@contember/schema-utils 1.4.0-rc.8 → 2.0.0-alpha.8

package/dist/development/src/validation/AclValidator.cjs

@@ -0,0 +1,168 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("@contember/schema");
+const PredicateDefinitionProcessor = require("../acl/PredicateDefinitionProcessor.cjs");
+const modelUtils = require("../model/modelUtils.cjs");
+const errors = require("./errors.cjs");
+require("../type-schema/acl.cjs");
+const condition = require("../type-schema/condition.cjs");
+require("../type-schema/model.cjs");
+require("../type-schema/settings.cjs");
+require("../type-schema/validation.cjs");
+class AclValidator {
+  constructor(model) {
+    this.model = model;
+  }
+  validate(schema) {
+    const errorBuilder = new errors.ErrorBuilder([], ["acl"]);
+    this.validateRoles(schema.roles, errorBuilder);
+    return errorBuilder.errors;
+  }
+  validateRoles(roles, errorBuilder) {
+    for (const role in roles) {
+      if (!roles.hasOwnProperty(role)) {
+        continue;
+      }
+      this.validateRolePermissions(roles[role], Object.keys(roles), errorBuilder.for(role));
+    }
+  }
+  validateRolePermissions(permissions, roles, errorBuilder) {
+    this.validateInherits(permissions.inherits, roles, errorBuilder.for("inherits"));
+    this.validateVariables(permissions.variables, errorBuilder.for("variables"));
+    this.validatePermissions(permissions.entities, permissions.variables || {}, errorBuilder.for("entities"));
+  }
+  validateInherits(inherits, roles, errorBuilder) {
+    if (inherits === void 0) {
+      return void 0;
+    }
+    for (const inheritsFrom of inherits) {
+      if (!roles.includes(inheritsFrom)) {
+        errorBuilder.for(inheritsFrom).add("ACL_UNDEFINED_ROLE", "Referenced role not exists.");
+      }
+    }
+  }
+  validateVariables(variables, errorBuilder) {
+    for (const varName in variables) {
+      if (!variables.hasOwnProperty(varName)) {
+        continue;
+      }
+      this.validateVariable(variables[varName], errorBuilder.for(varName));
+    }
+  }
+  validateVariable(variable, errorBuilder) {
+    switch (variable.type) {
+      case "entity":
+        if (!this.model.entities[variable.entityName]) {
+          errorBuilder.add("ACL_UNDEFINED_ENTITY", `Entity "${variable.entityName}" not found`);
+          return;
+        }
+    }
+    return;
+  }
+  validatePermissions(permissions, variables, errorBuilder) {
+    for (const entityName in permissions) {
+      if (!permissions.hasOwnProperty(entityName)) {
+        continue;
+      }
+      if (!this.model.entities[entityName]) {
+        errorBuilder.add("ACL_UNDEFINED_ENTITY", `Entity ${entityName} not found`);
+        continue;
+      }
+      const entity = modelUtils.getEntity(this.model, entityName);
+      this.validateEntityPermissions(
+        permissions[entityName],
+        entity,
+        variables,
+        errorBuilder.for(entityName)
+      );
+    }
+  }
+  validateEntityPermissions(entityPermissions, entity, variables, errorBuilder) {
+    this.validatePredicates(
+      entityPermissions.predicates,
+      entity,
+      variables,
+      errorBuilder.for("predicates")
+    );
+    this.validateOperations(
+      entityPermissions.operations,
+      entity,
+      entityPermissions.predicates,
+      errorBuilder.for("operations")
+    );
+  }
+  validatePredicates(predicates, entity, variables, errorBuilder) {
+    for (const predicateName in predicates) {
+      if (!predicates.hasOwnProperty(predicateName)) {
+        continue;
+      }
+      this.validatePredicateDefinition(
+        predicates[predicateName],
+        entity,
+        variables,
+        errorBuilder.for(predicateName)
+      );
+    }
+  }
+  validatePredicateDefinition(predicate, entity, variables, errorBuilder) {
+    const processor = new PredicateDefinitionProcessor.PredicateDefinitionProcessor(this.model);
+    processor.process(entity, predicate, {
+      handleColumn: (ctx) => {
+        if (typeof ctx.value === "string") {
+          if (!variables[ctx.value]) {
+            errorBuilder.for(...ctx.path).add("ACL_UNDEFINED_VARIABLE", `Undefined variable ${ctx.value}`);
+          }
+        } else {
+          try {
+            condition.conditionSchema(ctx.column.type)(ctx.value);
+          } catch (e) {
+            errorBuilder.for(...ctx.path).add("ACL_INVALID_CONDITION", `Invalid condition (${e.message}): ${JSON.stringify(ctx.value)}`);
+          }
+        }
+        return ctx.value;
+      },
+      handleRelation: (ctx) => {
+        if (typeof ctx.value === "string" && !variables[ctx.value]) {
+          errorBuilder.for(...ctx.path).add("ACL_UNDEFINED_VARIABLE", `Undefined variable ${ctx.value}`);
+        }
+        return ctx.value;
+      },
+      handleUndefinedField: (ctx) => {
+        errorBuilder.for(...ctx.path).add("ACL_UNDEFINED_FIELD", `Undefined field ${ctx.name} on entity ${ctx.entity.name}`);
+        return ctx.value;
+      }
+    });
+  }
+  validateOperations(operations, entity, predicates, errorBuilder) {
+    if (operations.delete !== void 0) {
+      this.validatePredicate(operations.delete, predicates, errorBuilder.for("delete"));
+    }
+    for (const op of ["read", "create", "update"]) {
+      const operation = operations[op];
+      if (operation !== void 0) {
+        this.validateFieldPermissions(operation, entity, predicates, errorBuilder.for(op));
+      }
+    }
+  }
+  validateFieldPermissions(permissions, entity, predicates, errorBuilder) {
+    for (const field in permissions) {
+      if (!permissions.hasOwnProperty(field)) {
+        continue;
+      }
+      if (!entity.fields[field]) {
+        errorBuilder.add("ACL_UNDEFINED_FIELD", `Field ${field} not found on entity ${entity.name}`);
+      }
+      this.validatePredicate(permissions[field], predicates, errorBuilder.for(field));
+    }
+  }
+  validatePredicate(predicate, predicates, errorBuilder) {
+    if (predicate === false || predicate === true) {
+      return;
+    }
+    if (!predicates[predicate]) {
+      errorBuilder.add("ACL_UNDEFINED_PREDICATE", `Predicate ${predicate} not found`);
+    }
+  }
+}
+exports.AclValidator = AclValidator;
+//# sourceMappingURL=AclValidator.cjs.map

package/dist/development/src/validation/AclValidator.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AclValidator.cjs","sources":["../../../../../packages/schema-utils/src/validation/AclValidator.ts"],"sourcesContent":["import { Acl, Model } from '@contember/schema'\nimport { PredicateDefinitionProcessor } from '../acl'\nimport { getEntity } from '../model'\nimport { ErrorBuilder, ValidationError } from './errors'\nimport { conditionSchema } from '../type-schema'\n\n\nexport class AclValidator {\n\tconstructor(private readonly model: Model.Schema) {}\n\n\tpublic validate(schema: Acl.Schema): ValidationError[] {\n\t\tconst errorBuilder = new ErrorBuilder([], ['acl'])\n\t\tthis.validateRoles(schema.roles, errorBuilder)\n\t\treturn errorBuilder.errors\n\t}\n\n\tprivate validateRoles(roles: Acl.Roles, errorBuilder: ErrorBuilder): void {\n\t\tfor (const role in roles) {\n\t\t\tif (!roles.hasOwnProperty(role)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tthis.validateRolePermissions(roles[role], Object.keys(roles), errorBuilder.for(role))\n\t\t}\n\t}\n\n\tprivate validateRolePermissions(\n\t\tpermissions: Acl.RolePermissions,\n\t\troles: string[],\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\n\t\tthis.validateInherits(permissions.inherits, roles, errorBuilder.for('inherits'))\n\t\tthis.validateVariables(permissions.variables, errorBuilder.for('variables'))\n\t\tthis.validatePermissions(permissions.entities, (permissions.variables as Acl.Variables) || {}, errorBuilder.for('entities'))\n\t\t// todo: plugins validation\n\t}\n\n\tprivate validateInherits(inherits: Acl.RolePermissions['inherits'], roles: string[], errorBuilder: ErrorBuilder): void {\n\t\tif (inherits === undefined) {\n\t\t\treturn undefined\n\t\t}\n\t\tfor (const inheritsFrom of inherits) {\n\t\t\tif (!roles.includes(inheritsFrom)) {\n\t\t\t\terrorBuilder.for(inheritsFrom).add('ACL_UNDEFINED_ROLE', 'Referenced role not exists.')