@baseplate-dev/project-builder-lib 0.5.0 → 0.5.2

package/dist/schema/models/authorizer/authorizer-expression-ast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-ast.d.ts","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer-expression-ast.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAChC,mBAAmB,GACnB,WAAW,GACX,eAAe,GACf,iBAAiB,CAAC;AAEtB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,KAAK,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,YAAY,CAAC;CACrB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,mCAAmC;IACnC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,wBAAwB,CAAC;IAC/B,KAAK,EAAE,wBAAwB,CAAC;CACjC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,mDAAmD;IACnD,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,qBAAqB;IACrB,GAAG,EAAE,wBAAwB,CAAC;IAC9B,8DAA8D;IAC9D,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,qDAAqD;IACrD,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,yDAAyD;IACzD,aAAa,EAAE,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,qBAAa,8BAA+B,SAAQ,KAAK;IACvD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY;gBACxC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM;CAiB1E"}

package/dist/schema/models/authorizer/authorizer-expression-ast.js

@@ -0,0 +1,31 @@
+/**
+ * AST node types for authorizer expressions.
+ *
+ * These represent the semantic structure of expressions like:
+ * - `model.id === userId`
+ * - `hasRole('admin')`
+ * - `hasSomeRole(['admin', 'moderator'])`
+ * - `model.id === userId || hasRole('admin')`
+ *
+ * The AST is produced by parsing with Acorn and converting from ESTree.
+ */
+/**
+ * Error thrown when parsing an authorizer expression fails.
+ */
+export class AuthorizerExpressionParseError extends Error {
+    startPosition;
+    endPosition;
+    constructor(message, positionOrStart, endPosition) {
+        super(message);
+        this.name = 'AuthorizerExpressionParseError';
+        if (typeof positionOrStart === 'object') {
+            this.startPosition = positionOrStart.start;
+            this.endPosition = positionOrStart.end;
+        }
+        else {
+            this.startPosition = positionOrStart;
+            this.endPosition = endPosition;
+        }
+    }
+}
+//# sourceMappingURL=authorizer-expression-ast.js.map

package/dist/schema/models/authorizer/authorizer-expression-ast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-ast.js","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer-expression-ast.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAwJH;;GAEG;AACH,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAC9C,aAAa,CAAU;IACvB,WAAW,CAAU;IAI9B,YACE,OAAe,EACf,eAAuC,EACvC,WAAoB;QAEpB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;QAE7C,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC;YAC3C,IAAI,CAAC,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,aAAa,GAAG,eAAe,CAAC;YACrC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QACjC,CAAC;IACH,CAAC;CACF"}

package/dist/schema/models/authorizer/authorizer-expression-parser.d.ts

@@ -0,0 +1,77 @@
+import { z } from 'zod';
+import type { RefExpressionDependency, RefExpressionWarning, ResolvedExpressionSlots } from '#src/references/expression-types.js';
+import { RefExpressionParser } from '#src/references/expression-types.js';
+import type { modelEntityType } from '../types.js';
+import type { AuthorizerExpressionInfo } from './authorizer-expression-ast.js';
+/**
+ * Expression parser for model authorizer role expressions.
+ *
+ * Parses expressions like:
+ * - `model.id === auth.userId` (ownership check)
+ * - `auth.hasRole('admin')` (global role check)
+ * - `model.id === auth.userId || auth.hasRole('admin')` (combined)
+ *
+ * Uses Acorn to parse JavaScript expressions and validates
+ * that only supported constructs are used.
+ *
+ * @example
+ * ```typescript
+ * const schema = z.object({
+ *   expression: ctx.withExpression(authorizerExpressionParser, { model: modelSlot }),
+ * });
+ * ```
+ */
+export declare class AuthorizerExpressionParser extends RefExpressionParser<string, AuthorizerExpressionInfo | undefined, {
+    model: typeof modelEntityType;
+}> {
+    readonly name = "authorizer-expression";
+    /**
+     * Zod schema for validating expression strings.
+     * Requires a non-empty string value.
+     */
+    readonly schema: z.ZodString;
+    /**
+     * Parse the expression string into an AST.
+     *
+     * @param value - The expression string
+     * @param _projectDef - The project definition (unused during parsing)
+     * @returns The parsed expression info, or undefined if parsing fails
+     */
+    parse(value: string): AuthorizerExpressionInfo | undefined;
+    /**
+     * Get validation warnings for the expression.
+     *
+     * Validates:
+     * - Syntax errors from parsing
+     * - Model field references exist
+     * - Auth field references are valid
+     * - Role names exist in project config (warning only)
+     */
+    getWarnings(value: string, parseResult: AuthorizerExpressionInfo | undefined, projectDef: unknown, resolvedSlots: ResolvedExpressionSlots<{
+        model: typeof modelEntityType;
+    }>): RefExpressionWarning[];
+    /**
+     * Get entity/field dependencies from the expression.
+     *
+     * Currently returns empty array as we don't yet track
+     * entity-level dependencies (just field names).
+     * Future: could track model field entity references for renames.
+     */
+    getDependencies(): RefExpressionDependency[];
+    /**
+     * Update the expression when dependencies are renamed.
+     *
+     * Currently returns value unchanged as we don't yet
+     * support field renames in expressions.
+     */
+    updateForRename(value: string): string;
+    /**
+     * Extract model context from the project definition container using resolved slots.
+     */
+    private getModelContext;
+}
+/**
+ * Singleton instance of AuthorizerExpressionParser.
+ */
+export declare const authorizerExpressionParser: AuthorizerExpressionParser;
+//# sourceMappingURL=authorizer-expression-parser.d.ts.map

