@baseplate-dev/project-builder-lib 0.5.0 → 0.5.2

package/dist/schema/creator/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/schema/creator/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EACX,WAAW,EACZ,MAAM,oDAAoD,CAAC;AAC5D,OAAO,KAAK,EACV,wBAAwB,EACxB,iBAAiB,EAClB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAEhF;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C;;OAEG;IACH,OAAO,EAAE,yBAAyB,CAAC;IACnC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;CACjD;AAED,MAAM,WAAW,6BAA6B;IAC5C;;OAEG;IACH,OAAO,EAAE,yBAAyB,CAAC;IACnC;;OAEG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;IAChD;;OAEG;IACH,OAAO,EAAE,WAAW,CAAC;IACrB;;OAEG;IACH,OAAO,EAAE,WAAW,CAAC;IACrB;;;;;OAKG;IACH,WAAW,EAAE,eAAe,CAAC;IAC7B;;;OAGG;IACH,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,MAAM,uBAAuB,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CACrE,GAAG,EAAE,6BAA6B,KAC/B,CAAC,CAAC;AAEP,MAAM,MAAM,gCAAgC,CAC1C,iBAAiB,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,EAC/C,eAAe,SAAS,wBAAwB,GAAG,wBAAwB,IACzE,CAAC,CACH,GAAG,EAAE,6BAA6B,EAClC,KAAK,EAAE,iBAAiB,CAAC,eAAe,CAAC,KACtC,iBAAiB,CAAC,GAAG;IACxB,cAAc,EAAE,eAAe,CAAC;CACjC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/schema/creator/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,WAAW,EACZ,MAAM,oDAAoD,CAAC;AAC5D,OAAO,KAAK,EACV,wBAAwB,EACxB,iBAAiB,EAClB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAEhF;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C;;OAEG;IACH,OAAO,EAAE,eAAe,CAAC;IACzB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;CACjD;AAED,MAAM,WAAW,6BAA6B;IAC5C;;OAEG;IACH,OAAO,EAAE,eAAe,CAAC;IACzB;;OAEG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;IAChD;;OAEG;IACH,OAAO,EAAE,WAAW,CAAC;IACrB;;OAEG;IACH,OAAO,EAAE,WAAW,CAAC;IACrB;;;;;OAKG;IACH,WAAW,EAAE,eAAe,CAAC;IAC7B;;;OAGG;IACH,UAAU,EAAE,cAAc,CAAC;IAC3B;;;OAGG;IACH,cAAc,EAAE,kBAAkB,CAAC;CACpC;AAED,MAAM,MAAM,uBAAuB,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CACrE,GAAG,EAAE,6BAA6B,KAC/B,CAAC,CAAC;AAEP,MAAM,MAAM,gCAAgC,CAC1C,iBAAiB,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,EAC/C,eAAe,SAAS,wBAAwB,GAAG,wBAAwB,IACzE,CAAC,CACH,GAAG,EAAE,6BAA6B,EAClC,KAAK,EAAE,iBAAiB,CAAC,eAAe,CAAC,KACtC,iBAAiB,CAAC,GAAG;IACxB,cAAc,EAAE,eAAe,CAAC;CACjC,CAAC"}

package/dist/schema/index.d.ts

@@ -2,8 +2,8 @@ export * from './apps/index.js';
 export * from './auth/index.js';
 export * from './creator/index.js';
 export * from './features/index.js';
+export * from './libraries/index.js';
 export * from './models/index.js';
-export * from './packages/index.js';
 export * from './plugins/index.js';
 export * from './project-definition.js';
 export * from './settings/index.js';

package/dist/schema/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC"}

package/dist/schema/index.js

@@ -2,8 +2,8 @@ export * from './apps/index.js';
 export * from './auth/index.js';
 export * from './creator/index.js';
 export * from './features/index.js';
+export * from './libraries/index.js';
 export * from './models/index.js';
-export * from './packages/index.js';
 export * from './plugins/index.js';
 export * from './project-definition.js';
 export * from './settings/index.js';

