@cedarjs/internal 5.0.3 → 5.0.4-next.167

package/dist/cjs/generate/gqlormSchema.js

@@ -1,1061 +0,0 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var gqlormSchema_exports = {};
-__export(gqlormSchema_exports, {
-  buildBackendModelInfo: () => buildBackendModelInfo,
-  buildFrontendModelInfo: () => buildFrontendModelInfo,
-  buildModelSchema: () => buildModelSchema,
-  generateGqlormArtifacts: () => generateGqlormArtifacts,
-  generateGqlormBackendContent: () => generateGqlormBackendContent,
-  generateWebGqlormModelsContent: () => generateWebGqlormModelsContent,
-  getExistingSdlTypeNames: () => getExistingSdlTypeNames,
-  mapDmmfTypeToGraphql: () => mapDmmfTypeToGraphql
-});
-module.exports = __toCommonJS(gqlormSchema_exports);
-var import_node_fs = __toESM(require("node:fs"), 1);
-var import_node_path = __toESM(require("node:path"), 1);
-var import_project_config = require("@cedarjs/project-config");
-var import_cedarPluralize = require("@cedarjs/utils/cedarPluralize");
-const INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set([
-  "RW_DataMigration",
-  "Cedar_DataMigration"
-]);
-const SENSITIVE_PATTERNS = [
-  "password",
-  "secret",
-  "token",
-  "hash",
-  "salt",
-  "apikey",
-  "secretkey",
-  "encryptionkey",
-  "privatekey"
-];
-const DEFAULT_GQLORM_BACKEND_CONFIG = {
-  membershipModel: "Membership",
-  membershipModelCamel: "membership",
-  membershipUserField: "userId",
-  membershipOrganizationField: "organizationId",
-  membershipModelExists: false
-};
-function hasDirective(doc, directive) {
-  if (!doc) {
-    return false;
-  }
-  return doc.split("\n").some((line) => line.trimStart().startsWith(`@gqlorm ${directive}`));
-}
-function isSensitiveField(fieldName) {
-  const lower = fieldName.toLowerCase();
-  return SENSITIVE_PATTERNS.some((pattern) => lower.includes(pattern));
-}
-function emitSensitivityWarning(modelName, fieldName) {
-  console.warn(
-    `[gqlorm] ${modelName}.${fieldName} was automatically hidden because its name appears sensitive. Add a directive to suppress this warning:
-
-  /// @gqlorm hide \u2013 to confirm it should stay hidden
-  /// @gqlorm show \u2013 to explicitly expose it
-`
-  );
-}
-const DMMF_TYPE_TO_GRAPHQL = {
-  String: "String",
-  Int: "Int",
-  Float: "Float",
-  BigInt: "BigInt",
-  Boolean: "Boolean",
-  DateTime: "DateTime",
-  Json: "JSON",
-  Decimal: "String",
-  Bytes: "String"
-};
-function mapDmmfTypeToGraphql(type, kind) {
-  if (kind === "enum") {
-    return "String";
-  }
-  return DMMF_TYPE_TO_GRAPHQL[type] ?? "String";
-}
-function graphqlTypeToTsType(graphqlType) {
-  switch (graphqlType) {
-    case "Int":
-    case "Float":
-    case "BigInt":
-      return "number";
-    case "Boolean":
-      return "boolean";
-    default:
-      return "string";
-  }
-}
-function graphqlTypeToTsInterfaceType(graphqlType, isRequired) {
-  let tsType;
-  switch (graphqlType) {
-    case "Int":
-    case "Float":
-    case "BigInt":
-      tsType = "number";
-      break;
-    case "Boolean":
-      tsType = "boolean";
-      break;
-    case "DateTime":
-      tsType = "Date";
-      break;
-    default:
-      tsType = "string";
-  }
-  return isRequired ? tsType : `${tsType} | null`;
-}
-function dmmfTypeToFrontendTsType(type, kind, isRequired) {
-  let tsType;
-  if (kind === "enum") {
-    tsType = "string";
-  } else {
-    switch (type) {
-      case "String":
-        tsType = "string";
-        break;
-      case "Int":
-      case "Float":
-        tsType = "number";
-        break;
-      case "BigInt":
-        tsType = "bigint";
-        break;
-      case "Boolean":
-        tsType = "boolean";
-        break;
-      case "DateTime":
-        tsType = "string";
-        break;
-      case "Json":
-        tsType = "unknown";
-        break;
-      case "Bytes":
-      case "Decimal":
-        tsType = "string";
-        break;
-      default:
-        tsType = "unknown";
-    }
-  }
-  if (isRequired) {
-    return tsType;
-  }
-  return `${tsType} | null`;
-}
-function buildFrontendModelInfo(dmmf) {
-  const models = [];
-  for (const model of dmmf.datamodel.models) {
-    if (INTERNAL_MODEL_NAMES.has(model.name)) {
-      continue;
-    }
-    if (hasDirective(model.documentation, "hide")) {
-      continue;
-    }
-    const fields = [];
-    for (const field of model.fields) {
-      if (field.kind !== "scalar" && field.kind !== "enum") {
-        continue;
-      }
-      if (hasDirective(field.documentation, "hide")) {
-        continue;
-      }
-      const isShown = hasDirective(field.documentation, "show");
-      if (!isShown && isSensitiveField(field.name)) {
-        continue;
-      }
