@baseplate-dev/project-builder-lib 0.6.3 → 0.6.5

package/dist/schema/models/authorizer/authorizer-expression-parser.js

@@ -1,145 +0,0 @@
-import { z } from 'zod';
-import { RefExpressionParser } from '#src/references/expression-types.js';
-import { parseAuthorizerExpression } from './authorizer-expression-acorn-parser.js';
-import { AuthorizerExpressionParseError } from './authorizer-expression-ast.js';
-import { buildRelationValidationInfo, validateAuthorizerExpression, } from './authorizer-expression-validator.js';
-/**
- * Expression parser for model authorizer role expressions.
- *
- * Parses expressions like:
- * - `model.id === auth.userId` (ownership check)
- * - `auth.hasRole('admin')` (global role check)
- * - `model.id === auth.userId || auth.hasRole('admin')` (combined)
- *
- * Uses Acorn to parse JavaScript expressions and validates
- * that only supported constructs are used.
- *
- * @example
- * ```typescript
- * const schema = z.object({
- *   expression: ctx.withExpression(authorizerExpressionParser, { model: modelSlot }),
- * });
- * ```
- */
-export class AuthorizerExpressionParser extends RefExpressionParser {
-    name = 'authorizer-expression';
-    /**
-     * Creates a Zod schema for validating expression strings.
-     * Requires a non-empty string value.
-     */
-    createSchema() {
-        return z.string().min(1, 'Expression is required');
-    }
-    /**
-     * Parse the expression string into an AST.
-     *
-     * @param value - The expression string
-     * @returns Success with parsed expression info, or failure with error message
-     */
-    parse(value) {
-        try {
-            return { success: true, value: parseAuthorizerExpression(value) };
-        }
-        catch (error) {
-            if (error instanceof AuthorizerExpressionParseError) {
-                return { success: false, error: error.message };
-            }
-            throw error;
-        }
-    }
-    /**
-     * Get validation warnings for the expression.
-     *
-     * Validates:
-     * - Syntax errors from parsing
-     * - Model field references exist
-     * - Auth field references are valid
-     * - Role names exist in project config (warning only)
-     */
-    getWarnings(parseResult, context, resolvedSlots) {
-        // Get model context from resolved slots
-        const modelContext = this.getModelContext(context.definition, resolvedSlots);
-        if (!modelContext) {
-            // Can't validate without model context
-            return [];
-        }
-        // Validate the expression against model fields and roles
-        return validateAuthorizerExpression(parseResult.ast, modelContext, context.pluginStore, context.definition);
-    }
-    /**
-     * Get entity/field dependencies from the expression.
-     *
-     * Currently returns empty array as we don't yet track
-     * entity-level dependencies (just field names).
-     * Future: could track model field entity references for renames.
-     */
-    getDependencies() {
-        // TODO: Track model field entities for rename support
-        return [];
-    }
-    /**
-     * Update the expression when dependencies are renamed.
-     *
-     * Currently returns value unchanged as we don't yet
-     * support field renames in expressions.
-     */
-    updateForRename(value) {
-        // TODO: Implement rename support using AST position info
-        return value;
-    }
-    /**
-     * Extract model context from the project definition using resolved slots.
-     */
-    getModelContext(definition, resolvedSlots) {
-        const modelPath = resolvedSlots.model;
-        if (modelPath.length === 0) {
-            return undefined;
-        }
-        // Navigate to the model in the project definition
-        // The path is like ['models', 0] for models[0]
-        let current = definition;
-        for (const segment of modelPath) {
-            if (current === null || current === undefined) {
-                return undefined;
-            }
-            current = current[segment];
-        }
-        const model = current;
-        if (!model || typeof model.name !== 'string') {
-            return undefined;
-        }
-        // Model fields are nested under model.model.fields in the definition
-        const scalarFieldNames = new Set();
-        const fieldTypes = new Map();
-        for (const field of model.model?.fields ?? []) {
-            if (typeof field.name === 'string') {
-                scalarFieldNames.add(field.name);
-                if (typeof field.type === 'string') {
-                    fieldTypes.set(field.name, field.type);
-                }
-            }
-        }
-        // Build relation info for nested authorizer validation
-        const relations = (model.model?.relations ?? []).filter((r) => typeof r.name === 'string' && typeof r.modelRef === 'string');
-        const allModels = (definition.models ?? []).filter((m) => typeof m.name === 'string');
-        const relationInfo = buildRelationValidationInfo(relations.map((r) => ({
-            name: r.name,
-            modelRef: r.modelRef,
-            references: r.references ?? [],
-        })), allModels.map((m) => ({
-            name: m.name,
-            authorizer: m.authorizer,
-        })));
-        return {
-            modelName: model.name,
-            scalarFieldNames,
-            fieldTypes,
-            relationInfo,
-        };
-    }
-}
-/**
- * Singleton instance of AuthorizerExpressionParser.