\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate validateVariables(variables: Acl.Variables, errorBuilder: ErrorBuilder): void {\n\t\tfor (const varName in variables) {\n\t\t\tif (!variables.hasOwnProperty(varName)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tthis.validateVariable(variables[varName], errorBuilder.for(varName))\n\t\t}\n\t}\n\n\tprivate validateVariable(variable: Acl.Variable, errorBuilder: ErrorBuilder): void {\n\t\tswitch (variable.type) {\n\t\t\tcase 'entity':\n\t\t\t\tif (!this.model.entities[variable.entityName]) {\n\t\t\t\t\terrorBuilder.add('ACL_UNDEFINED_ENTITY', `Entity \"${variable.entityName}\" not found`)\n\t\t\t\t\treturn\n\t\t\t\t}\n\t\t}\n\t\treturn\n\t}\n\n\tprivate validatePermissions(permissions: Acl.Permissions, variables: Acl.Variables, errorBuilder: ErrorBuilder): void {\n\t\tfor (const entityName in permissions) {\n\t\t\tif (!permissions.hasOwnProperty(entityName)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (!this.model.entities[entityName]) {\n\t\t\t\terrorBuilder.add('ACL_UNDEFINED_ENTITY', `Entity ${entityName} not found`)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst entity = getEntity(this.model, entityName)\n\n\t\t\tthis.validateEntityPermissions(\n\t\t\t\tpermissions[entityName],\n\t\t\t\tentity,\n\t\t\t\tvariables,\n\t\t\t\terrorBuilder.for(entityName),\n\t\t\t)\n\t\t}\n\t}\n\n\tprivate validateEntityPermissions(\n\t\tentityPermissions: Acl.EntityPermissions,\n\t\tentity: Model.Entity,\n\t\tvariables: Acl.Variables,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tthis.validatePredicates(\n\t\t\tentityPermissions.predicates,\n\t\t\tentity,\n\t\t\tvariables,\n\t\t\terrorBuilder.for('predicates'),\n\t\t)\n\t\tthis.validateOperations(\n\t\t\tentityPermissions.operations,\n\t\t\tentity,\n\t\t\tentityPermissions.predicates as Acl.PredicateMap,\n\t\t\terrorBuilder.for('operations'),\n\t\t)\n\t}\n\n\tprivate validatePredicates(predicates: Acl.PredicateMap, entity: Model.Entity, variables: Acl.Variables, errorBuilder: ErrorBuilder): void {\n\t\tfor (const predicateName in predicates) {\n\t\t\tif (!predicates.hasOwnProperty(predicateName)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tthis.validatePredicateDefinition(\n\t\t\t\tpredicates[predicateName],\n\t\t\t\tentity,\n\t\t\t\tvariables,\n\t\t\t\terrorBuilder.for(predicateName),\n\t\t\t)\n\t\t}\n\t}\n\n\tprivate validatePredicateDefinition(\n\t\tpredicate: Acl.PredicateDefinition,\n\t\tentity: Model.Entity,\n\t\tvariables: Acl.Variables,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tconst processor = new PredicateDefinitionProcessor(this.model)\n\t\tprocessor.process(entity, predicate, {\n\t\t\thandleColumn: ctx => {\n\t\t\t\tif (typeof ctx.value === 'string') {\n\t\t\t\t\tif (!variables[ctx.value]) {\n\t\t\t\t\t\terrorBuilder.for(...ctx.path).add('ACL_UNDEFINED_VARIABLE', `Undefined variable ${ctx.value}`)\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tconditionSchema(ctx.column.type)(ctx.value)\n\t\t\t\t\t} catch (e: any) {\n\t\t\t\t\t\terrorBuilder.for(...ctx.path).add('ACL_INVALID_CONDITION', `Invalid condition (${e.message}): ${JSON.stringify(ctx.value)}`)\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn ctx.value\n\t\t\t},\n\t\t\thandleRelation: ctx => {\n\t\t\t\tif (typeof ctx.value === 'string' && !variables[ctx.value]) {\n\t\t\t\t\terrorBuilder.for(...ctx.path).add('ACL_UNDEFINED_VARIABLE', `Undefined variable ${ctx.value}`)\n\t\t\t\t}\n\t\t\t\treturn ctx.value\n\t\t\t},\n\t\t\thandleUndefinedField: ctx => {\n\t\t\t\terrorBuilder.for(...ctx.path).add('ACL_UNDEFINED_FIELD', `Undefined field ${ctx.name} on entity ${ctx.entity.name}`)\n\t\t\t\treturn ctx.value\n\t\t\t},\n\t\t})\n\t}\n\n\tprivate validateOperations(\n\t\toperations: Acl.EntityOperations,\n\t\tentity: Model.Entity,\n\t\tpredicates: Acl.PredicateDefinition,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tif (operations.delete !== undefined) {\n\t\t\tthis.validatePredicate(operations.delete, predicates, errorBuilder.for('delete'))\n\t\t}\n\t\tfor (const op of ['read', 'create', 'update'] as const) {\n\t\t\tconst operation = operations[op]\n\t\t\tif (operation !== undefined) {\n\t\t\t\tthis.validateFieldPermissions(operation, entity, predicates, errorBuilder.for(op))\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate validateFieldPermissions(\n\t\tpermissions: Acl.FieldPermissions,\n\t\tentity: Model.Entity,\n\t\tpredicates: Acl.PredicateDefinition,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tfor (const field in permissions) {\n\t\t\tif (!permissions.hasOwnProperty(field)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (!entity.fields[field]) {\n\t\t\t\terrorBuilder.add('ACL_UNDEFINED_FIELD', `Field ${field} not found on entity ${entity.name}`)\n\t\t\t}\n\t\t\tthis.validatePredicate(permissions[field], predicates, errorBuilder.for(field))\n\t\t}\n\t}\n\n\tprivate validatePredicate(\n\t\tpredicate: Acl.Predicate,\n\t\tpredicates: Acl.PredicateDefinition,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tif (predicate === false || predicate === true) {\n\t\t\treturn\n\t\t}\n\t\tif (!predicates[predicate]) {\n\t\t\terrorBuilder.add('ACL_UNDEFINED_PREDICATE', `Predicate ${predicate} not found`)\n\t\t}\n\t}\n}\n"],"names":["ErrorBuilder","getEntity","PredicateDefinitionProcessor","conditionSchema"],"mappings":";;;;;;;;;;;AAOO,MAAM,aAAa;AAAA,EACzB,YAA6B,OAAqB;AAArB,SAAA,QAAA;AAAA,EAAsB;AAAA,EAE5C,SAAS,QAAuC;AACtD,UAAM,eAAe,IAAIA,OAAA,aAAa,CAAI,GAAA,CAAC,KAAK,CAAC;AAC5C,SAAA,cAAc,OAAO,OAAO,YAAY;AAC7C,WAAO,aAAa;AAAA,EACrB;AAAA,EAEQ,cAAc,OAAkB,cAAkC;AACzE,eAAW,QAAQ,OAAO;AACzB,UAAI,CAAC,MAAM,eAAe,IAAI,GAAG;AAChC;AAAA,MACD;AACK,WAAA,wBAAwB,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,GAAG,aAAa,IAAI,IAAI,CAAC;AAAA,IACrF;AAAA,EACD;AAAA,EAEQ,wBACP,aACA,OACA,cACO;AAEP,SAAK,iBAAiB,YAAY,UAAU,OAAO,aAAa,IAAI,UAAU,CAAC;AAC/E,SAAK,kBAAkB,YAAY,WAAW,aAAa,IAAI,WAAW,CAAC;AACtE,SAAA,oBAAoB,YAAY,UAAW,YAAY,aAA+B,CAAA,GAAI,aAAa,IAAI,UAAU,CAAC;AAAA,EAE5H;AAAA,EAEQ,iBAAiB,UAA2C,OAAiB,cAAkC;AACtH,QAAI,aAAa,QAAW;AACpB,aAAA;AAAA,IACR;AACA,eAAW,gBAAgB,UAAU;AACpC,UAAI,CAAC,MAAM,SAAS,YAAY,GAAG;AAClC,qBAAa,IAAI,YAAY,EAAE,IAAI,sBAAsB,6BAA6B;AAAA,MACvF;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,kBAAkB,WAA0B,cAAkC;AACrF,eAAW,WAAW,WAAW;AAChC,UAAI,CAAC,UAAU,eAAe,OAAO,GAAG;AACvC;AAAA,MACD;AACA,WAAK,iBAAiB,UAAU,OAAO,GAAG,aAAa,IAAI,OAAO,CAAC;AAAA,IACpE;AAAA,EACD;AAAA,EAEQ,iBAAiB,UAAwB,cAAkC;AAClF,YAAQ,SAAS,MAAM;AAAA,MACtB,KAAK;AACJ,YAAI,CAAC,KAAK,MAAM,SAAS,SAAS,UAAU,GAAG;AAC9C,uBAAa,IAAI,wBAAwB,WAAW,SAAS,UAAU,aAAa;AACpF;AAAA,QACD;AAAA,IACF;AACA;AAAA,EACD;AAAA,EAEQ,oBAAoB,aAA8B,WAA0B,cAAkC;