-      fields.push({
-        name: field.name,
-        tsType: dmmfTypeToFrontendTsType(
-          field.type,
-          field.kind,
-          field.isRequired
-        )
-      });
-    }
-    if (fields.length > 0) {
-      models.push({
-        modelName: model.name,
-        camelName: model.name.charAt(0).toLowerCase() + model.name.slice(1),
-        fields
-      });
-    }
-  }
-  return models;
-}
-function generateWebGqlormModelsContent(models) {
-  if (models.length === 0) {
-    return [
-      "// Auto-generated by Cedar \u2014 do not edit",
-      "// Regenerated on every codegen run. Source: api/db/schema.prisma",
-      "",
-      "declare module '@cedarjs/gqlorm/types/orm' {",
-      "  interface GqlormTypeMap {}",
-      "}",
-      ""
-    ].join("\n");
-  }
-  const lines = [
-    "// Auto-generated by Cedar \u2014 do not edit",
-    "// Regenerated on every codegen run. Source: api/db/schema.prisma",
-    "",
-    "declare namespace GqlormScalar {"
-  ];
-  for (const model of models) {
-    lines.push(`  interface ${model.modelName} {`);
-    for (const field of model.fields) {
-      lines.push(`    ${field.name}: ${field.tsType}`);
-    }
-    lines.push("  }");
-    lines.push("");
-  }
-  lines.push("}");
-  lines.push("");
-  lines.push("declare module '@cedarjs/gqlorm/types/orm' {");
-  lines.push("  interface GqlormTypeMap {");
-  lines.push("    models: {");
-  for (const model of models) {
-    lines.push(`      ${model.camelName}: GqlormScalar.${model.modelName}`);
-  }
-  lines.push("    }");
-  lines.push("  }");
-  lines.push("}");
-  lines.push("");
-  return lines.join("\n");
-}
-function buildModelSchema(dmmf) {
-  const schema = {};
-  for (const model of dmmf.datamodel.models) {
-    if (INTERNAL_MODEL_NAMES.has(model.name)) {
-      continue;
-    }
-    if (hasDirective(model.documentation, "hide")) {
-      continue;
-    }
-    const visibleFields = [];
-    for (const field of model.fields) {
-      if (field.kind !== "scalar" && field.kind !== "enum") {
-        continue;
-      }
-      if (hasDirective(field.documentation, "hide")) {
-        continue;
-      }
-      if (hasDirective(field.documentation, "show")) {
-        visibleFields.push(field.name);
-        continue;
-      }
-      if (isSensitiveField(field.name)) {
-        emitSensitivityWarning(model.name, field.name);
-        continue;
-      }
-      visibleFields.push(field.name);
-    }
-    if (visibleFields.length > 0) {
-      const camelCaseName = model.name.charAt(0).toLowerCase() + model.name.slice(1);
-      schema[camelCaseName] = visibleFields;
-    }
-  }
-  return schema;
-}
-function buildBackendModelInfo(dmmf) {
-  const models = [];
-  for (const model of dmmf.datamodel.models) {
-    if (INTERNAL_MODEL_NAMES.has(model.name)) {
-      continue;
-    }
-    if (hasDirective(model.documentation, "hide")) {
-      continue;
-    }
-    const fields = [];
-    for (const field of model.fields) {
-      if (field.kind !== "scalar" && field.kind !== "enum") {
-        continue;
-      }
-      if (hasDirective(field.documentation, "hide")) {
-        continue;
-      }
-      const isShown = hasDirective(field.documentation, "show");
-      if (!isShown && isSensitiveField(field.name)) {
-        continue;
-      }
-      fields.push({
-        name: field.name,
-        graphqlType: mapDmmfTypeToGraphql(field.type, field.kind),
-        isRequired: field.isRequired,
-        isId: field.isId,
-        hasDefaultValue: field.hasDefaultValue,
-        isUpdatedAt: field.isUpdatedAt ?? false
-      });
-    }
-    if (fields.length > 0) {
-      const camelName = model.name.charAt(0).toLowerCase() + model.name.slice(1);
-      const pluralName = (0, import_cedarPluralize.pluralize)(camelName);
-      models.push({
-        modelName: model.name,
-        camelName,
-        pluralName,
-        fields,
-        idField: fields.find((f) => f.isId)
-      });
-    }
-  }
-  return models;
-}
-const TYPE_DEF_REGEX = /\btype\s+([A-Z]\w*)\s*\{/g;
-const STRUCTURAL_TYPE_NAMES = /* @__PURE__ */ new Set(["Query", "Mutation", "Subscription"]);
-function getExistingSdlTypeNames(graphqlDir) {
-  const typeNames = /* @__PURE__ */ new Set();
-  if (!import_node_fs.default.existsSync(graphqlDir)) {
-    return typeNames;
-  }
-  const sdlFiles = import_node_fs.default.readdirSync(graphqlDir).filter((file) => {
-    return /\.sdl\.(ts|js)$/.test(file) && !file.startsWith("__gqlorm__");
-  });
-  for (const file of sdlFiles) {
-    const content = import_node_fs.default.readFileSync(import_node_path.default.join(graphqlDir, file), "utf-8");
-    let match;
-    TYPE_DEF_REGEX.lastIndex = 0;