- */
-export const authorizerExpressionParser = new AuthorizerExpressionParser();
-//# sourceMappingURL=authorizer-expression-parser.js.map

package/dist/schema/models/authorizer/authorizer-expression-parser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorizer-expression-parser.js","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer-expression-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAM1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,sCAAsC,CAAC;AAqB9C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,0BAA2B,SAAQ,mBAI/C;IACU,IAAI,GAAG,uBAAuB,CAAC;IAExC;;;OAGG;IACH,YAAY;QACV,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACrD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAa;QACjB,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;gBACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAClD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,WAAW,CACT,WAAqC,EACrC,OAAoC,EACpC,aAAyE;QAEzE,wCAAwC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CACvC,OAAO,CAAC,UAAU,EAClB,aAAa,CACd,CAAC;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,uCAAuC;YACvC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,yDAAyD;QACzD,OAAO,4BAA4B,CACjC,WAAW,CAAC,GAAG,EACf,YAAY,EACZ,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,UAAU,CACnB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,eAAe;QACb,sDAAsD;QACtD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,KAAa;QAC3B,yDAAyD;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,eAAe,CACrB,UAAmB,EACnB,aAAyE;QAMzE,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC;QACtC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,kDAAkD;QAClD,+CAA+C;QAC/C,IAAI,OAAO,GAAY,UAAU,CAAC;QAClC,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YAChC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC9C,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,GAAI,OAA4C,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,KAAK,GAAG,OAAoC,CAAC;QAEnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7C,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,qEAAqE;QACrE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACnC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CACrD,CACE,CAAC,EAKD,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAClE,CAAC;QAEF,MAAM,SAAS,GAAG,CACf,UAAgD,CAAC,MAAM,IAAI,EAAE,CAC/D,CAAC,MAAM,CACN,CAAC,CAAC,EAA8C,EAAE,CAChD,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAC7B,CAAC;QAEF,MAAM,YAAY,GAAG,2BAA2B,CAC9C,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE;SAC/B,CAAC,CAAC,EACH,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC,CAAC,CACJ,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,gBAAgB;YAChB,UAAU;YACV,YAAY;SACb,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,0BAA0B,EAAE,CAAC"}

package/dist/schema/models/authorizer/authorizer-expression-validator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorizer-expression-validator.d.ts","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer-expression-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAKhF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EACV,wBAAwB,EAGzB,MAAM,gCAAgC,CAAC;AAExC;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,iFAAiF;IACjF,cAAc,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,gBAAgB,EAAE,MAAM,CAAC;IACzB,kEAAkE;IAClE,0BAA0B,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,iEAAiE;IACjE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qFAAqF;IACrF,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;CACpD;AAyCD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,wBAAwB,EAC7B,YAAY,EAAE,sBAAsB,EACpC,WAAW,EAAE,eAAe,EAC5B,UAAU,EAAE,OAAO,GAClB,oBAAoB,EAAE,CA2OxB;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,cAAc,EAAE,SAAS;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,SAAS,OAAO,EAAE,CAAC;CAChC,EAAE,EACH,SAAS,EAAE,SAAS;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,SAAS;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,CAAC;CACtD,EAAE,GACF,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CA8BrC;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,WAAW,GACvB,sBAAsB,CAcxB"}

package/dist/schema/models/authorizer/authorizer-expression-validator.js

@@ -1,284 +0,0 @@
-/**
- * Validator for authorizer expressions.
- *
- * Validates that:
- * - Model field references exist on the parent model
- * - Auth field references are valid AuthContext properties
- * - Role names exist in project config (warning only)
- */
-import { authConfigSpec } from '#src/plugins/spec/auth-config-spec.js';
-/**
- * Valid auth context field names that can be accessed.