AACrH,eAAW,cAAc,aAAa;AACrC,UAAI,CAAC,YAAY,eAAe,UAAU,GAAG;AAC5C;AAAA,MACD;AACA,UAAI,CAAC,KAAK,MAAM,SAAS,UAAU,GAAG;AACrC,qBAAa,IAAI,wBAAwB,UAAU,UAAU,YAAY;AACzE;AAAA,MACD;AACA,YAAM,SAASC,WAAA,UAAU,KAAK,OAAO,UAAU;AAE1C,WAAA;AAAA,QACJ,YAAY,UAAU;AAAA,QACtB;AAAA,QACA;AAAA,QACA,aAAa,IAAI,UAAU;AAAA,MAAA;AAAA,IAE7B;AAAA,EACD;AAAA,EAEQ,0BACP,mBACA,QACA,WACA,cACO;AACF,SAAA;AAAA,MACJ,kBAAkB;AAAA,MAClB;AAAA,MACA;AAAA,MACA,aAAa,IAAI,YAAY;AAAA,IAAA;AAEzB,SAAA;AAAA,MACJ,kBAAkB;AAAA,MAClB;AAAA,MACA,kBAAkB;AAAA,MAClB,aAAa,IAAI,YAAY;AAAA,IAAA;AAAA,EAE/B;AAAA,EAEQ,mBAAmB,YAA8B,QAAsB,WAA0B,cAAkC;AAC1I,eAAW,iBAAiB,YAAY;AACvC,UAAI,CAAC,WAAW,eAAe,aAAa,GAAG;AAC9C;AAAA,MACD;AACK,WAAA;AAAA,QACJ,WAAW,aAAa;AAAA,QACxB;AAAA,QACA;AAAA,QACA,aAAa,IAAI,aAAa;AAAA,MAAA;AAAA,IAEhC;AAAA,EACD;AAAA,EAEQ,4BACP,WACA,QACA,WACA,cACO;AACP,UAAM,YAAY,IAAIC,6BAAAA,6BAA6B,KAAK,KAAK;AACnD,cAAA,QAAQ,QAAQ,WAAW;AAAA,MACpC,cAAc,CAAO,QAAA;AAChB,YAAA,OAAO,IAAI,UAAU,UAAU;AAClC,cAAI,CAAC,UAAU,IAAI,KAAK,GAAG;AACb,yBAAA,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI,0BAA0B,sBAAsB,IAAI,KAAK,EAAE;AAAA,UAC9F;AAAA,QAAA,OACM;AACF,cAAA;AACHC,sBAAA,gBAAgB,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK;AAAA,mBAClC,GAAQ;AAChB,yBAAa,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI,yBAAyB,sBAAsB,EAAE,OAAO,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,EAAE;AAAA,UAC5H;AAAA,QACD;AACA,eAAO,IAAI;AAAA,MACZ;AAAA,MACA,gBAAgB,CAAO,QAAA;AAClB,YAAA,OAAO,IAAI,UAAU,YAAY,CAAC,UAAU,IAAI,KAAK,GAAG;AAC9C,uBAAA,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI,0BAA0B,sBAAsB,IAAI,KAAK,EAAE;AAAA,QAC9F;AACA,eAAO,IAAI;AAAA,MACZ;AAAA,MACA,sBAAsB,CAAO,QAAA;AAC5B,qBAAa,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI,uBAAuB,mBAAmB,IAAI,IAAI,cAAc,IAAI,OAAO,IAAI,EAAE;AACnH,eAAO,IAAI;AAAA,MACZ;AAAA,IAAA,CACA;AAAA,EACF;AAAA,EAEQ,mBACP,YACA,QACA,YACA,cACO;AACH,QAAA,WAAW,WAAW,QAAW;AACpC,WAAK,kBAAkB,WAAW,QAAQ,YAAY,aAAa,IAAI,QAAQ,CAAC;AAAA,IACjF;AACA,eAAW,MAAM,CAAC,QAAQ,UAAU,QAAQ,GAAY;AACjD,YAAA,YAAY,WAAW,EAAE;AAC/B,UAAI,cAAc,QAAW;AAC5B,aAAK,yBAAyB,WAAW,QAAQ,YAAY,aAAa,IAAI,EAAE,CAAC;AAAA,MAClF;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,yBACP,aACA,QACA,YACA,cACO;AACP,eAAW,SAAS,aAAa;AAChC,UAAI,CAAC,YAAY,eAAe,KAAK,GAAG;AACvC;AAAA,MACD;AACA,UAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AAC1B,qBAAa,IAAI,uBAAuB,SAAS,KAAK,wBAAwB,OAAO,IAAI,EAAE;AAAA,MAC5F;AACK,WAAA,kBAAkB,YAAY,KAAK,GAAG,YAAY,aAAa,IAAI,KAAK,CAAC;AAAA,IAC/E;AAAA,EACD;AAAA,EAEQ,kBACP,WACA,YACA,cACO;AACH,QAAA,cAAc,SAAS,cAAc,MAAM;AAC9C;AAAA,IACD;AACI,QAAA,CAAC,WAAW,SAAS,GAAG;AAC3B,mBAAa,IAAI,2BAA2B,aAAa,SAAS,YAAY;AAAA,IAC/E;AAAA,EACD;AACD;;"}

package/dist/development/src/validation/AclValidator.js

@@ -0,0 +1,168 @@
+import "@contember/schema";
+import { PredicateDefinitionProcessor } from "../acl/PredicateDefinitionProcessor.js";
+import { getEntity } from "../model/modelUtils.js";
+import { ErrorBuilder } from "./errors.js";
+import "../type-schema/acl.js";
+import { conditionSchema } from "../type-schema/condition.js";
+import "../type-schema/model.js";
+import "../type-schema/settings.js";
+import "../type-schema/validation.js";
+class AclValidator {
+  constructor(model) {
+    this.model = model;
+  }
+  validate(schema) {
+    const errorBuilder = new ErrorBuilder([], ["acl"]);
+    this.validateRoles(schema.roles, errorBuilder);
+    return errorBuilder.errors;
+  }
+  validateRoles(roles, errorBuilder) {
+    for (const role in roles) {
+      if (!roles.hasOwnProperty(role)) {
+        continue;
+      }
+      this.validateRolePermissions(roles[role], Object.keys(roles), errorBuilder.for(role));
+    }
+  }
+  validateRolePermissions(permissions, roles, errorBuilder) {
+    this.validateInherits(permissions.inherits, roles, errorBuilder.for("inherits"));
+    this.validateVariables(permissions.variables, errorBuilder.for("variables"));
+    this.validatePermissions(permissions.entities, permissions.variables || {}, errorBuilder.for("entities"));
+  }
+  validateInherits(inherits, roles, errorBuilder) {
+    if (inherits === void 0) {
+      return void 0;
+    }
+    for (const inheritsFrom of inherits) {
+      if (!roles.includes(inheritsFrom)) {
+        errorBuilder.for(inheritsFrom).add("ACL_UNDEFINED_ROLE", "Referenced role not exists.");
+      }
+    }
+  }
+  validateVariables(variables, errorBuilder) {
+    for (const varName in variables) {
+      if (!variables.hasOwnProperty(varName)) {
+        continue;
+      }
+      this.validateVariable(variables[varName], errorBuilder.for(varName));
+    }
+  }
+  validateVariable(variable, errorBuilder) {
+    switch (variable.type) {
+      case "entity":
+        if (!this.model.entities[variable.entityName]) {
+          errorBuilder.add("ACL_UNDEFINED_ENTITY", `Entity "${variable.entityName}" not found`);
+          return;
+        }
+    }
+    return;
+  }
+  validatePermissions(permissions, variables, errorBuilder) {
+    for (const entityName in permissions) {
+      if (!permissions.hasOwnProperty(entityName)) {
+        continue;
+      }
+      if (!this.model.entities[entityName]) {
+        errorBuilder.add("ACL_UNDEFINED_ENTITY", `Entity ${entityName} not found`);
+        continue;
+      }
+      const entity = getEntity(this.model, entityName);
+      this.validateEntityPermissions(
+        permissions[entityName],
+        entity,
+        variables,
+        errorBuilder.for(entityName)
+      );
+    }
+  }
+  validateEntityPermissions(entityPermissions, entity, variables, errorBuilder) {
+    this.validatePredicates(
+      entityPermissions.predicates,
+      entity,
+      variables,
+      errorBuilder.for("predicates")
+    );
+    this.validateOperations(
+      entityPermissions.operations,
+      entity,
+      entityPermissions.predicates,
+      errorBuilder.for("operations")
+    );
+  }
+  validatePredicates(predicates, entity, variables, errorBuilder) {
+    for (const predicateName in predicates) {
+      if (!predicates.hasOwnProperty(predicateName)) {
+        continue;
+      }
+      this.validatePredicateDefinition(
+        predicates[predicateName],
+        entity,
+        variables,
+        errorBuilder.for(predicateName)
+      );
+    }
+  }
+  validatePredicateDefinition(predicate, entity, variables, errorBuilder) {
+    const processor = new PredicateDefinitionProcessor(this.model);
+    processor.process(entity, predicate, {
+      handleColumn: (ctx) => {
+        if (typeof ctx.value === "string") {
+          if (!variables[ctx.value]) {
+            errorBuilder.for(...ctx.path).add("ACL_UNDEFINED_VARIABLE", `Undefined variable ${ctx.value}`);
+          }
+        } else {
+          try {
+            conditionSchema(ctx.column.type)(ctx.value);
+          } catch (e) {
+            errorBuilder.for(...ctx.path).add("ACL_INVALID_CONDITION", `Invalid condition (${e.message}): ${JSON.stringify(ctx.value)}`);
+          }
+        }
+        return ctx.value;
+      },
+      handleRelation: (ctx) => {
+        if (typeof ctx.value === "string" && !variables[ctx.value]) {
+          errorBuilder.for(...ctx.path).add("ACL_UNDEFINED_VARIABLE", `Undefined variable ${ctx.value}`);
+        }
+        return ctx.value;
+      },
+      handleUndefinedField: (ctx) => {
+        errorBuilder.for(...ctx.path).add("ACL_UNDEFINED_FIELD", `Undefined field ${ctx.name} on entity ${ctx.entity.name}`);
+        return ctx.value;
+      }
