@contember/engine-content-api 2.1.0-alpha.37 → 2.1.0-alpha.39

package/dist/production/src/ExecutionContainer.js

@@ -0,0 +1,166 @@
+import "@contember/schema";
+import "@contember/schema-utils";
+import { PredicateFactory } from "./acl/PredicateFactory.js";
+import { PredicatesInjector } from "./acl/PredicatesInjector.js";
+import { VariableInjector } from "./acl/VariableInjector.js";
+import "@contember/database";
+import "node:crypto";
+import { FieldsVisitorFactory } from "./mapper/select/handlers/FieldsVisitorFactory.js";
+import { MetaHandler } from "./mapper/select/handlers/MetaHandler.js";
+import { ConditionBuilder } from "./mapper/select/ConditionBuilder.js";
+import { JoinBuilder } from "./mapper/select/JoinBuilder.js";
+import { OrderByBuilder } from "./mapper/select/OrderByBuilder.js";
+import { PathFactory } from "./mapper/select/Path.js";
+import { RelationFetcher } from "./mapper/select/RelationFetcher.js";
+import { SelectBuilder } from "./mapper/select/SelectBuilder.js";
+import "@contember/logger";
+import { WhereBuilder } from "./mapper/select/WhereBuilder.js";
+import { UniqueWhereExpander } from "./inputProcessing/UniqueWhereExpander.js";
+import { HasManyToHasOneReducer } from "./extensions/hasManyToHasOneReducer/HasManyToHasOneReducer.js";
+import { HasManyToHasOneReducerExecutionHandler } from "./extensions/hasManyToHasOneReducer/HasManyToHasOneReducerExecutionHandler.js";
+import "graphql";
+import "@contember/graphql-utils";
+import { PaginatedHasManyFieldProvider } from "./extensions/paginatedHasMany/PaginatedHasManyFieldProvider.js";
+import { Builder } from "@contember/dic";
+import { DeleteExecutor } from "./mapper/delete/DeleteExecutor.js";
+import { InsertBuilderFactory } from "./mapper/insert/InsertBuilderFactory.js";
+import { Inserter } from "./mapper/insert/Inserter.js";
+import { UpdateBuilderFactory } from "./mapper/update/UpdateBuilderFactory.js";
+import { Updater } from "./mapper/update/Updater.js";
+import { JunctionConnectHandler, JunctionDisconnectHandler, JunctionTableManager } from "./mapper/JunctionTableManager.js";
+import { PaginatedHasManyExecutionHandler } from "./extensions/paginatedHasMany/PaginatedHasManyExecutionHandler.js";
+import { WhereOptimizer } from "./mapper/select/optimizer/WhereOptimizer.js";
+import { ConditionOptimizer } from "./mapper/select/optimizer/ConditionOptimizer.js";
+import { GraphQlQueryAstFactory } from "./resolvers/GraphQlQueryAstFactory.js";
+import { MutationResolver } from "./resolvers/MutationResolver.js";
+import { ReadResolver } from "./resolvers/ReadResolver.js";
+import { ValidationResolver } from "./resolvers/ValidationResolver.js";
+import { DependencyCollector } from "./input-validation/dependencies/DependencyCollector.js";
+import { InputPreValidator } from "./input-validation/preValidation/InputPreValidator.js";
+import { ColumnValueResolver } from "./input-validation/ColumnValueResolver.js";
+import { EntityRulesResolver } from "./input-validation/EntityRulesResolver.js";
+import { QueryAstFactory } from "./input-validation/QueryAstFactory.js";
+import "./input-validation/ValidationContext.js";
+import { ValidationDataSelector } from "./input-validation/ValidationDataSelector.js";
+import "./input-validation/ValidationEvaluation.js";
+import { RefreshViewResolver } from "./resolvers/RefreshViewResolver.js";
+import { MapperFactory } from "./mapper/MapperFactory.js";
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, key + "", value);
+class ExecutionContainerFactory {
+  constructor(providers, whereOptimizerOptions) {
+    this.providers = providers;
+    this.whereOptimizerOptions = whereOptimizerOptions;
+    __publicField(this, "hooks", []);
+  }
+  createBuilder(args) {
+    const builder = this.createBuilderInternal(args);
+    return this.hooks.reduce((acc, cb) => cb(acc), builder);
+  }
+  createBuilderInternal({ permissions, identityVariables, identityId, db, schema, schemaMeta, systemSchema, stage, project, schemaDatabaseMetadata, userInfo }) {
+    return new Builder({}).addService("systemSchema", () => systemSchema).addService("db", () => db).addService("project", () => project).addService("stage", () => stage).addService("schema", () => schema).addService("schemaMeta", () => schemaMeta).addService("schemaDatabaseMetadata", () => schemaDatabaseMetadata).addService("userInfo", () => userInfo).addService("providers", () => this.providers).addService("variableInjector", ({ schema: schema2 }) => new VariableInjector(schema2.model, identityVariables)).addService("predicateFactory", ({ variableInjector, schema: schema2 }) => new PredicateFactory(permissions, schema2.model, variableInjector)).addService("predicatesInjector", ({ predicateFactory, schema: schema2 }) => new PredicatesInjector(schema2.model, predicateFactory)).addService("joinBuilder", ({ schema: schema2 }) => new JoinBuilder(schema2.model)).addService("conditionBuilder", () => new ConditionBuilder()).addService("pathFactory", () => new PathFactory()).addService("whereOptimized", ({ schema: schema2 }) => new WhereOptimizer(schema2.model, new ConditionOptimizer(), this.whereOptimizerOptions)).addService("whereBuilder", ({ joinBuilder, conditionBuilder, pathFactory, whereOptimized, schema: schema2 }) => new WhereBuilder(
+      schema2.model,
+      joinBuilder,
+      conditionBuilder,
+      pathFactory,
+      whereOptimized,
+      (schema2.settings.content?.useExistsInHasManyFilter ?? schema2.settings.useExistsInHasManyFilter) === true
+    )).addService("orderByBuilder", ({ joinBuilder, schema: schema2 }) => new OrderByBuilder(schema2.model, joinBuilder)).addService(
+      "relationFetcher",
+      ({ whereBuilder, orderByBuilder, predicatesInjector, pathFactory }) => new RelationFetcher(whereBuilder, orderByBuilder, predicatesInjector, pathFactory)
+    ).addService(
+      "fieldsVisitorFactory",
+      ({ relationFetcher, predicateFactory, schema: schema2, providers }) => new FieldsVisitorFactory(schema2.model, relationFetcher, predicateFactory, schema2.settings.content ?? {}, providers)
+    ).addService("metaHandler", ({ whereBuilder, predicateFactory }) => new MetaHandler(whereBuilder, predicateFactory)).addService("uniqueWhereExpander", ({ schema: schema2 }) => new UniqueWhereExpander(schema2.model)).addService(
+      "hasManyToHasOneReducer",
+      ({ uniqueWhereExpander, schema: schema2 }) => new HasManyToHasOneReducerExecutionHandler(schema2.model, uniqueWhereExpander)
+    ).addService(
+      "paginatedHasManyExecutionHandler",
+      ({ relationFetcher, schema: schema2 }) => new PaginatedHasManyExecutionHandler(schema2.model, relationFetcher)
+    ).addService("selectHandlers", ({ hasManyToHasOneReducer, paginatedHasManyExecutionHandler }) => ({
+      [HasManyToHasOneReducer.extensionName]: hasManyToHasOneReducer,
+      [PaginatedHasManyFieldProvider.extensionName]: paginatedHasManyExecutionHandler
+    })).addService(
+      "selectBuilderFactory",
+      ({ whereBuilder, orderByBuilder, fieldsVisitorFactory, metaHandler, selectHandlers, pathFactory, predicateFactory, schema: schema2 }) => new class {
+        create(qb, hydrator, relationPath) {
+          return new SelectBuilder(
+            schema2.model,
+            whereBuilder,
+            orderByBuilder,
+            metaHandler,
+            qb,
+            hydrator,
+            fieldsVisitorFactory,
+            selectHandlers,
+            pathFactory,
+            relationPath,
+            predicateFactory
+          );
+        }
+      }()
+    ).addService(
+      "insertBuilderFactory",
+      ({ whereBuilder, pathFactory, schema: schema2, predicateFactory }) => new InsertBuilderFactory(schema2.model, whereBuilder, pathFactory, predicateFactory)
+    ).addService(
+      "updateBuilderFactory",
+      ({ whereBuilder, pathFactory, schema: schema2, predicateFactory }) => new UpdateBuilderFactory(schema2.model, whereBuilder, pathFactory, predicateFactory)
+    ).addService("connectJunctionHandler", () => new JunctionConnectHandler()).addService("disconnectJunctionHandler", ({}) => new JunctionDisconnectHandler()).addService(
+      "junctionTableManager",
+      ({ predicateFactory, whereBuilder, connectJunctionHandler, disconnectJunctionHandler, pathFactory, schema: schema2 }) => new JunctionTableManager(schema2.model, predicateFactory, whereBuilder, connectJunctionHandler, disconnectJunctionHandler, pathFactory)
+    ).addService(
+      "deleteExecutor",
+      ({ predicateFactory, updateBuilderFactory, whereBuilder, pathFactory, schema: schema2 }) => new DeleteExecutor(schema2.model, predicateFactory, whereBuilder, updateBuilderFactory, pathFactory)
+    ).addService("updater", ({ updateBuilderFactory, schema: schema2 }) => new Updater(schema2.model, updateBuilderFactory)).addService(
+      "inserter",
+      ({ insertBuilderFactory, providers, schema: schema2, schemaDatabaseMetadata: schemaDatabaseMetadata2 }) => new Inserter(schema2.model, schemaDatabaseMetadata2, insertBuilderFactory, providers, { uuidVersion: schema2.settings.content?.uuidVersion })
+    ).addService(
+      "mapperFactory",
+      ({
+        predicatesInjector,
+        selectBuilderFactory,
+        uniqueWhereExpander,
+        whereBuilder,
+        junctionTableManager,
+        deleteExecutor,
+        updater,
+        inserter,
+        pathFactory,
+        providers,
+        schema: schema2,
+        schemaDatabaseMetadata: schemaDatabaseMetadata2
+      }) => {
+        return new MapperFactory(
+          db,
+          identityId,
+          schema2.model,
+          schemaDatabaseMetadata2,
+          predicatesInjector,
+          selectBuilderFactory,
+          uniqueWhereExpander,
+          whereBuilder,
+          junctionTableManager,
+          deleteExecutor,
+          updater,
+          inserter,
+          pathFactory,
+          providers
+        );
+      }
+    ).addService("queryAstFactory", () => new GraphQlQueryAstFactory()).addService("readResolver", ({ mapperFactory, queryAstFactory }) => new ReadResolver(mapperFactory, queryAstFactory)).addService("validationDependencyCollector", () => new DependencyCollector()).addService("validationQueryAstFactory", ({ schema: schema2 }) => new QueryAstFactory(schema2.model)).addService("dataSelector", ({ validationQueryAstFactory, schema: schema2 }) => new ValidationDataSelector(schema2.model, validationQueryAstFactory)).addService("columnValueResolver", ({ providers }) => new ColumnValueResolver(providers)).addService("entityRulesResolver", ({ schema: schema2 }) => new EntityRulesResolver(schema2.validation, schema2.model)).addService(
+      "inputPreValidator",
+      ({ entityRulesResolver, columnValueResolver, dataSelector, schema: schema2 }) => new InputPreValidator(schema2.model, entityRulesResolver, columnValueResolver, dataSelector)
+    ).addService(
+      "mutationResolver",
+      ({ mapperFactory, inputPreValidator, queryAstFactory, schema: schema2, schemaDatabaseMetadata: schemaDatabaseMetadata2 }) => new MutationResolver(schema2.model, mapperFactory, inputPreValidator, queryAstFactory, schemaDatabaseMetadata2)
+    ).addService("validationResolver", ({ inputPreValidator, mapperFactory }) => new ValidationResolver(mapperFactory, inputPreValidator)).addService("refreshViewResolver", ({ schema: schema2, mapperFactory }) => new RefreshViewResolver(schema2, mapperFactory));
+  }
+  create(args) {
+    return this.createBuilder(args).build().pick("validationResolver", "readResolver", "mutationResolver", "refreshViewResolver");
+  }
+}
+export {
+  ExecutionContainerFactory
+};
+//# sourceMappingURL=ExecutionContainer.js.map