- */
-const VALID_AUTH_FIELDS = new Set(['userId']);
-/**
- * Get role info from the project definition using the auth config spec.
- *
- * @param pluginStore - The plugin spec store
- * @param definition - The raw project definition data
- * @returns Role information including built-in status
- */
-function getAuthRoleInfo(pluginStore, definition) {
-    const authConfig = pluginStore.use(authConfigSpec);
-    const roles = authConfig.getAuthConfig(definition)?.roles;
-    return {
-        allRoleNames: new Set(roles?.map((role) => role.name)),
-        builtInRoleNames: new Set(roles?.filter((role) => role.builtIn).map((role) => role.name)),
-    };
-}
-/**
- * Validate an authorizer expression AST against model and project context.
- *
- * @param ast - The parsed expression AST
- * @param modelContext - Information about the parent model
- * @param pluginStore - The plugin spec store for accessing auth config
- * @param definition - The raw project definition data
- * @returns Array of warnings (errors are thrown, warnings are returned)
- *
- * @example
- * ```typescript
- * const warnings = validateAuthorizerExpression(
- *   ast,
- *   { modelName: 'User', scalarFieldNames: new Set(['id', 'email']) },
- *   pluginStore,
- *   definition,
- * );
- * ```
- */
-export function validateAuthorizerExpression(ast, modelContext, pluginStore, definition) {
-    const warnings = [];
-    const { allRoleNames, builtInRoleNames } = getAuthRoleInfo(pluginStore, definition);
-    const nonBuiltInRoleNames = [...allRoleNames].filter((name) => !builtInRoleNames.has(name));
-    function warnIfBuiltInRole(role, start, end) {
-        if (builtInRoleNames.has(role)) {
-            const message = role === 'user'
-                ? `Role 'user' is a built-in role. Use 'isAuthenticated' instead to check if the user is authenticated.`
-                : `Role '${role}' is a built-in role and should not be used in authorizer expressions. Use non-built-in roles: ${nonBuiltInRoleNames.join(', ')}.`;
-            warnings.push({ message, start, end });
-        }
-    }
-    function walk(node) {
-        switch (node.type) {
-            case 'fieldComparison': {
-                if (node.left.type === 'fieldRef') {
-                    validateFieldRef(node.left);
-                }
-                if (node.right.type === 'fieldRef') {
-                    validateFieldRef(node.right);
-                }
-                // Type-check: warn if a model field is compared to an incompatible literal
-                const fieldRef = node.left.type === 'fieldRef' ? node.left : node.right;
-                const literalNode = node.left.type === 'literalValue'
-                    ? node.left
-                    : node.right.type === 'literalValue'
-                        ? node.right
-                        : null;
-                if (fieldRef.type === 'fieldRef' &&
-                    fieldRef.source === 'model' &&
-                    literalNode !== null) {
-                    validateLiteralTypeCompatibility(fieldRef, literalNode);
-                }
-                break;
-            }
-            case 'hasRole': {
-                // Warn if role doesn't exist (but allow - plugins may define roles)
-                if (allRoleNames.has(node.role)) {
-                    warnIfBuiltInRole(node.role, node.roleStart, node.roleEnd);
-                }
-                else {
-                    warnings.push({
-                        message: `Role '${node.role}' is not defined in the project configuration. Available roles: ${[...allRoleNames].join(', ')}.`,
-                        start: node.roleStart,
-                        end: node.roleEnd,
-                    });
-                }
-                break;
-            }
-            case 'hasSomeRole': {
-                for (let i = 0; i < node.roles.length; i++) {
-                    const role = node.roles[i];
-                    const start = node.rolesStart[i];
-                    const end = node.rolesEnd[i];
-                    if (allRoleNames.has(role)) {
-                        warnIfBuiltInRole(role, start, end);
-                    }
-                    else {
-                        warnings.push({
-                            message: `Role '${role}' is not defined in the project configuration. Available roles: ${[...allRoleNames].join(', ')}.`,
-                            start,
-                            end,
-                        });
-                    }
-                }
-                break;
-            }
-            case 'nestedHasRole': {
-                validateNestedRelation(node.relationName, node.relationStart, node.relationEnd, [node.role], [node.roleStart], [node.roleEnd]);
-                break;
-            }
-            case 'nestedHasSomeRole': {