package/dist/schema/models/authorizer/authorizer-expression-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-parser.d.ts","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer-expression-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAM/E;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,0BAA2B,SAAQ,mBAAmB,CACjE,MAAM,EACN,wBAAwB,GAAG,SAAS,EACpC;IAAE,KAAK,EAAE,OAAO,eAAe,CAAA;CAAE,CAClC;IACC,QAAQ,CAAC,IAAI,2BAA2B;IAExC;;;OAGG;IACH,QAAQ,CAAC,MAAM,cAA+C;IAE9D;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS;IAY1D;;;;;;;;OAQG;IACH,WAAW,CACT,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,wBAAwB,GAAG,SAAS,EACjD,UAAU,EAAE,OAAO,EACnB,aAAa,EAAE,uBAAuB,CAAC;QAAE,KAAK,EAAE,OAAO,eAAe,CAAA;KAAE,CAAC,GACxE,oBAAoB,EAAE;IAuCzB;;;;;;OAMG;IACH,eAAe,IAAI,uBAAuB,EAAE;IAK5C;;;;;OAKG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAKtC;;OAEG;IACH,OAAO,CAAC,eAAe;CAyCxB;AAED;;GAEG;AACH,eAAO,MAAM,0BAA0B,4BAAmC,CAAC"}

package/dist/schema/models/authorizer/authorizer-expression-parser.js

@@ -0,0 +1,147 @@
+import { z } from 'zod';
+import { RefExpressionParser } from '#src/references/expression-types.js';
+import { parseAuthorizerExpression } from './authorizer-expression-acorn-parser.js';
+import { AuthorizerExpressionParseError } from './authorizer-expression-ast.js';
+import { validateAuthorizerExpression } from './authorizer-expression-validator.js';
+/**
+ * Expression parser for model authorizer role expressions.
+ *
+ * Parses expressions like:
+ * - `model.id === auth.userId` (ownership check)
+ * - `auth.hasRole('admin')` (global role check)
+ * - `model.id === auth.userId || auth.hasRole('admin')` (combined)
+ *
+ * Uses Acorn to parse JavaScript expressions and validates
+ * that only supported constructs are used.
+ *
+ * @example
+ * ```typescript
+ * const schema = z.object({
+ *   expression: ctx.withExpression(authorizerExpressionParser, { model: modelSlot }),
+ * });
+ * ```
+ */
+export class AuthorizerExpressionParser extends RefExpressionParser {
+    name = 'authorizer-expression';
+    /**
+     * Zod schema for validating expression strings.
+     * Requires a non-empty string value.
+     */
+    schema = z.string().min(1, 'Expression is required');
+    /**
+     * Parse the expression string into an AST.
+     *
+     * @param value - The expression string
+     * @param _projectDef - The project definition (unused during parsing)
+     * @returns The parsed expression info, or undefined if parsing fails
+     */
+    parse(value) {
+        try {
+            return parseAuthorizerExpression(value);
+        }
+        catch (error) {
+            if (error instanceof AuthorizerExpressionParseError) {
+                // Return undefined for parse errors - they'll be reported as warnings
+                return undefined;
+            }
+            throw error;
+        }
+    }
+    /**
+     * Get validation warnings for the expression.
+     *
+     * Validates:
+     * - Syntax errors from parsing
+     * - Model field references exist
+     * - Auth field references are valid
+     * - Role names exist in project config (warning only)
+     */
+    getWarnings(value, parseResult, projectDef, resolvedSlots) {
+        const warnings = [];
+        // If parsing failed, report the error as a warning
+        if (!parseResult) {
+            try {
+                parseAuthorizerExpression(value);
+            }
+            catch (error) {
+                if (error instanceof AuthorizerExpressionParseError) {
+                    warnings.push({
+                        message: error.message,
+                    });
+                }
+            }
+            return warnings;
+        }
+        // Cast to ProjectDefinitionContainer - the parser receives the container
+        const container = projectDef;
+        // Get model context from resolved slots
+        const modelContext = this.getModelContext(container, resolvedSlots);
+        if (!modelContext) {
+            // Can't validate without model context
+            return warnings;
+        }
+        // Validate the expression (container provides role access via authConfigSpec)
+        const validationWarnings = validateAuthorizerExpression(parseResult.ast, modelContext, container);
+        warnings.push(...validationWarnings);
+        return warnings;
+    }
+    /**
