@generazioneai/genquery 0.11.0 → 0.12.0

package/dist/entity-policy-builder.d.ts

@@ -0,0 +1,60 @@
+/**
+ * EntityPolicy builder — DENY-based, derived from a Prisma DMMF datamodel + resource
+ * manifests. Centralizes the boilerplate every backend duplicated in
+ * `src/authz/genquery-policy.ts`.
+ *
+ * Model: PERMISSIVE by default — every scalar/enum is filterable/sortable/selectable
+ * and every relation is includable/filterableRelations, MINUS the secret fields and
+ * an optional per-model `deny`. maxPerPage is taken from the matching manifest's
+ * `autoquery.pagination.max`, else `defaultMaxPerPage`. Keyed by DMMF model name
+ * (PascalCase) so it maps 1:1 onto the Schema. Pass the result as `schema.policy`
+ * (or to {@link applyPolicy}).
+ */
+import type { EntityPolicy } from "./schema";
+/**
+ * Canonical credential/secret field names — NEVER filterable/sortable/selectable on
+ * ANY model. Single source of truth: a backend gets the full set automatically and
+ * can only ADD via `extraSecretFields` (no per-service drift / forgotten fields).
+ * NB: `hash` is intentionally NOT here (e.g. Media dedup queries by hash; the value
+ * is still kept out of responses by entity serialization / findOne select-stripping).
+ */
+export declare const DEFAULT_SECRET_FIELDS: ReadonlySet<string>;
+/** Minimal structural shape of a DMMF field (Prisma.dmmf.datamodel.models[].fields). */
+type DMField = {
+    name: string;
+    kind: string;
+};
+/** Minimal structural shape of a DMMF model. */
+type DMModel = {
+    name: string;
+    fields: readonly DMField[];
+};
+/** Structural manifest shape consumed here (a `ResourceManifest` satisfies it). */
+export interface PolicyManifestLike {
+    prismaModel?: string;
+    autoquery?: {
+        pagination?: {
+            max?: number;
+        };
+    };
+}
+export interface BuildGenQueryPolicyOptions {
+    /** Prisma DMMF datamodel — `{ models: [...] }` or a bare models array. */
+    datamodel: {
+        models: readonly DMModel[];
+    } | readonly DMModel[];
+    /** Resource manifests (structural) → per-model maxPerPage from autoquery.pagination.max. */
+    manifests?: readonly PolicyManifestLike[];
+    /** Per-model extra deny beyond secrets: fields/relations not queryable. */
+    deny?: Record<string, {
+        fields?: readonly string[];
+        relations?: readonly string[];
+    }>;
+    /** Extra secret field names added to {@link DEFAULT_SECRET_FIELDS}. */
+    extraSecretFields?: Iterable<string>;
+    /** Fallback maxPerPage when a manifest declares none. Default 200. */
+    defaultMaxPerPage?: number;
+}
+export declare function buildGenQueryPolicy(opts: BuildGenQueryPolicyOptions): Record<string, EntityPolicy>;
+export {};
+//# sourceMappingURL=entity-policy-builder.d.ts.map

package/dist/entity-policy-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-policy-builder.d.ts","sourceRoot":"","sources":["../src/entity-policy-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,MAAM,CAWpD,CAAC;AAEH,wFAAwF;AACxF,KAAK,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC9C,gDAAgD;AAChD,KAAK,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE,CAAC;AAE5D,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAC/C;AAED,MAAM,WAAW,0BAA0B;IACzC,0EAA0E;IAC1E,SAAS,EAAE;QAAE,MAAM,EAAE,SAAS,OAAO,EAAE,CAAA;KAAE,GAAG,SAAS,OAAO,EAAE,CAAC;IAC/D,4FAA4F;IAC5F,SAAS,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC1C,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACrF,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrC,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAID,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,0BAA0B,GAC/B,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAwC9B"}