-                validateNestedRelation(node.relationName, node.relationStart, node.relationEnd, node.roles, node.rolesStart, node.rolesEnd);
-                break;
-            }
-            case 'isAuthenticated': {
-                // No validation needed
-                break;
-            }
-            case 'binaryLogical': {
-                walk(node.left);
-                walk(node.right);
-                break;
-            }
-        }
-    }
-    function validateNestedRelation(relationName, relationStart, relationEnd, roles, rolesStart, rolesEnd) {
-        const { relationInfo } = modelContext;
-        if (!relationInfo) {
-            // Can't validate without relation info
-            return;
-        }
-        const relation = relationInfo.get(relationName);
-        if (!relation) {
-            const availableRelations = [...relationInfo.keys()].join(', ');
-            warnings.push({
-                message: `Relation '${relationName}' does not exist on model '${modelContext.modelName}'.${availableRelations ? ` Available relations: ${availableRelations}.` : ''}`,
-                start: relationStart,
-                end: relationEnd,
-            });
-            return;
-        }
-        if (relation.referenceCount !== 1) {
-            warnings.push({
-                message: `Relation '${relationName}' has ${relation.referenceCount} foreign key references. Nested authorizer checks only support single-key relations.`,
-                start: relationStart,
-                end: relationEnd,
-            });
-            return;
-        }
-        // Validate each role exists on the foreign model's authorizer
-        for (const [i, role] of roles.entries()) {
-            if (!relation.foreignAuthorizerRoleNames.has(role)) {
-                const availableRoles = [...relation.foreignAuthorizerRoleNames].join(', ');
-                warnings.push({
-                    message: `Role '${role}' is not defined on model '${relation.foreignModelName}' authorizer.${availableRoles ? ` Available roles: ${availableRoles}.` : ''}`,
-                    start: rolesStart[i],
-                    end: rolesEnd[i],
-                });
-            }
-        }
-    }
-    function validateLiteralTypeCompatibility(fieldRefNode, literalNode) {
-        const { fieldTypes } = modelContext;
-        const fieldType = fieldTypes.get(fieldRefNode.field);
-        if (!fieldType)
-            return;
-        const literalJsType = typeof literalNode.value;
-        // Determine which JS types are compatible with each field type
-        const isCompatible = (() => {
-            switch (fieldType) {
-                case 'boolean': {
-                    return literalJsType === 'boolean';
-                }
-                case 'int': {
-                    return (typeof literalNode.value === 'number' &&
-                        Number.isInteger(literalNode.value));
-                }
-                case 'float':
-                case 'decimal': {
-                    return literalJsType === 'number';
-                }
-                case 'string':
-                case 'uuid':
-                case 'enum': {
-                    return literalJsType === 'string';
-                }
-                default: {
-                    // Unknown or unsupported field type — no warning
-                    return true;
-                }
-            }
-        })();
-        if (!isCompatible) {
-            warnings.push({
-                message: `Literal value type '${literalJsType}' is not compatible with field '${fieldRefNode.field}' of type '${fieldType}'.`,
-                start: literalNode.start,
-                end: literalNode.end,
-            });
-        }
-    }
-    function validateFieldRef(node) {
-        if (node.source === 'model') {
-            // Check if field exists on model
-            if (!modelContext.scalarFieldNames.has(node.field)) {
-                warnings.push({
-                    message: `Field '${node.field}' does not exist on model '${modelContext.modelName}'.`,
-                    start: node.start,
-                    end: node.end,
-                });
-            }
-        }
-        else if (!VALID_AUTH_FIELDS.has(node.field)) {
-            // node.source === 'auth' is implied since source is 'model' | 'auth'
-            warnings.push({
-                message: `Invalid auth property '${node.field}'. Valid properties are: ${[...VALID_AUTH_FIELDS].join(', ')}.`,
-                start: node.start,
-                end: node.end,
-            });
-        }
-    }
-    walk(ast);
-    return warnings;
-}
-/**
- * Build relation validation info from model relations and the full list of models.
- *
- * Uses structural typing so both raw JSON shapes and typed `ModelConfig` objects
- * can be passed directly.