package/dist/schema/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC"}

package/dist/schema/{packages → libraries}/base.d.ts

@@ -1,13 +1,13 @@
 import { z } from 'zod';
-export declare const basePackageValidators: {
+export declare const baseLibraryValidators: {
     readonly id: z.ZodDefault<z.ZodString>;
     readonly name: z.ZodString;
     readonly type: z.ZodString;
 };
-export declare const basePackageSchema: z.ZodObject<{
+export declare const baseLibrarySchema: z.ZodObject<{
     id: z.ZodDefault<z.ZodString>;
     name: z.ZodString;
     type: z.ZodString;
 }, z.core.$strip>;
-export type BasePackageConfig = z.infer<typeof basePackageSchema>;
+export type BaseLibraryDefinition = z.infer<typeof baseLibrarySchema>;
 //# sourceMappingURL=base.d.ts.map

package/dist/schema/libraries/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/schema/libraries/base.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,qBAAqB;;;;CAIxB,CAAC;AAEX,eAAO,MAAM,iBAAiB;;;;iBAAkC,CAAC;AAEjE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/schema/libraries/base.js

@@ -0,0 +1,10 @@
+import { CASE_VALIDATORS } from '@baseplate-dev/utils';
+import { z } from 'zod';
+import { libraryEntityType } from './types.js';
+export const baseLibraryValidators = {
+    id: z.string().default(libraryEntityType.generateNewId()),
+    name: CASE_VALIDATORS.KEBAB_CASE,
+    type: z.string(),
+};
+export const baseLibrarySchema = z.object(baseLibraryValidators);
+//# sourceMappingURL=base.js.map

package/dist/schema/libraries/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/schema/libraries/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC;IACzD,IAAI,EAAE,eAAe,CAAC,UAAU;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACR,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC"}

package/dist/schema/libraries/index.d.ts

@@ -0,0 +1,3 @@
+export * from './base.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/schema/libraries/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/schema/libraries/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC"}

package/dist/schema/libraries/index.js

@@ -0,0 +1,3 @@
+export * from './base.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/schema/libraries/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/schema/libraries/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC"}

package/dist/schema/libraries/library.d.ts

@@ -0,0 +1,19 @@
+import z from 'zod';
+export declare const createLibrarySchema: (context: import("../index.js").DefinitionSchemaParserContext) => z.ZodType<{
+    id: string;
+    name: string;
+    type: string;
+}, {
+    name: string;
+    type: string;
+    id?: string | undefined;
+}, z.z.core.$ZodTypeInternals<{
+    id: string;
+    name: string;
+    type: string;
+}, {
+    name: string;
+    type: string;
+    id?: string | undefined;
+}>>;
+//# sourceMappingURL=library.d.ts.map

package/dist/schema/libraries/library.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"library.d.ts","sourceRoot":"","sources":["../../../src/schema/libraries/library.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AASpB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;GAiB/B,CAAC"}

package/dist/schema/libraries/library.js

@@ -0,0 +1,13 @@
+import z from 'zod';
+import { libraryTypeSpec } from '#src/specs/packages/library-type-spec.js';
+import { definitionSchema } from '../creator/schema-creator.js';
+import { libraryEntityType } from './types.js';
+export const createLibrarySchema = definitionSchema((ctx) => ctx.refContext({ librarySlot: libraryEntityType }, ({ librarySlot }) => {
+    const packageTypes = ctx.plugins.use(libraryTypeSpec);
+    const schemas = [...packageTypes.schemaCreators.values()].map((entry) => entry.definitionSchema(ctx, { librarySlot }));
+    return ctx.withEnt(z.discriminatedUnion('type', schemas), {
+        type: libraryEntityType,
+        provides: librarySlot,
+    });
+}));
+//# sourceMappingURL=library.js.map

package/dist/schema/libraries/library.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"library.js","sourceRoot":"","sources":["../../../src/schema/libraries/library.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,OAAO,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAI3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1D,GAAG,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE;IACrE,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACtE,KAAK,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,CAC7C,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,CAChB,CAAC,CAAC,kBAAkB,CAClB,MAAM,EACN,OAAsE,CACvE,EACD;QACE,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,WAAW;KACtB,CACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/dist/schema/libraries/types.d.ts