package/dist/production/src/ExecutionContainer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionContainer.js","sources":["../../../../packages/engine-content-api/src/ExecutionContainer.ts"],"sourcesContent":["import { PredicateFactory, PredicatesInjector, VariableInjector } from './acl'\nimport { ConditionBuilder, FieldsVisitorFactory, JoinBuilder, MetaHandler, OrderByBuilder, RelationFetcher, WhereBuilder } from './mapper/select'\nimport { UniqueWhereExpander } from './inputProcessing'\nimport { HasManyToHasOneReducer, HasManyToHasOneReducerExecutionHandler } from './extensions'\nimport {\n\tDeleteExecutor,\n\tInsertBuilderFactory,\n\tInserter,\n\tJunctionConnectHandler,\n\tJunctionDisconnectHandler,\n\tJunctionTableManager,\n\tMapperFactory,\n\tPathFactory,\n\tSelectBuilder,\n\tSelectBuilderFactory,\n\tSelectHydrator,\n\tUpdateBuilderFactory,\n\tUpdater,\n} from './mapper'\nimport { Builder } from '@contember/dic'\nimport { Acl, Model, Schema } from '@contember/schema'\nimport { Client, DatabaseMetadata, SelectBuilder as DbSelectBuilder } from '@contember/database'\nimport { ParsedMembership, Providers } from '@contember/schema-utils'\nimport { PaginatedHasManyExecutionHandler } from './extensions/paginatedHasMany/PaginatedHasManyExecutionHandler'\nimport { PaginatedHasManyFieldProvider } from './extensions/paginatedHasMany/PaginatedHasManyFieldProvider'\nimport { WhereOptimizer, WhereOptimizerOptions } from './mapper/select/optimizer/WhereOptimizer'\nimport { ConditionOptimizer } from './mapper/select/optimizer/ConditionOptimizer'\nimport { GraphQlQueryAstFactory, MutationResolver, ReadResolver, ValidationResolver } from './resolvers'\nimport {\n\tColumnValueResolver,\n\tDependencyCollector,\n\tEntityRulesResolver,\n\tInputPreValidator,\n\tQueryAstFactory,\n\tValidationDataSelector,\n} from './input-validation'\nimport { RefreshViewResolver } from './resolvers/RefreshViewResolver'\n\nexport type ExecutionContainerArgs = {\n\tschema: Schema\n\tschemaMeta: { id?: number }\n\tschemaDatabaseMetadata: DatabaseMetadata\n\tdb: Client\n\tidentityId: string\n\tidentityVariables: Acl.VariablesMap\n\tpermissions: Acl.Permissions\n\tsystemSchema: string\n\tproject: { slug: string }\n\tstage: { id: string; slug: string }\n\tuserInfo: { ipAddress: string | null; userAgent: string | null }\n}\n\nexport interface ExecutionContainer {\n\treadResolver: ReadResolver\n\tmutationResolver: MutationResolver\n\tvalidationResolver: ValidationResolver\n\trefreshViewResolver: RefreshViewResolver\n}\n\nexport type ExecutionContainerBuilder = ReturnType<ExecutionContainerFactory['createBuilderInternal']>\nexport type ExecutionContainerHook = (builder: ExecutionContainerBuilder) => ExecutionContainerBuilder\n\nexport class ExecutionContainerFactory {\n\tpublic readonly hooks: ExecutionContainerHook[] = []\n\n\tconstructor(\n\t\tprivate readonly providers: Providers,\n\t\tprivate readonly whereOptimizerOptions?: WhereOptimizerOptions,\n\t) {\n\t}\n\n\tcreateBuilder(args: ExecutionContainerArgs): ExecutionContainerBuilder {\n\t\tconst builder = this.createBuilderInternal(args)\n\t\treturn this.hooks.reduce((acc, cb) => cb(acc), builder)\n\t}\n\n\tcreateBuilderInternal(\n\t\t{ permissions, identityVariables, identityId, db, schema, schemaMeta, systemSchema, stage, project, schemaDatabaseMetadata, userInfo }:\n\t\t\tExecutionContainerArgs,\n\t) {\n\t\treturn new Builder({})\n\t\t\t.addService('systemSchema', () => systemSchema)\n\t\t\t.addService('db', () => db)\n\t\t\t.addService('project', () => project)\n\t\t\t.addService('stage', () => stage)\n\t\t\t.addService('schema', () => schema)\n\t\t\t.addService('schemaMeta', () => schemaMeta)\n\t\t\t.addService('schemaDatabaseMetadata', () => schemaDatabaseMetadata)\n\t\t\t.addService('userInfo', () => userInfo)\n\t\t\t.addService('providers', () => this.providers)\n\t\t\t.addService('variableInjector', ({ schema }) => new VariableInjector(schema.model, identityVariables))\n\t\t\t.addService('predicateFactory', ({ variableInjector, schema }) => new PredicateFactory(permissions, schema.model, variableInjector))\n\t\t\t.addService('predicatesInjector', ({ predicateFactory, schema }) => new PredicatesInjector(schema.model, predicateFactory))\n\t\t\t.addService('joinBuilder', ({ schema }) => new JoinBuilder(schema.model))\n\t\t\t.addService('conditionBuilder', () => new ConditionBuilder())\n\t\t\t.addService('pathFactory', () => new PathFactory())\n\t\t\t.addService('whereOptimized', ({ schema }) => new WhereOptimizer(schema.model, new ConditionOptimizer(), this.whereOptimizerOptions))\n\t\t\t.addService('whereBuilder', ({ joinBuilder, conditionBuilder, pathFactory, whereOptimized, schema }) =>\n\t\t\t\tnew WhereBuilder(\n\t\t\t\t\tschema.model,\n\t\t\t\t\tjoinBuilder,\n\t\t\t\t\tconditionBuilder,\n\t\t\t\t\tpathFactory,\n\t\t\t\t\twhereOptimized,\n\t\t\t\t\t(schema.settings.content?.useExistsInHasManyFilter ?? schema.settings.useExistsInHasManyFilter) === true,\n\t\t\t\t))\n\t\t\t.addService('orderByBuilder', ({ joinBuilder, schema }) => new OrderByBuilder(schema.model, joinBuilder))\n\t\t\t.addService(\n\t\t\t\t'relationFetcher',\n\t\t\t\t({ whereBuilder, orderByBuilder, predicatesInjector, pathFactory }) =>\n\t\t\t\t\tnew RelationFetcher(whereBuilder, orderByBuilder, predicatesInjector, pathFactory),\n\t\t\t)\n\t\t\t.addService(\n\t\t\t\t'fieldsVisitorFactory',\n\t\t\t\t({ relationFetcher, predicateFactory, schema, providers }) =>\n\t\t\t\t\tnew FieldsVisitorFactory(schema.model, relationFetcher, predicateFactory, schema.settings.content ?? {}, providers),\n\t\t\t)\n\t\t\t.addService('metaHandler', ({ whereBuilder, predicateFactory }) => new MetaHandler(whereBuilder, predicateFactory))\n\t\t\t.addService('uniqueWhereExpander', ({ schema }) => new UniqueWhereExpander(schema.model))\n\t\t\t.addService(\n\t\t\t\t'hasManyToHasOneReducer',\n\t\t\t\t({ uniqueWhereExpander, schema }) => new HasManyToHasOneReducerExecutionHandler(schema.model, uniqueWhereExpander),\n\t\t\t)\n\t\t\t.addService(\n\t\t\t\t'paginatedHasManyExecutionHandler',\n\t\t\t\t({ relationFetcher, schema }) => new PaginatedHasManyExecutionHandler(schema.model, relationFetcher),\n\t\t\t)\n\t\t\t.addService('selectHandlers', ({ hasManyToHasOneReducer, paginatedHasManyExecutionHandler }) => ({\n\t\t\t\t[HasManyToHasOneReducer.extensionName]: hasManyToHasOneReducer,\n\t\t\t\t[PaginatedHasManyFieldProvider.extensionName]: paginatedHasManyExecutionHandler,\n\t\t\t}))\n\t\t\t.addService(\n\t\t\t\t'selectBuilderFactory',\n\t\t\t\t({ whereBuilder, orderByBuilder, fieldsVisitorFactory, metaHandler, selectHandlers, pathFactory, predicateFactory, schema }) =>\n\t\t\t\t\tnew (class implements SelectBuilderFactory {\n\t\t\t\t\t\tcreate(qb: DbSelectBuilder, hydrator: SelectHydrator, relationPath: Model.AnyRelationContext[]): SelectBuilder {\n\t\t\t\t\t\t\treturn new SelectBuilder(\n\t\t\t\t\t\t\t\tschema.model,\n\t\t\t\t\t\t\t\twhereBuilder,\n\t\t\t\t\t\t\t\torderByBuilder,\n\t\t\t\t\t\t\t\tmetaHandler,\n\t\t\t\t\t\t\t\tqb,\n\t\t\t\t\t\t\t\thydrator,\n\t\t\t\t\t\t\t\tfieldsVisitorFactory,\n\t\t\t\t\t\t\t\tselectHandlers,\n\t\t\t\t\t\t\t\tpathFactory,\n\t\t\t\t\t\t\t\trelationPath,\n\t\t\t\t\t\t\t\tpredicateFactory,\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t}\n\t\t\t\t\t})(),\n\t\t\t)\n\t\t\t.addService(\n\t\t\t\t'insertBuilderFactory',\n\t\t\t\t({ whereBuilder, pathFactory, schema, predicateFactory }) => new InsertBuilderFactory(schema.model, whereBuilder, pathFactory, predicateFactory),\n\t\t\t)\n\t\t\t.addService(\n\t\t\t\t'updateBuilderFactory',\n\t\t\t\t({ whereBuilder, pathFactory, schema, predicateFactory }) => new UpdateBuilderFactory(schema.model, whereBuilder, pathFactory, predicateFactory),\n\t\t\t)\n\t\t\t.addService('connectJunctionHandler', () => new JunctionConnectHandler())\n\t\t\t.addService('disconnectJunctionHandler', ({}) => new JunctionDisconnectHandler())\n\t\t\t.addService(\n\t\t\t\t'junctionTableManager',\n\t\t\t\t({ predicateFactory, whereBuilder, connectJunctionHandler, disconnectJunctionHandler, pathFactory, schema }) =>\n\t\t\t\t\tnew JunctionTableManager(schema.model, predicateFactory, whereBuilder, connectJunctionHandler, disconnectJunctionHandler, pathFactory),\n\t\t\t)\n\t\t\t.addService(\n\t\t\t\t'deleteExecutor',\n\t\t\t\t({ predicateFactory, updateBuilderFactory, whereBuilder, pathFactory, schema }) =>\n\t\t\t\t\tnew DeleteExecutor(schema.model, predicateFactory, whereBuilder, updateBuilderFactory, pathFactory),\n\t\t\t)\n\t\t\t.addService('updater', ({ updateBuilderFactory, schema }) => new Updater(schema.model, updateBuilderFactory))\n\t\t\t.addService(\n\t\t\t\t'inserter',\n\t\t\t\t({ insertBuilderFactory, providers, schema, schemaDatabaseMetadata }) =>\n\t\t\t\t\tnew Inserter(schema.model, schemaDatabaseMetadata, insertBuilderFactory, providers, { uuidVersion: schema.settings.content?.uuidVersion }),\n\t\t\t)\n\t\t\t.addService(\n\t\t\t\t'mapperFactory',\n\t\t\t\t({\n\t\t\t\t\tpredicatesInjector,\n\t\t\t\t\tselectBuilderFactory,\n\t\t\t\t\tuniqueWhereExpander,\n\t\t\t\t\twhereBuilder,\n\t\t\t\t\tjunctionTableManager,\n\t\t\t\t\tdeleteExecutor,\n\t\t\t\t\tupdater,\n\t\t\t\t\tinserter,\n\t\t\t\t\tpathFactory,\n\t\t\t\t\tproviders,\n\t\t\t\t\tschema,\n\t\t\t\t\tschemaDatabaseMetadata,\n\t\t\t\t}) => {\n\t\t\t\t\treturn new MapperFactory(\n\t\t\t\t\t\tdb,\n\t\t\t\t\t\tidentityId,\n\t\t\t\t\t\tschema.model,\n\t\t\t\t\t\tschemaDatabaseMetadata,\n\t\t\t\t\t\tpredicatesInjector,\n\t\t\t\t\t\tselectBuilderFactory,\n\t\t\t\t\t\tuniqueWhereExpander,\n\t\t\t\t\t\twhereBuilder,\n\t\t\t\t\t\tjunctionTableManager,\n\t\t\t\t\t\tdeleteExecutor,\n\t\t\t\t\t\tupdater,\n\t\t\t\t\t\tinserter,\n\t\t\t\t\t\tpathFactory,\n\t\t\t\t\t\tproviders,\n\t\t\t\t\t)\n\t\t\t\t},\n\t\t\t)\n\t\t\t.addService('queryAstFactory', () => new GraphQlQueryAstFactory())\n\t\t\t.addService('readResolver', ({ mapperFactory, queryAstFactory }) => new ReadResolver(mapperFactory, queryAstFactory))\n\t\t\t.addService('validationDependencyCollector', () => new DependencyCollector())\n\t\t\t.addService('validationQueryAstFactory', ({ schema }) => new QueryAstFactory(schema.model))\n\t\t\t.addService('dataSelector', ({ validationQueryAstFactory, schema }) => new ValidationDataSelector(schema.model, validationQueryAstFactory))\n\t\t\t.addService('columnValueResolver', ({ providers }) => new ColumnValueResolver(providers))\n\t\t\t.addService('entityRulesResolver', ({ schema }) => new EntityRulesResolver(schema.validation, schema.model))\n\t\t\t.addService(\n\t\t\t\t'inputPreValidator',\n\t\t\t\t({ entityRulesResolver, columnValueResolver, dataSelector, schema }) =>\n\t\t\t\t\tnew