@aws-amplify/data-schema 0.15.0 → 0.16.0

package/dist/cjs/runtime/internals/utils/clientProperties/generateModelsProperty.js

@@ -0,0 +1,45 @@
+'use strict';
+
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateModelsProperty = void 0;
+const APIClient_1 = require("../../APIClient");
+const list_1 = require("../../operations/list");
+const indexQuery_1 = require("../../operations/indexQuery");
+const get_1 = require("../../operations/get");
+const subscription_1 = require("../../operations/subscription");
+const observeQuery_1 = require("../../operations/observeQuery");
+const clientUtils_1 = require("../../clientUtils");
+function generateModelsProperty(client, apiGraphQLConfig, getInternals) {
+    const models = {};
+    const modelIntrospection = apiGraphQLConfig.modelIntrospection;
+    if (!modelIntrospection) {
+        return {};
+    }
+    const SUBSCRIPTION_OPS = ['ONCREATE', 'ONUPDATE', 'ONDELETE'];
+    for (const model of Object.values(modelIntrospection.models)) {
+        const { name } = model;
+        models[name] = {};
+        Object.entries(APIClient_1.graphQLOperationsInfo).forEach(([key, { operationPrefix }]) => {
+            const operation = key;
+            if (operation === 'LIST') {
+                models[name][operationPrefix] = (0, list_1.listFactory)(client, modelIntrospection, model, getInternals);
+            }
+            else if (SUBSCRIPTION_OPS.includes(operation)) {
+                models[name][operationPrefix] = (0, subscription_1.subscriptionFactory)(client, modelIntrospection, model, operation, getInternals);
+            }
+            else if (operation === 'OBSERVE_QUERY') {
+                models[name][operationPrefix] = (0, observeQuery_1.observeQueryFactory)(models, model);
+            }
+            else {
+                models[name][operationPrefix] = (0, get_1.getFactory)(client, modelIntrospection, model, operation, getInternals);
+            }
+        });
+        const secondaryIdxs = (0, clientUtils_1.getSecondaryIndexesFromSchemaModel)(model);
+        for (const idx of secondaryIdxs) {
+            models[name][idx.queryField] = (0, indexQuery_1.indexQueryFactory)(client, modelIntrospection, model, idx, getInternals);
+        }
+    }
+    return models;
+}
+exports.generateModelsProperty = generateModelsProperty;
+//# sourceMappingURL=generateModelsProperty.js.map

package/dist/cjs/runtime/internals/utils/clientProperties/generateModelsProperty.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generateModelsProperty.js","sources":["../../../../../../src/runtime/internals/utils/clientProperties/generateModelsProperty.ts"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.generateModelsProperty = void 0;\nconst APIClient_1 = require(\"../../APIClient\");\nconst list_1 = require(\"../../operations/list\");\nconst indexQuery_1 = require(\"../../operations/indexQuery\");\nconst get_1 = require(\"../../operations/get\");\nconst subscription_1 = require(\"../../operations/subscription\");\nconst observeQuery_1 = require(\"../../operations/observeQuery\");\nconst clientUtils_1 = require(\"../../clientUtils\");\nfunction generateModelsProperty(client, apiGraphQLConfig, getInternals) {\n    const models = {};\n    const modelIntrospection = apiGraphQLConfig.modelIntrospection;\n    if (!modelIntrospection) {\n        return {};\n    }\n    const SUBSCRIPTION_OPS = ['ONCREATE', 'ONUPDATE', 'ONDELETE'];\n    for (const model of Object.values(modelIntrospection.models)) {\n        const { name } = model;\n        models[name] = {};\n        Object.entries(APIClient_1.graphQLOperationsInfo).forEach(([key, { operationPrefix }]) => {\n            const operation = key;\n            if (operation === 'LIST') {\n                models[name][operationPrefix] = (0, list_1.listFactory)(client, modelIntrospection, model, getInternals);\n            }\n            else if (SUBSCRIPTION_OPS.includes(operation)) {\n                models[name][operationPrefix] = (0, subscription_1.subscriptionFactory)(client, modelIntrospection, model, operation, getInternals);\n            }\n            else if (operation === 'OBSERVE_QUERY') {\n                models[name][operationPrefix] = (0, observeQuery_1.observeQueryFactory)(models, model);\n            }\n            else {\n                models[name][operationPrefix] = (0, get_1.getFactory)(client, modelIntrospection, model, operation, getInternals);\n            }\n        });\n        const secondaryIdxs = (0, clientUtils_1.getSecondaryIndexesFromSchemaModel)(model);\n        for (const idx of secondaryIdxs) {\n            models[name][idx.queryField] = (0, indexQuery_1.indexQueryFactory)(client, modelIntrospection, model, idx, getInternals);\n        }\n    }\n    return models;\n}\nexports.generateModelsProperty = generateModelsProperty;\n"],"names":[],"mappings":";;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,sBAAsB,GAAG,KAAK,CAAC,CAAC;AACxC,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAChD,MAAM,YAAY,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;AAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAC9C,MAAM,cAAc,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAChE,MAAM,cAAc,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAChE,MAAM,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACnD,SAAS,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE;AACxE,IAAI,MAAM,MAAM,GAAG,EAAE,CAAC;AACtB,IAAI,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,kBAAkB,CAAC;AACnE,IAAI,IAAI,CAAC,kBAAkB,EAAE;AAC7B,QAAQ,OAAO,EAAE,CAAC;AAClB,KAAK;AACL,IAAI,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AAClE,IAAI,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE;AAClE,QAAQ,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;AAC/B,QAAQ,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AAC1B,QAAQ,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,CAAC,KAAK;AAClG,YAAY,MAAM,SAAS,GAAG,GAAG,CAAC;AAClC,YAAY,IAAI,SAAS,KAAK,MAAM,EAAE;AACtC,gBAAgB,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AACzH,aAAa;AACb,iBAAiB,IAAI,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;AAC3D,gBAAgB,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,GAAG,IAAI,cAAc,CAAC,mBAAmB,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AACpJ,aAAa;AACb,iBAAiB,IAAI,SAAS,KAAK,eAAe,EAAE;AACpD,gBAAgB,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,GAAG,IAAI,cAAc,CAAC,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AACvG,aAAa;AACb,iBAAiB;AACjB,gBAAgB,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAClI,aAAa;AACb,SAAS,CAAC,CAAC;AACX,QAAQ,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;AAC3F,QAAQ,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE;AACzC,YAAY,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,YAAY,CAAC,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;AACrI,SAAS;AACT,KAAK;AACL,IAAI,OAAO,MAAM,CAAC;AAClB,CAAC;AACD,OAAO,CAAC,sBAAsB,GAAG,sBAAsB;;"}