@@ -0,0 +1,2 @@
+export declare const libraryEntityType: import("#src/references/types.js").DefinitionEntityType<false>;
+//# sourceMappingURL=types.d.ts.map

package/dist/schema/libraries/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/schema/libraries/types.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iBAAiB,gEAA8B,CAAC"}

package/dist/schema/libraries/types.js

@@ -0,0 +1,3 @@
+import { createEntityType } from '#src/references/types.js';
+export const libraryEntityType = createEntityType('library');
+//# sourceMappingURL=types.js.map

package/dist/schema/libraries/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/schema/libraries/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC"}

package/dist/schema/models/authorizer/authorizer-expression-acorn-parser.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Parser for authorizer expressions using Acorn.
+ *
+ * Parses expressions with implicit auth context:
+ * - `model.id === userId`
+ * - `hasRole('admin')`
+ * - `hasSomeRole(['admin', 'moderator'])`
+ * - `model.id === userId || hasRole('admin')`
+ *
+ * Uses Acorn to parse as JavaScript, then converts the ESTree AST
+ * to our domain-specific AST, rejecting unsupported constructs.
+ */
+import type { AuthorizerExpressionInfo } from './authorizer-expression-ast.js';
+/**
+ * Parse an authorizer expression string into our domain AST.
+ *
+ * @param input - The expression string to parse
+ * @returns The parsed expression info including AST and dependencies
+ * @throws {AuthorizerExpressionParseError} If the expression is invalid
+ *
+ * @example
+ * ```typescript
+ * const result = parseAuthorizerExpression("model.id === auth.userId");
+ * // result.ast = { type: 'fieldComparison', ... }
+ * // result.modelFieldRefs = ['id']
+ * // result.authFieldRefs = ['userId']
+ * ```
+ */
+export declare function parseAuthorizerExpression(input: string): AuthorizerExpressionInfo;
+//# sourceMappingURL=authorizer-expression-acorn-parser.d.ts.map

package/dist/schema/models/authorizer/authorizer-expression-acorn-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-acorn-parser.d.ts","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer-expression-acorn-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAYH,OAAO,KAAK,EACV,wBAAwB,EAOzB,MAAM,gCAAgC,CAAC;AAIxC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GACZ,wBAAwB,CA6C1B"}