package/dist/entity-policy-builder.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_SECRET_FIELDS = void 0;
+exports.buildGenQueryPolicy = buildGenQueryPolicy;
+/**
+ * Canonical credential/secret field names — NEVER filterable/sortable/selectable on
+ * ANY model. Single source of truth: a backend gets the full set automatically and
+ * can only ADD via `extraSecretFields` (no per-service drift / forgotten fields).
+ * NB: `hash` is intentionally NOT here (e.g. Media dedup queries by hash; the value
+ * is still kept out of responses by entity serialization / findOne select-stripping).
+ */
+exports.DEFAULT_SECRET_FIELDS = new Set([
+    "password",
+    "totpSecret",
+    "mfaSecret",
+    "clientSecret",
+    "secret",
+    "tokenHash",
+    "refreshTokenHash",
+    "apiKeyHash",
+    "webauthnCredId",
+    "webauthnPubKey",
+]);
+const pascal = (s) => (s ? s.charAt(0).toUpperCase() + s.slice(1) : s);
+function buildGenQueryPolicy(opts) {
+    const src = opts.datamodel;
+    const models = (Array.isArray(src) ? src : src?.models) ?? [];
+    const secrets = new Set(exports.DEFAULT_SECRET_FIELDS);
+    for (const f of opts.extraSecretFields ?? [])
+        secrets.add(f);
+    const deny = opts.deny ?? {};
+    const fallbackMax = opts.defaultMaxPerPage ?? 200;
+    const maxByModel = {};
+    for (const m of opts.manifests ?? []) {
+        const max = m.autoquery?.pagination?.max;
+        const key = pascal(m.prismaModel ?? "");
+        if (key && typeof max === "number")
+            maxByModel[key] = max;
+    }
+    const policy = {};
+    for (const model of models) {
+        const d = deny[model.name] ?? {};
+        const denyFields = new Set([...secrets, ...(d.fields ?? [])]);
+        const denyRelations = new Set(d.relations ?? []);
+        const scalars = model.fields
+            .filter((f) => (f.kind === "scalar" || f.kind === "enum") && !denyFields.has(f.name))
+            .map((f) => f.name);
+        const relations = model.fields
+            .filter((f) => f.kind === "object" && !denyRelations.has(f.name))
+            .map((f) => f.name);
+        policy[model.name] = {
+            filterable: scalars,
+            sortable: scalars,
+            selectable: scalars,
+            includable: relations,
+            filterableRelations: relations,
+            maxPerPage: maxByModel[model.name] ?? fallbackMax,
+        };
+    }
+    return policy;
+}
+//# sourceMappingURL=entity-policy-builder.js.map

package/dist/entity-policy-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-policy-builder.js","sourceRoot":"","sources":["../src/entity-policy-builder.ts"],"names":[],"mappings":";;;AA4DA,kDA0CC;AAxFD;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IAChE,UAAU;IACV,YAAY;IACZ,WAAW;IACX,cAAc;IACd,QAAQ;IACR,WAAW;IACX,kBAAkB;IAClB,YAAY;IACZ,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,CAAC;AA0BH,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/E,SAAgB,mBAAmB,CACjC,IAAgC;IAEhC,MAAM,GAAG,GAAQ,IAAI,CAAC,SAAS,CAAC;IAChC,MAAM,MAAM,GAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAElF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,6BAAqB,CAAC,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,iBAAiB,IAAI,EAAE;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAE7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC;IAElD,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,UAAU,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,CAAC;IAED,MAAM,MAAM,GAAiC,EAAE,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM;aACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aACpF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aAChE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEtB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG;YACnB,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,OAAO;YACnB,UAAU,EAAE,SAAS;YACrB,mBAAmB,EAAE,SAAS;YAC9B,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW;SAClD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -3,6 +3,7 @@ export * from "./parsed";
 export * from "./schema";
 export * from "./errors";
 export { parseQuery } from "./parser";
+export { buildGenQueryPolicy, DEFAULT_SECRET_FIELDS, type BuildGenQueryPolicyOptions, type PolicyManifestLike, } from "./entity-policy-builder";
 export { GenQueryEngine, type GenQueryEngineOptions } from "./engine";
 export type { Adapter } from "./adapters/base";
 export { parseDateTime } from "./datetime";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,KAAK,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACtE,YAAY,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,GACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,KAAK,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACtE,YAAY,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -14,13 +14,16 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.FederationPlanError = exports.pluralizeCamel = exports.mergeFederatedRows = exports.collectForeignIds = exports.planFederatedIncludes = exports.buildFederationIndex = exports.toFederatedShape = exports.parseDateTime = exports.GenQueryEngine = exports.parseQuery = void 0;
+exports.FederationPlanError = exports.pluralizeCamel = exports.mergeFederatedRows = exports.collectForeignIds = exports.planFederatedIncludes = exports.buildFederationIndex = exports.toFederatedShape = exports.parseDateTime = exports.GenQueryEngine = exports.DEFAULT_SECRET_FIELDS = exports.buildGenQueryPolicy = exports.parseQuery = void 0;
 __exportStar(require("./types"), exports);
 __exportStar(require("./parsed"), exports);
 __exportStar(require("./schema"), exports);
 __exportStar(require("./errors"), exports);
 var parser_1 = require("./parser");
 Object.defineProperty(exports, "parseQuery", { enumerable: true, get: function () { return parser_1.parseQuery; } });
+var entity_policy_builder_1 = require("./entity-policy-builder");
+Object.defineProperty(exports, "buildGenQueryPolicy", { enumerable: true, get: function () { return entity_policy_builder_1.buildGenQueryPolicy; } });
+Object.defineProperty(exports, "DEFAULT_SECRET_FIELDS", { enumerable: true, get: function () { return entity_policy_builder_1.DEFAULT_SECRET_FIELDS; } });
 var engine_1 = require("./engine");
 Object.defineProperty(exports, "GenQueryEngine", { enumerable: true, get: function () { return engine_1.GenQueryEngine; } });
 var datetime_1 = require("./datetime");