+     * Get entity/field dependencies from the expression.
+     *
+     * Currently returns empty array as we don't yet track
+     * entity-level dependencies (just field names).
+     * Future: could track model field entity references for renames.
+     */
+    getDependencies() {
+        // TODO: Track model field entities for rename support
+        return [];
+    }
+    /**
+     * Update the expression when dependencies are renamed.
+     *
+     * Currently returns value unchanged as we don't yet
+     * support field renames in expressions.
+     */
+    updateForRename(value) {
+        // TODO: Implement rename support using AST position info
+        return value;
+    }
+    /**
+     * Extract model context from the project definition container using resolved slots.
+     */
+    getModelContext(container, resolvedSlots) {
+        const modelPath = resolvedSlots.model;
+        if (modelPath.length === 0) {
+            return undefined;
+        }
+        // Navigate to the model in the project definition
+        // The path is like ['models', 0] for models[0]
+        let current = container.definition;
+        for (const segment of modelPath) {
+            if (current === null || current === undefined) {
+                return undefined;
+            }
+            current = current[segment];
+        }
+        const model = current;
+        if (!model || typeof model.name !== 'string') {
+            return undefined;
+        }
+        // Model fields are nested under model.model.fields in the definition
+        const scalarFieldNames = new Set();
+        for (const field of model.model?.fields ?? []) {
+            if (typeof field.name === 'string') {
+                scalarFieldNames.add(field.name);
+            }
+        }
+        return {
+            modelName: model.name,
+            scalarFieldNames,
+        };
+    }
+}
+/**
+ * Singleton instance of AuthorizerExpressionParser.
+ */
+export const authorizerExpressionParser = new AuthorizerExpressionParser();
+//# sourceMappingURL=authorizer-expression-parser.js.map

package/dist/schema/models/authorizer/authorizer-expression-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-parser.js","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer-expression-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAK1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,0BAA2B,SAAQ,mBAI/C;IACU,IAAI,GAAG,uBAAuB,CAAC;IAExC;;;OAGG;IACM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAE9D;;;;;;OAMG;IACH,KAAK,CAAC,KAAa;QACjB,IAAI,CAAC;YACH,OAAO,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;gBACpD,sEAAsE;gBACtE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,WAAW,CACT,KAAa,EACb,WAAiD,EACjD,UAAmB,EACnB,aAAyE;QAEzE,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAE5C,mDAAmD;QACnD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,yBAAyB,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;oBACpD,QAAQ,CAAC,IAAI,CAAC;wBACZ,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,yEAAyE;QACzE,MAAM,SAAS,GAAG,UAAwC,CAAC;QAE3D,wCAAwC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACpE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,uCAAuC;YACvC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,8EAA8E;QAC9E,MAAM,kBAAkB,GAAG,4BAA4B,CACrD,WAAW,CAAC,GAAG,EACf,YAAY,EACZ,SAAS,CACV,CAAC;QAEF,QAAQ,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC;QAErC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACH,eAAe;QACb,sDAAsD;QACtD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,KAAa;QAC3B,yDAAyD;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,eAAe,CACrB,SAAqC,EACrC,aAAyE;QAEzE,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC;QACtC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,kDAAkD;QAClD,+CAA+C;QAC/C,IAAI,OAAO,GAAY,SAAS,CAAC,UAAU,CAAC;QAC5C,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YAChC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC9C,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,GAAI,OAA4C,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,KAAK,GAAG,OAGN,CAAC;QAET,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7C,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,qEAAqE;QACrE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,gBAAgB;SACjB,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,0BAA0B,EAAE,CAAC"}

