@baseplate-dev/project-builder-lib 0.6.4 → 0.6.6

package/dist/definition/project-definition-container.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-definition-container.d.ts","sourceRoot":"","sources":["../../src/definition/project-definition-container.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,oCAAoC,CAAC;AAe5C;;;;;GAKG;AACH,qBAAa,0BAA0B;IACrC,UAAU,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;IACrD,UAAU,EAAE,iBAAiB,CAAC;IAC9B,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,aAAa,EAAE,mBAAmB,CAAC;IACnC,WAAW,EAAE,eAAe,CAAC;IAC7B,MAAM,EAAE,uBAAuB,CAAC;IAEhC,OAAO,CAAC,cAAc,CAA4B;gBAGhD,MAAM,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,EAChD,aAAa,EAAE,mBAAmB,EAClC,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE,uBAAuB;IAWjC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,gBAAgB,GAAG,SAAS;IAKlE;;;;;OAKG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;IAC9B,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS;IAYtD;;;;;OAKG;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS;IAO1D;;;;;OAKG;IACH,eAAe,CACb,MAAM,EAAE,CAAC,WAAW,EAAE,iBAAiB,KAAK,IAAI,GAC/C,oBAAoB,CAAC,iBAAiB,CAAC;IAK1C;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAKxB,sBAAsB,IAAI,oBAAoB;IAa9C;;;;OAIG;IACH,oBAAoB,IAAI,MAAM;IAK9B;;;;;;OAMG;IACH,MAAM,CAAC,oBAAoB,CACzB,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,mBAAmB,GAC3B,0BAA0B;CAY9B"}
+{"version":3,"file":"project-definition-container.d.ts","sourceRoot":"","sources":["../../src/definition/project-definition-container.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,oCAAoC,CAAC;AAgB5C;;;;;GAKG;AACH,qBAAa,0BAA0B;IACrC,UAAU,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;IACrD,UAAU,EAAE,iBAAiB,CAAC;IAC9B,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,aAAa,EAAE,mBAAmB,CAAC;IACnC,WAAW,EAAE,eAAe,CAAC;IAC7B,MAAM,EAAE,uBAAuB,CAAC;IAEhC,OAAO,CAAC,cAAc,CAA4B;gBAGhD,MAAM,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,EAChD,aAAa,EAAE,mBAAmB,EAClC,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE,uBAAuB;IAWjC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,gBAAgB,GAAG,SAAS;IAKlE;;;;;OAKG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;IAC9B,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS;IAYtD;;;;;OAKG;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS;IAO1D;;;;;OAKG;IACH,eAAe,CACb,MAAM,EAAE,CAAC,WAAW,EAAE,iBAAiB,KAAK,IAAI,GAC/C,oBAAoB,CAAC,iBAAiB,CAAC;IAK1C;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAKxB,sBAAsB,IAAI,oBAAoB;IAa9C;;;;OAIG;IACH,oBAAoB,IAAI,MAAM;IAM9B;;;;;;OAMG;IACH,MAAM,CAAC,oBAAoB,CACzB,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,mBAAmB,GAC3B,0BAA0B;CAY9B"}

package/dist/definition/project-definition-container.js

@@ -4,6 +4,7 @@ import { createPluginSpecStore } from '#src/parser/parser.js';
 import { deserializeSchemaWithTransformedReferences, fixRefDeletions, serializeSchema, serializeSchemaFromRefPayload, } from '#src/references/index.js';
 import { createDefinitionSchemaParserContext, createProjectDefinitionSchema, } from '#src/schema/index.js';
 import { collectEntityMetadata } from '#src/tools/entity-service/entity-type-map.js';
+import { sortEntityArrays } from '#src/tools/sort-entity-arrays.js';
 /**
  * Container for a project definition that includes references and entities.
  *
@@ -96,7 +97,8 @@ export class ProjectDefinitionContainer {
      */
     toSerializedContents() {
         const serializedContents = serializeSchema(this.schema, this.definition);
-        return stringifyPrettyStable(serializedContents);
+        const sortedContents = sortEntityArrays(this.schema, serializedContents);
+        return stringifyPrettyStable(sortedContents);
     }
     /**
      * Creates a new ProjectDefinitionContainer from a serialized configuration.