package/dist/schema/models/authorizer/authorizer-expression-acorn-parser.js

@@ -0,0 +1,291 @@
+/**
+ * Parser for authorizer expressions using Acorn.
+ *
+ * Parses expressions with implicit auth context:
+ * - `model.id === userId`
+ * - `hasRole('admin')`
+ * - `hasSomeRole(['admin', 'moderator'])`
+ * - `model.id === userId || hasRole('admin')`
+ *
+ * Uses Acorn to parse as JavaScript, then converts the ESTree AST
+ * to our domain-specific AST, rejecting unsupported constructs.
+ */
+import { parse } from 'acorn';
+import { AuthorizerExpressionParseError } from './authorizer-expression-ast.js';
+/**
+ * Parse an authorizer expression string into our domain AST.
+ *
+ * @param input - The expression string to parse
+ * @returns The parsed expression info including AST and dependencies
+ * @throws {AuthorizerExpressionParseError} If the expression is invalid
+ *
+ * @example
+ * ```typescript
+ * const result = parseAuthorizerExpression("model.id === auth.userId");
+ * // result.ast = { type: 'fieldComparison', ... }
+ * // result.modelFieldRefs = ['id']
+ * // result.authFieldRefs = ['userId']
+ * ```
+ */
+export function parseAuthorizerExpression(input) {
+    // Parse with Acorn
+    let program;
+    try {
+        program = parse(input, {
+            ecmaVersion: 2020,
+        });
+    }
+    catch (error) {
+        if (error instanceof SyntaxError) {
+            throw new AuthorizerExpressionParseError(`Invalid expression syntax: ${error.message}`, 
+            // SyntaxError thrown by Acorn have a pos property
+            error.pos);
+        }
+        throw error;
+    }
+    // Check body is an expression
+    if (program.body.length !== 1) {
+        throw new AuthorizerExpressionParseError('Expression must be a single expression statement, e.g. model.id === auth.userId', 0, input.length);
+    }
+    const expressionStatement = program.body[0];
+    if (expressionStatement.type !== 'ExpressionStatement') {
+        throw new AuthorizerExpressionParseError('Line must be an expression statement, e.g. model.id === auth.userId', expressionStatement);
+    }
+    // Convert ESTree to our domain AST
+    const ast = convertNode(expressionStatement.expression);
+    // Extract dependency information
+    const info = extractInfo(ast);
+    return {
+        ast,
+        ...info,
+    };
+}
+/**
+ * Convert an ESTree expression node to our domain AST.
+ */
+function convertNode(node) {
+    switch (node.type) {
+        case 'LogicalExpression': {
+            return convertLogicalExpression(node);
+        }
+        case 'BinaryExpression': {
+            return convertBinaryExpression(node);
+        }
+        case 'CallExpression': {
+            return convertCallExpression(node);
+        }
+        case 'MemberExpression': {
+            // A bare member expression like `model.id` without comparison
+            throw new AuthorizerExpressionParseError('Field reference must be part of a comparison (e.g., model.id === auth.userId)', node);
+        }
+        default: {
+            throw new AuthorizerExpressionParseError(`Unsupported expression type: ${node.type}`, node);
+        }
+    }
+}
+/**
+ * Convert a LogicalExpression (|| or &&) to BinaryLogicalNode.
+ */
+function convertLogicalExpression(node) {
+    if (node.operator !== '||' && node.operator !== '&&') {
+        throw new AuthorizerExpressionParseError(`Unsupported logical operator: ${node.operator}. Only || and && are supported.`, node.left.end, node.right.start);
+    }
+    return {
+        type: 'binaryLogical',
