@baseplate-dev/plugin-auth 0.6.2 → 0.6.4

package/dist/web/assets/__federation_shared_@baseplate-dev/{project-builder-lib-CQKLkNsU.js → project-builder-lib-zJirGIS1.js}

@@ -1,7 +1,7 @@
-import { c as createFieldMapSpec, a as createEntityType, d as definitionSchemaWithSlots, b as definitionRefRegistry, e as definitionDefaultRegistry, f as definitionSchema, g as featureEntityType, w as withDefault, r as runInPluginContext, h as createFeaturesSchema, M as ModelUtils, i as createDefinitionSchemaParserContext } from '../model-utils-BfcjfzCn.js';
-export { D as DefinitionEntityType, F as FeatureUtils, j as createFeatureSchema, k as createPluginFieldMap, l as createPluginSpec, m as createRefContextSlot, n as createRefContextSlotMap, o as featureNameSchema, p as getPluginContext, q as withEnt, s as withPlaceholderSlots, t as withRef } from '../model-utils-BfcjfzCn.js';
+import { c as createFieldMapSpec, a as createEntityType, d as definitionSchemaWithSlots, b as definitionRefRegistry, e as definitionDefaultRegistry, f as definitionSchema, g as featureEntityType, w as withDefault, r as runInPluginContext, h as createFeaturesSchema, M as ModelUtils, i as createDefinitionSchemaParserContext } from '../model-utils-WWo9T1Zx.js';
+export { D as DefinitionEntityType, F as FeatureUtils, j as createFeatureSchema, k as createPluginFieldMap, l as createPluginSpec, m as createRefContextSlot, n as createRefContextSlotMap, o as featureNameSchema, p as getPluginContext, q as withEnt, s as withPlaceholderSlots, t as withRef } from '../model-utils-WWo9T1Zx.js';
 import { g as getSymbols, a as getTag, u as uint32ArrayTag, b as uint16ArrayTag, c as uint8ClampedArrayTag, d as uint8ArrayTag, s as symbolTag, e as stringTag, f as setTag, r as regexpTag, o as objectTag, n as numberTag, m as mapTag, i as int32ArrayTag, h as int16ArrayTag, j as int8ArrayTag, k as float64ArrayTag, l as float32ArrayTag, p as dateTag, q as booleanTag, t as dataViewTag, v as arrayBufferTag, w as arrayTag, x as argumentsTag, y as isPlainObject$1, z as isEqualsSameValueZero, A as isEqual } from '../isEqual-tnzoadW8.js';
-import { importShared } from '../__federation_fn_import-BLFDCY-V.js';
+import { importShared } from '../__federation_fn_import-CzLgVaFb.js';
 import { m as mergeWith, i as isUnsafeProperty, s as sortBy } from '../mergeWith-VagwCqUi.js';
 
 const adminCrudActionCompilerSpec = createFieldMapSpec('core/admin-crud-action-compiler', (t) => ({
@@ -709,7 +709,6 @@ const createBackendAppSchema = definitionSchemaWithSlots({ appSlot: appEntityTyp
     ...baseAppValidators,
     type: z$z.literal('backend'),
     devPort: z$z.number().int().positive(),
-    enableStripe: z$z.boolean().optional(),
     enableSubscriptions: z$z.boolean().optional(),
     enableAxios: z$z.boolean().optional(),
 }));
@@ -7069,22 +7068,57 @@ function convertLogicalExpression(node) {
     };
 }
 /**
- * Convert a BinaryExpression (===) to FieldComparisonNode.
+ * Convert a BinaryExpression (=== or !==) to FieldComparisonNode.
  */
 function convertBinaryExpression(node) {
-    if (node.operator !== '===') {
-        throw new AuthorizerExpressionParseError(`Unsupported comparison operator: ${node.operator}. Only === is supported.`, node.left.end, node.right.start);
+    if (node.operator !== '===' && node.operator !== '!==') {
+        throw new AuthorizerExpressionParseError(`Unsupported comparison operator: ${node.operator}. Only === and !== are supported.`, node.left.end, node.right.start);
+    }
+    const left = convertFieldRefOrLiteral(node.left);
+    const right = convertFieldRefOrLiteral(node.right);
+    // At least one side must be a field reference — comparing two literals is not allowed.
+    if (left.type === 'literalValue' && right.type === 'literalValue') {
+        throw new AuthorizerExpressionParseError('At least one side of a comparison must be a field reference (e.g., model.field or userId).', node);
     }
-    // Acorn's BinaryExpression allows PrivateIdentifier for ES2022+, but we only
-    // support MemberExpression field refs. convertFieldRef will throw if given
-    // anything other than MemberExpression.
     return {
         type: 'fieldComparison',
-        operator: '===',
-        left: convertFieldRef(node.left),
-        right: convertFieldRef(node.right),
+        operator: node.operator,
+        left,
+        right,
     };
 }
+/**
+ * Convert an expression node to either a FieldRefNode or a LiteralValueNode.