package/dist/definition/project-definition-container.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-definition-container.js","sourceRoot":"","sources":["../../src/definition/project-definition-container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAmBhC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EACL,0CAA0C,EAC1C,eAAe,EACf,eAAe,EACf,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAErF;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IACrC,UAAU,CAA2C;IACrD,UAAU,CAAoB;IAC9B,UAAU,CAAwB;IAClC,QAAQ,CAAqB;IAC7B,aAAa,CAAsB;IACnC,WAAW,CAAkB;IAC7B,MAAM,CAA0B;IAExB,cAAc,CAA4B;IAElD,YACE,MAAgD,EAChD,aAAkC,EAClC,WAA4B,EAC5B,MAA+B;QAE/B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,EAAsB;QACjC,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;IAUD,UAAU,CAAC,EAAsB;QAC/B,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC;QAE1D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,EAAsB;QACnC,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC;QAE1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,eAAe,CACb,MAAgD;QAEhD,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvD,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC;IAED;;;;;OAKG;IACK,gBAAgB;QACtB,IAAI,CAAC,cAAc,KAAK,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,sBAAsB;QACpB,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,oBAAoB,GAAG,6BAA6B,CACxD,IAAI,CAAC,UAAU,CACW,CAAC;QAE7B,OAAO;YACL,oBAAoB;YACpB,aAAa;YACb,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;SAC5C,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,oBAAoB;QAClB,MAAM,kBAAkB,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACzE,OAAO,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IACnD,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,oBAAoB,CACzB,MAAe,EACf,OAA4B;QAE5B,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,6BAA6B,CAC1C,mCAAmC,CAAC,EAAE,OAAO,EAAE,CAAC,CACjD,CAAC;QACF,OAAO,IAAI,0BAA0B,CACnC,0CAA0C,CAAC,MAAM,EAAE,MAAM,CAAC,EAC1D,OAAO,EACP,OAAO,EACP,MAAM,CACP,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"project-definition-container.js","sourceRoot":"","sources":["../../src/definition/project-definition-container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAmBhC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EACL,0CAA0C,EAC1C,eAAe,EACf,eAAe,EACf,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IACrC,UAAU,CAA2C;IACrD,UAAU,CAAoB;IAC9B,UAAU,CAAwB;IAClC,QAAQ,CAAqB;IAC7B,aAAa,CAAsB;IACnC,WAAW,CAAkB;IAC7B,MAAM,CAA0B;IAExB,cAAc,CAA4B;IAElD,YACE,MAAgD,EAChD,aAAkC,EAClC,WAA4B,EAC5B,MAA+B;QAE/B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,EAAsB;QACjC,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;IAUD,UAAU,CAAC,EAAsB;QAC/B,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC;QAE1D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,EAAsB;QACnC,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC;QAE1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,eAAe,CACb,MAAgD;QAEhD,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvD,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC;IAED;;;;;OAKG;IACK,gBAAgB;QACtB,IAAI,CAAC,cAAc,KAAK,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,sBAAsB;QACpB,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,oBAAoB,GAAG,6BAA6B,CACxD,IAAI,CAAC,UAAU,CACW,CAAC;QAE7B,OAAO;YACL,oBAAoB;YACpB,aAAa;YACb,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;SAC5C,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,oBAAoB;QAClB,MAAM,kBAAkB,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACzE,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACzE,OAAO,qBAAqB,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,oBAAoB,CACzB,MAAe,EACf,OAA4B;QAE5B,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,6BAA6B,CAC1C,mCAAmC,CAAC,EAAE,OAAO,EAAE,CAAC,CACjD,CAAC;QACF,OAAO,IAAI,0BAA0B,CACnC,0CAA0C,CAAC,MAAM,EAAE,MAAM,CAAC,EAC1D,OAAO,EACP,OAAO,EACP,MAAM,CACP,CAAC;IACJ,CAAC;CACF"}

package/dist/{schema/models → expression-parsers}/authorizer/authorizer-expression-acorn-parser.d.ts

@@ -6,6 +6,8 @@
  * - `hasRole('admin')`
  * - `hasSomeRole(['admin', 'moderator'])`
  * - `model.id === userId || hasRole('admin')`
+ * - `exists(model.members, { userId: userId })`
+ * - `all(model.tasks, { isCompleted: true })`
  *
  * Uses Acorn to parse as JavaScript, then converts the ESTree AST
  * to our domain-specific AST, rejecting unsupported constructs.

package/dist/expression-parsers/authorizer/authorizer-expression-acorn-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-acorn-parser.d.ts","sourceRoot":"","sources":["../../../src/expression-parsers/authorizer/authorizer-expression-acorn-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAYH,OAAO,KAAK,EACV,wBAAwB,EAazB,MAAM,gCAAgC,CAAC;AAMxC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GACZ,wBAAwB,CA6C1B"}

package/dist/{schema/models → expression-parsers}/authorizer/authorizer-expression-acorn-parser.js