package/dist/cjs/runtime/internals/utils/runtimeTypeGuards/isApiGraphQLProviderConfig.js

@@ -0,0 +1,11 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isApiGraphQLConfig = void 0;
+function isApiGraphQLConfig(apiGraphQLConfig) {
+    return apiGraphQLConfig !== undefined;
+}
+exports.isApiGraphQLConfig = isApiGraphQLConfig;
+//# sourceMappingURL=isApiGraphQLProviderConfig.js.map

package/dist/cjs/runtime/internals/utils/runtimeTypeGuards/isApiGraphQLProviderConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isApiGraphQLProviderConfig.js","sources":["../../../../../../src/runtime/internals/utils/runtimeTypeGuards/isApiGraphQLProviderConfig.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.isApiGraphQLConfig = void 0;\nfunction isApiGraphQLConfig(apiGraphQLConfig) {\n    return apiGraphQLConfig !== undefined;\n}\nexports.isApiGraphQLConfig = isApiGraphQLConfig;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,kBAAkB,GAAG,KAAK,CAAC,CAAC;AACpC,SAAS,kBAAkB,CAAC,gBAAgB,EAAE;AAC9C,IAAI,OAAO,gBAAgB,KAAK,SAAS,CAAC;AAC1C,CAAC;AACD,OAAO,CAAC,kBAAkB,GAAG,kBAAkB;;"}

package/dist/cjs/runtime/internals/utils/runtimeTypeGuards/isConfigureEventWithResourceConfig.js

@@ -0,0 +1,11 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isConfigureEventWithResourceConfig = void 0;
+function isConfigureEventWithResourceConfig(payload) {
+    return payload.event === 'configure';
+}
+exports.isConfigureEventWithResourceConfig = isConfigureEventWithResourceConfig;
+//# sourceMappingURL=isConfigureEventWithResourceConfig.js.map

package/dist/cjs/runtime/internals/utils/runtimeTypeGuards/isConfigureEventWithResourceConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isConfigureEventWithResourceConfig.js","sources":["../../../../../../src/runtime/internals/utils/runtimeTypeGuards/isConfigureEventWithResourceConfig.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.isConfigureEventWithResourceConfig = void 0;\nfunction isConfigureEventWithResourceConfig(payload) {\n    return payload.event === 'configure';\n}\nexports.isConfigureEventWithResourceConfig = isConfigureEventWithResourceConfig;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,kCAAkC,GAAG,KAAK,CAAC,CAAC;AACpD,SAAS,kCAAkC,CAAC,OAAO,EAAE;AACrD,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC;AACzC,CAAC;AACD,OAAO,CAAC,kCAAkC,GAAG,kCAAkC;;"}

package/dist/cjs/runtime/internals/utils/runtimeTypeGuards/isGraphQLResponseWithErrors.js