+ * Supports string, number, and boolean literals.
+ */
+function convertFieldRefOrLiteral(node) {
+    if (node.type === 'UnaryExpression' &&
+        (node.operator === '-' || node.operator === '+') &&
+        node.argument.type === 'Literal' &&
+        typeof node.argument.value === 'number') {
+        return {
+            type: 'literalValue',
+            value: node.operator === '-' ? -node.argument.value : node.argument.value,
+            start: node.start,
+            end: node.end,
+        };
+    }
+    if (node.type === 'Literal') {
+        const { value } = node;
+        if (typeof value === 'string' ||
+            typeof value === 'number' ||
+            typeof value === 'boolean') {
+            return {
+                type: 'literalValue',
+                value,
+                start: node.start,
+                end: node.end,
+            };
+        }
+        throw new AuthorizerExpressionParseError('Unsupported literal type. Only string, number, and boolean literals are supported.', node);
+    }
+    return convertFieldRef(node);
+}
 /**
  * Convert a CallExpression to HasRoleNode or HasSomeRoleNode.
  * Supports:
@@ -7287,8 +7321,12 @@ function extractInfo(ast) {
     function walk(node) {
         switch (node.type) {
             case 'fieldComparison': {
-                walkFieldRef(node.left);
-                walkFieldRef(node.right);
+                if (node.left.type === 'fieldRef') {
+                    walkFieldRef(node.left);
+                }
+                if (node.right.type === 'fieldRef') {
+                    walkFieldRef(node.right);
+                }
                 break;
             }
             case 'hasRole': {
@@ -7413,8 +7451,10 @@ class RefExpressionParser {
  */
 const authConfigSpec = createFieldMapSpec('core/auth-config', (t) => ({
     getAuthConfig: t.scalar(),
+    pluginKey: t.scalar(),
 }), {
     use: (values) => ({
+        pluginKey: values.pluginKey,
         getAuthConfig: (definition) => values.getAuthConfig?.(definition),
         getAuthConfigOrThrow: (definition) => {
             const config = values.getAuthConfig?.(definition);
@@ -7487,8 +7527,24 @@ function validateAuthorizerExpression(ast, modelContext, pluginStore, definition
     function walk(node) {
         switch (node.type) {
             case 'fieldComparison': {
-                validateFieldRef(node.left);
-                validateFieldRef(node.right);
+                if (node.left.type === 'fieldRef') {
+                    validateFieldRef(node.left);
+                }
+                if (node.right.type === 'fieldRef') {
+                    validateFieldRef(node.right);
+                }
+                // Type-check: warn if a model field is compared to an incompatible literal
+                const fieldRef = node.left.type === 'fieldRef' ? node.left : node.right;
+                const literalNode = node.left.type === 'literalValue'
+                    ? node.left
+                    : node.right.type === 'literalValue'
+                        ? node.right
+                        : null;
+                if (fieldRef.type === 'fieldRef' &&
+                    fieldRef.source === 'model' &&
+                    literalNode !== null) {
+                    validateLiteralTypeCompatibility(fieldRef, literalNode);
+                }
                 break;
             }
             case 'hasRole': {
@@ -7578,6 +7634,45 @@ function validateAuthorizerExpression(ast, modelContext, pluginStore, definition
             }
         }
     }
+    function validateLiteralTypeCompatibility(fieldRefNode, literalNode) {
+        const { fieldTypes } = modelContext;
+        const fieldType = fieldTypes.get(fieldRefNode.field);
+        if (!fieldType)
+            return;
+        const literalJsType = typeof literalNode.value;
+        // Determine which JS types are compatible with each field type
+        const isCompatible = (() => {
+            switch (fieldType) {
+                case 'boolean': {
+                    return literalJsType === 'boolean';
+                }
+                case 'int': {
+                    return (typeof literalNode.value === 'number' &&
+                        Number.isInteger(literalNode.value));
+                }
+                case 'float':
+                case 'decimal': {
+                    return literalJsType === 'number';
+                }
+                case 'string':
+                case 'uuid':
+                case 'enum': {
+                    return literalJsType === 'string';
+                }
+                default: {
+                    // Unknown or unsupported field type — no warning
+                    return true;
+                }
+            }
+        })();
+        if (!isCompatible) {
+            warnings.push({
+                message: `Literal value type '${literalJsType}' is not compatible with field '${fieldRefNode.field}' of type '${fieldType}'.`,
+                start: literalNode.start,
+                end: literalNode.end,
+            });
+        }
