for this problem.\n   */\n  status?: number\n\n  /**\n   * A human-readable explanation specific to this occurrence of the problem.\n   */\n  detail?: string\n\n  /**\n   * A URI that identifies the specific occurrence of the problem.\n   * Can be the API request path that caused the error.\n   */\n  instance: string\n}\n\n/**\n * The set of supported filter operators for the List and search action.\n * These are used in query parameters, e.g., ?price[gte]=100\n *\n * - eq: Equal\n * - neq: Not Equal\n * - in: Value is one of the elements in the provided array\n * - nin: Value is not one of the elements in the provided array\n * - lt: Less Than\n * - lte: Less Than or Equal\n * - gt: Greater Than\n * - gte: Greater Than or Equal\n * - exists: Checks if the field exists\n *\n * Search filters only:\n * - contains: String contains substring / Array contains element (Substring Match)\n * - match: Lexical Match, multi-word queries against long text.\n */\nexport type ResourceFilterOperator =\n  | 'eq' // Equal\n  | 'neq' // Not equal\n  | 'in' // Value is one of the elements in the provided array\n  | 'nin' // Value is not one of the elements in the provided array\n  | 'lt' // Less than\n  | 'lte' // Less than or equal\n  | 'gt' // Greater than\n  | 'gte' // Greater than or equal\n  | 'exists' // Checks if the field exists\n  | 'contains' // String contains substring / Array contains element (Substring Match)\n  | 'match' // Lexical Match, multi-word queries against long text.\n\n/**\n * The session transport configuration interface.\n * This defines the properties that are common to all session transports.\n */\ninterface SessionTransport {\n  /**\n   * Whether the session transport is enabled.\n   */\n  enabled: boolean\n  /**\n   * The kind of session transport. Each interface defines its own kind.\n   */\n  kind: string\n}\n\n/**\n * Configuration for cookie-based session transport.\n */\nexport interface CookieConfiguration extends SessionTransport {\n  kind: 'cookie'\n  /**\n   * The lifetime of the cookie session.\n   * This is a string representing the duration, e.g., \"7d\" for 7 days or \"24h\" for 24 hours.\n   *\n   * @default \"7d\"\n   */\n  lifetime: string\n  /**\n   * Whether the cookie can only be accessed by the server.\n   * This is a security feature to prevent client-side scripts from accessing the cookie.\n   * If set to false, the cookie can be accessed by client-side scripts.\n   * @default true\n   */\n  httpOnly: boolean // Defaults to true\n  /**\n   * Whether the cookie should only be sent over secure connections (HTTPS).\n   * This is a security feature to prevent the cookie from being sent over unencrypted connections.\n   * @default true\n   */\n  secure: boolean\n  /**\n   * The SameSite attribute of the cookie.\n   * This attribute controls whether the cookie is sent with cross-site requests.\n   * - 'none' means the cookie is sent with cross-site requests.\n   * - 'lax' means the cookie is sent with top-level navigations and will be sent along with GET\n   *   requests initiated by third-party websites.\n   * @default 'none'\n   */\n  sameSite: 'none' | 'lax'\n  /**\n   * The name of the cookie.\n   * This is the key under which the session data will be stored in the cookie.\n   * @default 'as' - 'as' stands for \"api session\"\n   */\n  name: string\n}\n\n/**\n * Configuration for JWT-based session transport.\n */\nexport interface JwtConfiguration extends SessionTransport {\n  kind: 'jwt'\n  /**\n   * The lifetime of the JWT token.\n   * This is a string representing the duration, e.g., \"7d\" for 7 days or \"15m\" for 15 minutes.\n   *\n   * @default \"7d\"\n   */\n  lifetime: string\n}\n\nexport interface SessionConfiguration {\n  /**\n   * The secret used to sign the JWT and cookies. Should be handled securely.\n   * Not visible in the UI after being set.\n   */\n  secret: string\n  /**\n   * The properties to be set on the session `User` object.\n   * These properties become available in the `request.auth` object at runtime.\n   * The properties are coming from the `User` entity (marked by the Semantic model).\n   */\n  properties: AssociationTarget[]\n  /**\n   * The cookie-based session transport configuration.\n   */\n  cookie?: CookieConfiguration\n\n  /**\n   * The JWT-based session transport configuration.