package/dist/schema/models/authorizer/authorizer-expression-validator.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Validator for authorizer expressions.
+ *
+ * Validates that:
+ * - Model field references exist on the parent model
+ * - Auth field references are valid AuthContext properties
+ * - Role names exist in project config (warning only)
+ */
+import type { ProjectDefinitionContainer } from '#src/definition/project-definition-container.js';
+import type { RefExpressionWarning } from '#src/references/expression-types.js';
+import type { AuthorizerExpressionNode } from './authorizer-expression-ast.js';
+/**
+ * Model information needed for validation.
+ */
+export interface ModelValidationContext {
+    /** The model name (for error messages) */
+    modelName: string;
+    /** Set of valid scalar field names on the model */
+    scalarFieldNames: Set<string>;
+}
+/**
+ * Validate an authorizer expression AST against model and project context.
+ *
+ * @param ast - The parsed expression AST
+ * @param modelContext - Information about the parent model
+ * @param container - The project definition container for accessing roles
+ * @returns Array of warnings (errors are thrown, warnings are returned)
+ *
+ * @example
+ * ```typescript
+ * const warnings = validateAuthorizerExpression(
+ *   ast,
+ *   { modelName: 'User', scalarFieldNames: new Set(['id', 'email']) },
+ *   container,
+ * );
+ * ```
+ */
+export declare function validateAuthorizerExpression(ast: AuthorizerExpressionNode, modelContext: ModelValidationContext, container: ProjectDefinitionContainer): RefExpressionWarning[];
+/**
+ * Extract model validation context from a model configuration.
+ *
+ * @param modelConfig - The parsed model configuration
+ * @returns Model validation context for the validator
+ */
+export declare function createModelValidationContext(modelConfig: {
+    name: string;
+    fields?: {
+        name: string;
+    }[];
+}): ModelValidationContext;
+//# sourceMappingURL=authorizer-expression-validator.d.ts.map

package/dist/schema/models/authorizer/authorizer-expression-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-validator.d.ts","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer-expression-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAClG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAIhF,OAAO,KAAK,EACV,wBAAwB,EAEzB,MAAM,gCAAgC,CAAC;AAExC;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC/B;AAoBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,wBAAwB,EAC7B,YAAY,EAAE,sBAAsB,EACpC,SAAS,EAAE,0BAA0B,GACpC,oBAAoB,EAAE,CAwExB;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,EAAE;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC7B,GAAG,sBAAsB,CAWzB"}