+    });
+  }
+  validateOperations(operations, entity, predicates, errorBuilder) {
+    if (operations.delete !== void 0) {
+      this.validatePredicate(operations.delete, predicates, errorBuilder.for("delete"));
+    }
+    for (const op of ["read", "create", "update"]) {
+      const operation = operations[op];
+      if (operation !== void 0) {
+        this.validateFieldPermissions(operation, entity, predicates, errorBuilder.for(op));
+      }
+    }
+  }
+  validateFieldPermissions(permissions, entity, predicates, errorBuilder) {
+    for (const field in permissions) {
+      if (!permissions.hasOwnProperty(field)) {
+        continue;
+      }
+      if (!entity.fields[field]) {
+        errorBuilder.add("ACL_UNDEFINED_FIELD", `Field ${field} not found on entity ${entity.name}`);
+      }
+      this.validatePredicate(permissions[field], predicates, errorBuilder.for(field));
+    }
+  }
+  validatePredicate(predicate, predicates, errorBuilder) {
+    if (predicate === false || predicate === true) {
+      return;
+    }
+    if (!predicates[predicate]) {
+      errorBuilder.add("ACL_UNDEFINED_PREDICATE", `Predicate ${predicate} not found`);
+    }
+  }
+}
+export {
+  AclValidator
+};
+//# sourceMappingURL=AclValidator.js.map

package/dist/development/src/validation/AclValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AclValidator.js","sources":["../../../../../packages/schema-utils/src/validation/AclValidator.ts"],"sourcesContent":["import { Acl, Model } from '@contember/schema'\nimport { PredicateDefinitionProcessor } from '../acl'\nimport { getEntity } from '../model'\nimport { ErrorBuilder, ValidationError } from './errors'\nimport { conditionSchema } from '../type-schema'\n\n\nexport class AclValidator {\n\tconstructor(private readonly model: Model.Schema) {}\n\n\tpublic validate(schema: Acl.Schema): ValidationError[] {\n\t\tconst errorBuilder = new ErrorBuilder([], ['acl'])\n\t\tthis.validateRoles(schema.roles, errorBuilder)\n\t\treturn errorBuilder.errors\n\t}\n\n\tprivate validateRoles(roles: Acl.Roles, errorBuilder: ErrorBuilder): void {\n\t\tfor (const role in roles) {\n\t\t\tif (!roles.hasOwnProperty(role)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tthis.validateRolePermissions(roles[role], Object.keys(roles), errorBuilder.for(role))\n\t\t}\n\t}\n\n\tprivate validateRolePermissions(\n\t\tpermissions: Acl.RolePermissions,\n\t\troles: string[],\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\n\t\tthis.validateInherits(permissions.inherits, roles, errorBuilder.for('inherits'))\n\t\tthis.validateVariables(permissions.variables, errorBuilder.for('variables'))\n\t\tthis.validatePermissions(permissions.entities, (permissions.variables as Acl.Variables) || {}, errorBuilder.for('entities'))\n\t\t// todo: plugins validation\n\t}\n\n\tprivate validateInherits(inherits: Acl.RolePermissions['inherits'], roles: string[], errorBuilder: ErrorBuilder): void {\n\t\tif (inherits === undefined) {\n\t\t\treturn undefined\n\t\t}\n\t\tfor (const inheritsFrom of inherits) {\n\t\t\tif (!roles.includes(inheritsFrom)) {\n\t\t\t\terrorBuilder.for(inheritsFrom).add('ACL_UNDEFINED_ROLE', 'Referenced role not exists.')\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate validateVariables(variables: Acl.Variables, errorBuilder: ErrorBuilder): void {\n\t\tfor (const varName in variables) {\n\t\t\tif (!variables.hasOwnProperty(varName)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tthis.validateVariable(variables[varName], errorBuilder.for(varName))\n\t\t}\n\t}\n\n\tprivate validateVariable(variable: Acl.Variable, errorBuilder: ErrorBuilder): void {\n\t\tswitch (variable.type) {\n\t\t\tcase 'entity':\n\t\t\t\tif (!this.model.entities[variable.entityName]) {\n\t\t\t\t\terrorBuilder.add('ACL_UNDEFINED_ENTITY', `Entity \"${variable.entityName}\" not found`)\n\t\t\t\t\treturn\n\t\t\t\t}\n\t\t}\n\t\treturn\n\t}\n\n\tprivate validatePermissions(permissions: Acl.Permissions, variables: Acl.Variables, errorBuilder: ErrorBuilder): void {\n\t\tfor (const entityName in permissions) {\n\t\t\tif (!permissions.hasOwnProperty(entityName)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (!this.model.entities[entityName]) {\n\t\t\t\terrorBuilder.add('ACL_UNDEFINED_ENTITY', `Entity ${entityName} not found`)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst entity = getEntity(this.model, entityName)\n\n\t\t\tthis.validateEntityPermissions(\n\t\t\t\tpermissions[entityName],\n\t\t\t\tentity,\n\t\t\t\tvariables,\n\t\t\t\terrorBuilder.for(entityName),\n\t\t\t)\n\t\t}\n\t}\n\n\tprivate validateEntityPermissions(\n\t\tentityPermissions: Acl.EntityPermissions,\n\t\tentity: Model.Entity,\n\t\tvariables: Acl.Variables,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tthis.validatePredicates(\n\t\t\tentityPermissions.predicates,\n\t\t\tentity,\n\t\t\tvariables,\n\t\t\terrorBuilder.for('predicates'),\n\t\t)\n\t\tthis.validateOperations(\n\t\t\tentityPermissions.operations,\n\t\t\tentity,\n\t\t\tentityPermissions.predicates as Acl.PredicateMap,\n\t\t\terrorBuilder.for('operations'),\n\t\t)\n\t}\n\n\tprivate validatePredicates(predicates: Acl.PredicateMap, entity: Model.Entity, variables: Acl.Variables, errorBuilder: ErrorBuilder): void {\n\t\tfor (const predicateName in predicates) {\n\t\t\tif (!predicates.hasOwnProperty(predicateName)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tthis.validatePredicateDefinition(\n\t\t\t\tpredicates[predicateName],\n\t\t\t\tentity,\n\t\t\t\tvariables,\n\t\t\t\terrorBuilder.for(predicateName),\n\t\t\t)\n\t\t}\n\t}\n\n\tprivate validatePredicateDefinition(\n\t\tpredicate: Acl.PredicateDefinition,\n\t\tentity: Model.Entity,\n\t\tvariables: Acl.Variables,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tconst processor = new PredicateDefinitionProcessor(this.model)\n\t\tprocessor.process(entity, predicate, {\n\t\t\thandleColumn: ctx => {\n\t\t\t\tif (typeof ctx.value === 'string') {\n\t\t\t\t\tif (!variables[ctx.value]) {\n\t\t\t\t\t\terrorBuilder.for(...ctx.path).add('ACL_UNDEFINED_VARIABLE', `Undefined variable ${ctx.value}`)\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tconditionSchema(ctx.column.type)(ctx.value)\n\t\t\t\t\t} catch (e: any) {\n\t\t\t\t\t\terrorBuilder.for(...ctx.path).add('ACL_INVALID_CONDITION', `Invalid condition (${e.message}): ${JSON.stringify(ctx.value)}`)\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn ctx.value\n\t\t\t},\n\t\t\thandleRelation: ctx => {\n\t\t\t\tif (typeof ctx.value === 'string' && !variables[ctx.value]) {\n\t\t\t\t\terrorBuilder.for(...ctx.path).add('ACL_UNDEFINED_VARIABLE', `Undefined variable ${ctx.value}`)\n\t\t\t\t}\n\t\t\t\treturn ctx.value\n\t\t\t},\n\t\t\thandleUndefinedField: ctx => {\n\t\t\t\terrorBuilder.for(...ctx.path).add('ACL_UNDEFINED_FIELD', `Undefined field ${ctx.name} on entity ${ctx.entity.name}`)\n\t\t\t\treturn ctx.value\n\t\t\t},\n\t\t})\n\t}\n\n\tprivate validateOperations(\n\t\toperations: Acl.EntityOperations,\n\t\tentity: Model.Entity,\n\t\tpredicates: Acl.PredicateDefinition,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tif (operations.delete !== undefined) {\n\t\t\tthis.validatePredicate(operations.delete, predicates, errorBuilder.for('delete'))\n\t\t}\n\t\tfor (const op of ['read', 'create', 'update'] as const) {\n\t\t\tconst operation = operations[op]\n\t\t\tif (operation !