\n   */\n  jwt?: JwtConfiguration\n}\n\n/**\n * Defines the authorization strategy for the API.\n * It is a base interface that can be extended for different strategies.\n * For MVP, we will start with Roles-Based Access Control (RBAC).\n */\nexport interface AuthorizationConfiguration {\n  /**\n   * The authorization strategy. For MVP, we will start with RBAC.\n   * Post-MVP will include Permission-Based Access Control (PBAC).\n   * The strategy determines how users are granted access to resources.\n   *\n   * - RBAC (Roles-Based Access Control): Users are assigned roles, and permissions are granted to those roles.\n   * - PBAC (Permission-Based Access Control): Users are granted permissions directly, allowing for more\n   *   granular control.\n   */\n  strategy: string\n}\n\nexport interface RolesBasedAccessControl extends AuthorizationConfiguration {\n  strategy: 'RBAC'\n}\n\nexport type AuthorizationStrategy = RolesBasedAccessControl\n\n/**\n * Configures the strategy for authenticating end-users.\n * An API can only support one authentication strategy at a time.\n * This is a base interface that can be extended for different strategies.\n */\nexport interface AuthenticationConfiguration {\n  /**\n   * The authentication method. For MVP, this is focused on username/password.\n   * This can be extended in the future to include 'SSO'.\n   */\n  strategy: string\n}\n\n/**\n * Configuration for username/password authentication.\n * This is the primary authentication method for the API (MVP).\n */\nexport interface UsernamePasswordConfiguration extends AuthenticationConfiguration {\n  strategy: 'UsernamePassword'\n}\n\nexport type AuthenticationStrategy = UsernamePasswordConfiguration\n\n/**\n * Represents a Data Entity from the Data Domain that the API will expose and operate upon.\n */\nexport interface ExposedEntitySchema {\n  kind: typeof ExposedEntityKind\n  /**\n   * The unique identifier for this exposure instance.\n   * In the exposure model, we need to uniquely identify each exposure instance, because\n   * an entity can be exposed multiple times in different contexts. Consider the following structure:\n   *\n   * ```\n   * /categories/{categoryId}\n   * /products/{productId}/categories\n   * /products/{productId}/categories/{categoryId}\n   * /promotions/{promotionId}/categories\n   * /promotions/{promotionId}/categories/{categoryId}\n   * ```\n   *\n   * The `category` entity would be exposed multiple times (as root and nested under products and promotions).\n   * We need a way to distinguish between these different exposure instances.\n   */\n  key: string\n  /**\n   * A pointer to a Data Entity from the Data Domain.\n   */\n  entity: AssociationTarget\n  /**\n   * Indicates whether this exposure has a collection endpoint.\n   * A collection endpoint is optional for nested exposures where the association is 1:1\n   * and the schema is embedded directly under the parent resource.\n   */\n  hasCollection: boolean\n  /**\n   * A path to the collection endpoint for this exposure.\n   * Starts with '/'. Not set for 1:1 nested exposures where collection does not exist.\n   */\n  collectionPath?: string\n\n  /**\n   * A path to the resource endpoint for this exposure.\n   * Starts with '/'. For 1:1 nested exposures the resource path typically does not include an id segment.\n   */\n  resourcePath: string\n\n  /**\n   * Whether this exposure is a root exposure (top-level collection).\n   * If this is set then the `parent` reference must be populated.\n   */\n  isRoot?: boolean\n\n  /**\n   * Parent reference when this exposure was created via following an association.\n   */\n  parent?: ExposeParentRef\n\n  /**\n   * Expose-time config used to create this exposure (persisted for auditing/UI).\n   * This is only populated for the root exposure. All children exposures inherit this config.\n   */\n  exposeOptions?: ExposeOptions\n\n  /**\n   * The list of enabled API actions for this exposure (List/Read/Create/etc.)\n   */\n  actions: ActionSchema[]\n\n  /**\n   * Optional array of access rules that define the access control policies for this exposure.\n   */\n  accessRule?: AccessRuleSchema[]\n\n  /**\n   * Optional configuration for rate limiting for this exposure.