-    while ((match = TYPE_DEF_REGEX.exec(content)) !== null) {
-      const name = match[1];
-      if (!STRUCTURAL_TYPE_NAMES.has(name)) {
-        typeNames.add(name);
-      }
-    }
-  }
-  return typeNames;
-}
-function generateGqlormBackendContent(models, config = DEFAULT_GQLORM_BACKEND_CONFIG) {
-  if (models.length === 0) {
-    return "";
-  }
-  const anyModelNeedsOrgScoping = config.membershipModelExists && models.some(
-    (m) => m.camelName !== config.membershipModelCamel && m.fields.some((f) => f.name === config.membershipOrganizationField)
-  );
-  const anyModelNeedsAuth = models.some((m) => {
-    const hasUserField = m.fields.some(
-      (f) => f.name === config.membershipUserField
-    );
-    const hasOrgField = m.fields.some(
-      (f) => f.name === config.membershipOrganizationField
-    );
-    const isMembership = m.camelName === config.membershipModelCamel;
-    return hasUserField || hasOrgField && config.membershipModelExists && !isMembership;
-  });
-  const lines = [
-    "// This file is auto-generated by Cedar gqlorm codegen.",
-    "// Do not edit \u2014 it will be overwritten on every codegen run.",
-    "// To hide a model from gqlorm, add /// @gqlorm hide in schema.prisma.",
-    "",
-    "import gql from 'graphql-tag'",
-    ...anyModelNeedsAuth ? [
-      "import { AuthenticationError, ForbiddenError } from '@cedarjs/graphql-server'"
-    ] : [],
-    "",
-    "// Minimal context type used in auth checks",
-    "interface GqlormContext {",
-    "  currentUser: Record<string, unknown> | null | undefined",
-    "}",
-    "",
-    "// Generated minimal interface \u2014 only visible models and fields, only the",
-    "// operations used by this file. No @gqlorm hide models, no sensitive fields.",
-    "// Scoped to avoid any dependency on the generated Prisma client path or",
-    "// @prisma/client (which is an empty shim in Prisma v7).",
-    "interface GqlormDb {"
-  ];
-  for (const model of models) {
-    const selectType = model.fields.map((f) => `${f.name}: true`).join("; ");
-    lines.push(`  ${model.camelName}: {`);
-    lines.push("    findMany(args: {");
-    lines.push("      where?: Record<string, unknown>");
-    lines.push(`      select: Partial<{ ${selectType} }>`);
-    lines.push("    }): Promise<");
-    lines.push("      Array<{");
-    for (const field of model.fields) {
-      const tsType = graphqlTypeToTsInterfaceType(
-        field.graphqlType,
-        field.isRequired
-      );
-      lines.push(`        ${field.name}: ${tsType}`);
-    }
-    lines.push("      }>");
-    lines.push("    >");
-    if (model.idField) {
-      const idTsType = graphqlTypeToTsType(model.idField.graphqlType);
-      lines.push("    findUnique(args: {");
-      lines.push(`      where: { ${model.idField.name}: ${idTsType} }`);
-      lines.push(`      select: { ${selectType} }`);
-      lines.push("    }): Promise<{");
-      for (const field of model.fields) {
-        const tsType = graphqlTypeToTsInterfaceType(
-          field.graphqlType,
-          field.isRequired
-        );
-        lines.push(`      ${field.name}: ${tsType}`);
-      }
-      lines.push("    } | null>");
-    }
-    if (anyModelNeedsOrgScoping && model.camelName === config.membershipModelCamel) {
-      lines.push("    findFirst(args: {");
-      lines.push("      where: Record<string, unknown>");
-      lines.push("    }): Promise<Record<string, unknown> | null>");
-    }
-    lines.push("    create(args: {");
-    lines.push("      data: Record<string, unknown>");
-    lines.push(`      select: { ${selectType} }`);
-    lines.push("    }): Promise<{");
-    for (const field of model.fields) {
-      const tsType = graphqlTypeToTsInterfaceType(
-        field.graphqlType,
-        field.isRequired
-      );
-      lines.push(`      ${field.name}: ${tsType}`);
-    }
-    lines.push("    }>");
-    if (model.idField) {
-      const idTsType = graphqlTypeToTsType(model.idField.graphqlType);
-      lines.push("    update(args: {");
-      lines.push(`      where: { ${model.idField.name}: ${idTsType} }`);
-      lines.push("      data: Record<string, unknown>");
-      lines.push(`      select: { ${selectType} }`);
-      lines.push("    }): Promise<{");
-      for (const field of model.fields) {
-        const tsType = graphqlTypeToTsInterfaceType(
-          field.graphqlType,
-          field.isRequired
-        );
-        lines.push(`      ${field.name}: ${tsType}`);
-      }
-      lines.push("    }>");
-      lines.push("    delete(args: {");
-      lines.push(`      where: { ${model.idField.name}: ${idTsType} }`);
-      lines.push(`      select: { ${selectType} }`);