@@ -0,0 +1,15 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isGraphQLResponseWithErrors = void 0;
+function isGraphQLResponseWithErrors(response) {
+    if (!response) {
+        return false;
+    }
+    const r = response;
+    return Array.isArray(r.errors) && r.errors.length > 0;
+}
+exports.isGraphQLResponseWithErrors = isGraphQLResponseWithErrors;
+//# sourceMappingURL=isGraphQLResponseWithErrors.js.map

package/dist/cjs/runtime/internals/utils/runtimeTypeGuards/isGraphQLResponseWithErrors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isGraphQLResponseWithErrors.js","sources":["../../../../../../src/runtime/internals/utils/runtimeTypeGuards/isGraphQLResponseWithErrors.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.isGraphQLResponseWithErrors = void 0;\nfunction isGraphQLResponseWithErrors(response) {\n    if (!response) {\n        return false;\n    }\n    const r = response;\n    return Array.isArray(r.errors) && r.errors.length > 0;\n}\nexports.isGraphQLResponseWithErrors = isGraphQLResponseWithErrors;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,2BAA2B,GAAG,KAAK,CAAC,CAAC;AAC7C,SAAS,2BAA2B,CAAC,QAAQ,EAAE;AAC/C,IAAI,IAAI,CAAC,QAAQ,EAAE;AACnB,QAAQ,OAAO,KAAK,CAAC;AACrB,KAAK;AACL,IAAI,MAAM,CAAC,GAAG,QAAQ,CAAC;AACvB,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1D,CAAC;AACD,OAAO,CAAC,2BAA2B,GAAG,2BAA2B;;"}

package/dist/cjs/runtime/utils/findIndexByFields.js

@@ -0,0 +1,25 @@
+'use strict';
+
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findIndexByFields = void 0;
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Iterates through a collection to find a matching item and returns the index.
+ *
+ * @param needle The item to search for
+ * @param haystack The collection to search
+ * @param keyFields The fields used to indicate a match
+ * @returns Index of `needle` in `haystack`, otherwise -1 if not found.
+ */
+function findIndexByFields(needle, haystack, keyFields) {
+    const searchObject = Object.fromEntries(keyFields.map((fieldName) => [fieldName, needle[fieldName]]));
+    for (let i = 0; i < haystack.length; i++) {
+        if (Object.keys(searchObject).every((k) => searchObject[k] === haystack[i][k])) {
+            return i;
+        }
+    }
+    return -1;
+}
+exports.findIndexByFields = findIndexByFields;
+//# sourceMappingURL=findIndexByFields.js.map

package/dist/cjs/runtime/utils/findIndexByFields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findIndexByFields.js","sources":["../../../../src/runtime/utils/findIndexByFields.ts"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.findIndexByFields = void 0;\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * Iterates through a collection to find a matching item and returns the index.\n *\n * @param needle The item to search for\n * @param haystack The collection to search\n * @param keyFields The fields used to indicate a match\n * @returns Index of `needle` in `haystack`, otherwise -1 if not found.\n */\nfunction findIndexByFields(needle, haystack, keyFields) {\n    const searchObject = Object.fromEntries(keyFields.map((fieldName) => [fieldName, needle[fieldName]]));\n    for (let i = 0; i < haystack.length; i++) {\n        if (Object.keys(searchObject).every((k) => searchObject[k] === haystack[i][k])) {\n            return i;\n        }\n    }\n    return -1;\n}\nexports.findIndexByFields = findIndexByFields;\n"],"names":[],"mappings":";;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,iBAAiB,GAAG,KAAK,CAAC,CAAC;AACnC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE;AACxD,IAAI,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1G,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAC9C,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;AACxF,YAAY,OAAO,CAAC,CAAC;AACrB,SAAS;AACT,KAAK;AACL,IAAI,OAAO,CAAC,CAAC,CAAC;AACd,CAAC;AACD,OAAO,CAAC,iBAAiB,GAAG,iBAAiB;;"}

package/dist/cjs/runtime/utils/index.js

@@ -0,0 +1,11 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findIndexByFields = exports.resolvePKFields = void 0;
+var resolvePKFields_1 = require("./resolvePKFields");
+Object.defineProperty(exports, "resolvePKFields", { enumerable: true, get: function () { return resolvePKFields_1.resolvePKFields; } });
+var findIndexByFields_1 = require("./findIndexByFields");
+Object.defineProperty(exports, "findIndexByFields", { enumerable: true, get: function () { return findIndexByFields_1.findIndexByFields; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/runtime/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../../src/runtime/utils/index.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.findIndexByFields = exports.resolvePKFields = void 0;\nvar resolvePKFields_1 = require(\"./resolvePKFields\");\nObject.defineProperty(exports, \"resolvePKFields\", { enumerable: true, get: function () { return resolvePKFields_1.resolvePKFields; } });\nvar findIndexByFields_1 = require(\"./findIndexByFields\");\nObject.defineProperty(exports, \"findIndexByFields\", { enumerable: true, get: function () { return findIndexByFields_1.findIndexByFields; } });\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC,CAAC;AAC7D,IAAI,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACrD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,iBAAiB,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC;AACxI,IAAI,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AACzD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,mBAAmB,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;;"}