\n   */\n  rateLimiting?: RateLimitingConfigurationSchema\n\n  /**\n   * When true, generation for this exposure hit configured limits\n   */\n  truncated?: boolean\n  /**\n   * Pagination contract for this exposure.\n   */\n  paginationContract?: PaginationContract\n}\n\n/**\n * Parent reference stored on a nested exposure\n */\nexport interface ExposeParentRef {\n  /**\n   * The key of the parent exposed entity. This references the `ExposedEntity.key` property.\n   */\n  key: string\n  /**\n   * The association from the parent that produced this exposure.\n   * A sub-entity must always have a parent association.\n   */\n  association: AssociationTarget\n  /**\n   * The numeric depth from the root exposure (root = 0)\n   */\n  depth?: number\n}\n\n/**\n * Options passed when creating a new exposure\n */\nexport interface ExposeOptions {\n  /**\n   * Whether to follow associations when creating the exposure.\n   * When not set, it only exposes the passed entity.\n   */\n  followAssociations?: boolean\n  /**\n   * The maximum depth to follow associations when creating the exposure.\n   */\n  maxDepth?: number\n}\n\n/**\n * Represents a pagination strategy for API actions that return collections of resources.\n * This is a base interface that can be extended for different pagination strategies.\n */\nexport interface PaginationStrategy {\n  /**\n   * The kind of pagination strategy. This is used to identify the specific pagination method.\n   * For example, 'cursor' for cursor-based pagination or 'offset' for offset-based pagination.\n   */\n  kind: string\n  /**\n   * The default page size for the pagination strategy.\n   * This is the number of items returned per page when no specific page size is requested.\n   */\n  defaultLimit?: number\n  /**\n   * The maximum page size for the pagination strategy.\n   * This is the maximum number of items that can be returned per page.\n   * The API runtime defined the upper limit to prevent abuse.\n   */\n  maxLimit?: number\n}\n\n/**\n * Represents the cursor-based pagination strategy.\n */\nexport interface CursorPaginationStrategy extends PaginationStrategy {\n  kind: 'cursor'\n}\n\n/**\n * Represents the offset-based pagination strategy.\n */\nexport interface OffsetPaginationStrategy extends PaginationStrategy {\n  kind: 'offset'\n}\n\n/**\n * Represents the contract for pagination. Defines which fields can be used for filtering, sorting,\n * and searching.\n */\nexport interface PaginationContract {\n  /**\n   * The list of fields (property keys) that can be used for filtering.\n   */\n  filterableFields: string[]\n  /**\n   * The list of fields (property keys) that can be used for sorting.\n   */\n  sortableFields: string[]\n  /**\n   * The list of fields (property keys) that can be used for searching.\n   * Note that these properties must be of type string or array of strings.\n   */\n  searchableFields: string[]\n  /**\n   * The default sort order for the pagination strategy.\n   * This is the sort order that will be used when no sort order is specified.\n   */\n  defaultSort?: { field: string; direction: 'asc' | 'desc' }[]\n}\n\nexport type DomainImpactKinds =\n  | typeof DomainNamespaceKind\n  | typeof DomainEntityKind\n  | typeof DomainModelKind\n  | typeof DomainPropertyKind\n  | typeof DomainAssociationKind\n  | typeof DataDomainKind\n\n/**\n * The impact analysis report\n */\nexport interface DomainImpactReport {\n  /**\n   * The key of the impacted data object.\n   * This is the key of the object that is being changed.\n   */\n  key: string\n  /**\n   * The kind of the impacted data object.\n   * This is the kind of the object that is being changed.\n   */\n  kind: DomainImpactKinds\n  /**\n   * The list of impacted data objects.\n   */\n  impact: DomainImpactItem[]\n  /**\n   * Whether it is possible to proceed with the change.\n   * If the change is not possible, the reason will be in the impact list.\n   */\n  canProceed: boolean\n}\n\nexport interface DomainImpactItem {\n  /**\n   * The key of the impacted data object.\n   */\n  key: string\n  /**\n   * The kind of the impacted data object.\n   */\n  kind: string\n  /**\n   * The type of the impact.\n   *\n   * - `delete` - The data object would be deleted.\n   */\n  type: 'delete' | 'publish'\n  /**\n   * The impact description.