@@ -6,12 +6,15 @@
  * - `hasRole('admin')`
  * - `hasSomeRole(['admin', 'moderator'])`
  * - `model.id === userId || hasRole('admin')`
+ * - `exists(model.members, { userId: userId })`
+ * - `all(model.tasks, { isCompleted: true })`
  *
  * Uses Acorn to parse as JavaScript, then converts the ESTree AST
  * to our domain-specific AST, rejecting unsupported constructs.
  */
 import { parse } from 'acorn';
 import { AuthorizerExpressionParseError } from './authorizer-expression-ast.js';
+import { visitAuthorizerExpression } from './authorizer-expression-visitor.js';
 /**
  * Parse an authorizer expression string into our domain AST.
  *
@@ -78,7 +81,7 @@ function convertNode(node) {
             if (node.name === 'isAuthenticated') {
                 return { type: 'isAuthenticated' };
             }
-            throw new AuthorizerExpressionParseError(`Unknown identifier '${node.name}'. Use hasRole(), hasSomeRole(), isAuthenticated, or a comparison like model.id === userId.`, node);
+            throw new AuthorizerExpressionParseError(`Unknown identifier '${node.name}'. Use hasRole(), hasSomeRole(), exists(), all(), isAuthenticated, or a comparison like model.id === userId.`, node);
         }
         case 'MemberExpression': {
             // A bare member expression like `model.id` without comparison
@@ -156,15 +159,17 @@ function convertFieldRefOrLiteral(node) {
     return convertFieldRef(node);
 }
 /**
- * Convert a CallExpression to HasRoleNode or HasSomeRoleNode.
+ * Convert a CallExpression to a role check or relation filter node.
  * Supports:
  * - `hasRole('admin')`
  * - `hasSomeRole(['admin', 'moderator'])`
+ * - `exists(model.relation, { field: value })`
+ * - `all(model.relation, { field: value })`
  */
 function convertCallExpression(node) {
     // Only support direct calls (e.g., hasRole(...))
     if (node.callee.type !== 'Identifier') {
-        throw new AuthorizerExpressionParseError('Function calls must be standalone (hasRole, hasSomeRole)', node.callee);
+        throw new AuthorizerExpressionParseError('Function calls must be standalone (hasRole, hasSomeRole, exists, all)', node.callee);
     }
     const funcName = node.callee.name;
     if (funcName === 'hasRole') {
@@ -173,7 +178,13 @@ function convertCallExpression(node) {
     if (funcName === 'hasSomeRole') {
         return parseHasSomeRoleArgs(node, 'hasSomeRole()');
     }
-    throw new AuthorizerExpressionParseError(`Unknown function '${funcName}'. Use hasRole() or hasSomeRole().`, node.callee);
+    if (funcName === 'exists') {
+        return parseRelationFilterArgs(node, 'some', 'exists()');
+    }
+    if (funcName === 'all') {
+        return parseRelationFilterArgs(node, 'every', 'all()');
+    }
+    throw new AuthorizerExpressionParseError(`Unknown function '${funcName}'. Use hasRole(), hasSomeRole(), exists(), or all().`, node.callee);
 }
 /**
  * Parse a `model.X` MemberExpression argument for nested role checks.
@@ -294,6 +305,48 @@ function parseHasSomeRoleArgs(node, funcName) {
     }
     throw new AuthorizerExpressionParseError(`${funcName} requires 1 argument (hasSomeRole(['role1'])) or 2 arguments (hasSomeRole(model.relation, ['role1'])), got ${node.arguments.length}`, node);
 }
+/**
+ * Parse exists(model.relation, { field: value }) or all(model.relation, { field: value }) arguments.
+ */
+function parseRelationFilterArgs(node, operator, funcName) {
+    if (node.arguments.length !== 2) {
+        throw new AuthorizerExpressionParseError(`${funcName} requires exactly 2 arguments (e.g., ${funcName.replace('()', '')}(model.relation, { field: value })), got ${node.arguments.length}`, node);
+    }
+    const relationArg = node.arguments[0];
+    const conditionsArg = node.arguments[1];
+    const relation = parseModelRelationArg(relationArg, funcName);
+    if (conditionsArg.type !== 'ObjectExpression') {
+        throw new AuthorizerExpressionParseError(`${funcName} second argument must be an object literal (e.g., { userId: userId })`, conditionsArg);
+    }
+    if (conditionsArg.properties.length === 0) {
+        throw new AuthorizerExpressionParseError(`${funcName} conditions object must have at least one property`, conditionsArg);
+    }
+    const conditions = [];
+    for (const prop of conditionsArg.properties) {
+        if (prop.type === 'SpreadElement') {
+            throw new AuthorizerExpressionParseError(`${funcName} spread elements are not supported in conditions`, prop);
+        }
+        if (prop.computed) {