+        operator: node.operator,
+        left: convertNode(node.left),
+        right: convertNode(node.right),
+    };
+}
+/**
+ * Convert a BinaryExpression (===) to FieldComparisonNode.
+ */
+function convertBinaryExpression(node) {
+    if (node.operator !== '===') {
+        throw new AuthorizerExpressionParseError(`Unsupported comparison operator: ${node.operator}. Only === is supported.`, node.left.end, node.right.start);
+    }
+    // Acorn's BinaryExpression allows PrivateIdentifier for ES2022+, but we only
+    // support MemberExpression field refs. convertFieldRef will throw if given
+    // anything other than MemberExpression.
+    return {
+        type: 'fieldComparison',
+        operator: '===',
+        left: convertFieldRef(node.left),
+        right: convertFieldRef(node.right),
+    };
+}
+/**
+ * Convert a CallExpression to HasRoleNode or HasSomeRoleNode.
+ * Supports:
+ * - `hasRole('admin')`
+ * - `hasSomeRole(['admin', 'moderator'])`
+ */
+function convertCallExpression(node) {
+    // Only support direct calls (e.g., hasRole(...))
+    if (node.callee.type !== 'Identifier') {
+        throw new AuthorizerExpressionParseError('Function calls must be standalone (hasRole, hasSomeRole)', node.callee);
+    }
+    const funcName = node.callee.name;
+    if (funcName === 'hasRole') {
+        return parseHasRoleArgs(node, 'hasRole()');
+    }
+    if (funcName === 'hasSomeRole') {
+        return parseHasSomeRoleArgs(node, 'hasSomeRole()');
+    }
+    throw new AuthorizerExpressionParseError(`Unknown function '${funcName}'. Use hasRole() or hasSomeRole().`, node.callee);
+}
+/**
+ * Parse hasRole('role') arguments.
+ */
+function parseHasRoleArgs(node, funcName) {
+    // Must have exactly one string argument
+    if (node.arguments.length !== 1) {
+        throw new AuthorizerExpressionParseError(`${funcName} requires exactly one argument, got ${node.arguments.length}`, node);
+    }
+    const arg = node.arguments[0];
+    if (arg.type !== 'Literal' || typeof arg.value !== 'string') {
+        throw new AuthorizerExpressionParseError(`${funcName} argument must be a string literal`, arg);
+    }
+    const role = arg.value;
+    return {
+        type: 'hasRole',
+        role,
+        roleStart: arg.start,
+        roleEnd: arg.end,
+    };
+}
+/**
+ * Parse hasSomeRole(['role1', 'role2']) arguments.
+ */
+function parseHasSomeRoleArgs(node, funcName) {
+    // Must have exactly one array argument
+    if (node.arguments.length !== 1) {
+        throw new AuthorizerExpressionParseError(`${funcName} requires exactly one argument, got ${node.arguments.length}`, node);
+    }
+    const arg = node.arguments[0];
+    if (arg.type !== 'ArrayExpression') {
+        throw new AuthorizerExpressionParseError(`${funcName} argument must be an array literal (e.g., ['admin', 'moderator'])`, arg);
+    }
+    const roles = [];
+    const rolesStart = [];
+    const rolesEnd = [];
+    for (const element of arg.elements) {
+        if (!element) {
+            throw new AuthorizerExpressionParseError(`${funcName} array cannot have empty elements`, arg);
+        }
+        if (element.type !== 'Literal' || typeof element.value !== 'string') {
+            throw new AuthorizerExpressionParseError(`${funcName} array elements must be string literals`, element);
+        }
+        roles.push(element.value);
+        rolesStart.push(element.start);
+        rolesEnd.push(element.end);
+    }
+    if (roles.length === 0) {
+        throw new AuthorizerExpressionParseError(`${funcName} requires at least one role`, arg);