package/dist/schema/models/authorizer/authorizer-expression-validator.js

@@ -0,0 +1,125 @@
+/**
+ * Validator for authorizer expressions.
+ *
+ * Validates that:
+ * - Model field references exist on the parent model
+ * - Auth field references are valid AuthContext properties
+ * - Role names exist in project config (warning only)
+ */
+import { authConfigSpec } from '#src/plugins/spec/auth-config-spec.js';
+/**
+ * Valid auth context field names that can be accessed.
+ */
+const VALID_AUTH_FIELDS = new Set(['userId']);
+/**
+ * Get role names from the project definition container using the auth config spec.
+ *
+ * @param container - The project definition container
+ * @returns Set of defined role names
+ */
+function getRoleNames(container) {
+    const authConfig = container.pluginStore.use(authConfigSpec);
+    const roles = authConfig.getAuthConfig(container.definition)?.roles;
+    return new Set(roles?.map((role) => role.name));
+}
+/**
+ * Validate an authorizer expression AST against model and project context.
+ *
+ * @param ast - The parsed expression AST
+ * @param modelContext - Information about the parent model
+ * @param container - The project definition container for accessing roles
+ * @returns Array of warnings (errors are thrown, warnings are returned)
+ *
+ * @example
+ * ```typescript
+ * const warnings = validateAuthorizerExpression(
+ *   ast,
+ *   { modelName: 'User', scalarFieldNames: new Set(['id', 'email']) },
+ *   container,
+ * );
+ * ```
+ */
+export function validateAuthorizerExpression(ast, modelContext, container) {
+    const warnings = [];
+    const roleNames = getRoleNames(container);
+    function walk(node) {
+        switch (node.type) {
+            case 'fieldComparison': {
+                validateFieldRef(node.left);
+                validateFieldRef(node.right);
+                break;
+            }
+            case 'hasRole': {
+                // Warn if role doesn't exist (but allow - plugins may define roles)
+                if (!roleNames.has(node.role)) {
+                    warnings.push({
+                        message: `Role '${node.role}' is not defined in the project configuration. Available roles: ${[...roleNames].join(', ')}.`,
+                        start: node.roleStart,
+                        end: node.roleEnd,
+                    });
+                }
+                break;
+            }
+            case 'hasSomeRole': {
+                // Warn if any role doesn't exist (but allow - plugins may define roles)
+                for (let i = 0; i < node.roles.length; i++) {
+                    const role = node.roles[i];
+                    if (!roleNames.has(role)) {
+                        const start = node.rolesStart[i];
+                        const end = node.rolesEnd[i];
+                        warnings.push({
+                            message: `Role '${role}' is not defined in the project configuration. Available roles: ${[...roleNames].join(', ')}.`,
+                            start,
+                            end,
+                        });
+                    }
+                }
+                break;
+            }
+            case 'binaryLogical': {
+                walk(node.left);
+                walk(node.right);
+                break;
+            }
+        }
+    }
+    function validateFieldRef(node) {
+        if (node.source === 'model') {
+            // Check if field exists on model
+            if (!modelContext.scalarFieldNames.has(node.field)) {
+                warnings.push({
+                    message: `Field '${node.field}' does not exist on model '${modelContext.modelName}'.`,
+                    start: node.start,
+                    end: node.end,
+                });
+            }
+        }
+        else if (!VALID_AUTH_FIELDS.has(node.field)) {
+            // node.source === 'auth' is implied since source is 'model' | 'auth'
+            warnings.push({
+                message: `Invalid auth property '${node.field}'. Valid properties are: ${[...VALID_AUTH_FIELDS].join(', ')}.`,
+                start: node.start,
+                end: node.end,
+            });
+        }
+    }
+    walk(ast);
+    return warnings;
+}
+/**
+ * Extract model validation context from a model configuration.
+ *
+ * @param modelConfig - The parsed model configuration
+ * @returns Model validation context for the validator
+ */
+export function createModelValidationContext(modelConfig) {
+    const scalarFieldNames = new Set();
+    for (const field of modelConfig.fields ?? []) {
+        scalarFieldNames.add(field.name);
+    }
+    return {
+        modelName: modelConfig.name,
+        scalarFieldNames,
+    };
+}
+//# sourceMappingURL=authorizer-expression-validator.js.map

package/dist/schema/models/authorizer/authorizer-expression-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-validator.js","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer-expression-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAiBvE;;GAEG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE9C;;;;;GAKG;AACH,SAAS,YAAY,CAAC,SAAqC;IACzD,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IACpE,OAAO,IAAI,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,GAA6B,EAC7B,YAAoC,EACpC,SAAqC;IAErC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAE1C,SAAS,IAAI,CAAC,IAA8B;QAC1C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5B,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC7B,MAAM;YACR,CAAC;YAED,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,oEAAoE;gBACpE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,QAAQ,CAAC,IAAI,CAAC;wBACZ,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,mEAAmE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;wBAC1H,KAAK,EAAE,IAAI,CAAC,SAAS;wBACrB,GAAG,EAAE,IAAI,CAAC,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,wEAAwE;gBACxE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC3B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBACzB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;wBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;wBAC7B,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,SAAS,IAAI,mEAAmE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;4BACrH,KAAK;4BACL,GAAG;yBACJ,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,gBAAgB,CAAC,IAAkB;QAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,iCAAiC;YACjC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnD,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,UAAU,IAAI,CAAC,KAAK,8BAA8B,YAAY,CAAC,SAAS,IAAI;oBACrF,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,qEAAqE;YACrE,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,0BAA0B,IAAI,CAAC,KAAK,4BAA4B,CAAC,GAAG,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC7G,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,WAG5C;IACC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC7C,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,OAAO;QACL,SAAS,EAAE,WAAW,CAAC,IAAI;QAC3B,gBAAgB;KACjB,CAAC;AACJ,CAAC"}