-      lines.push("    }): Promise<{");
-      for (const field of model.fields) {
-        const tsType = graphqlTypeToTsInterfaceType(
-          field.graphqlType,
-          field.isRequired
-        );
-        lines.push(`      ${field.name}: ${tsType}`);
-      }
-      lines.push("    }>");
-    }
-    lines.push("  }");
-  }
-  const membershipAlreadyInModels = models.some(
-    (m) => m.camelName === config.membershipModelCamel
-  );
-  if (anyModelNeedsOrgScoping && !membershipAlreadyInModels) {
-    lines.push(`  ${config.membershipModelCamel}: {`);
-    lines.push("    findMany(args: {");
-    lines.push("      where: Record<string, unknown>");
-    lines.push(`      select: { ${config.membershipOrganizationField}: true }`);
-    lines.push("    }): Promise<");
-    lines.push(
-      `      Array<{ ${config.membershipOrganizationField}: unknown }>`
-    );
-    lines.push("    >");
-    lines.push("    findFirst(args: {");
-    lines.push("      where: Record<string, unknown>");
-    lines.push("    }): Promise<Record<string, unknown> | null>");
-    lines.push("  }");
-  }
-  lines.push("}");
-  lines.push("");
-  lines.push("export const schema = gql`");
-  for (const model of models) {
-    lines.push(`  type ${model.modelName} {`);
-    for (const field of model.fields) {
-      const nullMark = field.isRequired ? "!" : "";
-      lines.push(`    ${field.name}: ${field.graphqlType}${nullMark}`);
-    }
-    lines.push("  }");
-    lines.push("");
-    if (!model.idField) {
-      continue;
-    }
-    const writableFields = model.fields.filter(
-      (field) => !field.isId && !field.isUpdatedAt && field.name !== config.membershipUserField
-    );
-    lines.push(`  input Create${model.modelName}Input {`);
-    for (const field of writableFields) {
-      const isClientRequired = field.isRequired && !field.hasDefaultValue;
-      const nullMark = isClientRequired ? "!" : "";
-      lines.push(`    ${field.name}: ${field.graphqlType}${nullMark}`);
-    }
-    lines.push("  }");
-    lines.push("");
-    lines.push(`  input Update${model.modelName}Input {`);
-    for (const field of writableFields) {
-      lines.push(`    ${field.name}: ${field.graphqlType}`);
-    }
-    lines.push("  }");
-    lines.push("");
-  }
-  lines.push("  type Query {");
-  for (const model of models) {
-    const hasUserField = model.fields.some(
-      (f) => f.name === config.membershipUserField
-    );
-    const hasOrgField = model.fields.some(
-      (f) => f.name === config.membershipOrganizationField
-    );
-    const isMembershipModel = model.camelName === config.membershipModelCamel;
-    const needsAuth = hasUserField || hasOrgField && config.membershipModelExists && !isMembershipModel;
-    const authDirective = needsAuth ? "@requireAuth" : "@skipAuth";
-    lines.push(
-      `    ${model.pluralName}: [${model.modelName}!]! ${authDirective}`
-    );
-    if (model.idField) {
-      const idNullMark = model.idField.isRequired ? "!" : "";
-      lines.push(
-        `    ${model.camelName}(${model.idField.name}: ${model.idField.graphqlType}${idNullMark}): ${model.modelName} ${authDirective}`
-      );
-    }
-  }
-  lines.push("  }");
-  lines.push("");
-  lines.push("  type Mutation {");
-  for (const model of models) {
-    if (model.idField) {
-      const hasUserField = model.fields.some(
-        (f) => f.name === config.membershipUserField
-      );
-      const hasOrgField = model.fields.some(
-        (f) => f.name === config.membershipOrganizationField
-      );
-      const isMembershipModel = model.camelName === config.membershipModelCamel;
-      const needsAuth = hasUserField || hasOrgField && config.membershipModelExists && !isMembershipModel;
-      const authDirective = needsAuth ? "@requireAuth" : "@skipAuth";
-      const idNullMark = model.idField.isRequired ? "!" : "";
-      lines.push(
-        `    create${model.modelName}(input: Create${model.modelName}Input!): ${model.modelName}! ${authDirective}`
-      );
-      lines.push(
-        `    update${model.modelName}(${model.idField.name}: ${model.idField.graphqlType}${idNullMark}, input: Update${model.modelName}Input!): ${model.modelName}! ${authDirective}`
-      );
-      lines.push(
-        `    delete${model.modelName}(${model.idField.name}: ${model.idField.graphqlType}${idNullMark}): ${model.modelName}! ${authDirective}`
-      );
-    }
-  }
-  lines.push("  }");
-  lines.push("`");
-  lines.push("");
-  lines.push(
-    "// db is passed in from graphql.ts by the Babel inject plugin, which imports it"
-  );
-  lines.push(
-    "// from 'src/lib/db' in a context where that alias resolves correctly."