package/dist/cjs/runtime/utils/resolveOwnerFields.js

@@ -0,0 +1,48 @@
+'use strict';
+
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveOwnerFields = void 0;
+/**
+ * Given an introspection schema model, returns all owner fields.
+ *
+ * @param model Model from an introspection schema
+ * @returns List of owner field names
+ */
+function resolveOwnerFields(model) {
+    const ownerFields = new Set();
+    for (const attr of model.attributes || []) {
+        if (isAuthAttribute(attr)) {
+            for (const rule of attr.properties.rules) {
+                if (rule.allow === 'owner') {
+                    ownerFields.add(rule.ownerField || 'owner');
+                }
+                else if (rule.allow === 'groups' && rule.groupsField !== undefined) {
+                    // only valid for dynamic group(s)
+                    // static group auth will have an array of predefined groups in the attribute, groups: string[]
+                    // but `groupsField` will be undefined
+                    ownerFields.add(rule.groupsField);
+                }
+            }
+        }
+    }
+    return Array.from(ownerFields);
+}
+exports.resolveOwnerFields = resolveOwnerFields;
+/**
+ * Type guard that identifies an auth attribute with an attached rules list that
+ * specifies an `allow` attribute at a minimum.
+ *
+ * @param attribute Any object. Ideally a model introspection schema model attribute
+ * @returns True if given object is an auth attribute
+ */
+function isAuthAttribute(attribute) {
+    if (attribute?.type === 'auth') {
+        if (typeof attribute?.properties === 'object') {
+            if (Array.isArray(attribute?.properties?.rules)) {
+                return (attribute?.properties?.rules).every((rule) => !!rule.allow);
+            }
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=resolveOwnerFields.js.map

package/dist/cjs/runtime/utils/resolveOwnerFields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveOwnerFields.js","sources":["../../../../src/runtime/utils/resolveOwnerFields.ts"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.resolveOwnerFields = void 0;\n/**\n * Given an introspection schema model, returns all owner fields.\n *\n * @param model Model from an introspection schema\n * @returns List of owner field names\n */\nfunction resolveOwnerFields(model) {\n    const ownerFields = new Set();\n    for (const attr of model.attributes || []) {\n        if (isAuthAttribute(attr)) {\n            for (const rule of attr.properties.rules) {\n                if (rule.allow === 'owner') {\n                    ownerFields.add(rule.ownerField || 'owner');\n                }\n                else if (rule.allow === 'groups' && rule.groupsField !== undefined) {\n                    // only valid for dynamic group(s)\n                    // static group auth will have an array of predefined groups in the attribute, groups: string[]\n                    // but `groupsField` will be undefined\n                    ownerFields.add(rule.groupsField);\n                }\n            }\n        }\n    }\n    return Array.from(ownerFields);\n}\nexports.resolveOwnerFields = resolveOwnerFields;\n/**\n * Type guard that identifies an auth attribute with an attached rules list that\n * specifies an `allow` attribute at a minimum.\n *\n * @param attribute Any object. Ideally a model introspection schema model attribute\n * @returns True if given object is an auth attribute\n */\nfunction isAuthAttribute(attribute) {\n    if (attribute?.type === 'auth') {\n        if (typeof attribute?.properties === 'object') {\n            if (Array.isArray(attribute?.properties?.rules)) {\n                return (attribute?.properties?.rules).every((rule) => !!rule.allow);\n            }\n        }\n    }\n    return false;\n}\n"],"names":[],"mappings":";;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,kBAAkB,GAAG,KAAK,CAAC,CAAC;AACpC;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,kBAAkB,CAAC,KAAK,EAAE;AACnC,IAAI,MAAM,WAAW,GAAG,IAAI,GAAG,EAAE,CAAC;AAClC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE;AAC/C,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE;AACnC,YAAY,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE;AACtD,gBAAgB,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,EAAE;AAC5C,oBAAoB,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC;AAChE,iBAAiB;AACjB,qBAAqB,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE;AACpF;AACA;AACA;AACA,oBAAoB,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACtD,iBAAiB;AACjB,aAAa;AACb,SAAS;AACT,KAAK;AACL,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACnC,CAAC;AACD,OAAO,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;AAChD;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,eAAe,CAAC,SAAS,EAAE;AACpC,IAAI,IAAI,SAAS,EAAE,IAAI,KAAK,MAAM,EAAE;AACpC,QAAQ,IAAI,OAAO,SAAS,EAAE,UAAU,KAAK,QAAQ,EAAE;AACvD,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;AAC7D,gBAAgB,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACpF,aAAa;AACb,SAAS;AACT,KAAK;AACL,IAAI,OAAO,KAAK,CAAC;AACjB;;"}