+    }
+    return {
+        type: 'hasSomeRole',
+        roles,
+        rolesStart,
+        rolesEnd,
+    };
+}
+/**
+ * Convert to FieldRefNode.
+ * Supports:
+ * - Standalone identifier for implicit auth context: `userId`
+ * - Member expressions: `model.field`
+ */
+function convertFieldRef(node) {
+    // Handle standalone identifier (implicit auth context)
+    if (node.type === 'Identifier') {
+        const identifier = node;
+        const { name } = identifier;
+        // Only userId is valid as a standalone identifier (implicit auth context)
+        if (name === 'userId') {
+            return {
+                type: 'fieldRef',
+                source: 'auth',
+                field: 'userId',
+                start: node.start,
+                end: node.end,
+            };
+        }
+        throw new AuthorizerExpressionParseError(`Unknown identifier '${name}'. Did you mean 'model.${name}' or use 'userId' for auth context?`, node);
+    }
+    if (node.type !== 'MemberExpression') {
+        throw new AuthorizerExpressionParseError('Expected field reference (model.field or userId)', node);
+    }
+    const memberExpr = node;
+    // Object must be an identifier
+    if (memberExpr.object.type !== 'Identifier') {
+        throw new AuthorizerExpressionParseError('Field reference must start with model', memberExpr.object);
+    }
+    const source = memberExpr.object.name;
+    if (source !== 'model') {
+        throw new AuthorizerExpressionParseError(`Field reference must start with 'model', not '${source}'`, memberExpr.object);
+    }
+    // Property must be a simple identifier (not computed)
+    if (memberExpr.computed) {
+        throw new AuthorizerExpressionParseError('Computed property access (e.g., model["field"]) is not supported', memberExpr.property);
+    }
+    if (memberExpr.property.type !== 'Identifier') {
+        throw new AuthorizerExpressionParseError('Expected field name identifier', memberExpr.property);
+    }
+    const field = memberExpr.property.name;
+    return {
+        type: 'fieldRef',
+        source: 'model',
+        field,
+        start: node.start,
+        end: node.end,
+    };
+}
+/**
+ * Extract dependency information from the parsed AST.
+ */
+function extractInfo(ast) {
+    const modelFieldRefs = [];
+    const authFieldRefs = [];
+    const roleRefs = [];
+    let requiresModel = false;
+    function walk(node) {
+        switch (node.type) {
+            case 'fieldComparison': {
+                walkFieldRef(node.left);
+                walkFieldRef(node.right);
+                break;
+            }
+            case 'hasRole': {
+                roleRefs.push(node.role);
+                break;
+            }
+            case 'hasSomeRole': {
+                roleRefs.push(...node.roles);
+                break;
+            }
+            case 'binaryLogical': {
+                walk(node.left);
+                walk(node.right);
+                break;
+            }
+        }
+    }
+    function walkFieldRef(node) {
+        if (node.source === 'model') {
+            modelFieldRefs.push(node.field);
+            requiresModel = true;
+        }
+        else {
+            authFieldRefs.push(node.field);
+        }
+    }
+    walk(ast);
+    return {
+        modelFieldRefs: [...new Set(modelFieldRefs)],
+        authFieldRefs: [...new Set(authFieldRefs)],
+        roleRefs: [...new Set(roleRefs)],
+        requiresModel,
+    };
+}
+//# sourceMappingURL=authorizer-expression-acorn-parser.js.map