-  );
-  lines.push("export function createGqlormResolvers(db: GqlormDb) {");
-  lines.push("  return {");
-  lines.push("    Query: {");
-  for (let i = 0; i < models.length; i++) {
-    const model = models[i];
-    const selectObj = model.fields.map((f) => `${f.name}: true`).join(", ");
-    const hasUserField = model.fields.some(
-      (f) => f.name === config.membershipUserField
-    );
-    const hasOrgField = model.fields.some(
-      (f) => f.name === config.membershipOrganizationField
-    );
-    const isMembershipModel = model.camelName === config.membershipModelCamel;
-    const useOrgScoping = hasOrgField && config.membershipModelExists && !isMembershipModel;
-    lines.push(
-      `      ${model.pluralName}: async (_root: unknown, _args: unknown, ${hasUserField || useOrgScoping ? "context" : "_context"}: GqlormContext) => {`
-    );
-    if (hasUserField || useOrgScoping) {
-      lines.push("        if (!context.currentUser) {");
-      lines.push(
-        `          throw new AuthenticationError("You don't have permission to do that.")`
-      );
-      lines.push("        }");
-      lines.push("        const currentUserId = context.currentUser['id']");
-      lines.push(
-        "        if (currentUserId === undefined || currentUserId === null) {"
-      );
-      lines.push(
-        `          throw new AuthenticationError("Could not determine the current user's ID.")`
-      );
-      lines.push("        }");
-      lines.push("        const where: Record<string, unknown> = {}");
-      if (hasUserField) {
-        lines.push("        // Scope to the current user");
-        lines.push(
-          `        where['${config.membershipUserField}'] = currentUserId`
-        );
-      }
-      if (useOrgScoping) {
-        lines.push("        // Scope to the current user's organizations");
-        lines.push(
-          `        const memberships = await db.${config.membershipModelCamel}.findMany({`
-        );
-        lines.push(
-          `          where: { ${config.membershipUserField}: currentUserId },`
-        );
-        lines.push(
-          `          select: { ${config.membershipOrganizationField}: true },`
-        );
-        lines.push("        })");
-        lines.push(
-          `        const organizationIds = memberships.map((m) => m.${config.membershipOrganizationField})`
-        );
-        lines.push(
-          `        where['${config.membershipOrganizationField}'] = { in: organizationIds }`
-        );
-      }
-      lines.push(`        return db.${model.camelName}.findMany({`);
-      lines.push("          where,");
-      lines.push(`          select: { ${selectObj} },`);
-      lines.push("        })");
-    } else {
-      lines.push(`        return db.${model.camelName}.findMany({`);
-      lines.push(`          select: { ${selectObj} },`);
-      lines.push("        })");
-    }
-    lines.push("      },");
-    if (model.idField) {
-      const idFieldName = model.idField.name;
-      const tsType = graphqlTypeToTsType(model.idField.graphqlType);
-      lines.push(
-        `      ${model.camelName}: async (_root: unknown, { ${idFieldName} }: { ${idFieldName}: ${tsType} }, ${hasUserField || useOrgScoping ? "context" : "_context"}: GqlormContext) => {`
-      );
-      if (hasUserField || useOrgScoping) {
-        lines.push("        if (!context.currentUser) {");
-        lines.push(
-          `          throw new AuthenticationError("You don't have permission to do that.")`
-        );
-        lines.push("        }");
-        lines.push("        const currentUserId = context.currentUser['id']");
-        lines.push(
-          "        if (currentUserId === undefined || currentUserId === null) {"
-        );
-        lines.push(
-          `          throw new AuthenticationError("Could not determine the current user's ID.")`
-        );
-        lines.push("        }");
-      }
-      lines.push("");
-      lines.push(
-        `        const record = await db.${model.camelName}.findUnique({`
-      );
-      lines.push(`          where: { ${idFieldName} },`);
-      lines.push(`          select: { ${selectObj} },`);
-      lines.push("        })");
-      lines.push("");
-      lines.push("        if (!record) {");
-      lines.push("          return null");
-      lines.push("        }");
-      if (hasUserField) {
-        lines.push("");
-        lines.push("        // Verify the current user owns this record");
-        lines.push(
-          `        if (record.${config.membershipUserField} !== currentUserId) {`
-        );
-        lines.push(
-          `          throw new ForbiddenError('Not authorized to access this resource')`
-        );
-        lines.push("        }");
-      }
-      if (useOrgScoping) {
-        lines.push("");
-        lines.push(
-          "        // Verify the current user belongs to the record's organization"
-        );
-        lines.push(
-          `        const membership = await db.${config.membershipModelCamel}.findFirst({`
-        );
-        lines.push("          where: {");
-        lines.push(`            ${config.membershipUserField}: currentUserId,`);