== undefined) {\n\t\t\t\tthis.validateFieldPermissions(operation, entity, predicates, errorBuilder.for(op))\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate validateFieldPermissions(\n\t\tpermissions: Acl.FieldPermissions,\n\t\tentity: Model.Entity,\n\t\tpredicates: Acl.PredicateDefinition,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tfor (const field in permissions) {\n\t\t\tif (!permissions.hasOwnProperty(field)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (!entity.fields[field]) {\n\t\t\t\terrorBuilder.add('ACL_UNDEFINED_FIELD', `Field ${field} not found on entity ${entity.name}`)\n\t\t\t}\n\t\t\tthis.validatePredicate(permissions[field], predicates, errorBuilder.for(field))\n\t\t}\n\t}\n\n\tprivate validatePredicate(\n\t\tpredicate: Acl.Predicate,\n\t\tpredicates: Acl.PredicateDefinition,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tif (predicate === false || predicate === true) {\n\t\t\treturn\n\t\t}\n\t\tif (!predicates[predicate]) {\n\t\t\terrorBuilder.add('ACL_UNDEFINED_PREDICATE', `Predicate ${predicate} not found`)\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;AAOO,MAAM,aAAa;AAAA,EACzB,YAA6B,OAAqB;AAArB,SAAA,QAAA;AAAA,EAAsB;AAAA,EAE5C,SAAS,QAAuC;AACtD,UAAM,eAAe,IAAI,aAAa,CAAI,GAAA,CAAC,KAAK,CAAC;AAC5C,SAAA,cAAc,OAAO,OAAO,YAAY;AAC7C,WAAO,aAAa;AAAA,EACrB;AAAA,EAEQ,cAAc,OAAkB,cAAkC;AACzE,eAAW,QAAQ,OAAO;AACzB,UAAI,CAAC,MAAM,eAAe,IAAI,GAAG;AAChC;AAAA,MACD;AACK,WAAA,wBAAwB,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,GAAG,aAAa,IAAI,IAAI,CAAC;AAAA,IACrF;AAAA,EACD;AAAA,EAEQ,wBACP,aACA,OACA,cACO;AAEP,SAAK,iBAAiB,YAAY,UAAU,OAAO,aAAa,IAAI,UAAU,CAAC;AAC/E,SAAK,kBAAkB,YAAY,WAAW,aAAa,IAAI,WAAW,CAAC;AACtE,SAAA,oBAAoB,YAAY,UAAW,YAAY,aAA+B,CAAA,GAAI,aAAa,IAAI,UAAU,CAAC;AAAA,EAE5H;AAAA,EAEQ,iBAAiB,UAA2C,OAAiB,cAAkC;AACtH,QAAI,aAAa,QAAW;AACpB,aAAA;AAAA,IACR;AACA,eAAW,gBAAgB,UAAU;AACpC,UAAI,CAAC,MAAM,SAAS,YAAY,GAAG;AAClC,qBAAa,IAAI,YAAY,EAAE,IAAI,sBAAsB,6BAA6B;AAAA,MACvF;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,kBAAkB,WAA0B,cAAkC;AACrF,eAAW,WAAW,WAAW;AAChC,UAAI,CAAC,UAAU,eAAe,OAAO,GAAG;AACvC;AAAA,MACD;AACA,WAAK,iBAAiB,UAAU,OAAO,GAAG,aAAa,IAAI,OAAO,CAAC;AAAA,IACpE;AAAA,EACD;AAAA,EAEQ,iBAAiB,UAAwB,cAAkC;AAClF,YAAQ,SAAS,MAAM;AAAA,MACtB,KAAK;AACJ,YAAI,CAAC,KAAK,MAAM,SAAS,SAAS,UAAU,GAAG;AAC9C,uBAAa,IAAI,wBAAwB,WAAW,SAAS,UAAU,aAAa;AACpF;AAAA,QACD;AAAA,IACF;AACA;AAAA,EACD;AAAA,EAEQ,oBAAoB,aAA8B,WAA0B,cAAkC;AACrH,eAAW,cAAc,aAAa;AACrC,UAAI,CAAC,YAAY,eAAe,UAAU,GAAG;AAC5C;AAAA,MACD;AACA,UAAI,CAAC,KAAK,MAAM,SAAS,UAAU,GAAG;AACrC,qBAAa,IAAI,wBAAwB,UAAU,UAAU,YAAY;AACzE;AAAA,MACD;AACA,YAAM,SAAS,UAAU,KAAK,OAAO,UAAU;AAE1C,WAAA;AAAA,QACJ,YAAY,UAAU;AAAA,QACtB;AAAA,QACA;AAAA,QACA,aAAa,IAAI,UAAU;AAAA,MAAA;AAAA,IAE7B;AAAA,EACD;AAAA,EAEQ,0BACP,mBACA,QACA,WACA,cACO;AACF,SAAA;AAAA,MACJ,kBAAkB;AAAA,MAClB;AAAA,MACA;AAAA,MACA,aAAa,IAAI,YAAY;AAAA,IAAA;AAEzB,SAAA;AAAA,MACJ,kBAAkB;AAAA,MAClB;AAAA,MACA,kBAAkB;AAAA,MAClB,aAAa,IAAI,YAAY;AAAA,IAAA;AAAA,EAE/B;AAAA,EAEQ,mBAAmB,YAA8B,QAAsB,WAA0B,cAAkC;AAC1I,eAAW,iBAAiB,YAAY;AACvC,UAAI,CAAC,WAAW,eAAe,aAAa,GAAG;AAC9C;AAAA,MACD;AACK,WAAA;AAAA,QACJ,WAAW,aAAa;AAAA,QACxB;AAAA,QACA;AAAA,QACA,aAAa,IAAI,aAAa;AAAA,MAAA;AAAA,IAEhC;AAAA,EACD;AAAA,EAEQ,4BACP,WACA,QACA,WACA,cACO;AACP,UAAM,YAAY,IAAI,6BAA6B,KAAK,KAAK;AACnD,cAAA,QAAQ,QAAQ,WAAW;AAAA,MACpC,cAAc,CAAO,QAAA;AAChB,YAAA,OAAO,IAAI,UAAU,UAAU;AAClC,cAAI,CAAC,UAAU,IAAI,KAAK,GAAG;AACb,yBAAA,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI,0BAA0B,sBAAsB,IAAI,KAAK,EAAE;AAAA,UAC9F;AAAA,QAAA,OACM;AACF,cAAA;AACH,4BAAgB,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK;AAAA,mBAClC,GAAQ;AAChB,yBAAa,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI,yBAAyB,sBAAsB,EAAE,OAAO,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,EAAE;AAAA,UAC5H;AAAA,QACD;AACA,eAAO,IAAI;AAAA,MACZ;AAAA,MACA,gBAAgB,CAAO,QAAA;AAClB,YAAA,OAAO,IAAI,UAAU,YAAY,CAAC,UAAU,IAAI,KAAK,GAAG;AAC9C,uBAAA,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI,0BAA0B,sBAAsB,IAAI,KAAK,EAAE;AAAA,QAC9F;AACA,eAAO,IAAI;AAAA,MACZ;AAAA,MACA,sBAAsB,CAAO,QAAA;AAC5B,qBAAa,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI,uBAAuB,mBAAmB,IAAI,IAAI,cAAc,IAAI,OAAO,IAAI,EAAE;AACnH,eAAO,IAAI;AAAA,MACZ;AAAA,IAAA,CACA;AAAA,EACF;AAAA,EAEQ,mBACP,YACA,QACA,YACA,cACO;AACH,QAAA,WAAW,WAAW,QAAW;AACpC,WAAK,kBAAkB,WAAW,QAAQ,YAAY,aAAa,IAAI,QAAQ,CAAC;AAAA,IACjF;AACA,eAAW,MAAM,CAAC,QAAQ,UAAU,QAAQ,GAAY;AACjD,YAAA,YAAY,WAAW,EAAE;AAC/B,UAAI,cAAc,QAAW;AAC5B,aAAK,yBAAyB,WAAW,QAAQ,YAAY,aAAa,IAAI,EAAE,CAAC;AAAA,MAClF;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,yBACP,aACA,QACA,YACA,cACO;AACP,eAAW,SAAS,aAAa;AAChC,UAAI,CAAC,YAAY,eAAe,KAAK,GAAG;AACvC;AAAA,MACD;AACA,UAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AAC1B,qBAAa,IAAI,uBAAuB,SAAS,KAAK,wBAAwB,OAAO,IAAI,EAAE;AAAA,MAC5F;AACK,WAAA,kBAAkB,YAAY,KAAK,GAAG,YAAY,aAAa,IAAI,KAAK,CAAC;AAAA,IAC/E;AAAA,EACD;AAAA,EAEQ,kBACP,WACA,YACA,cACO;AACH,QAAA,cAAc,SAAS,cAAc,MAAM;AAC9C;AAAA,IACD;AACI,QAAA,CAAC,WAAW,SAAS,GAAG;AAC3B,mBAAa,IAAI,2BAA2B,aAAa,SAAS,YAAY;AAAA,IAC/E;AAAA,EACD;AACD;"}

package/dist/development/src/validation/ActionsValidator.cjs

@@ -0,0 +1,127 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const modelUtils = require("../model/modelUtils.cjs");
+require("@contember/schema");
+const assertNever = require("../utils/assertNever.cjs");
+const errors = require("./errors.cjs");
+const Typesafe = require("@contember/typesafe");
+const where = require("../type-schema/where.cjs");
+function _interopNamespaceDefault(e) {
+  const n = Object.create(null, { [Symbol.toStringTag]: { value: "Module" } });
+  if (e) {
+    for (const k in e) {
+      if (k !== "default") {
+        const d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: () => e[k]
+        });
+      }
+    }
+  }
+  n.default = e;
+  return Object.freeze(n);
+}
+const Typesafe__namespace = /* @__PURE__ */ _interopNamespaceDefault(Typesafe);
+const manyArgsSchema = (args) => Typesafe__namespace.partial({
+  limit: Typesafe__namespace.integer,
+  offset: Typesafe__namespace.integer,
+  orderBy: Typesafe__namespace.array(Typesafe__namespace.anyJsonObject),
+  filter: where.whereSchema(args)
+});
+class ActionsValidator {
+  constructor(model) {
+    this.model = model;
+  }
+  validate(schema) {
+    const errorBuilder = new errors.ErrorBuilder([], ["actions"]);
+    this.validateTriggers(schema, errorBuilder.for("triggers"));
+    return errorBuilder.errors;
+  }
+  validateTriggers(schema, errorBuilder) {
+    for (const [name, def] of Object.entries(schema.triggers)) {
+      const triggerErrorBuilder = errorBuilder.for(name);
+      if (name !== def.name) {
+        triggerErrorBuilder.add("ACTIONS_NAME_MISMATCH", `Trigger name ${def.name} does not match the name in a map ${name}`);
+      }
+      if (!schema.targets[def.target]) {
+        triggerErrorBuilder.add("ACTIONS_UNDEFINED_TRIGGER_TARGET", `Trigger target ${def.target} not found`);
+      }
+      this.validateTrigger(def, triggerErrorBuilder);
+    }
+  }
+  validateTrigger(trigger, errorBuilder) {
+    const entity = this.model.entities[trigger.entity];
+    if (!entity) {
+      errorBuilder.add("ACTIONS_UNDEFINED_ENTITY", `Entity ${trigger.entity} not found.`);
+      return;
+    }
+    switch (trigger.type) {
+      case "watch":
+        this.validateWatchTrigger(trigger, entity, errorBuilder);
+        break;
+      case "basic":
+        this.validateBasicTrigger(trigger, entity, errorBuilder);
+        break;
+      default:
+        assertNever.assertNever();