+            throw new AuthorizerExpressionParseError(`${funcName} computed property keys are not supported in conditions`, prop);
+        }
+        if (prop.key.type !== 'Identifier') {
+            throw new AuthorizerExpressionParseError(`${funcName} condition keys must be identifiers (e.g., { userId: userId })`, prop.key);
+        }
+        const field = prop.key.name;
+        const fieldStart = prop.key.start;
+        const fieldEnd = prop.key.end;
+        const value = convertFieldRefOrLiteral(prop.value);
+        conditions.push({ field, fieldStart, fieldEnd, value });
+    }
+    return {
+        type: 'relationFilter',
+        relationName: relation.relationName,
+        relationStart: relation.relationStart,
+        relationEnd: relation.relationEnd,
+        operator,
+        conditions,
+    };
+}
 /**
  * Convert to FieldRefNode.
  * Supports:
@@ -353,54 +406,9 @@ function extractInfo(ast) {
     const authFieldRefs = [];
     const roleRefs = [];
     const nestedRoleRefs = [];
+    const relationFilterRefs = [];
     let requiresModel = false;
-    function walk(node) {
-        switch (node.type) {
-            case 'fieldComparison': {
-                if (node.left.type === 'fieldRef') {
-                    walkFieldRef(node.left);
-                }
-                if (node.right.type === 'fieldRef') {
-                    walkFieldRef(node.right);
-                }
-                break;
-            }
-            case 'hasRole': {
-                roleRefs.push(node.role);
-                break;
-            }
-            case 'hasSomeRole': {
-                roleRefs.push(...node.roles);
-                break;
-            }
-            case 'nestedHasRole': {
-                nestedRoleRefs.push({
-                    relationName: node.relationName,
-                    roles: [node.role],
-                });
-                requiresModel = true;
-                break;
-            }
-            case 'nestedHasSomeRole': {
-                nestedRoleRefs.push({
-                    relationName: node.relationName,
-                    roles: node.roles,
-                });
-                requiresModel = true;
-                break;
-            }
-            case 'isAuthenticated': {
-                // No dependencies to track
-                break;
-            }
-            case 'binaryLogical': {
-                walk(node.left);
-                walk(node.right);
-                break;
-            }
-        }
-    }
-    function walkFieldRef(node) {
+    function collectFieldRef(node) {
         if (node.source === 'model') {
             modelFieldRefs.push(node.field);
             requiresModel = true;
@@ -409,12 +417,59 @@ function extractInfo(ast) {
             authFieldRefs.push(node.field);
         }
     }
-    walk(ast);
+    const infoVisitor = {
+        fieldComparison(node) {
+            if (node.left.type === 'fieldRef') {
+                collectFieldRef(node.left);
+            }
+            if (node.right.type === 'fieldRef') {
+                collectFieldRef(node.right);
+            }
+        },
+        hasRole(node) {
+            roleRefs.push(node.role);
+        },
+        hasSomeRole(node) {
+            roleRefs.push(...node.roles);
+        },
+        nestedHasRole(node) {
+            nestedRoleRefs.push({
+                relationName: node.relationName,
+                roles: [node.role],
+            });
+            requiresModel = true;
+        },
+        nestedHasSomeRole(node) {
+            nestedRoleRefs.push({
+                relationName: node.relationName,
+                roles: node.roles,
+            });
+            requiresModel = true;
+        },
+        relationFilter(node) {
+            for (const condition of node.conditions) {
+                if (condition.value.type === 'fieldRef') {
+                    collectFieldRef(condition.value);
+                }
+            }
+            relationFilterRefs.push({ relationName: node.relationName });
+            requiresModel = true;
+        },
+        isAuthenticated() {
+            // No dependencies to track
+        },
+        binaryLogical(_node, _ctx, visit) {
+            visit(_node.left);
+            visit(_node.right);
+        },
+    };
+    visitAuthorizerExpression(ast, infoVisitor);
     return {
         modelFieldRefs: [...new Set(modelFieldRefs)],
         authFieldRefs: [...new Set(authFieldRefs)],
         roleRefs: [...new Set(roleRefs)],
         nestedRoleRefs,
+        relationFilterRefs,
         requiresModel,
     };
 }