-        lines.push(
-          `            ${config.membershipOrganizationField}: record.${config.membershipOrganizationField},`
-        );
-        lines.push("          },");
-        lines.push("        })");
-        lines.push("        if (!membership) {");
-        lines.push(
-          `          throw new ForbiddenError('Not authorized to access this resource')`
-        );
-        lines.push("        }");
-      }
-      lines.push("");
-      lines.push("        return record");
-      lines.push("      },");
-    }
-    if (i < models.length - 1) {
-      lines.push("");
-    }
-  }
-  lines.push("    },");
-  lines.push("    Mutation: {");
-  for (const model of models) {
-    if (!model.idField) {
-      continue;
-    }
-    const selectObj = model.fields.map((f) => `${f.name}: true`).join(", ");
-    const hasUserField = model.fields.some(
-      (f) => f.name === config.membershipUserField
-    );
-    const hasOrgField = model.fields.some(
-      (f) => f.name === config.membershipOrganizationField
-    );
-    const isMembershipModel = model.camelName === config.membershipModelCamel;
-    const useOrgScoping = hasOrgField && config.membershipModelExists && !isMembershipModel;
-    const idFieldName = model.idField.name;
-    const idTsType = graphqlTypeToTsType(model.idField.graphqlType);
-    lines.push(
-      `      create${model.modelName}: async (_root: unknown, { input }: { input: Record<string, unknown> }, ${hasUserField || useOrgScoping ? "context" : "_context"}: GqlormContext) => {`
-    );
-    if (hasUserField || useOrgScoping) {
-      lines.push("        if (!context.currentUser) {");
-      lines.push(
-        `          throw new AuthenticationError("You don't have permission to do that.")`
-      );
-      lines.push("        }");
-      lines.push("        const currentUserId = context.currentUser['id']");
-      lines.push(
-        "        if (currentUserId === undefined || currentUserId === null) {"
-      );
-      lines.push(
-        `          throw new AuthenticationError("Could not determine the current user's ID.")`
-      );
-      lines.push("        }");
-    }
-    lines.push("        const data: Record<string, unknown> = { ...input }");
-    if (hasUserField) {
-      lines.push(
-        `        data['${config.membershipUserField}'] = currentUserId`
-      );
-    }
-    if (useOrgScoping) {
-      lines.push(
-        `        const organizationId = data['${config.membershipOrganizationField}']`
-      );
-      lines.push(
-        "        if (organizationId === undefined || organizationId === null) {"
-      );
-      lines.push(
-        `          throw new ForbiddenError('Organization membership is required for this operation')`
-      );
-      lines.push("        }");
-      lines.push(
-        `        const membership = await db.${config.membershipModelCamel}.findFirst({`
-      );
-      lines.push("          where: {");
-      lines.push(`            ${config.membershipUserField}: currentUserId,`);
-      lines.push(
-        `            ${config.membershipOrganizationField}: organizationId,`
-      );
-      lines.push("          },");
-      lines.push("        })");
-      lines.push("        if (!membership) {");
-      lines.push(
-        `          throw new ForbiddenError('Not authorized to access this resource')`
-      );
-      lines.push("        }");
-    }
-    lines.push(`        return db.${model.camelName}.create({`);
-    lines.push("          data,");
-    lines.push(`          select: { ${selectObj} },`);
-    lines.push("        })");
-    lines.push("      },");
-    lines.push(
-      `      update${model.modelName}: async (_root: unknown, { ${idFieldName}, input }: { ${idFieldName}: ${idTsType}; input: Record<string, unknown> }, ${hasUserField || useOrgScoping ? "context" : "_context"}: GqlormContext) => {`
-    );
-    if (hasUserField || useOrgScoping) {
-      lines.push("        if (!context.currentUser) {");
-      lines.push(
-        `          throw new AuthenticationError("You don't have permission to do that.")`
-      );
-      lines.push("        }");
-      lines.push("        const currentUserId = context.currentUser['id']");
-      lines.push(
-        "        if (currentUserId === undefined || currentUserId === null) {"
-      );
-      lines.push(
-        `          throw new AuthenticationError("Could not determine the current user's ID.")`
-      );
-      lines.push("        }");
-      lines.push(
-        `        const existingRecord = await db.${model.camelName}.findUnique({`
-      );
-      lines.push(`          where: { ${idFieldName} },`);
-      lines.push(`          select: { ${selectObj} },`);
-      lines.push("        })");
-      lines.push("        if (!existingRecord) {");
-      lines.push(
-        `          throw new ForbiddenError('Not authorized to access this resource')`
-      );
-      lines.push("        }");
-      lines.push("        const data: Record<string, unknown> = { ...input }");
-      if (hasUserField) {
-        lines.push(
-          `        if (existingRecord.${config.membershipUserField} !== currentUserId) {`