package/dist/cjs/runtime/utils/resolvePKFields.js

@@ -0,0 +1,17 @@
+'use strict';
+
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolvePKFields = void 0;
+/**
+ * Given a SchemaModel from a ModelIntrospectionSchema, returns the primary key
+ * as an array of field names.
+ *
+ * @param model The model object
+ * @returns Array of field names
+ */
+function resolvePKFields(model) {
+    const { primaryKeyFieldName, sortKeyFieldNames } = model.primaryKeyInfo;
+    return [primaryKeyFieldName, ...sortKeyFieldNames];
+}
+exports.resolvePKFields = resolvePKFields;
+//# sourceMappingURL=resolvePKFields.js.map

package/dist/cjs/runtime/utils/resolvePKFields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolvePKFields.js","sources":["../../../../src/runtime/utils/resolvePKFields.ts"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.resolvePKFields = void 0;\n/**\n * Given a SchemaModel from a ModelIntrospectionSchema, returns the primary key\n * as an array of field names.\n *\n * @param model The model object\n * @returns Array of field names\n */\nfunction resolvePKFields(model) {\n    const { primaryKeyFieldName, sortKeyFieldNames } = model.primaryKeyInfo;\n    return [primaryKeyFieldName, ...sortKeyFieldNames];\n}\nexports.resolvePKFields = resolvePKFields;\n"],"names":[],"mappings":";;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC,CAAC;AACjC;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,eAAe,CAAC,KAAK,EAAE;AAChC,IAAI,MAAM,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC;AAC5E,IAAI,OAAO,CAAC,mBAAmB,EAAE,GAAG,iBAAiB,CAAC,CAAC;AACvD,CAAC;AACD,OAAO,CAAC,eAAe,GAAG,eAAe;;"}

package/{lib-esm/src → dist/cjs}/util/Brand.js

@@ -1,4 +1,5 @@
-"use strict";
+'use strict';
+
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getBrand = exports.brand = void 0;
 const brandSymbol = Symbol('brand');
@@ -30,3 +31,4 @@ function getBrand(branded) {
     return branded[brandSymbol];
 }
 exports.getBrand = getBrand;
+//# sourceMappingURL=Brand.js.map

package/dist/cjs/util/Brand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Brand.js","sources":["../../../src/util/Brand.ts"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.getBrand = exports.brand = void 0;\nconst brandSymbol = Symbol('brand');\n/**\n * Create an object of a specific type Brand\n * string branded type.\n *\n * @param brand: The string to Brand onto a simple object\n * @returns A branded empty object\n *\n * @example\n * brand('example') => {[brandSymbol]: 'example'}\n *\n * Which I might use like this:\n * const myType = {content: \"default content\", ...brand<'example'>}\n */\nfunction brand(brand) {\n    return {\n        [brandSymbol]: brand,\n    };\n}\nexports.brand = brand;\n/**\n *\n * @param branded: Branded object\n * @returns The string brand value\n */\nfunction getBrand(branded) {\n    return branded[brandSymbol];\n}\nexports.getBrand = getBrand;\n"],"names":[],"mappings":";;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;AAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;AACpC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,KAAK,CAAC,KAAK,EAAE;AACtB,IAAI,OAAO;AACX,QAAQ,CAAC,WAAW,GAAG,KAAK;AAC5B,KAAK,CAAC;AACN,CAAC;AACD,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;AACtB;AACA;AACA;AACA;AACA;AACA,SAAS,QAAQ,CAAC,OAAO,EAAE;AAC3B,IAAI,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;AAChC,CAAC;AACD,OAAO,CAAC,QAAQ,GAAG,QAAQ;;"}

package/{lib-esm/src → dist/cjs}/util/IndexLimit.js

@@ -1,2 +1,4 @@
-"use strict";
+'use strict';
+
 Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=IndexLimit.js.map

package/dist/cjs/util/IndexLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IndexLimit.js","sources":["../../../src/util/IndexLimit.ts"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\n"],"names":[],"mappings":";;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;;"}

package/{lib-esm/src → dist/cjs}/util/SpreadTuple.js

@@ -1,2 +1,4 @@
-"use strict";
+'use strict';
+
 Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=SpreadTuple.js.map

package/dist/cjs/util/SpreadTuple.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpreadTuple.js","sources":["../../../src/util/SpreadTuple.ts"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\n"],"names":[],"mappings":";;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;;"}