package/dist/expression-parsers/authorizer/authorizer-expression-acorn-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-acorn-parser.js","sourceRoot":"","sources":["../../../src/expression-parsers/authorizer/authorizer-expression-acorn-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAUH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAmB9B,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAE/E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAa;IAEb,mBAAmB;IACnB,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE;YACrB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,8BAA8B,CACtC,8BAA8B,KAAK,CAAC,OAAO,EAAE;YAC7C,kDAAkD;YACjD,KAAoC,CAAC,GAAG,CAC1C,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,8BAA8B,CACtC,iFAAiF,EACjF,CAAC,EACD,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,CAAC;IACD,MAAM,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE5C,IAAI,mBAAmB,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACvD,MAAM,IAAI,8BAA8B,CACtC,qEAAqE,EACrE,mBAAmB,CACpB,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,MAAM,GAAG,GAAG,WAAW,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAExD,iCAAiC;IACjC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAE9B,OAAO;QACL,GAAG;QACH,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,IAAgB;IACnC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACpC,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAgC,CAAC;YACnE,CAAC;YACD,MAAM,IAAI,8BAA8B,CACtC,uBAAuB,IAAI,CAAC,IAAI,8GAA8G,EAC9I,IAAI,CACL,CAAC;QACJ,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,8DAA8D;YAC9D,MAAM,IAAI,8BAA8B,CACtC,+EAA+E,EAC/E,IAAI,CACL,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAI,8BAA8B,CACtC,gCAAgC,IAAI,CAAC,IAAI,EAAE,EAC3C,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,IAAuB;IACvD,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,8BAA8B,CACtC,iCAAiC,IAAI,CAAC,QAAQ,iCAAiC,EAC/E,IAAI,CAAC,IAAI,CAAC,GAAG,EACb,IAAI,CAAC,KAAK,CAAC,KAAK,CACjB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5B,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,IAAsB;IACrD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvD,MAAM,IAAI,8BAA8B,CACtC,oCAAoC,IAAI,CAAC,QAAQ,mCAAmC,EACpF,IAAI,CAAC,IAAI,CAAC,GAAG,EACb,IAAI,CAAC,KAAK,CAAC,KAAK,CACjB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAkB,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEnD,uFAAuF;IACvF,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClE,MAAM,IAAI,8BAA8B,CACtC,4FAA4F,EAC5F,IAAI,CACL,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI;QACJ,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAC/B,IAAgB;IAEhB,IACE,IAAI,CAAC,IAAI,KAAK,iBAAiB;QAC/B,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,EACvC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK;YACzE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;SACa,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,cAAc;gBACpB,KAAK;gBACL,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;aACa,CAAC;QAC/B,CAAC;QACD,MAAM,IAAI,8BAA8B,CACtC,oFAAoF,EACpF,IAAI,CACL,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,qBAAqB,CAC5B,IAAoB;IAOpB,iDAAiD;IACjD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACtC,MAAM,IAAI,8BAA8B,CACtC,uEAAuE,EACvE,IAAI,CAAC,MAAM,CACZ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAElC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,OAAO,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,IAAI,8BAA8B,CACtC,qBAAqB,QAAQ,sDAAsD,EACnF,IAAI,CAAC,MAAM,CACZ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAC5B,GAAe,EACf,QAAgB;IAEhB,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACpC,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,iEAAiE,EAC5E,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACpE,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,gEAAgE,EAC3E,GAAG,CAAC,MAAM,CACX,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,sEAAsE,EACjF,GAAG,CAAC,QAAQ,CACb,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACvC,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,oCAAoC,EAC/C,GAAG,CAAC,QAAQ,CACb,CAAC;IACJ,CAAC;IAED,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI;QAC/B,aAAa,EAAE,GAAG,CAAC,KAAK;QACxB,WAAW,EAAE,GAAG,CAAC,GAAG;KACrB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,IAAoB,EACpB,QAAgB;IAEhB,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,sCAAsC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,oCAAoC,EAC/C,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,GAAG,CAAC,KAAK;YACf,SAAS,EAAE,GAAG,CAAC,KAAK;YACpB,OAAO,EAAE,GAAG,CAAC,GAAG;SACjB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,qDAAqD;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,WAAyB,EAAE,QAAQ,CAAC,CAAC;QAE5E,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,uDAAuD,EAClE,OAAO,CACR,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,IAAI,EAAE,OAAO,CAAC,KAAK;YACnB,SAAS,EAAE,OAAO,CAAC,KAAK;YACxB,OAAO,EAAE,OAAO,CAAC,GAAG;SACrB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,gGAAgG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAClI,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CACzB,GAAe,EACf,QAAgB;IAEhB,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACnC,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,mEAAmE,EAC9E,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,mCAAmC,EAC9C,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,yCAAyC,EACpD,OAAO,CACR,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,6BAA6B,EACxC,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,IAAoB,EACpB,QAAgB;IAEhB,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,yDAAyD;QACzD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CACxD,IAAI,CAAC,SAAS,CAAC,CAAC,CAAe,EAC/B,QAAQ,CACT,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,KAAK;YACL,UAAU;YACV,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,qEAAqE;QACrE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEnC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,WAAyB,EAAE,QAAQ,CAAC,CAAC;QAC5E,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CACxD,QAAsB,EACtB,QAAQ,CACT,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,KAAK;YACL,UAAU;YACV,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,8GAA8G,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAChJ,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,IAAoB,EACpB,QAA0B,EAC1B,QAAgB;IAEhB,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,wCAAwC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,4CAA4C,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAChJ,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,WAAyB,EAAE,QAAQ,CAAC,CAAC;IAE5E,IAAI,aAAa,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC9C,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,uEAAuE,EAClF,aAAa,CACd,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,oDAAoD,EAC/D,aAAa,CACd,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAA8B,EAAE,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,UAAU,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,kDAAkD,EAC7D,IAAI,CACL,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,yDAAyD,EACpE,IAAI,CACL,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACnC,MAAM,IAAI,8BAA8B,CACtC,GAAG,QAAQ,gEAAgE,EAC3E,IAAI,CAAC,GAAG,CACT,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAC9B,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnD,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,QAAQ;QACR,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAgB;IACvC,uDAAuD;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC;QACxB,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;QAE5B,0EAA0E;QAC1E,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,8BAA8B,CACtC,uBAAuB,IAAI,0BAA0B,IAAI,qCAAqC,EAC9F,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACrC,MAAM,IAAI,8BAA8B,CACtC,kDAAkD,EAClD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC;IAExB,+BAA+B;IAC/B,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC5C,MAAM,IAAI,8BAA8B,CACtC,uCAAuC,EACvC,UAAU,CAAC,MAAM,CAClB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;IACtC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,8BAA8B,CACtC,iDAAiD,MAAM,GAAG,EAC1D,UAAU,CAAC,MAAM,CAClB,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,8BAA8B,CACtC,kEAAkE,EAClE,UAAU,CAAC,QAAQ,CACpB,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC9C,MAAM,IAAI,8BAA8B,CACtC,gCAAgC,EAChC,UAAU,CAAC,QAAQ,CACpB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;IAEvC,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,OAAO;QACf,KAAK;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAClB,GAA6B;IAE7B,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,cAAc,GAAgD,EAAE,CAAC;IACvE,MAAM,kBAAkB,GAA+B,EAAE,CAAC;IAC1D,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,SAAS,eAAe,CAAC,IAAkB;QACzC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAsC;QACrD,eAAe,CAAC,IAAI;YAClB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAClC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACnC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI;YACV,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,WAAW,CAAC,IAAI;YACd,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,aAAa,CAAC,IAAI;YAChB,cAAc,CAAC,IAAI,CAAC;gBAClB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;aACnB,CAAC,CAAC;YACH,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,iBAAiB,CAAC,IAAI;YACpB,cAAc,CAAC,IAAI,CAAC;gBAClB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YACH,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,cAAc,CAAC,IAAI;YACjB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACxC,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACxC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;YACD,kBAAkB,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YAC7D,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,eAAe;YACb,2BAA2B;QAC7B,CAAC;QACD,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK;YAC9B,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;IAEF,yBAAyB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAE5C,OAAO;QACL,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5C,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAC1C,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChC,cAAc;QACd,kBAAkB;QAClB,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/{schema/models → expression-parsers}/authorizer/authorizer-expression-ast.d.ts

