@loradb/lora-graphql 0.20.0 → 0.20.1

package/dist/execute/mutate.d.ts

@@ -19,6 +19,8 @@ export type PopulatedByCallback = (args: {
 export interface MutationEnv {
     model: GraphModel;
     driver: LoraDriver;
+    /** The caller's node's @key, for @key(scope: VIEWER) (see executeMutation). */
+    viewerKey?: unknown;
     selection: SelectionContext;
     jwt: Record<string, unknown> | undefined;
     /** The GraphQL context, for `$context` in rules and for callbacks. */

package/dist/index.js

@@ -1,5 +1,5 @@
-import { D as e, L as r, a as o, M as l, b as i, c as d, d as n, e as t, f, g as m, i as p, l as c, p as h, r as D, s as b, h as u, t as v, v as L } from "./driver-C7a5NkfH.js";
-import { d as x } from "./diff-DUOLUgrI.js";
+import { D as e, L as r, a as o, M as l, b as i, c as d, d as n, e as t, f, g as m, i as p, l as c, p as h, r as D, s as b, h as u, t as v, v as L } from "./driver-XeJM24iP.js";
+import { d as x } from "./diff-BO2igqdY.js";
 export {
   e as DEFAULT_GUARDS,
   r as LoraGraphQL,

package/dist/lora-graphql.d.ts

@@ -152,6 +152,14 @@ export interface SchemaAssertion {
     required: SchemaRequirement[];
     missing: SchemaRequirement[];
     created: SchemaRequirement[];
+    /**
+     * Full-text and vector indexes present under their name but defined
+     * differently (labels, properties, kind): search would keep using the
+     * old definition. Without `create`; with it they are re-created.
+     */
+    mismatched: SchemaRequirement[];
+    /** Indexes `create` dropped and created again with the model's definition. */
+    recreated: SchemaRequirement[];
 }
 export interface CheckOptions {
     /**

package/dist/model/desugar.d.ts

@@ -1,5 +1,5 @@
 import { ModelProblem } from '../errors.js';
-import { AuthorizationWhere, NodeType, RelationshipPropertiesType } from './types.js';
+import { AbstractType, AuthorizationWhere, NodeType, RelationshipPropertiesType } from './types.js';
 /** The `@viewer` claim: which node, by which unique field, is the caller. */
 export interface ViewerMapping {
     claim: string;
@@ -10,11 +10,20 @@ export interface ViewerMapping {
 export interface NamedRules {
     schema: ReadonlyMap<string, AuthorizationWhere>;
     byType: ReadonlyMap<string, ReadonlyMap<string, AuthorizationWhere>>;
+    /** Cycles reported so far, so each is reported once. */
+    reportedCycles?: Set<string>;
 }
+/**
+ * Stands where a rule reference could not expand (an error was reported):
+ * the rule checks skip it rather than report it again as empty.
+ */
+export declare const UNEXPANDED: Readonly<Record<string, never>>;
 export interface DesugarContext {
     nodes: ReadonlyMap<string, NodeType>;
     props: ReadonlyMap<string, RelationshipPropertiesType>;
     viewer: ViewerMapping | undefined;
+    /** Interfaces and unions, for filters through an abstract relationship. */
+    abstracts?: ReadonlyMap<string, AbstractType>;
     rules?: NamedRules;
     /** Named rules being expanded, to report a cycle with its chain. */
     expanding?: string[];