package/{lib-esm/src → dist/cjs}/util/index.js

@@ -1,6 +1,8 @@
-"use strict";
+'use strict';
+
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getBrand = exports.brand = void 0;
 var Brand_1 = require("./Brand");
 Object.defineProperty(exports, "brand", { enumerable: true, get: function () { return Brand_1.brand; } });
 Object.defineProperty(exports, "getBrand", { enumerable: true, get: function () { return Brand_1.getBrand; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/util/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../src/util/index.ts"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.getBrand = exports.brand = void 0;\nvar Brand_1 = require(\"./Brand\");\nObject.defineProperty(exports, \"brand\", { enumerable: true, get: function () { return Brand_1.brand; } });\nObject.defineProperty(exports, \"getBrand\", { enumerable: true, get: function () { return Brand_1.getBrand; } });\n"],"names":[],"mappings":";;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;AAC1C,IAAI,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AACjC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1G,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;;"}

package/{lib-esm/src → dist/esm}/Authorization.d.ts

@@ -71,11 +71,7 @@ export type Authorization<AuthStrategy extends Strategy, AuthField extends strin
     };
 };
 export type OwnerField = object;
-type BuilderMethods<T extends object> = {
-    [K in keyof T as T[K] extends (...args: any) => any ? K : never]: T[K];
-};
 declare function to<SELF extends Authorization<any, any, any>>(this: SELF, operations: Operation[]): Omit<SELF, "to">;
-declare function inField<SELF extends Authorization<any, any, any>, Field extends string>(this: SELF, field: Field): BuilderMethods<Omit<SELF, "inField">> & Authorization<SELF[typeof __data]["strategy"], Field, SELF[typeof __data]["multiOwner"]>;
 /**
  * Specifies a property of the identity JWT to use in place of `sub::username`
  * as the value to match against the owner field for authorization.
@@ -93,28 +89,33 @@ declare function withClaimIn<SELF extends Authorization<any, any, any>>(this: SE
  */
 export declare const allow: {
     /**
-     * Authorize unauthenticated users. By default, `.public()` uses an API key based authorization. You can additionally
-     * use `.public('iam')` to use IAM based authorization for unauthenticated users.
-     * @param provider the authentication provider - supports "apiKey" or "iam" as valid providers
+     * Authorize unauthenticated users by using API key based authorization.
      * @returns an authorization rule for unauthenticated users
      */
-    readonly public: (provider?: PublicProvider) => Authorization<"public", undefined, false> & {
+    readonly publicApiKey: () => Authorization<"public", undefined, false> & {
+        to: typeof to;
+    };
+    /**
+     * Authorize unauthenticated users by using IAM based authorization.
+     * @returns an authorization rule for unauthenticated users
+     */
+    readonly guest: () => Authorization<"public", undefined, false> & {
         to: typeof to;
     };
     /**
      * Authorize authenticated users. By default, `.private()` uses an Amazon Cognito user pool based authorization. You can additionally
-     * use `.private("iam")` or `.private("oidc")` to use IAM or OIDC based authorization for authenticated users.
+     * use `.authenticated("iam")` or `.authenticated("oidc")` to use IAM or OIDC based authorization for authenticated users.
      * @param provider the authentication provider - supports "userPools", "iam", or "oidc"
      * @returns an authorization rule for authenticated users
      */
-    readonly private: (provider?: PrivateProvider) => Authorization<"private", undefined, false> & {
+    readonly authenticated: (provider?: PrivateProvider) => Authorization<"private", undefined, false> & {
         to: typeof to;
     };
     /**
      * Authorize access on a per-user (owner) basis. By setting owner-based authorization, a new `owner: a.string()`
      * field will be added to the model to store which user "owns" the item. Upon item creation, the "owner field" is
-     * auto-populated with the authenticated user's information. You can which field should be used as the owner field
-     * by chaining the * `.inField(...)` method.
+     * auto-populated with the authenticated user's information. If you want to specify which field should be used as
+     * the owner field, you can use the `ownerDefinedIn` builder function instead.
      *
      * By default, `.owner()` uses an Amazon Cognito user pool based authorization. You can additionally
      * use `.owner("oidc")` to use OIDC based authentication to designate the owner.
@@ -127,34 +128,51 @@ export declare const allow: {
      */
     readonly owner: (provider?: OwnerProviders) => Authorization<"owner", "owner", false> & {
         to: typeof to;
-        inField: typeof inField;
+        identityClaim: typeof identityClaim;
+    };
+    /**
+     * Authorize access on a per-user (owner) basis with specifying which field should be used as the owner field.
+     *
+     * By default, `.owner()` uses an Amazon Cognito user pool based authorization. You can additionally