@@ -6,13 +6,15 @@
  * - `hasRole('admin')`
  * - `hasSomeRole(['admin', 'moderator'])`
  * - `model.id === userId || hasRole('admin')`
+ * - `exists(model.members, { userId: userId })`
+ * - `all(model.tasks, { isCompleted: true })`
  *
  * The AST is produced by parsing with Acorn and converting from ESTree.
  */
 /**
  * Root expression node - the result of parsing an authorizer expression.
  */
-export type AuthorizerExpressionNode = FieldComparisonNode | HasRoleNode | HasSomeRoleNode | NestedHasRoleNode | NestedHasSomeRoleNode | IsAuthenticatedNode | BinaryLogicalNode;
+export type AuthorizerExpressionNode = FieldComparisonNode | HasRoleNode | HasSomeRoleNode | NestedHasRoleNode | NestedHasSomeRoleNode | IsAuthenticatedNode | BinaryLogicalNode | RelationFilterNode;
 /**
  * A literal value in a comparison expression.
  *
@@ -174,6 +176,68 @@ export interface NestedHasSomeRoleNode {
     /** End positions of each role string literal in the source (for rename tracking) */
     rolesEnd: number[];
 }
+/**
+ * A condition within a relation filter expression.
+ *
+ * Pairs a field name on the related model with a value to compare against.
+ *
+ * @example
+ * ```typescript
+ * // userId: userId in exists(model.members, { userId: userId })
+ * { field: 'userId', value: { type: 'fieldRef', source: 'auth', field: 'userId', ... } }
+ *
+ * // type: "admin" in exists(model.members, { type: "admin" })
+ * { field: 'type', value: { type: 'literalValue', value: 'admin', ... } }
+ * ```
+ */
+export interface RelationFilterCondition {
+    /** The field name on the related model */
+    field: string;
+    /** Start position of the field key in the source */
+    fieldStart: number;
+    /** End position of the field key in the source */
+    fieldEnd: number;
+    /** The value to compare — auth field ref or literal value */
+    value: FieldRefNode | LiteralValueNode;
+}
+/**
+ * A relation filter expression: `exists(model.relation, { ...conditions })` or
+ * `all(model.relation, { ...conditions })`
+ *
+ * Checks if some or all records in a 1:many relation match the given conditions.
+ *
+ * @example
+ * ```typescript
+ * // exists(model.members, { userId: userId })
+ * {
+ *   type: 'relationFilter',
+ *   relationName: 'members',
+ *   operator: 'some',
+ *   conditions: [{ field: 'userId', value: { type: 'fieldRef', source: 'auth', field: 'userId', ... } }],
+ * }
+ *
+ * // all(model.tasks, { isCompleted: true })
+ * {
+ *   type: 'relationFilter',
+ *   relationName: 'tasks',
+ *   operator: 'every',
+ *   conditions: [{ field: 'isCompleted', value: { type: 'literalValue', value: true, ... } }],
+ * }
+ * ```
+ */
+export interface RelationFilterNode {
+    type: 'relationFilter';
+    /** The relation name on the current model (e.g., 'members') */
+    relationName: string;
+    /** Start position of model.relation in the source */
+    relationStart: number;
+    /** End position of model.relation in the source */
+    relationEnd: number;
+    /** 'some' for exists(), 'every' for all() */
+    operator: 'some' | 'every';
+    /** At least one condition required */
+    conditions: RelationFilterCondition[];
+}
 /**
  * A boolean indicating whether the user is authenticated.
  *
@@ -250,6 +314,10 @@ export interface AuthorizerExpressionInfo {
         relationName: string;
         roles: string[];
     }[];
+    /** Relation filter references (e.g., exists(model.members, { userId: userId })) */
+    relationFilterRefs: {
+        relationName: string;
+    }[];
     /** Whether the expression requires the model instance */
     requiresModel: boolean;
 }