InputPreValidator(schema.model, entityRulesResolver, columnValueResolver, dataSelector),\n\t\t\t)\n\t\t\t.addService(\n\t\t\t\t'mutationResolver',\n\t\t\t\t({ mapperFactory, inputPreValidator, queryAstFactory, schema, schemaDatabaseMetadata }) =>\n\t\t\t\t\tnew MutationResolver(schema.model, mapperFactory, inputPreValidator, queryAstFactory, schemaDatabaseMetadata),\n\t\t\t)\n\t\t\t.addService('validationResolver', ({ inputPreValidator, mapperFactory }) => new ValidationResolver(mapperFactory, inputPreValidator))\n\t\t\t.addService('refreshViewResolver', ({ schema, mapperFactory }) => new RefreshViewResolver(schema, mapperFactory))\n\t}\n\n\tpublic create(args: ExecutionContainerArgs): ExecutionContainer {\n\t\treturn this.createBuilder(args).build().pick('validationResolver', 'readResolver', 'mutationResolver', 'refreshViewResolver')\n\t}\n}\n"],"names":["schema","schemaDatabaseMetadata"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8DO,MAAM,0BAA0B;AAAA,EAGtC,YACkB,WACA,uBAChB;AAFgB,SAAA,YAAA;AACA,SAAA,wBAAA;AAJlB,kBAAA,MAAgB,SAAkC,EAAC;AAAA,EAMnD;AAAA,EAEA,cAAc,MAAyD;AACtE,UAAM,UAAU,KAAK,sBAAsB,IAAI;AAC/C,WAAO,KAAK,MAAM,OAAO,CAAC,KAAK,OAAO,GAAG,GAAG,GAAG,OAAO;AAAA,EACvD;AAAA,EAEA,sBACC,EAAE,aAAa,mBAAmB,YAAY,IAAI,QAAQ,YAAY,cAAc,OAAO,SAAS,wBAAwB,YAE3H;AACD,WAAO,IAAI,QAAQ,CAAA,CAAE,EACnB,WAAW,gBAAgB,MAAM,YAAY,EAC7C,WAAW,MAAM,MAAM,EAAE,EACzB,WAAW,WAAW,MAAM,OAAO,EACnC,WAAW,SAAS,MAAM,KAAK,EAC/B,WAAW,UAAU,MAAM,MAAM,EACjC,WAAW,cAAc,MAAM,UAAU,EACzC,WAAW,0BAA0B,MAAM,sBAAsB,EACjE,WAAW,YAAY,MAAM,QAAQ,EACrC,WAAW,aAAa,MAAM,KAAK,SAAS,EAC5C,WAAW,oBAAoB,CAAC,EAAE,QAAAA,QAAAA,MAAa,IAAI,iBAAiBA,QAAO,OAAO,iBAAiB,CAAC,EACpG,WAAW,oBAAoB,CAAC,EAAE,kBAAkB,QAAAA,QAAAA,MAAa,IAAI,iBAAiB,aAAaA,QAAO,OAAO,gBAAgB,CAAC,EAClI,WAAW,sBAAsB,CAAC,EAAE,kBAAkB,QAAAA,cAAa,IAAI,mBAAmBA,QAAO,OAAO,gBAAgB,CAAC,EACzH,WAAW,eAAe,CAAC,EAAE,QAAAA,QAAAA,MAAa,IAAI,YAAYA,QAAO,KAAK,CAAC,EACvE,WAAW,oBAAoB,MAAM,IAAI,iBAAA,CAAkB,EAC3D,WAAW,eAAe,MAAM,IAAI,YAAA,CAAa,EACjD,WAAW,kBAAkB,CAAC,EAAE,QAAAA,QAAAA,MAAa,IAAI,eAAeA,QAAO,OAAO,IAAI,mBAAA,GAAsB,KAAK,qBAAqB,CAAC,EACnI,WAAW,gBAAgB,CAAC,EAAE,aAAa,kBAAkB,aAAa,gBAAgB,QAAAA,QAAAA,MAC1F,IAAI;AAAA,MACHA,QAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,OACCA,QAAO,SAAS,SAAS,4BAA4BA,QAAO,SAAS,8BAA8B;AAAA,IAAA,CACpG,EACD,WAAW,kBAAkB,CAAC,EAAE,aAAa,QAAAA,cAAa,IAAI,eAAeA,QAAO,OAAO,WAAW,CAAC,EACvG;AAAA,MACA;AAAA,MACA,CAAC,EAAE,cAAc,gBAAgB,oBAAoB,YAAA,MACpD,IAAI,gBAAgB,cAAc,gBAAgB,oBAAoB,WAAW;AAAA,IAAA,EAElF;AAAA,MACA;AAAA,MACA,CAAC,EAAE,iBAAiB,kBAAkB,QAAAA,SAAQ,gBAC7C,IAAI,qBAAqBA,QAAO,OAAO,iBAAiB,kBAAkBA,QAAO,SAAS,WAAW,CAAA,GAAI,SAAS;AAAA,IAAA,EAEnH,WAAW,eAAe,CAAC,EAAE,cAAc,iBAAA,MAAuB,IAAI,YAAY,cAAc,gBAAgB,CAAC,EACjH,WAAW,uBAAuB,CAAC,EAAE,QAAAA,QAAAA,MAAa,IAAI,oBAAoBA,QAAO,KAAK,CAAC,EACvF;AAAA,MACA;AAAA,MACA,CAAC,EAAE,qBAAqB,QAAAA,QAAAA,MAAa,IAAI,uCAAuCA,QAAO,OAAO,mBAAmB;AAAA,IAAA,EAEjH;AAAA,MACA;AAAA,MACA,CAAC,EAAE,iBAAiB,QAAAA,QAAAA,MAAa,IAAI,iCAAiCA,QAAO,OAAO,eAAe;AAAA,IAAA,EAEnG,WAAW,kBAAkB,CAAC,EAAE,wBAAwB,wCAAwC;AAAA,MAChG,CAAC,uBAAuB,aAAa,GAAG;AAAA,MACxC,CAAC,8BAA8B,aAAa,GAAG;AAAA,IAAA,EAC9C,EACD;AAAA,MACA;AAAA,MACA,CAAC,EAAE,cAAc,gBAAgB,sBAAsB,aAAa,gBAAgB,aAAa,kBAAkB,QAAAA,QAAAA,MAClH,IAAK,MAAsC;AAAA,QAC1C,OAAO,IAAqB,UAA0B,cAAyD;AAC9G,iBAAO,IAAI;AAAA,YACVA,QAAO;AAAA,YACP;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UAAA;AAAA,QAEF;AAAA,MAAA,EACD;AAAA,IAAG,EAEJ;AAAA,MACA;AAAA,MACA,CAAC,EAAE,cAAc,aAAa,QAAAA,SAAQ,iBAAA,MAAuB,IAAI,qBAAqBA,QAAO,OAAO,cAAc,aAAa,gBAAgB;AAAA,IAAA,EAE/I;AAAA,MACA;AAAA,MACA,CAAC,EAAE,cAAc,aAAa,QAAAA,SAAQ,iBAAA,MAAuB,IAAI,qBAAqBA,QAAO,OAAO,cAAc,aAAa,gBAAgB;AAAA,IAAA,EAE/I,WAAW,0BAA0B,MAAM,IAAI,wBAAwB,EACvE,WAAW,6BAA6B,CAAC,CAAA,MAAO,IAAI,0BAAA,CAA2B,EAC/E;AAAA,MACA;AAAA,MACA,CAAC,EAAE,kBAAkB,cAAc,wBAAwB,2BAA2B,aAAa,QAAAA,QAAAA,MAClG,IAAI,qBAAqBA,QAAO,OAAO,kBAAkB,cAAc,wBAAwB,2BAA2B,WAAW;AAAA,IAAA,EAEtI;AAAA,MACA;AAAA,MACA,CAAC,EAAE,kBAAkB,sBAAsB,cAAc,aAAa,QAAAA,QAAAA,MACrE,IAAI,eAAeA,QAAO,OAAO,kBAAkB,cAAc,sBAAsB,WAAW;AAAA,IAAA,EAEnG,WAAW,WAAW,CAAC,EAAE,sBAAsB,QAAAA,cAAa,IAAI,QAAQA,QAAO,OAAO,oBAAoB,CAAC,EAC3G;AAAA,MACA;AAAA,MACA,CAAC,EAAE,sBAAsB,WAAW,QAAAA,SAAQ,wBAAAC,8BAC3C,IAAI,SAASD,QAAO,OAAOC,yBAAwB,sBAAsB,WAAW,EAAE,aAAaD,QAAO,SAAS,SAAS,YAAA,CAAa;AAAA,IAAA,EAE1I;AAAA,MACA;AAAA,MACA,CAAC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAAA;AAAAA,QACA,wBAAAC;AAAAA,MAAA,MACK;AACL,eAAO,IAAI;AAAA,UACV;AAAA,UACA;AAAA,UACAD,QAAO;AAAA,UACPC;AAAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QAAA;AAAA,MAEF;AAAA,IAAA,EAEA,WAAW,mBAAmB,MAAM,IAAI,wBAAwB,EAChE,WAAW,gBAAgB,CAAC,EAAE,eAAe,sBAAsB,IAAI,aAAa,eAAe,eAAe,CAAC,EACnH,WAAW,iCAAiC,MAAM,IAAI,oBAAA,CAAqB,EAC3E,WAAW,6BAA6B,CAAC,EAAE,QAAAD,QAAAA,MAAa,IAAI,gBAAgBA,QAAO,KAAK,CAAC,EACzF,WAAW,gBAAgB,CAAC,EAAE,2BAA2B,QAAAA,cAAa,IAAI,uBAAuBA,QAAO,OAAO,yBAAyB,CAAC,EACzI,WAAW,uBAAuB,CAAC,EAAE,UAAA,MAAgB,IAAI,oBAAoB,SAAS,CAAC,EACvF,WAAW,uBAAuB,CAAC,EAAE,QAAAA,QAAAA,MAAa,IAAI,oBAAoBA,QAAO,YAAYA,QAAO,KAAK,CAAC,EAC1G;AAAA,MACA;AAAA,MACA,CAAC,EAAE,qBAAqB,qBAAqB,cAAc,QAAAA,QAAAA,MAC1D,IAAI,kBAAkBA,QAAO,OAAO,qBAAqB,qBAAqB,YAAY;AAAA,IAAA,EAE3F;AAAA,MACA;AAAA,MACA,CAAC,EAAE,eAAe,mBAAmB,iBAAiB,QAAAA,SAAQ,wBAAAC,wBAAAA,MAC7D,IAAI,iBAAiBD,QAAO,OAAO,eAAe,mBAAmB,iBAAiBC,uBAAsB;AAAA,IAAA,EAE7G,WAAW,sBAAsB,CAAC,EAAE,mBAAmB,cAAA,MAAoB,IAAI,mBAAmB,eAAe,iBAAiB,CAAC,EACnI,WAAW,uBAAuB,CAAC,EAAE,QAAAD,SAAQ,cAAA,MAAoB,IAAI,oBAAoBA,SAAQ,aAAa,CAAC;AAAA,EAClH;AAAA,EAEO,OAAO,MAAkD;AAC/D,WAAO,KAAK,cAAc,IAAI,EAAE,MAAA,EAAQ,KAAK,sBAAsB,gBAAgB,oBAAoB,qBAAqB;AAAA,EAC7H;AACD;"}