package/dist/schema/models/authorizer/authorizer-expression-acorn-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-acorn-parser.js","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer-expression-acorn-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAY9B,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAEhF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAa;IAEb,mBAAmB;IACnB,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE;YACrB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,8BAA8B,CACtC,8BAA8B,KAAK,CAAC,OAAO,EAAE;YAC7C,kDAAkD;YACjD,KAAoC,CAAC,GAAG,CAC1C,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,8BAA8B,CACtC,iFAAiF,EACjF,CAAC,EACD,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,CAAC;IACD,MAAM,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE5C,IAAI,mBAAmB,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACvD,MAAM,IAAI,8BAA8B,CACtC,qEAAqE,EACrE,mBAAmB,CACpB,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,MAAM,GAAG,GAAG,WAAW,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAExD,iCAAiC;IACjC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAE9B,OAAO;QACL,GAAG;QACH,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,IAAgB;IACnC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,8DAA8D;YAC9D,MAAM,IAAI,8BAA8B,CACtC,+EAA+E,EAC/E,IAAI,CACL,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAI,8BAA8B,CACtC,gCAAgC,IAAI,CAAC,IAAI,EAAE,EAC3C,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,IAAuB;IACvD,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,8BAA8B,CACtC,iCAAiC,IAAI,CAAC,QAAQ,iCAAiC,EAC/E,IAAI,CAAC,IAAI,CAAC,GAAG,EACb,IAAI,CAAC,KAAK,CAAC,KAAK,CACjB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5B,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,IAAsB;IACrD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,8BAA8B,CACtC,oCAAoC,IAAI,CAAC,QAAQ,0BAA0B,EAC3E,IAAI,CAAC,IAAI,CAAC,GAAG,EACb,IAAI,CAAC,KAAK,CAAC,KAAK,CACjB,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,wCAAwC;IACxC,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,IAAkB,CAAC;QAC9C,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;KACnC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAC5B,IAAoB;IAEpB,iDAAiD;IACjD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACtC,MAAM,IAAI,8BAA8B,CACtC,0DAA0D,EAC1D,IAAI,CAAC,MAAM,CACZ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAElC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,OAAO,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,IAAI,8BAA8B,CACtC,qBAAqB,QAAQ,oCAAoC,EACjE,IAAI,CAAC,MAAM,CACZ,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,IAAoB,EAAE,QAAgB;IAC9D,wCAAwC;IACxC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,uCAAuC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EACzE,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,oCAAoC,EAC/C,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC;IAEvB,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI;QACJ,SAAS,EAAE,GAAG,CAAC,KAAK;QACpB,OAAO,EAAE,GAAG,CAAC,GAAG;KACjB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,IAAoB,EACpB,QAAgB;IAEhB,uCAAuC;IACvC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,uCAAuC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EACzE,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACnC,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,mEAAmE,EAC9E,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,mCAAmC,EAC9C,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,yCAAyC,EACpD,OAAO,CACR,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,6BAA6B,EACxC,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,KAAK;QACL,UAAU;QACV,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAgB;IACvC,uDAAuD;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC;QACxB,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;QAE5B,0EAA0E;QAC1E,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,8BAA8B,CACtC,uBAAuB,IAAI,0BAA0B,IAAI,qCAAqC,EAC9F,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACrC,MAAM,IAAI,8BAA8B,CACtC,kDAAkD,EAClD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC;IAExB,+BAA+B;IAC/B,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC5C,MAAM,IAAI,8BAA8B,CACtC,uCAAuC,EACvC,UAAU,CAAC,MAAM,CAClB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;IACtC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,8BAA8B,CACtC,iDAAiD,MAAM,GAAG,EAC1D,UAAU,CAAC,MAAM,CAClB,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,8BAA8B,CACtC,kEAAkE,EAClE,UAAU,CAAC,QAAQ,CACpB,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC9C,MAAM,IAAI,8BAA8B,CACtC,gCAAgC,EAChC,UAAU,CAAC,QAAQ,CACpB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;IAEvC,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,OAAO;QACf,KAAK;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAClB,GAA6B;IAE7B,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,SAAS,IAAI,CAAC,IAA8B;QAC1C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzB,MAAM;YACR,CAAC;YAED,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,MAAM;YACR,CAAC;YAED,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC7B,MAAM;YACR,CAAC;YAED,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,YAAY,CAAC,IAAkB;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO;QACL,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5C,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAC1C,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChC,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/schema/models/authorizer/authorizer-expression-ast.d.ts