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB;AACzB,mCAAsC;AAA7B,oGAAA,UAAU,OAAA;AACnB,mCAAsE;AAA7D,wGAAA,cAAc,OAAA;AAEvB,uCAA2C;AAAlC,yGAAA,aAAa,OAAA;AACtB,2CAgBsB;AAfpB,8GAAA,gBAAgB,OAAA;AAChB,kHAAA,oBAAoB,OAAA;AACpB,mHAAA,qBAAqB,OAAA;AACrB,+GAAA,iBAAiB,OAAA;AACjB,gHAAA,kBAAkB,OAAA;AAClB,4GAAA,cAAc,OAAA;AACd,iHAAA,mBAAmB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB;AACzB,mCAAsC;AAA7B,oGAAA,UAAU,OAAA;AACnB,iEAKiC;AAJ/B,4HAAA,mBAAmB,OAAA;AACnB,8HAAA,qBAAqB,OAAA;AAIvB,mCAAsE;AAA7D,wGAAA,cAAc,OAAA;AAEvB,uCAA2C;AAAlC,yGAAA,aAAa,OAAA;AACtB,2CAgBsB;AAfpB,8GAAA,gBAAgB,OAAA;AAChB,kHAAA,oBAAoB,OAAA;AACpB,mHAAA,qBAAqB,OAAA;AACrB,+GAAA,iBAAiB,OAAA;AACjB,gHAAA,kBAAkB,OAAA;AAClB,4GAAA,cAAc,OAAA;AACd,iHAAA,mBAAmB,OAAA"}

package/dist/tests/entity-policy-builder.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=entity-policy-builder.test.d.ts.map

package/dist/tests/entity-policy-builder.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-policy-builder.test.d.ts","sourceRoot":"","sources":["../../src/tests/entity-policy-builder.test.ts"],"names":[],"mappings":""}