package/dist/production/src/acl/Authorizator.cjs

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const schema = require("@contember/schema");
+class Authorizator {
+  constructor(permissions, defaultCustomPrimary, allowRefreshMaterializedView) {
+    this.permissions = permissions;
+    this.defaultCustomPrimary = defaultCustomPrimary;
+    this.allowRefreshMaterializedView = allowRefreshMaterializedView;
+  }
+  getEntityPermission(operation, entity) {
+    if (!this.permissions[entity]) {
+      return "no";
+    }
+    const entityPermissions = this.permissions[entity];
+    if (operation === schema.Acl.Operation.delete) {
+      return this.predicateToResult(entityPermissions.operations.delete);
+    }
+    const fieldPermissions = entityPermissions.operations[operation];
+    if (!fieldPermissions) {
+      return "no";
+    }
+    return Object.values(fieldPermissions).filter((it) => !!it).length > 0 ? "yes" : "no";
+  }
+  getFieldPredicate(operation, entity, field) {
+    return this.permissions[entity]?.operations[operation]?.[field] ?? false;
+  }
+  getFieldPermissions(operation, entity, field) {
+    const fieldPermissions = this.getFieldPredicate(operation, entity, field);
+    if (!fieldPermissions) {
+      return "no";
+    }
+    return this.predicateToResult(fieldPermissions);
+  }
+  predicateToResult(predicate) {
+    if (!predicate) {
+      return "no";
+    }
+    if (predicate === true) {
+      return "yes";
+    }
+    return "maybe";
+  }
+  isCustomPrimaryAllowed(entity) {
+    return this.permissions?.[entity]?.operations?.customPrimary ?? this.defaultCustomPrimary;
+  }
+  isRootOperationDisallowed(entity, operation) {
+    return this.permissions?.[entity]?.operations?.noRoot?.includes(operation) ?? false;
+  }
+  isRefreshMaterializedViewAllowed(entity) {
+    return this.permissions?.[entity]?.operations?.refreshMaterializedView ?? this.allowRefreshMaterializedView;
+  }
+}
+exports.Authorizator = Authorizator;
+//# sourceMappingURL=Authorizator.cjs.map

package/dist/production/src/acl/Authorizator.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"Authorizator.cjs","sources":["../../../../../packages/engine-content-api/src/acl/Authorizator.ts"],"sourcesContent":["import { Acl } from '@contember/schema'\n\nexport type AuthorizationResult = 'yes' | 'no' | 'maybe'\n\nexport class Authorizator {\n\tconstructor(\n\t\tprivate readonly permissions: Acl.Permissions,\n\t\tprivate readonly defaultCustomPrimary: boolean,\n\t\tprivate readonly allowRefreshMaterializedView: boolean,\n\t) {\n\t}\n\n\tgetEntityPermission(operation: Acl.Operation, entity: string): AuthorizationResult {\n\t\tif (!this.permissions[entity]) {\n\t\t\treturn 'no'\n\t\t}\n\t\tconst entityPermissions: Acl.EntityPermissions = this.permissions[entity]\n\n\t\tif (operation === Acl.Operation.delete) {\n\t\t\treturn this.predicateToResult(entityPermissions.operations.delete)\n\t\t}\n\t\tconst fieldPermissions = entityPermissions.operations[operation]\n\t\tif (!fieldPermissions) {\n\t\t\treturn 'no'\n\t\t}\n\t\treturn Object.values(fieldPermissions).filter(it => !!it).length > 0 ? 'yes' : 'no'\n\t}\n\n\tgetFieldPredicate(operation: Acl.Operation.create | Acl.Operation.read | Acl.Operation.update, entity: string, field: string): Acl.Predicate {\n\t\treturn this.permissions[entity]?.operations[operation]?.[field] ?? false\n\t}\n\n\tgetFieldPermissions(\n\t\toperation: Acl.Operation.create | Acl.Operation.read | Acl.Operation.update,\n\t\tentity: string,\n\t\tfield: string,\n\t): AuthorizationResult {\n\t\tconst fieldPermissions = this.getFieldPredicate(operation, entity, field)\n\t\tif (!fieldPermissions) {\n\t\t\treturn 'no'\n\t\t}\n\t\treturn this.predicateToResult(fieldPermissions)\n\t}\n\n\tprivate predicateToResult(predicate: Acl.Predicate | undefined): AuthorizationResult {\n\t\tif (!predicate) {\n\t\t\treturn 'no'\n\t\t}\n\t\tif (predicate === true) {\n\t\t\treturn 'yes'\n\t\t}\n\t\treturn 'maybe'\n\t}\n\n\tisCustomPrimaryAllowed(entity: string): boolean {\n\t\treturn this.permissions?.[entity]?.operations?.customPrimary ?? this.defaultCustomPrimary\n\t}\n\n\tisRootOperationDisallowed(entity: string, operation: Acl.Operation): boolean {\n\t\treturn this.permissions?.[entity]?.operations?.noRoot?.includes(operation) ?? false\n\t}\n\n\tisRefreshMaterializedViewAllowed(entity: string): boolean {\n\t\treturn this.permissions?.[entity]?.operations?.refreshMaterializedView ?? this.allowRefreshMaterializedView\n\t}\n}\n"],"names":["Acl"],"mappings":";;;AAIO,MAAM,aAAa;AAAA,EACzB,YACkB,aACA,sBACA,8BAChB;AAHgB,SAAA,cAAA;AACA,SAAA,uBAAA;AACA,SAAA,+BAAA;AAAA,EAElB;AAAA,EAEA,oBAAoB,WAA0B,QAAqC;AAClF,QAAI,CAAC,KAAK,YAAY,MAAM,GAAG;AAC9B,aAAO;AAAA,IACR;AACA,UAAM,oBAA2C,KAAK,YAAY,MAAM;AAExE,QAAI,cAAcA,OAAAA,IAAI,UAAU,QAAQ;AACvC,aAAO,KAAK,kBAAkB,kBAAkB,WAAW,MAAM;AAAA,IAClE;AACA,UAAM,mBAAmB,kBAAkB,WAAW,SAAS;AAC/D,QAAI,CAAC,kBAAkB;AACtB,aAAO;AAAA,IACR;AACA,WAAO,OAAO,OAAO,gBAAgB,EAAE,OAAO,CAAA,OAAM,CAAC,CAAC,EAAE,EAAE,SAAS,IAAI,QAAQ;AAAA,EAChF;AAAA,EAEA,kBAAkB,WAA6E,QAAgB,OAA8B;AAC5I,WAAO,KAAK,YAAY,MAAM,GAAG,WAAW,SAAS,IAAI,KAAK,KAAK;AAAA,EACpE;AAAA,EAEA,oBACC,WACA,QACA,OACsB;AACtB,UAAM,mBAAmB,KAAK,kBAAkB,WAAW,QAAQ,KAAK;AACxE,QAAI,CAAC,kBAAkB;AACtB,aAAO;AAAA,IACR;AACA,WAAO,KAAK,kBAAkB,gBAAgB;AAAA,EAC/C;AAAA,EAEQ,kBAAkB,WAA2D;AACpF,QAAI,CAAC,WAAW;AACf,aAAO;AAAA,IACR;AACA,QAAI,cAAc,MAAM;AACvB,aAAO;AAAA,IACR;AACA,WAAO;AAAA,EACR;AAAA,EAEA,uBAAuB,QAAyB;AAC/C,WAAO,KAAK,cAAc,MAAM,GAAG,YAAY,iBAAiB,KAAK;AAAA,EACtE;AAAA,EAEA,0BAA0B,QAAgB,WAAmC;AAC5E,WAAO,KAAK,cAAc,MAAM,GAAG,YAAY,QAAQ,SAAS,SAAS,KAAK;AAAA,EAC/E;AAAA,EAEA,iCAAiC,QAAyB;AACzD,WAAO,KAAK,cAAc,MAAM,GAAG,YAAY,2BAA2B,KAAK;AAAA,EAChF;AACD;;"}