+    }
     function validateFieldRef(node) {
         if (node.source === 'model') {
             // Check if field exists on model
@@ -7642,12 +7737,15 @@ function buildRelationValidationInfo(modelRelations, allModels) {
  */
 function createModelValidationContext(modelConfig) {
     const scalarFieldNames = new Set();
-    for (const field of modelConfig.fields ?? []) {
+    const fieldTypes = new Map();
+    for (const field of modelConfig.model.fields) {
         scalarFieldNames.add(field.name);
+        fieldTypes.set(field.name, field.type);
     }
     return {
         modelName: modelConfig.name,
         scalarFieldNames,
+        fieldTypes,
     };
 }
 
@@ -7759,9 +7857,13 @@ class AuthorizerExpressionParser extends RefExpressionParser {
         }
         // Model fields are nested under model.model.fields in the definition
         const scalarFieldNames = new Set();
+        const fieldTypes = new Map();
         for (const field of model.model?.fields ?? []) {
             if (typeof field.name === 'string') {
                 scalarFieldNames.add(field.name);
+                if (typeof field.type === 'string') {
+                    fieldTypes.set(field.name, field.type);
+                }
             }
         }
         // Build relation info for nested authorizer validation
@@ -7778,6 +7880,7 @@ class AuthorizerExpressionParser extends RefExpressionParser {
         return {
             modelName: model.name,
             scalarFieldNames,
+            fieldTypes,
             relationInfo,
         };
     }
@@ -9190,8 +9293,11 @@ function extractDefinitionRefs(schema, value) {
             if (data === null || data === undefined || typeof data !== 'object')
                 return;
             const id = get$1(data, meta.idPath);
-            if (typeof id !== 'string' || !id || !meta.type.isId(id)) {
-                throw new Error(`Unable to find valid id field '${meta.idPath.join('.')}' in entity ${meta.type.name} at path ${context.path.join('.')}`);
+            if (typeof id !== 'string' || !id) {
+                throw new Error(`Unable to find id field '${meta.idPath.join('.')}' in entity ${meta.type.name} at path ${context.path.join('.')}`);
+            }
+            if (!meta.type.isId(id)) {
+                throw new Error(`Invalid id field '${id}' in entity ${meta.type.name} at path ${context.path.join('.')}. Expected prefix: ${meta.type.prefix}. Got: ${id}`);
             }
             const nameResolver = (() => {
                 if (meta.getNameResolver) {
@@ -10583,6 +10689,9 @@ const modelScalarFieldEntityType = createEntityType('model-scalar-field', {
 const modelLocalRelationEntityType = createEntityType('model-local-relation', { parentType: modelEntityType });
 const modelForeignRelationEntityType = createEntityType('model-foreign-relation', { parentType: modelEntityType });
 const modelUniqueConstraintEntityType = createEntityType('model-unique-constraint', { parentType: modelEntityType });
+const modelIndexEntityType = createEntityType('model-index', {
+    parentType: modelEntityType,
+});
 const modelTransformerEntityType = createEntityType('model-transformer', { parentType: modelEntityType });
 const modelEnumEntityType = createEntityType('model-enum');
 const modelEnumValueEntityType = createEntityType('model-enum-value', {
@@ -11036,7 +11145,7 @@ const createModelScalarFieldSchema = definitionSchemaWithSlots({ modelSlot: mode
         isOptional: z$q.boolean().default(false),
     };
     const defaultOptionsSchema = z$q
-        .object({ default: z$q.string().optional() })
+        .object({ default: z$q.string().default('') })
         .default({ default: '' });
     const union = z$q.discriminatedUnion('type', [
         z$q.object({
@@ -11049,7 +11158,7 @@ const createModelScalarFieldSchema = definitionSchemaWithSlots({ modelSlot: mode
             type: z$q.literal('uuid'),
             options: z$q
                 .object({
-                default: z$q.string().optional(),
+                default: z$q.string().default(''),
                 genUuid: z$q.boolean().optional(),
             })
                 .default({ default: '' }),
@@ -11193,6 +11302,25 @@ const createModelUniqueConstraintSchema = definitionSchemaWithSlots({ modelSlot:
         });
     },
 }));
+const createModelIndexSchema = definitionSchemaWithSlots({ modelSlot: modelEntityType }, (ctx, { modelSlot }) => ctx.withEnt(z$q.object({
+    id: z$q.string(),
+    fields: z$q.array(z$q.object({
+        fieldRef: ctx.withRef({
+            type: modelScalarFieldEntityType,
+            onDelete: 'RESTRICT',
+            parentSlot: modelSlot,
+        }),
+    })),
+}), {
+    type: modelIndexEntityType,
+    parentSlot: modelSlot,
+    getNameResolver(value) {
+        return createDefinitionEntityNameResolver({
+            idsToResolve: { fields: value.fields.map((f) => f.fieldRef) },
+            resolveName: (entityNames) => entityNames.fields.join('_'),
+        });
+    },
+}));
 /**
  * Checks that enabled service methods have at least one field or transformer.