+    }
+  }
+  validateWatchTrigger(trigger, entity, errorBuilder) {
+    this.validateSelection(trigger.watch, entity, errorBuilder.for("watch"));
+    if (trigger.selection) {
+      this.validateSelection(trigger.selection, entity, errorBuilder.for("selection"));
+    }
+  }
+  validateBasicTrigger(trigger, entity, errorBuilder) {
+    if (trigger.selection) {
+      this.validateSelection(trigger.selection, entity, errorBuilder.for("selection"));
+    }
+    if (Array.isArray(trigger.update)) {
+      for (const field of trigger.update) {
+        if (!entity.fields[field]) {
+          errorBuilder.for("update").add("ACTIONS_UNDEFINED_FIELD", `Field ${field} of entity ${entity.name} not found.`);
+        }
+      }
+    }
+  }
+  validateSelection(selectionNode, entity, errorBuilder) {
+    for (const part of selectionNode) {
+      const [field, args, selection] = Array.isArray(part) ? part : [part, {}, []];
+      const fieldErrorBuilder = errorBuilder.for(field);
+      if (!entity.fields[field]) {
+        fieldErrorBuilder.add("ACTIONS_UNDEFINED_FIELD", `Undefined field ${field} on entity ${entity.name}`);
+        continue;
+      }
+      modelUtils.acceptFieldVisitor(this.model, entity, field, {
+        visitColumn: () => {
+          if (selection.length) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Unexpected sub selection on a column.`);
+          }
+          if (Object.keys(args).length !== 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Unexpected args on a column.`);
+          }
+        },
+        visitHasMany: ({ targetEntity }) => {
+          if (selection.length === 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Sub-selection expected on a relation.`);
+          }
+          this.validateSelection(selection, targetEntity, fieldErrorBuilder);
+          try {
+            manyArgsSchema({ schema: this.model, entity: targetEntity })(args);
+          } catch (e) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Selection args are not valid: ` + e.message);
+          }
+        },
+        visitHasOne: ({ targetEntity }) => {
+          if (selection.length === 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Sub-selection expected on a relation.`);
+          }
+          this.validateSelection(selection, targetEntity, fieldErrorBuilder);
+        }
+      });
+    }
+  }
+}
+exports.ActionsValidator = ActionsValidator;
+//# sourceMappingURL=ActionsValidator.cjs.map

package/dist/development/src/validation/ActionsValidator.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActionsValidator.cjs","sources":["../../../../../packages/schema-utils/src/validation/ActionsValidator.ts"],"sourcesContent":["import { Actions, Model } from '@contember/schema'\nimport { acceptFieldVisitor } from '../model'\nimport { ErrorBuilder, ValidationError } from './errors'\nimport { assertNever } from '../utils'\nimport * as Typesafe from '@contember/typesafe'\nimport { whereSchema } from '../type-schema/where'\n\nconst manyArgsSchema = (args: {schema: Model.Schema; entity: Model.Entity}) => Typesafe.partial({\n\tlimit: Typesafe.integer,\n\toffset: Typesafe.integer,\n\torderBy: Typesafe.array(Typesafe.anyJsonObject),\n\tfilter: whereSchema(args),\n})\n\nexport class ActionsValidator {\n\tconstructor(private readonly model: Model.Schema) {}\n\n\tpublic validate(schema: Actions.Schema): ValidationError[] {\n\t\tconst errorBuilder = new ErrorBuilder([], ['actions'])\n\t\tthis.validateTriggers(schema, errorBuilder.for('triggers'))\n\t\treturn errorBuilder.errors\n\t}\n\n\tprivate validateTriggers(schema: Actions.Schema, errorBuilder: ErrorBuilder) {\n\t\tfor (const [name, def] of Object.entries(schema.triggers)) {\n\t\t\tconst triggerErrorBuilder = errorBuilder.for(name)\n\t\t\tif (name !== def.name) {\n\t\t\t\ttriggerErrorBuilder.add('ACTIONS_NAME_MISMATCH', `Trigger name ${def.name} does not match the name in a map ${name}`)\n\t\t\t}\n\t\t\tif (!schema.targets[def.target]) {\n\t\t\t\ttriggerErrorBuilder.add('ACTIONS_UNDEFINED_TRIGGER_TARGET', `Trigger target ${def.target} not found`)\n\t\t\t}\n\t\t\tthis.validateTrigger(def, triggerErrorBuilder)\n\t\t}\n\t}\n\n\n\tprivate validateTrigger(trigger: Actions.AnyTrigger, errorBuilder: ErrorBuilder): void {\n\t\tconst entity = this.model.entities[trigger.entity]\n\t\tif (!entity) {\n\t\t\terrorBuilder.add('ACTIONS_UNDEFINED_ENTITY', `Entity ${trigger.entity} not found.`)\n\t\t\treturn\n\t\t}\n\n\t\tswitch (trigger.type) {\n\t\t\tcase 'watch':\n\t\t\t\tthis.validateWatchTrigger(trigger, entity, errorBuilder)\n\t\t\t\tbreak\n\t\t\tcase 'basic':\n\t\t\t\tthis.validateBasicTrigger(trigger, entity, errorBuilder)\n\t\t\t\tbreak\n\t\t\tdefault:\n\t\t\t\tassertNever(trigger)\n\t\t}\n\t}\n\n\tprivate validateWatchTrigger(trigger: Actions.WatchTrigger, entity: Model.Entity, errorBuilder: ErrorBuilder): void {\n\t\tthis.validateSelection(trigger.watch, entity, errorBuilder.for('watch'))\n\t\tif (trigger.selection) {\n\t\t\tthis.validateSelection(trigger.selection, entity, errorBuilder.for('selection'))\n\t\t}\n\t}\n\n\tprivate validateBasicTrigger(trigger: Actions.BasicTrigger, entity: Model.Entity, errorBuilder: ErrorBuilder): void {\n\t\tif (trigger.selection) {\n\t\t\tthis.validateSelection(trigger.selection, entity, errorBuilder.for('selection'))\n\t\t}\n\n\t\tif (Array.isArray(trigger.update)) {\n\t\t\tfor (const field of trigger.update) {\n\t\t\t\tif (!entity.fields[field]) {\n\t\t\t\t\terrorBuilder.for('update').add('ACTIONS_UNDEFINED_FIELD', `Field ${field} of entity ${entity.name} not found.`)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate validateSelection(\n\t\tselectionNode: Actions.SelectionNode,\n\t\tentity: Model.Entity,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tfor (const part of selectionNode) {\n\t\t\tconst [field, args, selection] = Array.isArray(part) ? part : [part, {}, []]\n\t\t\tconst fieldErrorBuilder = errorBuilder.for(field)\n\t\t\tif (!entity.fields[field]) {\n\t\t\t\tfieldErrorBuilder.add('ACTIONS_UNDEFINED_FIELD', `Undefined field ${field} on entity ${entity.name}`)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tacceptFieldVisitor(this.model, entity, field, {\n\t\t\t\tvisitColumn: () => {\n\t\t\t\t\tif (selection.length) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Unexpected sub selection on a column.`)\n\t\t\t\t\t}\n\t\t\t\t\tif (Object.keys(args).length !== 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Unexpected args on a column.`)\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tvisitHasMany: ({ targetEntity }) => {\n\t\t\t\t\tif (selection.length === 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Sub-selection expected on a relation.`)\n\t\t\t\t\t}\n\t\t\t\t\tthis.validateSelection(selection, targetEntity, fieldErrorBuilder)\n\t\t\t\t\ttry {\n\t\t\t\t\t\tmanyArgsSchema({ schema: this.model, entity: targetEntity })(args)\n\t\t\t\t\t} catch (e: any) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Selection args are not valid: ` + e.message)\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tvisitHasOne: ({ targetEntity }) => {\n\t\t\t\t\tif (selection.length === 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Sub-selection expected on a relation.