package/dist/production/src/acl/Authorizator.js

@@ -0,0 +1,54 @@
+import { Acl } from "@contember/schema";
+class Authorizator {
+  constructor(permissions, defaultCustomPrimary, allowRefreshMaterializedView) {
+    this.permissions = permissions;
+    this.defaultCustomPrimary = defaultCustomPrimary;
+    this.allowRefreshMaterializedView = allowRefreshMaterializedView;
+  }
+  getEntityPermission(operation, entity) {
+    if (!this.permissions[entity]) {
+      return "no";
+    }
+    const entityPermissions = this.permissions[entity];
+    if (operation === Acl.Operation.delete) {
+      return this.predicateToResult(entityPermissions.operations.delete);
+    }
+    const fieldPermissions = entityPermissions.operations[operation];
+    if (!fieldPermissions) {
+      return "no";
+    }
+    return Object.values(fieldPermissions).filter((it) => !!it).length > 0 ? "yes" : "no";
+  }
+  getFieldPredicate(operation, entity, field) {
+    return this.permissions[entity]?.operations[operation]?.[field] ?? false;
+  }
+  getFieldPermissions(operation, entity, field) {
+    const fieldPermissions = this.getFieldPredicate(operation, entity, field);
+    if (!fieldPermissions) {
+      return "no";
+    }
+    return this.predicateToResult(fieldPermissions);
+  }
+  predicateToResult(predicate) {
+    if (!predicate) {
+      return "no";
+    }
+    if (predicate === true) {
+      return "yes";
+    }
+    return "maybe";
+  }
+  isCustomPrimaryAllowed(entity) {
+    return this.permissions?.[entity]?.operations?.customPrimary ?? this.defaultCustomPrimary;
+  }
+  isRootOperationDisallowed(entity, operation) {
+    return this.permissions?.[entity]?.operations?.noRoot?.includes(operation) ?? false;
+  }
+  isRefreshMaterializedViewAllowed(entity) {
+    return this.permissions?.[entity]?.operations?.refreshMaterializedView ?? this.allowRefreshMaterializedView;
+  }
+}
+export {
+  Authorizator
+};
+//# sourceMappingURL=Authorizator.js.map

package/dist/production/src/acl/Authorizator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Authorizator.js","sources":["../../../../../packages/engine-content-api/src/acl/Authorizator.ts"],"sourcesContent":["import { Acl } from '@contember/schema'\n\nexport type AuthorizationResult = 'yes' | 'no' | 'maybe'\n\nexport class Authorizator {\n\tconstructor(\n\t\tprivate readonly permissions: Acl.Permissions,\n\t\tprivate readonly defaultCustomPrimary: boolean,\n\t\tprivate readonly allowRefreshMaterializedView: boolean,\n\t) {\n\t}\n\n\tgetEntityPermission(operation: Acl.Operation, entity: string): AuthorizationResult {\n\t\tif (!this.permissions[entity]) {\n\t\t\treturn 'no'\n\t\t}\n\t\tconst entityPermissions: Acl.EntityPermissions = this.permissions[entity]\n\n\t\tif (operation === Acl.Operation.delete) {\n\t\t\treturn this.predicateToResult(entityPermissions.operations.delete)\n\t\t}\n\t\tconst fieldPermissions = entityPermissions.operations[operation]\n\t\tif (!fieldPermissions) {\n\t\t\treturn 'no'\n\t\t}\n\t\treturn Object.values(fieldPermissions).filter(it => !!it).length > 0 ? 'yes' : 'no'\n\t}\n\n\tgetFieldPredicate(operation: Acl.Operation.create | Acl.Operation.read | Acl.Operation.update, entity: string, field: string): Acl.Predicate {\n\t\treturn this.permissions[entity]?.operations[operation]?.[field] ?? false\n\t}\n\n\tgetFieldPermissions(\n\t\toperation: Acl.Operation.create | Acl.Operation.read | Acl.Operation.update,\n\t\tentity: string,\n\t\tfield: string,\n\t): AuthorizationResult {\n\t\tconst fieldPermissions = this.getFieldPredicate(operation, entity, field)\n\t\tif (!fieldPermissions) {\n\t\t\treturn 'no'\n\t\t}\n\t\treturn this.predicateToResult(fieldPermissions)\n\t}\n\n\tprivate predicateToResult(predicate: Acl.Predicate | undefined): AuthorizationResult {\n\t\tif (!predicate) {\n\t\t\treturn 'no'\n\t\t}\n\t\tif (predicate === true) {\n\t\t\treturn 'yes'\n\t\t}\n\t\treturn 'maybe'\n\t}\n\n\tisCustomPrimaryAllowed(entity: string): boolean {\n\t\treturn this.permissions?.[entity]?.operations?.customPrimary ?? this.defaultCustomPrimary\n\t}\n\n\tisRootOperationDisallowed(entity: string, operation: Acl.Operation): boolean {\n\t\treturn this.permissions?.[entity]?.operations?.noRoot?.includes(operation) ?? false\n\t}\n\n\tisRefreshMaterializedViewAllowed(entity: string): boolean {\n\t\treturn this.permissions?.[entity]?.operations?.refreshMaterializedView ?? this.allowRefreshMaterializedView\n\t}\n}\n"],"names":[],"mappings":";AAIO,MAAM,aAAa;AAAA,EACzB,YACkB,aACA,sBACA,8BAChB;AAHgB,SAAA,cAAA;AACA,SAAA,uBAAA;AACA,SAAA,+BAAA;AAAA,EAElB;AAAA,EAEA,oBAAoB,WAA0B,QAAqC;AAClF,QAAI,CAAC,KAAK,YAAY,MAAM,GAAG;AAC9B,aAAO;AAAA,IACR;AACA,UAAM,oBAA2C,KAAK,YAAY,MAAM;AAExE,QAAI,cAAc,IAAI,UAAU,QAAQ;AACvC,aAAO,KAAK,kBAAkB,kBAAkB,WAAW,MAAM;AAAA,IAClE;AACA,UAAM,mBAAmB,kBAAkB,WAAW,SAAS;AAC/D,QAAI,CAAC,kBAAkB;AACtB,aAAO;AAAA,IACR;AACA,WAAO,OAAO,OAAO,gBAAgB,EAAE,OAAO,CAAA,OAAM,CAAC,CAAC,EAAE,EAAE,SAAS,IAAI,QAAQ;AAAA,EAChF;AAAA,EAEA,kBAAkB,WAA6E,QAAgB,OAA8B;AAC5I,WAAO,KAAK,YAAY,MAAM,GAAG,WAAW,SAAS,IAAI,KAAK,KAAK;AAAA,EACpE;AAAA,EAEA,oBACC,WACA,QACA,OACsB;AACtB,UAAM,mBAAmB,KAAK,kBAAkB,WAAW,QAAQ,KAAK;AACxE,QAAI,CAAC,kBAAkB;AACtB,aAAO;AAAA,IACR;AACA,WAAO,KAAK,kBAAkB,gBAAgB;AAAA,EAC/C;AAAA,EAEQ,kBAAkB,WAA2D;AACpF,QAAI,CAAC,WAAW;AACf,aAAO;AAAA,IACR;AACA,QAAI,cAAc,MAAM;AACvB,aAAO;AAAA,IACR;AACA,WAAO;AAAA,EACR;AAAA,EAEA,uBAAuB,QAAyB;AAC/C,WAAO,KAAK,cAAc,MAAM,GAAG,YAAY,iBAAiB,KAAK;AAAA,EACtE;AAAA,EAEA,0BAA0B,QAAgB,WAAmC;AAC5E,WAAO,KAAK,cAAc,MAAM,GAAG,YAAY,QAAQ,SAAS,SAAS,KAAK;AAAA,EAC/E;AAAA,EAEA,iCAAiC,QAAyB;AACzD,WAAO,KAAK,cAAc,MAAM,GAAG,YAAY,2BAA2B,KAAK;AAAA,EAChF;AACD;"}