  */
@@ -11387,6 +11515,9 @@ const createModelBaseSchema = definitionSchemaWithSlots({ modelSlot: modelEntity
         uniqueConstraints: z$q
             .array(createModelUniqueConstraintSchema(ctx, slots))
             .apply(withDefault([])),
+        indexes: z$q
+            .array(createModelIndexSchema(ctx, slots))
+            .apply(withDefault([])),
     }),
     service: createModelServiceSchema(ctx, slots).apply(withDefault({})),
     graphql: ctx.withDefault(createModelGraphqlSchema(ctx, slots), {}),
@@ -12082,6 +12213,7 @@ const pluginConfigSpec = createFieldMapSpec('core/plugin-config', (t) => ({
     },
 });
 
+const {enhanceErrorWithContext} = await importShared('@baseplate-dev/utils');
 function runPluginMigrations(projectDefinition, pluginSpecStore) {
     const pluginConfigService = pluginSpecStore.use(pluginConfigSpec);
     return produce(projectDefinition, (draft) => {
@@ -12105,7 +12237,7 @@ function runPluginMigrations(projectDefinition, pluginSpecStore) {
                         }
                     }
                     catch (error) {
-                        throw new Error(`Error migrating plugin ${pluginDefinition.id} to version ${migration.version}: ${String(error)}`);
+                        throw enhanceErrorWithContext(error, `Error migrating plugin ${pluginDefinition.id} to version ${migration.version}`);
                     }
                 }
             }
@@ -12621,6 +12753,9 @@ function getModelValidator(modelField) {
         case 'uuid': {
             return 'string()';
         }
+        case 'json': {
+            return 'unknown()';
+        }
         default: {
             throw new Error(`Unsupported validator for ${modelField.type}`);
         }
@@ -12873,12 +13008,13 @@ const PluginUtils = {
  * at every schema node.
  *
  * Unlike `walkDataWithSchema`, this operates on the schema alone.
- * Only deterministic navigation steps produce path elements:
- * - Object keys and tuple indices add path elements
- * - Arrays of discriminated unions add `discriminated-union-array` elements
- *   (one per branch)
+ * Every structural descent produces a path element:
+ * - Object keys → `object-key`
+ * - Tuple indices → `tuple-index`
+ * - Arrays of discriminated unions → `discriminated-union-array` (one per branch)
+ * - Plain arrays → `array`
+ * - Records → `record`
  * - Discriminated unions on objects are transparent (no path element)
- * - Plain arrays and records are descended into without path elements
  *
  * Uses a `Set<z.ZodType>` circular-reference guard with delete-on-backtrack
  * so the same schema can appear at different paths.
@@ -12930,8 +13066,8 @@ function walkNode(schema, path, visitors, visited) {
                 walkDiscriminatedUnionArrayBranches(unwrappedElement, path, visitors, visited);
             }
             else {
-                // Plain array — descend without adding a path element
-                walkNode(children.elementSchema, path, visitors, visited);
+                // Plain array — descend with an array path element
+                walkNode(children.elementSchema, [...path, { type: 'array' }], visitors, visited);
             }
             break;
         }
@@ -12954,8 +13090,8 @@ function walkNode(schema, path, visitors, visited) {
             break;
         }
         case 'record': {
-            // Non-deterministic — walk without path element
-            walkNode(children.valueSchema, path, visitors, visited);
+            // Record — descend with a record path element
+            walkNode(children.valueSchema, [...path, { type: 'record' }], visitors, visited);
             break;
         }
         case 'intersection': {
@@ -13109,7 +13245,10 @@ function collectEntityMetadata(schema) {
                             `but no such entity was found in the ancestor chain`);
                     }
                     parentEntityTypeName = parentType.name;
-                    relativePath = ctx.path.slice(parentEntry.pathAtEntity.length);
+                    // Strip the first element — it is always an array or
+                    // discriminated-union-array that describes how to enter the parent's
+                    // array, not how to navigate from the parent entity to this child.
+                    relativePath = ctx.path.slice(parentEntry.pathAtEntity.length + 1);
                 }
                 else {
                     // Top-level entity: relative path is the full path
@@ -18821,6 +18960,86 @@ const migration026QuerySharedRoles = createSchemaMigration({
     },
 });
 
+const SENTRY_PLUGIN_ID = 'plugin:baseplate-dev_plugin-observability_sentry';
+/**
+ * Migration to auto-enable the Sentry plugin on all existing projects.
+ *
+ * Sentry was previously always-on (hardcoded in compilers). Now that it's been
+ * extracted into plugin-observability, existing projects need the plugin entry
+ * added so they don't lose Sentry when upgrading.
+ */
+const migration027EnableSentryPlugin = createSchemaMigration({
+    version: 27,
+    name: 'enableSentryPlugin',
+    description: 'Auto-enable Sentry plugin for existing projects (previously always-on)',
+    migrate: (config) => {
+        const plugins = config.plugins ? [...config.plugins] : [];
+        // Skip if sentry plugin already exists
+        const existingIndex = plugins.findIndex((p) => p.id === SENTRY_PLUGIN_ID);
+        if (existingIndex === -1) {
+            plugins.push({
+                id: SENTRY_PLUGIN_ID,
+                name: 'sentry',
+                packageName: '@baseplate-dev/plugin-observability',
+                version: '0.1.0',
+                config: {
+                    sentryOptions: {},
+                },
+            });
+        }
+        return {
+            ...config,
+            plugins,
+        };
+    },
+});
+
+const STRIPE_PLUGIN_ID = 'plugin:baseplate-dev_plugin-payments_stripe';
+/**
+ * Migration to convert enableStripe boolean on backend apps into a
+ * plugin-payments:stripe plugin entry, and remove enableStripe from app configs.