@@ -0,0 +1,159 @@
+/**
+ * AST node types for authorizer expressions.
+ *
+ * These represent the semantic structure of expressions like:
+ * - `model.id === userId`
+ * - `hasRole('admin')`
+ * - `hasSomeRole(['admin', 'moderator'])`
+ * - `model.id === userId || hasRole('admin')`
+ *
+ * The AST is produced by parsing with Acorn and converting from ESTree.
+ */
+/**
+ * Root expression node - the result of parsing an authorizer expression.
+ */
+export type AuthorizerExpressionNode = FieldComparisonNode | HasRoleNode | HasSomeRoleNode | BinaryLogicalNode;
+/**
+ * A field comparison expression: `left === right`
+ *
+ * Currently only supports strict equality (`===`).
+ *
+ * @example
+ * ```typescript
+ * // model.id === auth.userId
+ * {
+ *   type: 'fieldComparison',
+ *   operator: '===',
+ *   left: { type: 'fieldRef', source: 'model', field: 'id', ... },
+ *   right: { type: 'fieldRef', source: 'auth', field: 'userId', ... },
+ * }
+ * ```
+ */
+export interface FieldComparisonNode {
+    type: 'fieldComparison';
+    operator: '===';
+    left: FieldRefNode;
+    right: FieldRefNode;
+}
+/**
+ * A role check expression: `hasRole('roleName')`
+ *
+ * @example
+ * ```typescript
+ * // hasRole('admin')
+ * {
+ *   type: 'hasRole',
+ *   role: 'admin',
+ *   roleStart: 8,
+ *   roleEnd: 15,
+ * }
+ * ```
+ */
+export interface HasRoleNode {
+    type: 'hasRole';
+    /** The role name being checked */
+    role: string;
+    /** Start position of the role string in the source (for rename tracking) */
+    roleStart: number;
+    /** End position of the role string in the source (for rename tracking) */
+    roleEnd: number;
+}
+/**
+ * A role check expression for multiple roles: `hasSomeRole(['role1', 'role2'])`
+ *
+ * @example
+ * ```typescript
+ * // hasSomeRole(['admin', 'moderator'])
+ * {
+ *   type: 'hasSomeRole',
+ *   roles: ['admin', 'moderator'],
+ *   rolesStart: [13, 22],
+ *   rolesEnd: [20, 33],
+ * }
+ * ```
+ */
+export interface HasSomeRoleNode {
+    type: 'hasSomeRole';
+    /** The role names being checked */
+    roles: string[];
+    /** Start positions of each role string in the source (for rename tracking) */
+    rolesStart: number[];
+    /** End positions of each role string in the source (for rename tracking) */
+    rolesEnd: number[];
+}
+/**
+ * A binary logical expression: `left || right` or `left && right`
+ *
+ * @example
+ * ```typescript
+ * // model.id === auth.userId || auth.hasRole('admin')
+ * {
+ *   type: 'binaryLogical',
+ *   operator: '||',
+ *   left: { type: 'fieldComparison', ... },
+ *   right: { type: 'hasRole', ... },
+ * }
+ * ```
+ */
+export interface BinaryLogicalNode {
+    type: 'binaryLogical';
+    operator: '||' | '&&';
+    left: AuthorizerExpressionNode;
+    right: AuthorizerExpressionNode;
+}
+/**
+ * A reference to a field on either `model` or `auth`.
+ *
+ * @example
+ * ```typescript
+ * // model.id
+ * { type: 'fieldRef', source: 'model', field: 'id', start: 0, end: 8 }
+ *
+ * // userId - implicit auth context
+ * { type: 'fieldRef', source: 'auth', field: 'userId', start: 13, end: 19 }
+ * ```
+ */
+export interface FieldRefNode {
+    type: 'fieldRef';
+    /** The source object - either 'model' or 'auth' */
+    source: 'model' | 'auth';
+    /** The field name being accessed */
+    field: string;
+    /** Start position in the source (for rename tracking) */
+    start: number;
+    /** End position in the source (for rename tracking) */
+    end: number;
+}
+/**
+ * Information extracted from a parsed expression for dependency tracking.
+ */
+export interface AuthorizerExpressionInfo {
+    /** The parsed AST */
+    ast: AuthorizerExpressionNode;
+    /** Model field names referenced (e.g., ['id', 'authorId']) */
+    modelFieldRefs: string[];
+    /** Auth field names referenced (e.g., ['userId']) */
+    authFieldRefs: string[];
+    /** Role names referenced (e.g., ['admin', 'user']) */
+    roleRefs: string[];
+    /** Whether the expression requires the model instance */
+    requiresModel: boolean;
+}
+/**
+ * Position information for error reporting.
+ * Compatible with Acorn AST nodes which have start/end properties.
+ */
+export interface NodePosition {
+    start: number;
+    end: number;
+}
+/**
+ * Error thrown when parsing an authorizer expression fails.
+ */
+export declare class AuthorizerExpressionParseError extends Error {
+    readonly startPosition?: number;
+    readonly endPosition?: number;
+    constructor(message: string, position?: NodePosition);
+    constructor(message: string, startPosition?: number, endPosition?: number);
+}
+//# sourceMappingURL=authorizer-expression-ast.d.ts.map