- *
- * @param modelRelations - The relations on the current model
- * @param allModels - All models in the project (for foreign model lookup)
- * @returns Map of relation name → validation info
- */
-export function buildRelationValidationInfo(modelRelations, allModels) {
-    const relationInfo = new Map();
-    // Build lookups by both id and name for flexible matching
-    const modelsById = new Map(allModels
-        .filter((m) => m.id != null)
-        .map((m) => [m.id, m]));
-    const modelsByName = new Map(allModels.map((m) => [m.name, m]));
-    for (const relation of modelRelations) {
-        const foreignModel = modelsById.get(relation.modelRef) ?? modelsByName.get(relation.modelRef);
-        const foreignAuthorizerRoleNames = new Set();
-        if (foreignModel?.authorizer?.roles) {
-            for (const role of foreignModel.authorizer.roles) {
-                foreignAuthorizerRoleNames.add(role.name);
-            }
-        }
-        relationInfo.set(relation.name, {
-            referenceCount: relation.references.length,
-            foreignModelName: foreignModel?.name ?? relation.modelRef,
-            foreignAuthorizerRoleNames,
-        });
-    }
-    return relationInfo;
-}
-/**
- * Extract model validation context from a model configuration.
- *
- * @param modelConfig - The parsed model configuration
- * @returns Model validation context for the validator
- */
-export function createModelValidationContext(modelConfig) {
-    const scalarFieldNames = new Set();
-    const fieldTypes = new Map();
-    for (const field of modelConfig.model.fields) {
-        scalarFieldNames.add(field.name);
-        fieldTypes.set(field.name, field.type);
-    }
-    return {
-        modelName: modelConfig.name,
-        scalarFieldNames,
-        fieldTypes,
-    };
-}
-//# sourceMappingURL=authorizer-expression-validator.js.map

package/dist/schema/models/authorizer/authorizer-expression-validator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorizer-expression-validator.js","sourceRoot":"","sources":["../../../../src/schema/models/authorizer/authorizer-expression-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAmCvE;;GAEG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAY9C;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,WAA4B,EAC5B,UAAmB;IAEnB,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG,UAAU,CAAC,aAAa,CACpC,UAA+B,CAChC,EAAE,KAAK,CAAC;IACT,OAAO;QACL,YAAY,EAAE,IAAI,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,gBAAgB,EAAE,IAAI,GAAG,CACvB,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/D;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,GAA6B,EAC7B,YAAoC,EACpC,WAA4B,EAC5B,UAAmB;IAEnB,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,eAAe,CACxD,WAAW,EACX,UAAU,CACX,CAAC;IACF,MAAM,mBAAmB,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,MAAM,CAClD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CACtC,CAAC;IAEF,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;QACjE,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,GACX,IAAI,KAAK,MAAM;gBACb,CAAC,CAAC,sGAAsG;gBACxG,CAAC,CAAC,SAAS,IAAI,kGAAkG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACvJ,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,SAAS,IAAI,CAAC,IAA8B;QAC1C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAClC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9B,CAAC;gBACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACnC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;gBACD,2EAA2E;gBAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;gBACxE,MAAM,WAAW,GACf,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc;oBAC/B,CAAC,CAAC,IAAI,CAAC,IAAI;oBACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;wBAClC,CAAC,CAAC,IAAI,CAAC,KAAK;wBACZ,CAAC,CAAC,IAAI,CAAC;gBACb,IACE,QAAQ,CAAC,IAAI,KAAK,UAAU;oBAC5B,QAAQ,CAAC,MAAM,KAAK,OAAO;oBAC3B,WAAW,KAAK,IAAI,EACpB,CAAC;oBACD,gCAAgC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,oEAAoE;gBACpE,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC7D,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC;wBACZ,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,mEAAmE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;wBAC7H,KAAK,EAAE,IAAI,CAAC,SAAS;wBACrB,GAAG,EAAE,IAAI,CAAC,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAC7B,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC3B,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;oBACtC,CAAC;yBAAM,CAAC;wBACN,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,SAAS,IAAI,mEAAmE