-        );
-        lines.push(
-          `          throw new ForbiddenError('Not authorized to access this resource')`
-        );
-        lines.push("        }");
-        lines.push(`        delete data['${config.membershipUserField}']`);
-      }
-      if (useOrgScoping) {
-        lines.push(
-          `        const currentOrganizationId = existingRecord.${config.membershipOrganizationField}`
-        );
-        lines.push(
-          `        const currentOrganizationMembership = await db.${config.membershipModelCamel}.findFirst({`
-        );
-        lines.push("          where: {");
-        lines.push(`            ${config.membershipUserField}: currentUserId,`);
-        lines.push(
-          `            ${config.membershipOrganizationField}: currentOrganizationId,`
-        );
-        lines.push("          },");
-        lines.push("        })");
-        lines.push("        if (!currentOrganizationMembership) {");
-        lines.push(
-          `          throw new ForbiddenError('Not authorized to access this resource')`
-        );
-        lines.push("        }");
-        lines.push(
-          `        const requestedOrganizationId = input['${config.membershipOrganizationField}'] ?? currentOrganizationId`
-        );
-        lines.push(
-          `        const requestedOrganizationMembership = await db.${config.membershipModelCamel}.findFirst({`
-        );
-        lines.push("          where: {");
-        lines.push(`            ${config.membershipUserField}: currentUserId,`);
-        lines.push(
-          `            ${config.membershipOrganizationField}: requestedOrganizationId,`
-        );
-        lines.push("          },");
-        lines.push("        })");
-        lines.push("        if (!requestedOrganizationMembership) {");
-        lines.push(
-          `          throw new ForbiddenError('Not authorized to access this resource')`
-        );
-        lines.push("        }");
-      }
-    }
-    if (!(hasUserField || useOrgScoping)) {
-      lines.push(
-        `        const existingRecord = await db.${model.camelName}.findUnique({`
-      );
-      lines.push(`          where: { ${idFieldName} },`);
-      lines.push(`          select: { ${selectObj} },`);
-      lines.push("        })");
-      lines.push("        if (!existingRecord) {");
-      lines.push(
-        `          throw new ForbiddenError('Not authorized to access this resource')`
-      );
-      lines.push("        }");
-      lines.push("        const data: Record<string, unknown> = { ...input }");
-    }
-    lines.push(`        return db.${model.camelName}.update({`);
-    lines.push(`          where: { ${idFieldName} },`);
-    lines.push("          data,");
-    lines.push(`          select: { ${selectObj} },`);
-    lines.push("        })");
-    lines.push("      },");
-    lines.push(
-      `      delete${model.modelName}: async (_root: unknown, { ${idFieldName} }: { ${idFieldName}: ${idTsType} }, ${hasUserField || useOrgScoping ? "context" : "_context"}: GqlormContext) => {`
-    );
-    lines.push(
-      `        const existingRecord = await db.${model.camelName}.findUnique({`
-    );
-    lines.push(`          where: { ${idFieldName} },`);
-    lines.push(`          select: { ${selectObj} },`);
-    lines.push("        })");
-    lines.push("        if (!existingRecord) {");
-    lines.push(
-      `          throw new ForbiddenError('Not authorized to access this resource')`
-    );
-    lines.push("        }");
-    if (hasUserField || useOrgScoping) {
-      lines.push("        if (!context.currentUser) {");
-      lines.push(
-        `          throw new AuthenticationError("You don't have permission to do that.")`
-      );
-      lines.push("        }");
-      lines.push("        const currentUserId = context.currentUser['id']");
-      lines.push(
-        "        if (currentUserId === undefined || currentUserId === null) {"
-      );
-      lines.push(
-        `          throw new AuthenticationError("Could not determine the current user's ID.")`
-      );
-      lines.push("        }");
-      if (hasUserField) {
-        lines.push(
-          `        if (existingRecord.${config.membershipUserField} !== currentUserId) {`
-        );
-        lines.push(
-          `          throw new ForbiddenError('Not authorized to access this resource')`
-        );
-        lines.push("        }");
-      }
-      if (useOrgScoping) {
-        lines.push(
-          `        const membership = await db.${config.membershipModelCamel}.findFirst({`
-        );
-        lines.push("          where: {");
-        lines.push(`            ${config.membershipUserField}: currentUserId,`);
-        lines.push(
-          `            ${config.membershipOrganizationField}: existingRecord.${config.membershipOrganizationField},`
-        );
-        lines.push("          },");
-        lines.push("        })");
-        lines.push("        if (!membership) {");
-        lines.push(
-          `          throw new ForbiddenError('Not authorized to access this resource')`
-        );
-        lines.push("        }");
-      }