\n   * Explains what will happen to the impacted data object.\n   * This is a human-readable description of the impact.\n   * It should be clear and concise.\n   */\n  impact: string\n  /**\n   * The severity of the impact.\n   *\n   * - `info` - The impact is informational.\n   * - `warning` - The impact can potentially cause problems but is not a blocker.\n   * - `error` - The impact is a blocker and needs to be resolved before proceeding.\n   */\n  severity: 'info' | 'warning' | 'error'\n  /**\n   * The type of the relationship between two impacted objects.\n   */\n  relationship?: 'child'\n  /**\n   * The resolution of the conflict if the change will be forced.\n   */\n  resolution?: string\n  /**\n   * The optional parent of the impacted data object.\n   * For example, if the impacted item is a property, this will be the entity it belongs to.\n   */\n  parent?: string\n}\n\nexport interface DeserializeOptions {\n  /**\n   * The mode to use for deserialization.\n   */\n  mode?: DeserializationMode\n  /**\n   * The serialized graph to deserialize.\n   * This is the JSON representation of the graph.\n   */\n  json?: SerializedGraph\n  /**\n   * The list of foreign domains that this domain depends on.\n   */\n  dependencies?: DataDomain[]\n}\n\n/**\n * Describes the mode for deserializing a domain graph.\n */\nexport type DeserializationMode = 'strict' | 'lenient'\n\n/**\n * Describes an issue found during deserialization.\n */\nexport interface DeserializationIssue {\n  /**\n   * The type of issue encountered.\n   */\n  type: 'missing_node' | 'missing_edge' | 'invalid_parent' | 'missing_dependency' | 'malformed_entry' | 'unknown_kind'\n  /**\n   * The severity of the issue.\n   */\n  severity: 'error' | 'warning' | 'info'\n  /**\n   * A human-readable description of the issue.\n   */\n  message: string\n  /**\n   * The key of the affected node, edge, or entity if applicable.\n   */\n  affectedKey?: string\n  /**\n   * Additional context about the issue.\n   */\n  context?: Record<string, unknown>\n  /**\n   * The action taken to handle this issue in lenient mode.\n   */\n  resolution?: string\n}\n\n/**\n * The result of a deserialization operation.\n */\nexport interface DeserializationResult {\n  /**\n   * The deserialized graph.\n   */\n  graph: DataDomainGraph\n  /**\n   * Issues encountered during deserialization.\n   */\n  issues: DeserializationIssue[]\n  /**\n   * Whether the deserialization was successful.\n   * This is set to true when a critical failures occurred.\n   */\n  success: boolean\n}\n\n/**\n * Available node types for search filtering.\n */\nexport type SearchableNodeType =\n  | typeof DomainNamespaceKind\n  | typeof DomainModelKind\n  | typeof DomainEntityKind\n  | typeof DomainPropertyKind\n  | typeof DomainAssociationKind\n\n/**\n * Search criteria for filtering domain nodes.\n */\nexport interface DomainSearchCriteria {\n  /**\n   * Text query to search for in name, displayName, and description fields.\n   * Can be a string for exact match or RegExp for pattern matching.\n   */\n  query?: string | RegExp\n\n  /**\n   * Filter by specific node types. If not provided, all node types are included.\n   */\n  nodeTypes?: SearchableNodeType[]\n\n  /**\n   * Whether to include nodes from foreign domains in the search results.\n   * Defaults to false.\n   */\n  includeForeignDomains?: boolean\n\n  /**\n   * Case-sensitive search when using string query.\n   * Defaults to false (case-insensitive).\n   */\n  caseSensitive?: boolean\n}\n\n/**\n * A search result containing a matching domain node and metadata.\n */\nexport interface DomainSearchResult {\n  /**\n   * The matching domain node.\n   */\n  node: DomainGraphNodeType\n\n  /**\n   * The field(s) that matched the search query.\n   */\n  matchedFields: ('name' | 'displayName' | 'description')[]\n\n  /**\n   * The key used to identify this node in the graph.\n   */\n  key: string\n\n  /**\n   * Whether this node belongs to a foreign domain.\n   */\n  isForeign: boolean\n}\n\n/**\n * Contextual information about where the API Model validation issue occurred.\n * This allows the UI to trace back a validation error to a specific module or component.\n */\nexport interface ApiModelValidationContext {\n  /**\n   * The key of the ApiModel itself.