package/dist/tests/entity-policy-builder.test.js

@@ -0,0 +1,68 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = __importDefault(require("node:test"));
+const strict_1 = __importDefault(require("node:assert/strict"));
+const entity_policy_builder_1 = require("../entity-policy-builder");
+const datamodel = {
+    models: [
+        {
+            name: "User",
+            fields: [
+                { name: "id", kind: "scalar" },
+                { name: "username", kind: "scalar" },
+                { name: "password", kind: "scalar" },
+                { name: "tokenHash", kind: "scalar" },
+                { name: "individual", kind: "object" },
+            ],
+        },
+        {
+            name: "Media",
+            fields: [
+                { name: "id", kind: "scalar" },
+                { name: "hash", kind: "scalar" },
+            ],
+        },
+    ],
+};
+(0, node_test_1.default)("buildGenQueryPolicy esclude i SECRET_FIELDS da filter/sort/select", () => {
+    const policy = (0, entity_policy_builder_1.buildGenQueryPolicy)({ datamodel });
+    const u = policy.User;
+    strict_1.default.deepEqual(u.filterable, ["id", "username"]); // password/tokenHash esclusi
+    strict_1.default.deepEqual(u.selectable, ["id", "username"]);
+    strict_1.default.deepEqual(u.sortable, ["id", "username"]);
+    strict_1.default.deepEqual(u.includable, ["individual"]);
+    strict_1.default.ok(!u.selectable.includes("password"));
+    strict_1.default.ok(!u.selectable.includes("tokenHash"));
+});
+(0, node_test_1.default)("hash NON è segreto di default (resta queryable)", () => {
+    strict_1.default.ok(!entity_policy_builder_1.DEFAULT_SECRET_FIELDS.has("hash"));
+    const policy = (0, entity_policy_builder_1.buildGenQueryPolicy)({ datamodel });
+    strict_1.default.deepEqual(policy.Media.filterable, ["id", "hash"]);
+});
+(0, node_test_1.default)("maxPerPage dal manifest, fallback al default", () => {
+    const policy = (0, entity_policy_builder_1.buildGenQueryPolicy)({
+        datamodel,
+        manifests: [{ prismaModel: "user", autoquery: { pagination: { max: 50 } } }],
+        defaultMaxPerPage: 200,
+    });
+    strict_1.default.equal(policy.User.maxPerPage, 50); // dal manifest (user → User)
+    strict_1.default.equal(policy.Media.maxPerPage, 200); // fallback
+});
+(0, node_test_1.default)("deny per-modello + extraSecretFields", () => {
+    const policy = (0, entity_policy_builder_1.buildGenQueryPolicy)({
+        datamodel,
+        deny: { User: { fields: ["username"], relations: ["individual"] } },
+        extraSecretFields: ["id"],
+    });
+    strict_1.default.deepEqual(policy.User.filterable, []); // id(extra-secret)+username(deny) tolti
+    strict_1.default.deepEqual(policy.User.includable, []); // individual in deny.relations
+});
+(0, node_test_1.default)("accetta datamodel come array nudo di models", () => {
+    const policy = (0, entity_policy_builder_1.buildGenQueryPolicy)({ datamodel: datamodel.models });
+    strict_1.default.ok(policy.User);
+    strict_1.default.deepEqual(policy.Media.filterable, ["id", "hash"]);
+});
+//# sourceMappingURL=entity-policy-builder.test.js.map

package/dist/tests/entity-policy-builder.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-policy-builder.test.js","sourceRoot":"","sources":["../../src/tests/entity-policy-builder.test.ts"],"names":[],"mappings":";;;;;AAAA,0DAA6B;AAC7B,gEAAwC;AACxC,oEAAsF;AAEtF,MAAM,SAAS,GAAG;IAChB,MAAM,EAAE;QACN;YACE,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC9B,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACpC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACpC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACrC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE;aACvC;SACF;QACD;YACE,IAAI,EAAE,OAAO;YACb,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC9B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;aACjC;SACF;KACF;CACF,CAAC;AAEF,IAAA,mBAAI,EAAC,mEAAmE,EAAE,GAAG,EAAE;IAC7E,MAAM,MAAM,GAAG,IAAA,2CAAmB,EAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IACtB,gBAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,6BAA6B;IACjF,gBAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACnD,gBAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACjD,gBAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/C,gBAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/C,gBAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,iDAAiD,EAAE,GAAG,EAAE;IAC3D,gBAAM,CAAC,EAAE,CAAC,CAAC,6CAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAA,2CAAmB,EAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAClD,gBAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,8CAA8C,EAAE,GAAG,EAAE;IACxD,MAAM,MAAM,GAAG,IAAA,2CAAmB,EAAC;QACjC,SAAS;QACT,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QAC5E,iBAAiB,EAAE,GAAG;KACvB,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,6BAA6B;IACvE,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW;AACzD,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,sCAAsC,EAAE,GAAG,EAAE;IAChD,MAAM,MAAM,GAAG,IAAA,2CAAmB,EAAC;QACjC,SAAS;QACT,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE;QACnE,iBAAiB,EAAE,CAAC,IAAI,CAAC;KAC1B,CAAC,CAAC;IACH,gBAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,wCAAwC;IACtF,gBAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,+BAA+B;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,6CAA6C,EAAE,GAAG,EAAE;IACvD,MAAM,MAAM,GAAG,IAAA,2CAAmB,EAAC,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,gBAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,gBAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC"}

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "ORM-agnostic JSON query language with pluggable adapters (TypeORM, Prisma)",
   "license": "BSD-3-Clause",
   "repository": {