package/dist/production/src/acl/EvaluatedPredicateReplacer.cjs

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const WhereReplacer = require("../mapper/select/optimizer/WhereReplacer.cjs");
+class EvaluatedPredicateReplacer {
+  constructor(evaluatedPredicate, sourceEntity, relation) {
+    this.evaluatedPredicate = evaluatedPredicate;
+    this.sourceEntity = sourceEntity;
+    this.relation = relation;
+  }
+  replace(where) {
+    const result = {};
+    for (const [key, value] of Object.entries(where)) {
+      if (key === "not") {
+        result["not"] = this.replace(value);
+      } else if (key === "and" || key === "or") {
+        result[key] = value.map((it) => this.replace(it));
+      } else if (key === this.relation.name) {
+        result[key] = WhereReplacer.replaceWhere(value, this.evaluatedPredicate, { [this.sourceEntity.primary]: { always: true } });
+      } else {
+        result[key] = value;
+      }
+    }
+    return result;
+  }
+}
+exports.EvaluatedPredicateReplacer = EvaluatedPredicateReplacer;
+//# sourceMappingURL=EvaluatedPredicateReplacer.cjs.map

package/dist/production/src/acl/EvaluatedPredicateReplacer.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"EvaluatedPredicateReplacer.cjs","sources":["../../../../../packages/engine-content-api/src/acl/EvaluatedPredicateReplacer.ts"],"sourcesContent":["import { Input, Model, Writable } from '@contember/schema'\nimport { replaceWhere } from '../mapper/select/optimizer/WhereReplacer'\n\nexport class EvaluatedPredicateReplacer {\n\tconstructor(\n\t\tprivate readonly evaluatedPredicate: Input.OptionalWhere,\n\t\tprivate readonly sourceEntity: Model.Entity,\n\t\tprivate readonly relation: Model.AnyRelation,\n\t) {\n\t}\n\n\tpublic replace(where: Input.OptionalWhere): Input.OptionalWhere {\n\t\tconst result: Writable<Input.OptionalWhere> = {}\n\t\tfor (const [key, value] of Object.entries(where)) {\n\t\t\tif (key === 'not') {\n\t\t\t\tresult['not'] = this.replace(value as Input.OptionalWhere)\n\t\t\t} else if (key === 'and' || key === 'or') {\n\t\t\t\tresult[key] = (value as Input.Where[]).map(it => this.replace(it))\n\t\t\t} else if (key === this.relation.name) {\n\t\t\t\tresult[key] = replaceWhere(value as Input.Where, this.evaluatedPredicate, { [this.sourceEntity.primary]: { always: true } })\n\t\t\t} else {\n\t\t\t\tresult[key] = value\n\t\t\t}\n\t\t}\n\t\treturn result\n\t}\n}\n"],"names":["replaceWhere"],"mappings":";;;AAGO,MAAM,2BAA2B;AAAA,EACvC,YACkB,oBACA,cACA,UAChB;AAHgB,SAAA,qBAAA;AACA,SAAA,eAAA;AACA,SAAA,WAAA;AAAA,EAElB;AAAA,EAEO,QAAQ,OAAiD;AAC/D,UAAM,SAAwC,CAAA;AAC9C,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AACjD,UAAI,QAAQ,OAAO;AAClB,eAAO,KAAK,IAAI,KAAK,QAAQ,KAA4B;AAAA,MAC1D,WAAW,QAAQ,SAAS,QAAQ,MAAM;AACzC,eAAO,GAAG,IAAK,MAAwB,IAAI,QAAM,KAAK,QAAQ,EAAE,CAAC;AAAA,MAClE,WAAW,QAAQ,KAAK,SAAS,MAAM;AACtC,eAAO,GAAG,IAAIA,cAAAA,aAAa,OAAsB,KAAK,oBAAoB,EAAE,CAAC,KAAK,aAAa,OAAO,GAAG,EAAE,QAAQ,KAAA,GAAQ;AAAA,MAC5H,OAAO;AACN,eAAO,GAAG,IAAI;AAAA,MACf;AAAA,IACD;AACA,WAAO;AAAA,EACR;AACD;;"}

package/dist/production/src/acl/EvaluatedPredicateReplacer.js

@@ -0,0 +1,27 @@
+import { replaceWhere } from "../mapper/select/optimizer/WhereReplacer.js";
+class EvaluatedPredicateReplacer {
+  constructor(evaluatedPredicate, sourceEntity, relation) {
+    this.evaluatedPredicate = evaluatedPredicate;
+    this.sourceEntity = sourceEntity;
+    this.relation = relation;
+  }
+  replace(where) {
+    const result = {};
+    for (const [key, value] of Object.entries(where)) {
+      if (key === "not") {
+        result["not"] = this.replace(value);
+      } else if (key === "and" || key === "or") {
+        result[key] = value.map((it) => this.replace(it));
+      } else if (key === this.relation.name) {
+        result[key] = replaceWhere(value, this.evaluatedPredicate, { [this.sourceEntity.primary]: { always: true } });
+      } else {
+        result[key] = value;
+      }
+    }
+    return result;
+  }
+}
+export {
+  EvaluatedPredicateReplacer
+};
+//# sourceMappingURL=EvaluatedPredicateReplacer.js.map

package/dist/production/src/acl/EvaluatedPredicateReplacer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EvaluatedPredicateReplacer.js","sources":["../../../../../packages/engine-content-api/src/acl/EvaluatedPredicateReplacer.ts"],"sourcesContent":["import { Input, Model, Writable } from '@contember/schema'\nimport { replaceWhere } from '../mapper/select/optimizer/WhereReplacer'\n\nexport class EvaluatedPredicateReplacer {\n\tconstructor(\n\t\tprivate readonly evaluatedPredicate: Input.OptionalWhere,\n\t\tprivate readonly sourceEntity: Model.Entity,\n\t\tprivate readonly relation: Model.AnyRelation,\n\t) {\n\t}\n\n\tpublic replace(where: Input.OptionalWhere): Input.OptionalWhere {\n\t\tconst result: Writable<Input.OptionalWhere> = {}\n\t\tfor (const [key, value] of Object.entries(where)) {\n\t\t\tif (key === 'not') {\n\t\t\t\tresult['not'] = this.replace(value as Input.OptionalWhere)\n\t\t\t} else if (key === 'and' || key === 'or') {\n\t\t\t\tresult[key] = (value as Input.Where[]).map(it => this.replace(it))\n\t\t\t} else if (key === this.relation.name) {\n\t\t\t\tresult[key] = replaceWhere(value as Input.Where, this.evaluatedPredicate, { [this.sourceEntity.primary]: { always: true } })\n\t\t\t} else {\n\t\t\t\tresult[key] = value\n\t\t\t}\n\t\t}\n\t\treturn result\n\t}\n}\n"],"names":[],"mappings":";AAGO,MAAM,2BAA2B;AAAA,EACvC,YACkB,oBACA,cACA,UAChB;AAHgB,SAAA,qBAAA;AACA,SAAA,eAAA;AACA,SAAA,WAAA;AAAA,EAElB;AAAA,EAEO,QAAQ,OAAiD;AAC/D,UAAM,SAAwC,CAAA;AAC9C,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AACjD,UAAI,QAAQ,OAAO;AAClB,eAAO,KAAK,IAAI,KAAK,QAAQ,KAA4B;AAAA,MAC1D,WAAW,QAAQ,SAAS,QAAQ,MAAM;AACzC,eAAO,GAAG,IAAK,MAAwB,IAAI,QAAM,KAAK,QAAQ,EAAE,CAAC;AAAA,MAClE,WAAW,QAAQ,KAAK,SAAS,MAAM;AACtC,eAAO,GAAG,IAAI,aAAa,OAAsB,KAAK,oBAAoB,EAAE,CAAC,KAAK,aAAa,OAAO,GAAG,EAAE,QAAQ,KAAA,GAAQ;AAAA,MAC5H,OAAO;AACN,eAAO,GAAG,IAAI;AAAA,MACf;AAAA,IACD;AACA,WAAO;AAAA,EACR;AACD;"}