package/dist/schema/models/authorizer/authorizer.d.ts

@@ -0,0 +1,59 @@
+import { z } from 'zod';
+import type { def } from '#src/schema/creator/index.js';
+/**
+ * Schema for a single authorizer role.
+ *
+ * A role defines a named authorization check that can be referenced
+ * by operations (GraphQL queries/mutations, service methods).
+ */
+export declare const createAuthorizerRoleSchema: import("#src/schema/creator/index.js").DefinitionSchemaCreatorWithSlots<z.ZodType<{
+    id: string;
+    name: string;
+    expression: string;
+}, {
+    id: string;
+    name: string;
+    expression: string;
+}, z.core.$ZodTypeInternals<{
+    id: string;
+    name: string;
+    expression: string;
+}, {
+    id: string;
+    name: string;
+    expression: string;
+}>>, {
+    modelSlot: import("../../../index.js").DefinitionEntityType<false>;
+}>;
+export type AuthorizerRoleConfig = def.InferOutput<typeof createAuthorizerRoleSchema>;
+export type AuthorizerRoleConfigInput = def.InferInput<typeof createAuthorizerRoleSchema>;
+/**
+ * Schema for model authorizer configuration.
+ *
+ * The authorizer defines instance-level authorization checks
+ * that operations can reference.
+ */
+export declare const createModelAuthorizerSchema: import("#src/schema/creator/index.js").DefinitionSchemaCreatorWithSlots<z.ZodObject<{
+    roles: z.ZodDefault<z.ZodArray<z.ZodType<{
+        id: string;
+        name: string;
+        expression: string;
+    }, {
+        id: string;
+        name: string;
+        expression: string;
+    }, z.core.$ZodTypeInternals<{
+        id: string;
+        name: string;
+        expression: string;
+    }, {
+        id: string;
+        name: string;
+        expression: string;
+    }>>>>;
+}, z.core.$strip>, {
+    modelSlot: import("../../../index.js").DefinitionEntityType<false>;
+}>;
+export type ModelAuthorizerConfig = def.InferOutput<typeof createModelAuthorizerSchema>;
+export type ModelAuthorizerConfigInput = def.InferInput<typeof createModelAuthorizerSchema>;
+//# sourceMappingURL=authorizer.d.ts.map

package/dist/schema/models/authorizer/authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer.d.ts","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AASxD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;EAkCtC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,GAAG,CAAC,WAAW,CAChD,OAAO,0BAA0B,CAClC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,GAAG,CAAC,UAAU,CACpD,OAAO,0BAA0B,CAClC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;EAYvC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,GAAG,CAAC,WAAW,CACjD,OAAO,2BAA2B,CACnC,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,GAAG,CAAC,UAAU,CACrD,OAAO,2BAA2B,CACnC,CAAC"}

package/dist/schema/models/authorizer/authorizer.js

@@ -0,0 +1,56 @@
+import { z } from 'zod';
+import { definitionSchemaWithSlots } from '#src/schema/creator/schema-creator.js';
+import { VALIDATORS } from '#src/schema/utils/validation.js';
+import { modelEntityType } from '../types.js';
+import { authorizerExpressionParser } from './authorizer-expression-parser.js';
+import { modelAuthorizerRoleEntityType } from './types.js';
+/**
+ * Schema for a single authorizer role.
+ *
+ * A role defines a named authorization check that can be referenced
+ * by operations (GraphQL queries/mutations, service methods).
+ */
+export const createAuthorizerRoleSchema = definitionSchemaWithSlots({ modelSlot: modelEntityType }, (ctx, { modelSlot }) => ctx.withEnt(z.object({
+    /** Unique identifier for this role */
+    id: z.string(),
+    /**
+     * Name of the role (camelCase).
+     * Used as the key in the generated roles object.
+     * @example 'owner', 'viewer', 'organizationMember'
+     */
+    name: VALIDATORS.CAMEL_CASE_STRING,
+    /**
+     * TypeScript expression that evaluates to a boolean.
+     *
+     * Available context variables:
+     * - `model` - The model instance being authorized
+     * - `userId` - The authenticated user's ID (implicit auth context)
+     * - `hasRole()` / `hasSomeRole()` - Role checking functions
+     *
+     * @example 'model.id === userId'
+     * @example 'hasRole("admin")'
+     * @example 'model.authorId === userId || hasRole("admin")'
+     */
+    expression: ctx.withExpression(authorizerExpressionParser, {
+        model: modelSlot,
+    }),
+}), {
+    type: modelAuthorizerRoleEntityType,
+    parentSlot: modelSlot,
+}));
+/**
+ * Schema for model authorizer configuration.
+ *
+ * The authorizer defines instance-level authorization checks
+ * that operations can reference.
+ */
+export const createModelAuthorizerSchema = definitionSchemaWithSlots({ modelSlot: modelEntityType }, (ctx, { modelSlot }) => z.object({
+    /**
+     * Array of role definitions for this model.
+     * Each role is a named authorization check.
+     */
+    roles: z
+        .array(createAuthorizerRoleSchema(ctx, { modelSlot }))
+        .default([]),
+}));
+//# sourceMappingURL=authorizer.js.map