+     * use `.ownerDefinedIn("owner", "oidc")` to use OIDC based authentication to designate the owner.
+     *
+     * To change the specific claim that should be used as the user identifier within the owner field, chain the
+     * `.identityClaim(...)` method.
+     *
+     * @param ownerField the field that contains the owner information
+     * @param provider the authentication provider - supports "userPools", "iam", or "oidc"
+     * @returns an authorization rule for authenticated users
+     */
+    readonly ownerDefinedIn: <T extends string>(ownerField: T, provider?: OwnerProviders) => Authorization<"owner", T, false> & {
+        to: typeof to;
         identityClaim: typeof identityClaim;
     };
     /**
      * Authorize access for multi-user / multi-owner access. By setting multi-owner-based authorization, a new `owners: a.string().array()`
      * field will be added to the model to store which users "own" the item. Upon item creation, the "owners field" is
      * auto-populated with the authenticated user's information. To grant other users access to the item, append their user identifier into the `owners` array.
-     * You can which field should be used as the owners field by chaining the * `.inField(...)` method.
      *
-     * By default, `.multipleOwners()` uses an Amazon Cognito user pool based authorization. You can additionally
-     * use `.multipleOwners("oidc")` to use OIDC based authentication to designate the owner.
+     * You can specify which field should be used as the owners field by passing the `ownersField` parameter.
+     *
+     * By default, `.ownersDefinedIn()` uses an Amazon Cognito user pool based authorization. You can additionally
+     * use `.ownersDefinedIn("owners", "oidc")` to use OIDC based authentication to designate the owner.
      *
      * To change the specific claim that should be used as the user identifier within the owners field, chain the
      * `.identityClaim(...)` method.
      *
+     * @param ownersField the field that contains the owners information
      * @param provider the authentication provider - supports "userPools", "iam", or "oidc"
      * @returns an authorization rule for authenticated users
      */
-    readonly multipleOwners: (provider?: OwnerProviders) => Authorization<"owner", "owner", true> & {
+    readonly ownersDefinedIn: <T_1 extends string>(ownersField: T_1, provider?: OwnerProviders) => Authorization<"owner", T_1, true> & {
         to: typeof to;
-        inField: typeof inField;
         identityClaim: typeof identityClaim;
     };
     /**
      * Authorize a specific user group. Provide the name of the specific user group to have access.
      *
-     * By default, `.specificGroup()` uses an Amazon Cognito user pool based authorization. You can additionally
-     * use `.specificGroup("group-name", "oidc")` to use OIDC based authentication to designate the user group.
+     * By default, `.group()` uses an Amazon Cognito user pool based authorization. You can additionally
+     * use `.group("group-name", "oidc")` to use OIDC based authentication to designate the user group.
      *
      * To change the specific claim that should be used as the user group identifier, chain the
      * `.withClaimIn(...)` method.
@@ -162,15 +180,15 @@ export declare const allow: {
      * @param provider the authentication provider - supports "userPools" or "oidc"
      * @returns an authorization rule to grant access by a specific group
      */
-    readonly specificGroup: (group: string, provider?: GroupProvider) => Authorization<"groups", undefined, false> & {
+    readonly group: (group: string, provider?: GroupProvider) => Authorization<"groups", undefined, false> & {
         to: typeof to;
         withClaimIn: typeof withClaimIn;
     };
     /**
      * Authorize multiple specific user groups. Provide the names of the specific user groups to have access.
      *
-     * By default, `.specificGroups()` uses an Amazon Cognito user pool based authorization. You can additionally
-     * use `.specificGroups(["group-a", "group-b"], "oidc")` to use OIDC based authentication to designate the user group.
+     * By default, `.groups()` uses an Amazon Cognito user pool based authorization. You can additionally
+     * use `.groups(["group-a", "group-b"], "oidc")` to use OIDC based authentication to designate the user group.
      *
      * To change the specific claim that should be used as the user group identifier, chain the
      * `.withClaimIn(...)` method.
@@ -178,7 +196,7 @@ export declare const allow: {
      * @param provider the authentication provider - supports "userPools" or "oidc"
      * @returns an authorization rule to grant access by a specific group
      */
-    readonly specificGroups: (groups: string[], provider?: GroupProvider) => Authorization<"groups", undefined, false> & {
+    readonly groups: (groups: string[], provider?: GroupProvider) => Authorization<"groups", undefined, false> & {
         to: typeof to;
         withClaimIn: typeof withClaimIn;
     };
@@ -194,7 +212,7 @@ export declare const allow: {
      * @param provider the authentication provider - supports "userPools" or "oidc"
      * @returns an authorization rule to grant access by a specific group