package/dist/expression-parsers/authorizer/authorizer-expression-ast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-ast.d.ts","sourceRoot":"","sources":["../../../src/expression-parsers/authorizer/authorizer-expression-ast.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAChC,mBAAmB,GACnB,WAAW,GACX,eAAe,GACf,iBAAiB,GACjB,qBAAqB,GACrB,mBAAmB,GACnB,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,cAAc,CAAC;IACrB,wBAAwB;IACxB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,KAAK,GAAG,KAAK,CAAC;IACxB,IAAI,EAAE,YAAY,GAAG,gBAAgB,CAAC;IACtC,KAAK,EAAE,YAAY,GAAG,gBAAgB,CAAC;CACxC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,mCAAmC;IACnC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sFAAsF;IACtF,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,oFAAoF;IACpF,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,uBAAuB;IACtC,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,KAAK,EAAE,YAAY,GAAG,gBAAgB,CAAC;CACxC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,gBAAgB,CAAC;IACvB,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,sCAAsC;IACtC,UAAU,EAAE,uBAAuB,EAAE,CAAC;CACvC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,wBAAwB,CAAC;IAC/B,KAAK,EAAE,wBAAwB,CAAC;CACjC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,mDAAmD;IACnD,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,qBAAqB;IACrB,GAAG,EAAE,wBAAwB,CAAC;IAC9B,8DAA8D;IAC9D,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,qDAAqD;IACrD,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,0FAA0F;IAC1F,cAAc,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IAC5D,mFAAmF;IACnF,kBAAkB,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/C,yDAAyD;IACzD,aAAa,EAAE,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,qBAAa,8BAA+B,SAAQ,KAAK;IACvD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY;gBACxC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM;CAiB1E"}