\n   */\n  apiModelKey: string\n  /**\n   * The kind of the affected component (e.g., 'ApiModel', 'ExposedEntity', 'Action').\n   */\n  kind: string\n  /**\n   * The key of the specific entity or action where the issue occurred.\n   * If the error is at the root API model, this might be the ApiModel's key.\n   */\n  key: string\n  /**\n   * The specific property being validated, if applicable.\n   */\n  property?: string\n  /**\n   * The key of the parent ExposedEntity, if this issue occurred on a nested entity or an action.\n   */\n  parentExposedEntityKey?: string\n}\n\n/**\n * Represents a single validation issue found within an ApiModel.\n */\nexport interface ApiModelValidationItem {\n  /**\n   * A unique code identifying the type of validation error. This enables\n   * programmatic handling or auto-fixing in the UI (e.g., 'API_MISSING_NAME', 'LIST_ACTION_MISSING_PAGINATION').\n   */\n  code: string\n  /**\n   * A human-readable description of the problem.\n   */\n  message: string\n  /**\n   * A human-readable suggestion on how to fix the issue.\n   */\n  suggestion: string\n  /**\n   * The severity of the validation issue.\n   */\n  severity: 'error' | 'warning' | 'info'\n  /**\n   * Contextual information to trace the issue back to its source component.\n   */\n  context: ApiModelValidationContext\n}\n\n/**\n * The consolidated result of validating an entire ApiModel or a subset of it.\n */\nexport interface ApiModelValidationResult {\n  /**\n   * A boolean indicating whether the model is structurally sound and ready for publication.\n   * Typically true if there are no 'error' severity issues.\n   */\n  isValid: boolean\n  /**\n   * The aggregated list of all validation issues found.\n   */\n  issues: ApiModelValidationItem[]\n}\n\n/**\n * Schema definition for an association.\n *\n * This is used to define how an association is represented in the schema.\n */\nexport interface AssociationSchema {\n  /**\n   * Whether the target entity should be embedded under the property name.\n   * When false, this association is just an information that one entity depend on another.\n   * When true, it changes the definition of the schema having this association to\n   * add the target schema properties inline with this property.\n   *\n   * **When true**\n   *\n   * ```javascript\n   * // generated schema for `address` association\n   * {\n   *  \"name\": \"example value\",\n   *  \"address\": {\n   *    \"city\": \"example value\",\n   *    ...\n   *  }\n   * }\n   * ```\n   *\n   * **When false**\n   *\n   * ```javascript\n   * // generated schema for `address` association\n   * {\n   *  \"name\": \"example value\",\n   *  \"address\": \"the key of the referenced schema\"\n   * }\n   * ```\n   */\n  embedded?: boolean\n  /**\n   * When the association has multiple targets the union type should be\n   * set to describe which union this is.\n   *\n   * Possible values are:\n   *\n   * - allOf - To validate against `allOf`, the given data must be valid against\n   *   all of the given sub-schemas. When generating, it's a sum of all properties.\n   * - anyOf - To validate against `anyOf`, the given data must be valid against\n   *   any (one or more) of the given sub-schemas. When generation a schema, it takes first union schema.\n   * - oneOf - To validate against `oneOf`, the given data must be valid against\n   *   exactly one of the given sub-schemas. It behaves the same as `anyOf` when generating a schema\n   * - not - The `not` keyword declares that an instance validates if it doesn’t\n   *   validate against the given sub-schema. It has no use when generating a schema.\n   *\n   * @default anyOf\n   */\n  unionType?: 'allOf' | 'anyOf' | 'oneOf' | 'not'\n}\n"]}

package/build/src/modeling/validation/api_model_rules.js

@@ -212,7 +212,7 @@ export function validateApiModelSecurity(model) {
                         break;
                     }
                 }
-                if (roleProp && !model.session.properties.includes(roleProp.key)) {
+                if (roleProp && !model.session.properties.find((p) => p.key === roleProp?.key)) {
                     issues.push({
                         code: createCode('API', 'MISSING_RBAC_SESSION_PROPERTY'),
                         message: 'The user role must be included in the session data for permissions to work.',