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;4BACxH,KAAK;4BACL,GAAG;yBACJ,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,sBAAsB,CACpB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,WAAW,EAChB,CAAC,IAAI,CAAC,IAAI,CAAC,EACX,CAAC,IAAI,CAAC,SAAS,CAAC,EAChB,CAAC,IAAI,CAAC,OAAO,CAAC,CACf,CAAC;gBACF,MAAM;YACR,CAAC;YAED,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,sBAAsB,CACpB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,QAAQ,CACd,CAAC;gBACF,MAAM;YACR,CAAC;YAED,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,uBAAuB;gBACvB,MAAM;YACR,CAAC;YAED,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,sBAAsB,CAC7B,YAAoB,EACpB,aAAqB,EACrB,WAAmB,EACnB,KAAe,EACf,UAAoB,EACpB,QAAkB;QAElB,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC;QACtC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,uCAAuC;YACvC,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,kBAAkB,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,aAAa,YAAY,8BAA8B,YAAY,CAAC,SAAS,KAAK,kBAAkB,CAAC,CAAC,CAAC,yBAAyB,kBAAkB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACrK,KAAK,EAAE,aAAa;gBACpB,GAAG,EAAE,WAAW;aACjB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,aAAa,YAAY,SAAS,QAAQ,CAAC,cAAc,sFAAsF;gBACxJ,KAAK,EAAE,aAAa;gBACpB,GAAG,EAAE,WAAW;aACjB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,8DAA8D;QAC9D,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,MAAM,cAAc,GAAG,CAAC,GAAG,QAAQ,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAClE,IAAI,CACL,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,SAAS,IAAI,8BAA8B,QAAQ,CAAC,gBAAgB,gBAAgB,cAAc,CAAC,CAAC,CAAC,qBAAqB,cAAc,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC3J,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;oBACpB,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,gCAAgC,CACvC,YAA0B,EAC1B,WAA6B;QAE7B,MAAM,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC;QACpC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,aAAa,GAAG,OAAO,WAAW,CAAC,KAAK,CAAC;QAE/C,+DAA+D;QAC/D,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;YACzB,QAAQ,SAAS,EAAE,CAAC;gBAClB,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,OAAO,aAAa,KAAK,SAAS,CAAC;gBACrC,CAAC;gBACD,KAAK,KAAK,CAAC,CAAC,CAAC;oBACX,OAAO,CACL,OAAO,WAAW,CAAC,KAAK,KAAK,QAAQ;wBACrC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CACpC,CAAC;gBACJ,CAAC;gBACD,KAAK,OAAO,CAAC;gBACb,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,OAAO,aAAa,KAAK,QAAQ,CAAC;gBACpC,CAAC;gBACD,KAAK,QAAQ,CAAC;gBACd,KAAK,MAAM,CAAC;gBACZ,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,OAAO,aAAa,KAAK,QAAQ,CAAC;gBACpC,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,iDAAiD;oBACjD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,uBAAuB,aAAa,mCAAmC,YAAY,CAAC,KAAK,cAAc,SAAS,IAAI;gBAC7H,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,GAAG,EAAE,WAAW,CAAC,GAAG;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,SAAS,gBAAgB,CAAC,IAAkB;QAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,iCAAiC;YACjC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnD,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,UAAU,IAAI,CAAC,KAAK,8BAA8B,YAAY,CAAC,SAAS,IAAI;oBACrF,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,qEAAqE;YACrE,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,0BAA0B,IAAI,CAAC,KAAK,4BAA4B,CAAC,GAAG,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC7G,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CACzC,cAIG,EACH,SAIG;IAEH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkC,CAAC;IAE/D,0DAA0D;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,SAAS;SACN,MAAM,CAAC,CAAC,CAAC,EAAkC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC;SAC3D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CACzB,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhE,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;QACtC,MAAM,YAAY,GAChB,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE3E,MAAM,0BAA0B,GAAG,IAAI,GAAG,EAAU,CAAC;QACrD,IAAI,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;YACpC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACjD,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC9B,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM;YAC1C,gBAAgB,EAAE,YAAY,EAAE,IAAI,IAAI,QAAQ,CAAC,QAAQ;YACzD,0BAA0B;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,WAAwB;IAExB,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE7C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7C,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,OAAO;QACL,SAAS,EAAE,WAAW,CAAC,IAAI;QAC3B,gBAAgB;QAChB,UAAU;KACX,CAAC;AACJ,CAAC"}