package/dist/{schema/models → expression-parsers}/authorizer/authorizer-expression-ast.js

@@ -6,6 +6,8 @@
  * - `hasRole('admin')`
  * - `hasSomeRole(['admin', 'moderator'])`
  * - `model.id === userId || hasRole('admin')`
+ * - `exists(model.members, { userId: userId })`
+ * - `all(model.tasks, { isCompleted: true })`
  *
  * The AST is produced by parsing with Acorn and converting from ESTree.
  */

package/dist/expression-parsers/authorizer/authorizer-expression-ast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-ast.js","sourceRoot":"","sources":["../../../src/expression-parsers/authorizer/authorizer-expression-ast.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAiVH;;GAEG;AACH,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAC9C,aAAa,CAAU;IACvB,WAAW,CAAU;IAI9B,YACE,OAAe,EACf,eAAuC,EACvC,WAAoB;QAEpB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;QAE7C,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC;YAC3C,IAAI,CAAC,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,aAAa,GAAG,eAAe,CAAC;YACrC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QACjC,CAAC;IACH,CAAC;CACF"}

package/dist/{schema/models → expression-parsers}/authorizer/authorizer-expression-parser.d.ts

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import type { ExpressionValidationContext, RefExpressionDependency, RefExpressionParseResult, RefExpressionWarning, ResolvedExpressionSlots } from '#src/references/expression-types.js';
+import type { modelEntityType } from '#src/schema/models/types.js';
+import type { ProjectDefinition } from '#src/schema/project-definition.js';
 import { RefExpressionParser } from '#src/references/expression-types.js';
-import type { modelEntityType } from '../types.js';
 import type { AuthorizerExpressionInfo } from './authorizer-expression-ast.js';
 /**
  * Expression parser for model authorizer role expressions.
@@ -50,27 +51,25 @@ export declare class AuthorizerExpressionParser extends RefExpressionParser<stri
         model: typeof modelEntityType;
     }>): RefExpressionWarning[];
     /**
-     * Get entity/field dependencies from the expression.
+     * Get entity references from the expression with their positions.
      *
-     * Currently returns empty array as we don't yet track
-     * entity-level dependencies (just field names).
-     * Future: could track model field entity references for renames.
+     * Walks the AST and resolves each name reference (field, relation, role)
+     * to its entity ID by navigating the model definition from the resolved slots.
+     * Returns positions marking exactly which text to replace when an entity is renamed.
      */
-    getDependencies(): RefExpressionDependency[];
+    getReferencedEntities(_value: string, parseResult: RefExpressionParseResult<AuthorizerExpressionInfo>, definition: ProjectDefinition, resolvedSlots: ResolvedExpressionSlots<{
+        model: typeof modelEntityType;
+    }>): RefExpressionDependency[];
     /**
-     * Update the expression when dependencies are renamed.
+     * Navigate to the raw model object from the definition using resolved slots.
      *
-     * Currently returns value unchanged as we don't yet
-     * support field renames in expressions.
+     * Resolved slot paths point to the entity's ID field (e.g., `['models', 2, 'id']`),
+     * so we walk parent paths until we find an object with a string `name` property.
      */
-    updateForRename(value: string): string;
+    private getRawModel;
     /**
      * Extract model context from the project definition using resolved slots.
      */
     private getModelContext;
 }
-/**
- * Singleton instance of AuthorizerExpressionParser.
- */
-export declare const authorizerExpressionParser: AuthorizerExpressionParser;
 //# sourceMappingURL=authorizer-expression-parser.d.ts.map

package/dist/expression-parsers/authorizer/authorizer-expression-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-parser.d.ts","sourceRoot":"","sources":["../../../src/expression-parsers/authorizer/authorizer-expression-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EACV,2BAA2B,EAC3B,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAE3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAQ1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAY/E;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,0BAA2B,SAAQ,mBAAmB,CACjE,MAAM,EACN,wBAAwB,EACxB;IAAE,KAAK,EAAE,OAAO,eAAe,CAAA;CAAE,CAClC;IACC,QAAQ,CAAC,IAAI,2BAA2B;IAExC;;;OAGG;IACH,YAAY,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAIjC;;;;;OAKG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAAC,wBAAwB,CAAC;IAWxE;;;;;;;;OAQG;IACH,WAAW,CACT,WAAW,EAAE,wBAAwB,EACrC,OAAO,EAAE,2BAA2B,EACpC,aAAa,EAAE,uBAAuB,CAAC;QAAE,KAAK,EAAE,OAAO,eAAe,CAAA;KAAE,CAAC,GACxE,oBAAoB,EAAE;IAgBzB;;;;;;OAMG;IACH,qBAAqB,CACnB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,wBAAwB,CAAC,wBAAwB,CAAC,EAC/D,UAAU,EAAE,iBAAiB,EAC7B,aAAa,EAAE,uBAAuB,CAAC;QAAE,KAAK,EAAE,OAAO,eAAe,CAAA;KAAE,CAAC,GACxE,uBAAuB,EAAE;IA6L5B;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAgCnB;;OAEG;IACH,OAAO,CAAC,eAAe;CA0BxB"}