package/dist/schema/models/authorizer/authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer.js","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,yBAAyB,CACjE,EAAE,SAAS,EAAE,eAAe,EAAE,EAC9B,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CACrB,GAAG,CAAC,OAAO,CACT,CAAC,CAAC,MAAM,CAAC;IACP,sCAAsC;IACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd;;;;OAIG;IACH,IAAI,EAAE,UAAU,CAAC,iBAAiB;IAClC;;;;;;;;;;;OAWG;IACH,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC,0BAA0B,EAAE;QACzD,KAAK,EAAE,SAAS;KACjB,CAAC;CACH,CAAC,EACF;IACE,IAAI,EAAE,6BAA6B;IACnC,UAAU,EAAE,SAAS;CACtB,CACF,CACJ,CAAC;AAUF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAClE,EAAE,SAAS,EAAE,eAAe,EAAE,EAC9B,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CACrB,CAAC,CAAC,MAAM,CAAC;IACP;;;OAGG;IACH,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,0BAA0B,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;SACrD,OAAO,CAAC,EAAE,CAAC;CACf,CAAC,CACL,CAAC"}

package/dist/schema/models/authorizer/index.d.ts

@@ -0,0 +1,7 @@
+export * from './authorizer-expression-acorn-parser.js';
+export * from './authorizer-expression-ast.js';
+export * from './authorizer-expression-parser.js';
+export * from './authorizer-expression-validator.js';
+export * from './authorizer.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/schema/models/authorizer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/index.ts"],"names":[],"mappings":"AAAA,cAAc,yCAAyC,CAAC;AACxD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,sCAAsC,CAAC;AACrD,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC"}

package/dist/schema/models/authorizer/index.js

@@ -0,0 +1,7 @@
+export * from './authorizer-expression-acorn-parser.js';
+export * from './authorizer-expression-ast.js';
+export * from './authorizer-expression-parser.js';
+export * from './authorizer-expression-validator.js';
+export * from './authorizer.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/schema/models/authorizer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/index.ts"],"names":[],"mappings":"AAAA,cAAc,yCAAyC,CAAC;AACxD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,sCAAsC,CAAC;AACrD,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC"}

package/dist/schema/models/authorizer/types.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Entity type for model authorizer roles.
+ * Each role is a child of the model it belongs to.
+ */
+export declare const modelAuthorizerRoleEntityType: import("#src/references/index.js").DefinitionEntityType<true>;
+//# sourceMappingURL=types.d.ts.map

package/dist/schema/models/authorizer/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/types.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,eAAO,MAAM,6BAA6B,+DAGzC,CAAC"}

package/dist/schema/models/authorizer/types.js

@@ -0,0 +1,8 @@
+import { createEntityType } from '#src/references/index.js';
+import { modelEntityType } from '../types.js';
+/**
+ * Entity type for model authorizer roles.
+ * Each role is a child of the model it belongs to.
+ */
+export const modelAuthorizerRoleEntityType = createEntityType('model-authorizer-role', { parentType: modelEntityType });
+//# sourceMappingURL=types.js.map

package/dist/schema/models/authorizer/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,gBAAgB,CAC3D,uBAAuB,EACvB,EAAE,UAAU,EAAE,eAAe,EAAE,CAChC,CAAC"}