package/dist/production/src/acl/PermissionFactory.cjs

@@ -0,0 +1,243 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const schemaUtils = require("@contember/schema-utils");
+const object = require("../utils/object.cjs");
+const VariableUtils = require("./VariableUtils.cjs");
+class PermissionFactory {
+  create(schema, roles, prefix) {
+    let result = {};
+    for (let role of roles) {
+      const roleDefinition = schema.acl.roles[role] || { entities: {} };
+      let rolePermissions = this.prefixPredicatesWithRole(schema.model, roleDefinition.entities, prefix || role);
+      if (roleDefinition.inherits) {
+        const inheritedPermissions = this.create(schema, roleDefinition.inherits, prefix || role);
+        rolePermissions = this.mergePermissions(inheritedPermissions, rolePermissions);
+      }
+      result = this.mergePermissions(result, rolePermissions);
+    }
+    result = this.makePrimaryPredicatesUnionOfAllFields(schema.model, result);
+    return result;
+  }
+  prefixPredicatesWithRole(model, permissions, role) {
+    return object.mapObject(permissions, ({ operations, predicates }, entityName) => ({
+      operations,
+      predicates: object.mapObject(predicates, (predicate) => {
+        const predicateDefinitionProcessor = new schemaUtils.PredicateDefinitionProcessor(model);
+        return predicateDefinitionProcessor.process(schemaUtils.getEntity(model, entityName), predicate, {
+          handleColumn: ({ value }) => {
+            if (typeof value === "string") {
+              return VariableUtils.prefixVariable(role, value);
+            }
+            return value;
+          },
+          handleRelation: ({ value }) => {
+            if (typeof value === "string") {
+              return VariableUtils.prefixVariable(role, value);
+            }
+            return value;
+          }
+        });
+      })
+    }));
+  }
+  makePrimaryPredicatesUnionOfAllFields(model, permissions) {
+    return object.mapObject(permissions, (permission, entityName) => {
+      const entity = schemaUtils.getEntity(model, entityName);
+      const entityPredicates = { ...permission.predicates };
+      const entityOperations = { ...permission.operations };
+      const operationNames = ["read", "create", "update"];
+      for (let operation of operationNames) {
+        if (!entityOperations[operation]) {
+          continue;
+        }
+        const fieldPermissions = { ...entityOperations[operation] };
+        entityOperations[operation] = fieldPermissions;
+        if (Object.values(fieldPermissions).some((it) => it === true)) {
+          fieldPermissions[entity.primary] = true;
+        }
+        if (fieldPermissions[entity.primary] === true) {
+          continue;
+        }
+        const predicateReferences = Object.entries(fieldPermissions).filter(([key]) => key !== entity.primary).map(([key, value]) => value).filter((value) => value !== false).filter((value, index, array) => array.indexOf(value) === index);
+        let idPermissions = fieldPermissions[entity.primary] || false;
+        for (let predicateReference of predicateReferences) {
+          const { predicateDefinition, predicate } = this.mergePredicates(
+            entityPredicates,
+            idPermissions,
+            entityPredicates,
+            predicateReference
+          );
+          if (typeof predicate !== "string" || predicateDefinition === void 0) {
+            throw new Error("should not happen");
+          }
+          idPermissions = predicate;
+          entityPredicates[predicate] = predicateDefinition;
+        }
+        fieldPermissions[entity.primary] = idPermissions;
+        entityPredicates[idPermissions] = entityPredicates[idPermissions];
+      }
+      return {
+        operations: entityOperations,
+        predicates: entityPredicates
+      };
+    });
+  }
+  mergePermissions(left, right) {
+    const result = { ...left };
+    for (let entityName in right) {
+      if (result[entityName] !== void 0) {
+        result[entityName] = this.mergeEntityPermissions(result[entityName], right[entityName]);
+      } else {
+        result[entityName] = right[entityName];
+      }
+    }
+    return result;
+  }
+  mergeEntityPermissions(left, right) {
+    let predicates = {};
+    const operations = {};
+    if (left.operations.customPrimary || right.operations.customPrimary) {
+      operations.customPrimary = true;
+    }
+    const noRoot = [];
+    for (let operation of [
+      "create",
+      "read",
+      "update"
+    ]) {
+      const { predicates: opPredicates, permissions: fieldPermissions, noRoot: opNoRoot2 } = this.mergeOperationPermissions(left, right, operation);
+      if (opNoRoot2) {
+        noRoot.push(operation);
+      }
+      predicates = { ...predicates, ...opPredicates };
+      if (Object.keys(fieldPermissions).length > 0) {
+        operations[operation] = fieldPermissions;
+      }
+    }
+    const { predicateDefinition, predicate, noRoot: opNoRoot } = this.mergeDeletePermissions(left, right);
+    if (opNoRoot) {
+      noRoot.push("delete");
+    }
+    if (predicate === true) {
+      operations.delete = true;
+    } else if (predicateDefinition !== void 0 && typeof predicate === "string") {
+      predicates[predicate] = predicateDefinition;
+      operations.delete = predicate;
+    }
+    if (noRoot.length > 0) {
+      operations.noRoot = noRoot;
+    }
+    return {
+      predicates,
+      operations
+    };
+  }
+  mergeOperationPermissions(left, right, operation) {
+    const { noRoot, leftPermissions, rightPermissions } = this.resolveNoRoot(left, right, operation);
+    return {
+      noRoot,
+      ...this.mergeFieldPermissions(
+        left.predicates,
+        leftPermissions,
+        right.predicates,
+        rightPermissions
+      )
+    };
+  }
+  mergeDeletePermissions(left, right) {
+    const { noRoot, leftPermissions, rightPermissions } = this.resolveNoRoot(left, right, "delete");
+    return {
+      noRoot,
+      ...this.mergePredicates(
+        left.predicates,
+        leftPermissions,
+        right.predicates,
+        rightPermissions
+      )
+    };
+  }
+  resolveNoRoot(left, right, operation) {
+    const leftRootForbidden = left.operations.noRoot?.includes(operation) || false;
+    const rightRootForbidden = right.operations.noRoot?.includes(operation) || false;
+    const leftPermissions = left.operations[operation];
+    const rightPermissions = right.operations[operation];
+    const rootForbidden = leftRootForbidden && rightRootForbidden || leftRootForbidden && !rightPermissions || rightRootForbidden && !leftPermissions;
+    const resolvedLeftPermissions = !rootForbidden && leftRootForbidden ? void 0 : leftPermissions;
+    const resolvedRightPermissions = !rootForbidden && rightRootForbidden ? void 0 : rightPermissions;
+    return {
+      noRoot: rootForbidden,
+      leftPermissions: resolvedLeftPermissions,
+      rightPermissions: resolvedRightPermissions
+    };
+  }
+  mergeFieldPermissions(leftPredicates, leftFieldPermissions = {}, rightPredicates, rightFieldPermissions = {}) {
+    const permissions = {};
+    const predicates = {};
+    for (let field in { ...leftFieldPermissions, ...rightFieldPermissions }) {
+      const { predicateDefinition, predicate } = this.mergePredicates(
+        leftPredicates,
+        leftFieldPermissions[field] || false,
+        rightPredicates,
+        rightFieldPermissions[field] || false
+      );
+      if (predicate === true) {
+        permissions[field] = true;
+      } else if (predicateDefinition !== void 0 && typeof predicate === "string") {
+        permissions[field] = predicate;
+        predicates[predicate] = predicateDefinition;
+      }
+    }
+    return { predicates, permissions };
+  }
+  mergePredicates(leftPredicates, leftReference = false, rightPredicates, rightReference = false) {
+    if (leftReference === true || rightReference === true) {
+      return {
+        predicate: true,
+        predicateDefinition: void 0
+      };
+    }
+    if (leftReference !== false && rightReference !== false) {
+      const leftPredicate = leftPredicates[leftReference];
+      const rightPredicate = rightPredicates[rightReference];
+      if (leftPredicate === rightPredicate) {
+        return {
+          predicate: leftReference,
+          predicateDefinition: leftPredicate
+        };
+      }
+      let predicateName = "__merge__" + leftReference + "__" + rightReference;
+      while (leftPredicates[predicateName]) {
+        predicateName += "_";
+      }
+      return {
+        predicate: predicateName,
+        predicateDefinition: {
+          or: [leftPredicate, rightPredicate]
+        }
+      };
+    } else if (leftReference !== false) {
+      return {
+        predicate: leftReference,
+        predicateDefinition: leftPredicates[leftReference]
+      };
+    } else if (rightReference !== false) {
+      let predicateName = rightReference;
+      if (rightPredicates !== leftPredicates) {
+        while (leftPredicates[predicateName]) {
+          predicateName += "_";
+        }
+      }
+      return {
+        predicate: predicateName,
+        predicateDefinition: rightPredicates[rightReference]
+      };
+    } else {
+      return {
+        predicate: false,
+        predicateDefinition: void 0
+      };
+    }
+  }
+}
+exports.PermissionFactory = PermissionFactory;
+//# sourceMappingURL=PermissionFactory.cjs.map