-    }
-    lines.push(`        return db.${model.camelName}.delete({`);
-    lines.push(`          where: { ${idFieldName} },`);
-    lines.push(`          select: { ${selectObj} },`);
-    lines.push("        })");
-    lines.push("      },");
-    lines.push("");
-  }
-  while (lines[lines.length - 1] === "") {
-    lines.pop();
-  }
-  lines.push("    },");
-  lines.push("  }");
-  lines.push("}");
-  lines.push("");
-  return lines.join("\n");
-}
-async function generateGqlormArtifacts() {
-  if (!(0, import_project_config.getConfig)().experimental?.gqlorm?.enabled) {
-    const generatedBase = (0, import_project_config.getPaths)().generated.base;
-    const staleFiles = [
-      import_node_path.default.join(generatedBase, "gqlorm", "backend.ts"),
-      import_node_path.default.join(generatedBase, "gqlorm-schema.json"),
-      import_node_path.default.join(generatedBase, "types", "includes", "web-gqlorm-models.d.ts")
-    ];
-    for (const staleFile of staleFiles) {
-      if (import_node_fs.default.existsSync(staleFile)) {
-        import_node_fs.default.unlinkSync(staleFile);
-      }
-    }
-    return { files: [], errors: [] };
-  }
-  const files = [];
-  const errors = [];
-  try {
-    const { schemas } = await (0, import_project_config.getPrismaSchemas)();
-    const mod = await import("@prisma/internals");
-    const { getDMMF } = mod.default || mod;
-    const dmmf = await getDMMF({ datamodel: schemas });
-    const paths = (0, import_project_config.getPaths)();
-    const generatedBase = paths.generated.base;
-    const modelSchema = buildModelSchema(dmmf);
-    const frontendModels = buildFrontendModelInfo(dmmf);
-    const schemaOutputPath = import_node_path.default.join(generatedBase, "gqlorm-schema.json");
-    const webTypesOutputPath = import_node_path.default.join(
-      generatedBase,
-      "types",
-      "includes",
-      "web-gqlorm-models.d.ts"
-    );
-    import_node_fs.default.mkdirSync(import_node_path.default.dirname(schemaOutputPath), { recursive: true });
-    import_node_fs.default.writeFileSync(schemaOutputPath, JSON.stringify(modelSchema, null, 2));
-    files.push(schemaOutputPath);
-    import_node_fs.default.mkdirSync(import_node_path.default.dirname(webTypesOutputPath), { recursive: true });
-    import_node_fs.default.writeFileSync(
-      webTypesOutputPath,
-      generateWebGqlormModelsContent(frontendModels)
-    );
-    files.push(webTypesOutputPath);
-    const backendOutputDir = import_node_path.default.join(generatedBase, "gqlorm");
-    const backendOutputPath = import_node_path.default.join(backendOutputDir, "backend.ts");
-    const graphqlDir = paths.api.graphql;
-    const existingTypes = getExistingSdlTypeNames(graphqlDir);
-    const allModels = buildBackendModelInfo(dmmf);
-    const gqlormConfig = (0, import_project_config.getConfig)().experimental.gqlorm;
-    const membershipModel = gqlormConfig.membershipModel ?? "Membership";
-    const membershipModelCamel = membershipModel.charAt(0).toLowerCase() + membershipModel.slice(1);
-    const membershipUserField = gqlormConfig.membershipUserField ?? "userId";
-    const membershipOrganizationField = gqlormConfig.membershipOrganizationField ?? "organizationId";
-    const membershipModelExists = dmmf.datamodel.models.some(
-      (m) => m.name === membershipModel
-    );
-    const backendConfig = {
-      membershipModel,
-      membershipModelCamel,
-      membershipUserField,
-      membershipOrganizationField,
-      membershipModelExists
-    };
-    const gqlormModels = allModels.filter(
-      (m) => !existingTypes.has(m.modelName)
-    );
-    const anyModelHasOrgField = gqlormModels.some(
-      (m) => m.fields.some((f) => f.name === membershipOrganizationField)
-    );
-    if (anyModelHasOrgField && !membershipModelExists) {
-      console.warn(
-        `[gqlorm] One or more models have a \`${membershipOrganizationField}\` field, but the membership model "${membershipModel}" was not found in the schema. Organization-based access scoping will not be applied for these models. Add a \`${membershipModel}\` model to your schema.prisma or configure \`experimental.gqlorm.membershipModel\` in cedar.toml.`
-      );
-    }
-    if (gqlormModels.length > 0) {
-      const backendContent = generateGqlormBackendContent(
-        gqlormModels,
-        backendConfig
-      );
-      import_node_fs.default.mkdirSync(backendOutputDir, { recursive: true });
-      import_node_fs.default.writeFileSync(backendOutputPath, backendContent);
-      files.push(backendOutputPath);
-    } else {
-      if (import_node_fs.default.existsSync(backendOutputPath)) {
-        import_node_fs.default.unlinkSync(backendOutputPath);
-      }
-    }
-  } catch (error) {
-    errors.push({
-      message: "Failed to generate gqlorm schema artifacts",
-      error
-    });
-  }
-  return { files, errors };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  buildBackendModelInfo,
-  buildFrontendModelInfo,
-  buildModelSchema,
-  generateGqlormArtifacts,
-  generateGqlormBackendContent,
-  generateWebGqlormModelsContent,
-  getExistingSdlTypeNames,
-  mapDmmfTypeToGraphql
-});