`)\n\t\t\t\t\t}\n\t\t\t\t\tthis.validateSelection(selection, targetEntity, fieldErrorBuilder)\n\t\t\t\t},\n\t\t\t})\n\t\t}\n\t}\n}\n"],"names":["Typesafe","whereSchema","ErrorBuilder","assertNever","acceptFieldVisitor"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAOA,MAAM,iBAAiB,CAAC,SAAuDA,oBAAS,QAAQ;AAAA,EAC/F,OAAOA,oBAAS;AAAA,EAChB,QAAQA,oBAAS;AAAA,EACjB,SAASA,oBAAS,MAAMA,oBAAS,aAAa;AAAA,EAC9C,QAAQC,kBAAY,IAAI;AACzB,CAAC;AAEM,MAAM,iBAAiB;AAAA,EAC7B,YAA6B,OAAqB;AAArB,SAAA,QAAA;AAAA,EAAsB;AAAA,EAE5C,SAAS,QAA2C;AAC1D,UAAM,eAAe,IAAIC,OAAA,aAAa,CAAI,GAAA,CAAC,SAAS,CAAC;AACrD,SAAK,iBAAiB,QAAQ,aAAa,IAAI,UAAU,CAAC;AAC1D,WAAO,aAAa;AAAA,EACrB;AAAA,EAEQ,iBAAiB,QAAwB,cAA4B;AACjE,eAAA,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,OAAO,QAAQ,GAAG;AACpD,YAAA,sBAAsB,aAAa,IAAI,IAAI;AAC7C,UAAA,SAAS,IAAI,MAAM;AACtB,4BAAoB,IAAI,yBAAyB,gBAAgB,IAAI,IAAI,qCAAqC,IAAI,EAAE;AAAA,MACrH;AACA,UAAI,CAAC,OAAO,QAAQ,IAAI,MAAM,GAAG;AAChC,4BAAoB,IAAI,oCAAoC,kBAAkB,IAAI,MAAM,YAAY;AAAA,MACrG;AACK,WAAA,gBAAgB,KAAK,mBAAmB;AAAA,IAC9C;AAAA,EACD;AAAA,EAGQ,gBAAgB,SAA6B,cAAkC;AACtF,UAAM,SAAS,KAAK,MAAM,SAAS,QAAQ,MAAM;AACjD,QAAI,CAAC,QAAQ;AACZ,mBAAa,IAAI,4BAA4B,UAAU,QAAQ,MAAM,aAAa;AAClF;AAAA,IACD;AAEA,YAAQ,QAAQ,MAAM;AAAA,MACrB,KAAK;AACC,aAAA,qBAAqB,SAAS,QAAQ,YAAY;AACvD;AAAA,MACD,KAAK;AACC,aAAA,qBAAqB,SAAS,QAAQ,YAAY;AACvD;AAAA,MACD;AACCC,oBAAAA,YAAmB;AAAA,IACrB;AAAA,EACD;AAAA,EAEQ,qBAAqB,SAA+B,QAAsB,cAAkC;AACnH,SAAK,kBAAkB,QAAQ,OAAO,QAAQ,aAAa,IAAI,OAAO,CAAC;AACvE,QAAI,QAAQ,WAAW;AACtB,WAAK,kBAAkB,QAAQ,WAAW,QAAQ,aAAa,IAAI,WAAW,CAAC;AAAA,IAChF;AAAA,EACD;AAAA,EAEQ,qBAAqB,SAA+B,QAAsB,cAAkC;AACnH,QAAI,QAAQ,WAAW;AACtB,WAAK,kBAAkB,QAAQ,WAAW,QAAQ,aAAa,IAAI,WAAW,CAAC;AAAA,IAChF;AAEA,QAAI,MAAM,QAAQ,QAAQ,MAAM,GAAG;AACvB,iBAAA,SAAS,QAAQ,QAAQ;AACnC,YAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AACb,uBAAA,IAAI,QAAQ,EAAE,IAAI,2BAA2B,SAAS,KAAK,cAAc,OAAO,IAAI,aAAa;AAAA,QAC/G;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,kBACP,eACA,QACA,cACO;AACP,eAAW,QAAQ,eAAe;AACjC,YAAM,CAAC,OAAO,MAAM,SAAS,IAAI,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAE,CAAA;AACrE,YAAA,oBAAoB,aAAa,IAAI,KAAK;AAChD,UAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AAC1B,0BAAkB,IAAI,2BAA2B,mBAAmB,KAAK,cAAc,OAAO,IAAI,EAAE;AACpG;AAAA,MACD;AACmBC,iBAAAA,mBAAA,KAAK,OAAO,QAAQ,OAAO;AAAA,QAC7C,aAAa,MAAM;AAClB,cAAI,UAAU,QAAQ;AACH,8BAAA,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACA,cAAI,OAAO,KAAK,IAAI,EAAE,WAAW,GAAG;AACjB,8BAAA,IAAI,6BAA6B,8BAA8B;AAAA,UAClF;AAAA,QACD;AAAA,QACA,cAAc,CAAC,EAAE,mBAAmB;AAC/B,cAAA,UAAU,WAAW,GAAG;AACT,8BAAA,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACK,eAAA,kBAAkB,WAAW,cAAc,iBAAiB;AAC7D,cAAA;AACY,2BAAA,EAAE,QAAQ,KAAK,OAAO,QAAQ,aAAa,CAAC,EAAE,IAAI;AAAA,mBACzD,GAAQ;AAChB,8BAAkB,IAAI,6BAA6B,mCAAmC,EAAE,OAAO;AAAA,UAChG;AAAA,QACD;AAAA,QACA,aAAa,CAAC,EAAE,mBAAmB;AAC9B,cAAA,UAAU,WAAW,GAAG;AACT,8BAAA,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACK,eAAA,kBAAkB,WAAW,cAAc,iBAAiB;AAAA,QAClE;AAAA,MAAA,CACA;AAAA,IACF;AAAA,EACD;AACD;;"}

package/dist/development/src/validation/ActionsValidator.js

@@ -0,0 +1,110 @@
+import { acceptFieldVisitor } from "../model/modelUtils.js";
+import "@contember/schema";
+import { assertNever } from "../utils/assertNever.js";
+import { ErrorBuilder } from "./errors.js";
+import * as Typesafe from "@contember/typesafe";
+import { whereSchema } from "../type-schema/where.js";
+const manyArgsSchema = (args) => Typesafe.partial({
+  limit: Typesafe.integer,
+  offset: Typesafe.integer,
+  orderBy: Typesafe.array(Typesafe.anyJsonObject),
+  filter: whereSchema(args)
+});
+class ActionsValidator {
+  constructor(model) {
+    this.model = model;
+  }
+  validate(schema) {
+    const errorBuilder = new ErrorBuilder([], ["actions"]);
+    this.validateTriggers(schema, errorBuilder.for("triggers"));
+    return errorBuilder.errors;
+  }
+  validateTriggers(schema, errorBuilder) {
+    for (const [name, def] of Object.entries(schema.triggers)) {
+      const triggerErrorBuilder = errorBuilder.for(name);
+      if (name !== def.name) {
+        triggerErrorBuilder.add("ACTIONS_NAME_MISMATCH", `Trigger name ${def.name} does not match the name in a map ${name}`);
+      }
+      if (!schema.targets[def.target]) {
+        triggerErrorBuilder.add("ACTIONS_UNDEFINED_TRIGGER_TARGET", `Trigger target ${def.target} not found`);
+      }
+      this.validateTrigger(def, triggerErrorBuilder);
+    }
+  }
+  validateTrigger(trigger, errorBuilder) {
+    const entity = this.model.entities[trigger.entity];
+    if (!entity) {
+      errorBuilder.add("ACTIONS_UNDEFINED_ENTITY", `Entity ${trigger.entity} not found.`);
+      return;
+    }
+    switch (trigger.type) {
+      case "watch":
+        this.validateWatchTrigger(trigger, entity, errorBuilder);
+        break;
+      case "basic":
+        this.validateBasicTrigger(trigger, entity, errorBuilder);
+        break;
+      default:
+        assertNever();
+    }
+  }
+  validateWatchTrigger(trigger, entity, errorBuilder) {
+    this.validateSelection(trigger.watch, entity, errorBuilder.for("watch"));
+    if (trigger.selection) {
+      this.validateSelection(trigger.selection, entity, errorBuilder.for("selection"));
+    }
+  }
+  validateBasicTrigger(trigger, entity, errorBuilder) {
+    if (trigger.selection) {
+      this.validateSelection(trigger.selection, entity, errorBuilder.for("selection"));
+    }
+    if (Array.isArray(trigger.update)) {
+      for (const field of trigger.update) {
+        if (!entity.fields[field]) {
+          errorBuilder.for("update").add("ACTIONS_UNDEFINED_FIELD", `Field ${field} of entity ${entity.name} not found.`);
+        }
+      }
+    }
+  }
+  validateSelection(selectionNode, entity, errorBuilder) {
+    for (const part of selectionNode) {
+      const [field, args, selection] = Array.isArray(part) ? part : [part, {}, []];
+      const fieldErrorBuilder = errorBuilder.for(field);
+      if (!entity.fields[field]) {
+        fieldErrorBuilder.add("ACTIONS_UNDEFINED_FIELD", `Undefined field ${field} on entity ${entity.name}`);
+        continue;
+      }
+      acceptFieldVisitor(this.model, entity, field, {
+        visitColumn: () => {
+          if (selection.length) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Unexpected sub selection on a column.`);
+          }
+          if (Object.keys(args).length !== 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Unexpected args on a column.`);
+          }
+        },
+        visitHasMany: ({ targetEntity }) => {
+          if (selection.length === 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Sub-selection expected on a relation.`);
+          }
+          this.validateSelection(selection, targetEntity, fieldErrorBuilder);
+          try {
+            manyArgsSchema({ schema: this.model, entity: targetEntity })(args);
+          } catch (e) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Selection args are not valid: ` + e.message);
+          }
+        },
+        visitHasOne: ({ targetEntity }) => {
+          if (selection.length === 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Sub-selection expected on a relation.`);
+          }
+          this.validateSelection(selection, targetEntity, fieldErrorBuilder);
+        }
+      });
+    }
+  }
+}
+export {
+  ActionsValidator
+};
+//# sourceMappingURL=ActionsValidator.js.map