+ *
+ * Stripe was previously toggled via a boolean on the backend app config.
+ * Now that it's been extracted into plugin-payments, existing projects need
+ * the plugin entry added so they don't lose Stripe when upgrading.
+ */
+const migration028EnableStripePlugin = createSchemaMigration({
+    version: 28,
+    name: 'enableStripePlugin',
+    description: 'Convert enableStripe boolean to plugin-payments:stripe plugin entry',
+    migrate: (config) => {
+        const apps = config.apps ? [...config.apps] : [];
+        const plugins = config.plugins ? [...config.plugins] : [];
+        // Check if any app has enableStripe
+        const hasStripeEnabled = apps.some((app) => app.enableStripe);
+        // Add stripe plugin if any app had it enabled and it doesn't already exist
+        if (hasStripeEnabled) {
+            const existingIndex = plugins.findIndex((p) => p.id === STRIPE_PLUGIN_ID);
+            if (existingIndex === -1) {
+                plugins.push({
+                    id: STRIPE_PLUGIN_ID,
+                    name: 'stripe',
+                    packageName: '@baseplate-dev/plugin-payments',
+                    version: '0.1.0',
+                    config: {
+                        stripeOptions: {},
+                    },
+                });
+            }
+        }
+        // Remove enableStripe from all app configs
+        const updatedApps = apps.map((app) => {
+            const { enableStripe: _, ...rest } = app;
+            return rest;
+        });
+        return {
+            ...config,
+            apps: updatedApps,
+            plugins,
+        };
+    },
+});
+
 const SCHEMA_MIGRATIONS = [
     migration005PrimaryUniqueRefs,
     migration006IndividualServiceControllers,
@@ -18844,6 +19063,8 @@ const SCHEMA_MIGRATIONS = [
     migration024GraphqlObjectTypeFieldAuth,
     migration025ServiceMethodAuth,
     migration026QuerySharedRoles,
+    migration027EnableSentryPlugin,
+    migration028EnableStripePlugin,
 ];
 function isMigrateableProjectDefinition(projectDefinition) {
     return (typeof projectDefinition === 'object' &&
@@ -18968,6 +19189,33 @@ function createEntityIssue(container, entityId, relativePath, issue) {
     }
     return { ...issue, entityId, path: relativePath };
 }
+/**
+ * Creates a definition setter function from an issue's fix.
+ *
+ * Handles both fix variants:
+ * - `applySetter`: returned directly (definition-level fixes)
+ * - `apply`: wrapped in a setter that resolves the issue path and applies the
+ *   local-value transform (field-level fixes)
+ *
+ * Returns `undefined` if the issue has no fix.
+ */
+function createIssueFixSetter(issue, container) {
+    const { fix } = issue;
+    if (!fix)
+        return undefined;
+    if (fix.applySetter) {
+        return fix.applySetter;
+    }
+    if (fix.apply) {
+        const applyFn = fix.apply;
+        return (draft) => {
+            const absolutePath = resolveIssuePath(issue, container);
+            const currentValue = get$1(draft, absolutePath);
+            set$1(draft, absolutePath, applyFn(currentValue));
+        };
+    }
+    return undefined;
+}
 
 const MUTATION_METHODS = ['create', 'update', 'delete'];
 /**
@@ -19008,6 +19256,34 @@ function checkMutationRoles(container) {
     return issues;
 }
 
+/**
+ * Creates a fix that changes the local field's type to match the foreign field's type.
+ */
+function createTypeMismatchFix(modelId, localField, foreignField) {
+    return {
+        label: `Change '${localField.name}' type to '${foreignField.type}'`,
+        applySetter: (draft) => {
+            const draftModel = ModelUtils.byIdOrThrow(draft, modelId);
+            const draftField = ModelUtils.getScalarFieldById(draftModel, localField.id);
+            // Update the field type and reset options for the new type.
+            // For enum fields, copy the enumRef from the foreign field.
+            if (foreignField.type === 'enum') {
+                draftField.type = 'enum';
+                draftField.options = { ...foreignField.options };
+                Object.assign(draftField, {
+                    type: 'enum',
+                    options: { ...foreignField.options },
+                });
+            }
+            else {
+                Object.assign(draftField, {
+                    type: foreignField.type,
+                    options: {},
+                });
+            }
+        },
+    };
+}
 /**
  * Checks that relation reference pairs have matching scalar field types.