      */
-    readonly groupDefinedIn: <T extends string>(groupsField: T, provider?: GroupProvider) => Authorization<"groups", T, false> & {
+    readonly groupDefinedIn: <T_2 extends string>(groupsField: T_2, provider?: GroupProvider) => Authorization<"groups", T_2, false> & {
         to: typeof to;
         withClaimIn: typeof withClaimIn;
     };
@@ -210,7 +228,7 @@ export declare const allow: {
      * @param provider the authentication provider - supports "userPools" or "oidc"
      * @returns an authorization rule to grant access by a specific group
      */
-    readonly groupsDefinedIn: <T_1 extends string>(groupsField: T_1, provider?: GroupProvider) => Authorization<"groups", T_1, true> & {
+    readonly groupsDefinedIn: <T_3 extends string>(groupsField: T_3, provider?: GroupProvider) => Authorization<"groups", T_3, true> & {
         to: typeof to;
         withClaimIn: typeof withClaimIn;
     };
@@ -221,6 +239,61 @@ export declare const allow: {
         to: typeof resourceTo;
     };
 };
+/**
+ * This is a copy of the {@link allow} defined above, with modifications for custom operations.
+ *
+ * Removed builder methods:
+ *
+ * * `owner`
+ * * `ownerDefinedIn`
+ * * `ownersDefinedIn`
+ * * `groupDefinedIn`
+ * * `groupsDefinedIn`
+ * * `resource`
+ * * `.to()` builder method from each available rule builder
+ */
+export declare const allowForCustomOperations: {
+    /**
+     * Authorize unauthenticated users by using API key based authorization.
+     * @returns an authorization rule for unauthenticated users
+     */
+    readonly publicApiKey: () => Authorization<"public", undefined, false>;
+    /**
+     * Authorize unauthenticated users by using IAM based authorization.
+     * @returns an authorization rule for unauthenticated users
+     */
+    readonly guest: () => Authorization<"public", undefined, false>;
+    /**
+     * Authorize authenticated users. By default, `.private()` uses an Amazon Cognito user pool based authorization. You can additionally
+     * use `.authenticated("iam")` or `.authenticated("oidc")` to use IAM or OIDC based authorization for authenticated users.
+     * @param provider the authentication provider - supports "userPools", "iam", or "oidc"
+     * @returns an authorization rule for authenticated users
+     */
+    readonly authenticated: (provider?: PrivateProvider) => Authorization<"private", undefined, false>;
+    /**
+     * Authorize a specific user group. Provide the name of the specific user group to have access.
+     *
+     * By default, `.group()` uses an Amazon Cognito user pool based authorization. You can additionally
+     * use `.group("group-name", "oidc")` to use OIDC based authentication to designate the user group.
+     *
+     * @param group the name of the group to authorize
+     * @param provider the authentication provider - supports "userPools" or "oidc"
+     * @returns an authorization rule to grant access by a specific group
+     */
+    readonly group: (group: string, provider?: GroupProvider) => Authorization<"groups", undefined, false>;
+    /**
+     * Authorize multiple specific user groups. Provide the names of the specific user groups to have access.
+     *
+     * By default, `.groups()` uses an Amazon Cognito user pool based authorization. You can additionally
+     * use `.groups(["group-a", "group-b"], "oidc")` to use OIDC based authentication to designate the user group.
+     *
+     * @param groups the names of the group to authorize defined as an array
+     * @param provider the authentication provider - supports "userPools" or "oidc"
+     * @returns an authorization rule to grant access by a specific group
+     */
+    readonly groups: (groups: string[], provider?: GroupProvider) => Authorization<"groups", undefined, false>;
+    readonly custom: (provider?: CustomProvider) => Authorization<"custom", undefined, false>;
+};
 declare function resourceTo<SELF extends ResourceAuthorization>(this: SELF, operations: ResourceOperation[]): Omit<SELF, "to">;
 /**
  * Turns the type from a list of `Authorization` rules like this:
@@ -228,8 +301,8 @@ declare function resourceTo<SELF extends ResourceAuthorization>(this: SELF, oper
  * ```typescript
  * [
  *  allow.public(),
- *  allow.owner().inField('otherfield'),
- *  allow.multipleOwners().inField('editors')
+ *  allow.ownerDefinedIn('otherfield'),
+ *  allow.ownersDefinedIn('editors')
  * ]
  * ```
  *
@@ -256,8 +329,8 @@ export type ImpliedAuthField<T extends Authorization<any, any, any>> = T extends
  * ```typescript
  * [
  *  allow.public(),
- *  allow.owner().inField('otherfield'),
- *  allow.multipleOwners().inField('editors')
+ *  allow.ownerDefinedIn('otherfield'),
+ *  allow.ownersDefinedIn('editors')
  * ]
  * ```
  *
@@ -283,5 +356,6 @@ export declare const accessData: <T extends Authorization<any, any, any>>(author
     groupClaim?: string | undefined;
 };
 export declare const accessSchemaData: <T extends SchemaAuthorization<any, any, any>>(authorization: T) => T[typeof __data];
+export type AllowModifier = typeof allow;
+export type AllowModifierForCustomOperation = typeof allowForCustomOperations;
 export {};
-//# sourceMappingURL=Authorization.d.ts.map