package/dist/development/src/validation/ActionsValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActionsValidator.js","sources":["../../../../../packages/schema-utils/src/validation/ActionsValidator.ts"],"sourcesContent":["import { Actions, Model } from '@contember/schema'\nimport { acceptFieldVisitor } from '../model'\nimport { ErrorBuilder, ValidationError } from './errors'\nimport { assertNever } from '../utils'\nimport * as Typesafe from '@contember/typesafe'\nimport { whereSchema } from '../type-schema/where'\n\nconst manyArgsSchema = (args: {schema: Model.Schema; entity: Model.Entity}) => Typesafe.partial({\n\tlimit: Typesafe.integer,\n\toffset: Typesafe.integer,\n\torderBy: Typesafe.array(Typesafe.anyJsonObject),\n\tfilter: whereSchema(args),\n})\n\nexport class ActionsValidator {\n\tconstructor(private readonly model: Model.Schema) {}\n\n\tpublic validate(schema: Actions.Schema): ValidationError[] {\n\t\tconst errorBuilder = new ErrorBuilder([], ['actions'])\n\t\tthis.validateTriggers(schema, errorBuilder.for('triggers'))\n\t\treturn errorBuilder.errors\n\t}\n\n\tprivate validateTriggers(schema: Actions.Schema, errorBuilder: ErrorBuilder) {\n\t\tfor (const [name, def] of Object.entries(schema.triggers)) {\n\t\t\tconst triggerErrorBuilder = errorBuilder.for(name)\n\t\t\tif (name !== def.name) {\n\t\t\t\ttriggerErrorBuilder.add('ACTIONS_NAME_MISMATCH', `Trigger name ${def.name} does not match the name in a map ${name}`)\n\t\t\t}\n\t\t\tif (!schema.targets[def.target]) {\n\t\t\t\ttriggerErrorBuilder.add('ACTIONS_UNDEFINED_TRIGGER_TARGET', `Trigger target ${def.target} not found`)\n\t\t\t}\n\t\t\tthis.validateTrigger(def, triggerErrorBuilder)\n\t\t}\n\t}\n\n\n\tprivate validateTrigger(trigger: Actions.AnyTrigger, errorBuilder: ErrorBuilder): void {\n\t\tconst entity = this.model.entities[trigger.entity]\n\t\tif (!entity) {\n\t\t\terrorBuilder.add('ACTIONS_UNDEFINED_ENTITY', `Entity ${trigger.entity} not found.`)\n\t\t\treturn\n\t\t}\n\n\t\tswitch (trigger.type) {\n\t\t\tcase 'watch':\n\t\t\t\tthis.validateWatchTrigger(trigger, entity, errorBuilder)\n\t\t\t\tbreak\n\t\t\tcase 'basic':\n\t\t\t\tthis.validateBasicTrigger(trigger, entity, errorBuilder)\n\t\t\t\tbreak\n\t\t\tdefault:\n\t\t\t\tassertNever(trigger)\n\t\t}\n\t}\n\n\tprivate validateWatchTrigger(trigger: Actions.WatchTrigger, entity: Model.Entity, errorBuilder: ErrorBuilder): void {\n\t\tthis.validateSelection(trigger.watch, entity, errorBuilder.for('watch'))\n\t\tif (trigger.selection) {\n\t\t\tthis.validateSelection(trigger.selection, entity, errorBuilder.for('selection'))\n\t\t}\n\t}\n\n\tprivate validateBasicTrigger(trigger: Actions.BasicTrigger, entity: Model.Entity, errorBuilder: ErrorBuilder): void {\n\t\tif (trigger.selection) {\n\t\t\tthis.validateSelection(trigger.selection, entity, errorBuilder.for('selection'))\n\t\t}\n\n\t\tif (Array.isArray(trigger.update)) {\n\t\t\tfor (const field of trigger.update) {\n\t\t\t\tif (!entity.fields[field]) {\n\t\t\t\t\terrorBuilder.for('update').add('ACTIONS_UNDEFINED_FIELD', `Field ${field} of entity ${entity.name} not found.`)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate validateSelection(\n\t\tselectionNode: Actions.SelectionNode,\n\t\tentity: Model.Entity,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tfor (const part of selectionNode) {\n\t\t\tconst [field, args, selection] = Array.isArray(part) ? part : [part, {}, []]\n\t\t\tconst fieldErrorBuilder = errorBuilder.for(field)\n\t\t\tif (!entity.fields[field]) {\n\t\t\t\tfieldErrorBuilder.add('ACTIONS_UNDEFINED_FIELD', `Undefined field ${field} on entity ${entity.name}`)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tacceptFieldVisitor(this.model, entity, field, {\n\t\t\t\tvisitColumn: () => {\n\t\t\t\t\tif (selection.length) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Unexpected sub selection on a column.`)\n\t\t\t\t\t}\n\t\t\t\t\tif (Object.keys(args).length !== 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Unexpected args on a column.`)\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tvisitHasMany: ({ targetEntity }) => {\n\t\t\t\t\tif (selection.length === 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Sub-selection expected on a relation.`)\n\t\t\t\t\t}\n\t\t\t\t\tthis.validateSelection(selection, targetEntity, fieldErrorBuilder)\n\t\t\t\t\ttry {\n\t\t\t\t\t\tmanyArgsSchema({ schema: this.model, entity: targetEntity })(args)\n\t\t\t\t\t} catch (e: any) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Selection args are not valid: ` + e.message)\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tvisitHasOne: ({ targetEntity }) => {\n\t\t\t\t\tif (selection.length === 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Sub-selection expected on a relation.`)\n\t\t\t\t\t}\n\t\t\t\t\tthis.validateSelection(selection, targetEntity, fieldErrorBuilder)\n\t\t\t\t},\n\t\t\t})\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;AAOA,MAAM,iBAAiB,CAAC,SAAuD,SAAS,QAAQ;AAAA,EAC/F,OAAO,SAAS;AAAA,EAChB,QAAQ,SAAS;AAAA,EACjB,SAAS,SAAS,MAAM,SAAS,aAAa;AAAA,EAC9C,QAAQ,YAAY,IAAI;AACzB,CAAC;AAEM,MAAM,iBAAiB;AAAA,EAC7B,YAA6B,OAAqB;AAArB,SAAA,QAAA;AAAA,EAAsB;AAAA,EAE5C,SAAS,QAA2C;AAC1D,UAAM,eAAe,IAAI,aAAa,CAAI,GAAA,CAAC,SAAS,CAAC;AACrD,SAAK,iBAAiB,QAAQ,aAAa,IAAI,UAAU,CAAC;AAC1D,WAAO,aAAa;AAAA,EACrB;AAAA,EAEQ,iBAAiB,QAAwB,cAA4B;AACjE,eAAA,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,OAAO,QAAQ,GAAG;AACpD,YAAA,sBAAsB,aAAa,IAAI,IAAI;AAC7C,UAAA,SAAS,IAAI,MAAM;AACtB,4BAAoB,IAAI,yBAAyB,gBAAgB,IAAI,IAAI,qCAAqC,IAAI,EAAE;AAAA,MACrH;AACA,UAAI,CAAC,OAAO,QAAQ,IAAI,MAAM,GAAG;AAChC,4BAAoB,IAAI,oCAAoC,kBAAkB,IAAI,MAAM,YAAY;AAAA,MACrG;AACK,WAAA,gBAAgB,KAAK,mBAAmB;AAAA,IAC9C;AAAA,EACD;AAAA,EAGQ,gBAAgB,SAA6B,cAAkC;AACtF,UAAM,SAAS,KAAK,MAAM,SAAS,QAAQ,MAAM;AACjD,QAAI,CAAC,QAAQ;AACZ,mBAAa,IAAI,4BAA4B,UAAU,QAAQ,MAAM,aAAa;AAClF;AAAA,IACD;AAEA,YAAQ,QAAQ,MAAM;AAAA,MACrB,KAAK;AACC,aAAA,qBAAqB,SAAS,QAAQ,YAAY;AACvD;AAAA,MACD,KAAK;AACC,aAAA,qBAAqB,SAAS,QAAQ,YAAY;AACvD;AAAA,MACD;AACC,oBAAmB;AAAA,IACrB;AAAA,EACD;AAAA,EAEQ,qBAAqB,SAA+B,QAAsB,cAAkC;AACnH,SAAK,kBAAkB,QAAQ,OAAO,QAAQ,aAAa,IAAI,OAAO,CAAC;AACvE,QAAI,QAAQ,WAAW;AACtB,WAAK,kBAAkB,QAAQ,WAAW,QAAQ,aAAa,IAAI,WAAW,CAAC;AAAA,IAChF;AAAA,EACD;AAAA,EAEQ,qBAAqB,SAA+B,QAAsB,cAAkC;AACnH,QAAI,QAAQ,WAAW;AACtB,WAAK,kBAAkB,QAAQ,WAAW,QAAQ,aAAa,IAAI,WAAW,CAAC;AAAA,IAChF;AAEA,QAAI,MAAM,QAAQ,QAAQ,MAAM,GAAG;AACvB,iBAAA,SAAS,QAAQ,QAAQ;AACnC,YAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AACb,uBAAA,IAAI,QAAQ,EAAE,IAAI,2BAA2B,SAAS,KAAK,cAAc,OAAO,IAAI,aAAa;AAAA,QAC/G;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,kBACP,eACA,QACA,cACO;AACP,eAAW,QAAQ,eAAe;AACjC,YAAM,CAAC,OAAO,MAAM,SAAS,IAAI,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAE,CAAA;AACrE,YAAA,oBAAoB,aAAa,IAAI,KAAK;AAChD,UAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AAC1B,0BAAkB,IAAI,2BAA2B,mBAAmB,KAAK,cAAc,OAAO,IAAI,EAAE;AACpG;AAAA,MACD;AACmB,yBAAA,KAAK,OAAO,QAAQ,OAAO;AAAA,QAC7C,aAAa,MAAM;AAClB,cAAI,UAAU,QAAQ;AACH,8BAAA,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACA,cAAI,OAAO,KAAK,IAAI,EAAE,WAAW,GAAG;AACjB,8BAAA,IAAI,6BAA6B,8BAA8B;AAAA,UAClF;AAAA,QACD;AAAA,QACA,cAAc,CAAC,EAAE,mBAAmB;AAC/B,cAAA,UAAU,WAAW,GAAG;AACT,8BAAA,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACK,eAAA,kBAAkB,WAAW,cAAc,iBAAiB;AAC7D,cAAA;AACY,2BAAA,EAAE,QAAQ,KAAK,OAAO,QAAQ,aAAa,CAAC,EAAE,IAAI;AAAA,mBACzD,GAAQ;AAChB,8BAAkB,IAAI,6BAA6B,mCAAmC,EAAE,OAAO;AAAA,UAChG;AAAA,QACD;AAAA,QACA,aAAa,CAAC,EAAE,mBAAmB;AAC9B,cAAA,UAAU,WAAW,GAAG;AACT,8BAAA,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACK,eAAA,kBAAkB,WAAW,cAAc,iBAAiB;AAAA,QAClE;AAAA,MAAA,CACA;AAAA,IACF;AAAA,EACD;AACD;"}