  *
@@ -19031,9 +19307,11 @@ function checkRelationTypeMismatch(container) {
                     continue;
                 }
                 if (localField.type !== foreignField.type) {
+                    const fix = createTypeMismatchFix(model.id, localField, foreignField);
                     issues.push(createEntityIssue(container, model.id, ['model', 'relations', relationIndex], {
                         message: `Relation '${relation.name}' type mismatch: '${localField.name}' is '${localField.type}' but '${foreignField.name}' on '${foreignModel.name}' is '${foreignField.type}'`,
                         severity: 'warning',
+                        fix,
                     }));
                 }
             }
@@ -19147,11 +19425,12 @@ class PackageCompiler {
     /**
      * Get the tasks for a package used in turbo configuration
      *
-     * @returns Object with build, dev, and watch tasks
+     * @returns Object with build, check, dev, and watch tasks
      */
     getTasks() {
         return {
             build: [],
+            check: [],
             dev: [],
             watch: [],
         };
@@ -19258,6 +19537,12 @@ function navigateToEntityArrayFromSchemaPath(obj, relativePath, pathPrefix) {
                 path.push(match);
                 break;
             }
+            case 'array': {
+                throw new Error(`Cannot navigate through plain array at path "${path.join('.')}": non-deterministic structure`);
+            }
+            case 'record': {
+                throw new Error(`Cannot navigate through record at path "${path.join('.')}": non-deterministic structure`);
+            }
         }
     }
     if (!Array.isArray(current)) {
@@ -21189,5 +21474,5 @@ function generateDefaultTheme() {
     };
 }
 
-export { AVAILABLE_FLAGS, AppUtils, AuthorizerExpressionParseError, AuthorizerExpressionParser, BUILT_IN_ADMIN_CRUD_ACTIONS, BUILT_IN_ADMIN_CRUD_COLUMNS, BUILT_IN_ADMIN_CRUD_INPUTS, BUILT_IN_TRANSFORMERS, COLOR_PALETTES, DEFAULT_APPS_FOLDER, DEFAULT_LIBRARIES_FOLDER, DefinitionDiffArrayIncludesField, DefinitionDiffKeyedArrayField, DefinitionDiffReplacementField, EnumUtils, FIXED_COLOR_MAPPINGS, LibraryCompiler, LibraryUtils, ModelFieldUtils, ModelTransformerUtils, ModelUtils, PALETTE_SHADES, PackageCompiler, PluginSpecStore, PluginUtils, ProjectDefinitionContainer, REFERENTIAL_ACTIONS, RefExpressionParser, SCALAR_FIELD_TYPES, SCHEMA_MIGRATIONS, SchemaMigrationError, THEME_COLORS, THEME_COLOR_KEYS, VALIDATORS, adminCrudActionCompilerSpec, adminCrudActionEntityType, adminCrudActionSpec, adminCrudColumnCompilerSpec, adminCrudColumnEntityType, adminCrudColumnSpec, adminCrudEmbeddedFormEntityType, adminCrudEmbeddedInputType, adminCrudEmbeddedLocalInputType, adminCrudInputCompilerSpec, adminCrudInputEntityType, adminCrudInputSpec, adminCrudSectionColumnEntityType, adminSectionEntityType, appCompilerSpec, appEntityType, applyDefinitionDiff, applyDefinitionFixes, applyMergedDefinition, authConfigSpec, authModelsSpec, authRoleEntityType, authorizerExpressionParser, backendAppEntryType, baseAdminCrudActionSchema, baseAdminCrudColumnSchema, baseAdminCrudInputSchema, baseAppSchema, baseAppValidators, baseLibrarySchema, baseLibraryValidators, basePluginDefinitionSchema, baseTransformerFields, baseTransformerSchema, buildPackageName, buildRelationValidationInfo, checkUniqueField, cleanDefaultValues, collectDefinitionIssues, collectEntityArrays, collectEntityMetadata, collectExpressionIssues, collectFieldIssues, convertColorNameToOklch, convertHexToOklch, convertOklchToColorName, convertOklchToHex, createAdminAppSchema, createAdminCrudActionSchema, createAdminCrudActionType, createAdminCrudColumnCompiler, createAdminCrudColumnSchema, createAdminCrudColumnType, createAdminCrudDeleteActionSchema, createAdminCrudEditActionSchema, createAdminCrudEmbeddedFormSchema, createAdminCrudEmbeddedInputSchema, createAdminCrudEmbeddedLocalInputSchema, createAdminCrudEnumInputSchema, createAdminCrudForeignColumnSchema, createAdminCrudForeignInputSchema, createAdminCrudInputSchema, createAdminCrudInputType, createAdminCrudPasswordInputSchema, createAdminCrudSectionSchema, createAdminCrudTextColumnSchema, createAdminCrudTextInputSchema, createAppCompiler, createAppEntryType, createAppSchema, createAuthorizerRoleSchema, createBackendAppSchema, createBaseAdminSectionValidators, createDefinitionDiff, createDefinitionDiffConfig, createDefinitionEntityNameResolver, createDefinitionSchemaParserContext, createEmbeddedRelationTransformerSchema, createEntity, createEntityIssue, createEntityType, createEnumBaseSchema, createEnumSchema, createEnumValueSchema, createFeaturesSchema, createFieldMapSpec, createLibraryWebConfig, createModelAuthorizerSchema, createModelBaseSchema, createModelGraphqlSchema, createModelRelationFieldSchema, createModelScalarFieldSchema, createModelSchema, createModelServiceSchema, createModelTransformerType, createModelUniqueConstraintSchema, createModelValidationContext, createPluginImplementationStoreWithNewPlugins, createPluginModule, createPluginSpecStore, createPluginWithConfigSchema, createPluginsSchema, createProjectDefinitionSchema, createProjectDefinitionSchemaWithContext, createRefSchemaCollector, createRefSchemaVisitor, createSettingsSchema, createTemplateExtractorSchema, createThemeSchema, createTransformerSchema, createWebAdminSectionSchema, createWebAppSchema, definitionFieldIssueRegistry, definitionFixRegistry, definitionIssueCheckerSpec, definitionRefRegistry, definitionSchema, definitionSchemaWithSlots, deleteEntity, deserializeSchemaWithTransformedReferences, diffDefinition, diffSerializedDefinitions, extractDefinitionRefs, featureEntityType, findDiscriminatedUnionMatch, fixRefDeletions, generalSettingsSchema, generateCssFromThemeConfig, generateDefaultTheme, generateThemeColorsFromShade, getBackendRelativePath, getDefaultThemeColorFromShade, getEntity, getEntityName, getLatestMigrationVersion, getManagedPluginsForPlugin, getMergeRule, getPackageDirectory, getPluginMetadataByKey, getPluginMetadataByKeyOrThrow, infrastructureSettingsSchema, initializePlugins, isMigrateableProjectDefinition, libraryEntityType, libraryTypeSpec, listEntities, mergeDataWithSchema, mergeDefinition, mergeDefinitionContainer, modelAuthorizerRoleEntityType, modelEntityType, modelEnumEntityType, modelEnumValueEntityType, modelForeignRelationEntityType, modelLocalRelationEntityType, modelScalarFieldEntityType, modelTransformerCompilerSpec, modelTransformerEntityType, modelTransformerSpec, modelUniqueConstraintEntityType, monorepoSettingsSchema, nodeLibraryDefinitionSchemaEntry, oklchColor, paletteSchema, palettesSchema, parseAuthorizerExpression, parseOklch, parseProjectDefinitionWithContext, parseProjectDefinitionWithReferences, partitionIssuesBySeverity, pluginAppCompiler, pluginConfigSpec, pluginEntityType, pluginMetadataSchema, pluginSpecDependencySchema, pluginSpecSupportSchema, resolveIssuePath, runInPluginContext, runPluginMigrations, runSchemaMigrations, serializeSchema, serializeSchemaFromRefPayload, stripEmptyGeneratorChildren, stripUndefinedValues, themeColorSchema, transformDataWithSchema, undefinedIfEmpty, undefinedIfFalsy, updateEntity, validateAuthorizerExpression, walkDataWithSchema, webAppEntryType, webConfigSpec, withByKeyMergeRule, withDefault, withFix, withIssueChecker, withMergeRule };
-//# sourceMappingURL=project-builder-lib-CQKLkNsU.js.map
+export { AVAILABLE_FLAGS, AppUtils, AuthorizerExpressionParseError, AuthorizerExpressionParser, BUILT_IN_ADMIN_CRUD_ACTIONS, BUILT_IN_ADMIN_CRUD_COLUMNS, BUILT_IN_ADMIN_CRUD_INPUTS, BUILT_IN_TRANSFORMERS, COLOR_PALETTES, DEFAULT_APPS_FOLDER, DEFAULT_LIBRARIES_FOLDER, DefinitionDiffArrayIncludesField, DefinitionDiffKeyedArrayField, DefinitionDiffReplacementField, EnumUtils, FIXED_COLOR_MAPPINGS, LibraryCompiler, LibraryUtils, ModelFieldUtils, ModelTransformerUtils, ModelUtils, PALETTE_SHADES, PackageCompiler, PluginSpecStore, PluginUtils, ProjectDefinitionContainer, REFERENTIAL_ACTIONS, RefExpressionParser, SCALAR_FIELD_TYPES, SCHEMA_MIGRATIONS, SchemaMigrationError, THEME_COLORS, THEME_COLOR_KEYS, VALIDATORS, adminCrudActionCompilerSpec, adminCrudActionEntityType, adminCrudActionSpec, adminCrudColumnCompilerSpec, adminCrudColumnEntityType, adminCrudColumnSpec, adminCrudEmbeddedFormEntityType, adminCrudEmbeddedInputType, adminCrudEmbeddedLocalInputType, adminCrudInputCompilerSpec, adminCrudInputEntityType, adminCrudInputSpec, adminCrudSectionColumnEntityType, adminSectionEntityType, appCompilerSpec, appEntityType, applyDefinitionDiff, applyDefinitionFixes, applyMergedDefinition, authConfigSpec, authModelsSpec, authRoleEntityType, authorizerExpressionParser, backendAppEntryType, baseAdminCrudActionSchema, baseAdminCrudColumnSchema, baseAdminCrudInputSchema, baseAppSchema, baseAppValidators, baseLibrarySchema, baseLibraryValidators, basePluginDefinitionSchema, baseTransformerFields, baseTransformerSchema, buildPackageName, buildRelationValidationInfo, checkUniqueField, cleanDefaultValues, collectDefinitionIssues, collectEntityArrays, collectEntityMetadata, collectExpressionIssues, collectFieldIssues, convertColorNameToOklch, convertHexToOklch, convertOklchToColorName, convertOklchToHex, createAdminAppSchema, createAdminCrudActionSchema, createAdminCrudActionType, createAdminCrudColumnCompiler, createAdminCrudColumnSchema, createAdminCrudColumnType, createAdminCrudDeleteActionSchema, createAdminCrudEditActionSchema, createAdminCrudEmbeddedFormSchema, createAdminCrudEmbeddedInputSchema, createAdminCrudEmbeddedLocalInputSchema, createAdminCrudEnumInputSchema, createAdminCrudForeignColumnSchema, createAdminCrudForeignInputSchema, createAdminCrudInputSchema, createAdminCrudInputType, createAdminCrudPasswordInputSchema, createAdminCrudSectionSchema, createAdminCrudTextColumnSchema, createAdminCrudTextInputSchema, createAppCompiler, createAppEntryType, createAppSchema, createAuthorizerRoleSchema, createBackendAppSchema, createBaseAdminSectionValidators, createDefinitionDiff, createDefinitionDiffConfig, createDefinitionEntityNameResolver, createDefinitionSchemaParserContext, createEmbeddedRelationTransformerSchema, createEntity, createEntityIssue, createEntityType, createEnumBaseSchema, createEnumSchema, createEnumValueSchema, createFeaturesSchema, createFieldMapSpec, createIssueFixSetter, createLibraryWebConfig, createModelAuthorizerSchema, createModelBaseSchema, createModelGraphqlSchema, createModelIndexSchema, createModelRelationFieldSchema, createModelScalarFieldSchema, createModelSchema, createModelServiceSchema, createModelTransformerType, createModelUniqueConstraintSchema, createModelValidationContext, createPluginImplementationStoreWithNewPlugins, createPluginModule, createPluginSpecStore, createPluginWithConfigSchema, createPluginsSchema, createProjectDefinitionSchema, createProjectDefinitionSchemaWithContext, createRefSchemaCollector, createRefSchemaVisitor, createSettingsSchema, createTemplateExtractorSchema, createThemeSchema, createTransformerSchema, createWebAdminSectionSchema, createWebAppSchema, definitionFieldIssueRegistry, definitionFixRegistry, definitionIssueCheckerSpec, definitionRefRegistry, definitionSchema, definitionSchemaWithSlots, deleteEntity, deserializeSchemaWithTransformedReferences, diffDefinition, diffSerializedDefinitions, extractDefinitionRefs, featureEntityType, findDiscriminatedUnionMatch, fixRefDeletions, generalSettingsSchema, generateCssFromThemeConfig, generateDefaultTheme, generateThemeColorsFromShade, getBackendRelativePath, getDefaultThemeColorFromShade, getEntity, getEntityName, getLatestMigrationVersion, getManagedPluginsForPlugin, getMergeRule, getPackageDirectory, getPluginMetadataByKey, getPluginMetadataByKeyOrThrow, infrastructureSettingsSchema, initializePlugins, isMigrateableProjectDefinition, libraryEntityType, libraryTypeSpec, listEntities, mergeDataWithSchema, mergeDefinition, mergeDefinitionContainer, modelAuthorizerRoleEntityType, modelEntityType, modelEnumEntityType, modelEnumValueEntityType, modelForeignRelationEntityType, modelIndexEntityType, modelLocalRelationEntityType, modelScalarFieldEntityType, modelTransformerCompilerSpec, modelTransformerEntityType, modelTransformerSpec, modelUniqueConstraintEntityType, monorepoSettingsSchema, nodeLibraryDefinitionSchemaEntry, oklchColor, paletteSchema, palettesSchema, parseAuthorizerExpression, parseOklch, parseProjectDefinitionWithContext, parseProjectDefinitionWithReferences, partitionIssuesBySeverity, pluginAppCompiler, pluginConfigSpec, pluginEntityType, pluginMetadataSchema, pluginSpecDependencySchema, pluginSpecSupportSchema, resolveIssuePath, runInPluginContext, runPluginMigrations, runSchemaMigrations, serializeSchema, serializeSchemaFromRefPayload, stripEmptyGeneratorChildren, stripUndefinedValues, themeColorSchema, transformDataWithSchema, undefinedIfEmpty, undefinedIfFalsy, updateEntity, validateAuthorizerExpression, walkDataWithSchema, webAppEntryType, webConfigSpec, withByKeyMergeRule, withDefault, withFix, withIssueChecker, withMergeRule };
+//# sourceMappingURL=project-builder-lib-zJirGIS1.js.map