package/dist/testing.js

@@ -1,17 +1,17 @@
-import { graphql as h } from "graphql";
-import { L as w, l as g } from "./driver-C7a5NkfH.js";
-async function _(d) {
-  let l;
+import { graphql as g } from "graphql";
+import { L as h, l as b } from "./driver-XeJM24iP.js";
+async function T(l) {
+  let u;
   try {
-    ({ createDatabase: l } = await import("@loradb/lora-node"));
+    ({ createDatabase: u } = await import("@loradb/lora-node"));
   } catch {
     throw new Error(
       "createTestLoraGraphQL needs @loradb/lora-node: npm install --save-dev @loradb/lora-node"
     );
   }
-  const i = await l(), e = [], { seed: t, onStatement: a, ...c } = d, n = new w({
+  const i = await u(), e = [], { seed: t, onStatement: a, ...c } = l, n = new h({
     ...c,
-    driver: g(i),
+    driver: b(i),
     onStatement: (r) => {
       e.push(r), a?.(r);
     }
@@ -20,23 +20,23 @@ async function _(d) {
   else
     for (const r of typeof t == "string" ? [t] : t ?? [])
       await i.execute(r);
-  const o = n.getSchema(), s = (r, u = {}, p = {}) => h({ schema: o, source: r, variableValues: u, contextValue: p });
+  const o = n.getSchema(), s = (r, p = {}, d = {}) => g({ schema: o, source: r, variableValues: p, contextValue: d });
   return {
     lora: n,
     db: i,
     schema: o,
     statements: e,
     run: s,
-    data: async (r, u, p) => {
-      const $ = await s(r, u, p);
+    data: async (r, p, d) => {
+      const $ = await s(r, p, d);
       if ($.errors) throw $.errors[0];
       return $.data;
     },
     close: () => i.dispose?.()
   };
 }
-async function N(d, l, i = {}, e = {}) {
-  const a = (await d.explain(l, i, e)).flatMap(
+async function x(l, u, i = {}, e = {}) {
+  const a = (await l.explain(u, i, e)).flatMap(
     (c) => c.reports.flatMap(
       (n) => n.findings.map((o) => `${c.field}: ${o.message}
   ${o.statement}`)
@@ -49,11 +49,11 @@ ${a.join(`
 `)}`
     );
 }
-async function x(d, l) {
-  const i = d instanceof w ? d : d.lora, e = [], t = async (a, c) => {
+async function _(l, u) {
+  const i = l instanceof h ? l : l.lora, e = [], t = async (a, c) => {
     let n;
     try {
-      n = await b(i, a, l);
+      n = await D(i, a, u);
     } catch (o) {
       e.push(
         `${a}: ${o instanceof Error ? o.message : String(o)}`
@@ -64,10 +64,10 @@ async function x(d, l) {
       `expected allowed, was denied: ${a} (${n.message})`
     ) : !c && n.kind === "allowed" && e.push(`expected denied, was allowed: ${a}`);
   };
-  for (const a of l.allowed ?? []) await t(a, !0);
-  for (const a of l.denied ?? []) await t(a, !1);
+  for (const a of u.allowed ?? []) await t(a, !0);
+  for (const a of u.denied ?? []) await t(a, !1);
   if (e.length > 0) {
-    const a = l.as ? JSON.stringify(l.as) : "anonymous";
+    const a = u.as ? JSON.stringify(u.as) : "anonymous";
     throw new Error(
       `access as ${a} differs in ${e.length} ${e.length === 1 ? "entry" : "entries"}:
   ${e.join(`
@@ -76,55 +76,59 @@ async function x(d, l) {
   }
 }
 const v = /* @__PURE__ */ new Set(["FORBIDDEN", "UNAUTHENTICATED", "NOT_FOUND"]);
-async function b(d, l, i) {
-  const { source: e, variables: t, isRead: a, root: c } = E(d, l), n = await d.begin();
+async function D(l, u, i) {
+  const { source: e, variables: t, isRead: a, root: c, wrote: n } = E(
+    l,
+    u
+  ), o = await l.begin();
   try {
-    const o = await d.execute({
+    const s = await l.execute({
       source: e,
       variables: t,
       context: {
         ...i.context,
         ...i.as ? { jwt: i.as } : {},
-        transaction: n
+        transaction: o
       }
-    }), s = o.errors?.[0];
-    if (s) {
-      const r = s.extensions?.code;
-      return typeof r == "string" && v.has(r) ? { kind: "denied", message: `${r}: ${s.message}` } : {
+    }), r = s.errors?.[0];
+    if (r) {
+      const d = r.extensions?.code;
+      return typeof d == "string" && v.has(d) ? { kind: "denied", message: `${d}: ${r.message}` } : {
         kind: "error",
-        message: `${String(r ?? "error")}: ${s.message}`
+        message: `${String(d ?? "error")}: ${r.message}`
       };
     }
-    return a && o.data?.[c] == null ? { kind: "denied", message: "not visible" } : { kind: "allowed" };
+    const p = s.data?.[c];
+    return n && (p == null || !n(p)) ? { kind: "denied", message: "not visible, nothing written" } : a && s.data?.[c] == null ? { kind: "denied", message: "not visible" } : { kind: "allowed" };
   } finally {
-    await n.rollback();
+    await o.rollback();
   }
 }
-function E(d, l) {
+function E(l, u) {
   const i = /^\s*(read|create|update|delete|connect|disconnect|update-edge)\s+([A-Za-z_][\w]*)(?:\.([A-Za-z_]\w*))?\s+(\S+)(?:\s*(?:→|->)\s*(\S+))?\s*(\{.*\})?\s*$/s.exec(
-    l
+    u
   );
   if (!i)
     throw new Error(
       "expected `<read|create|update|delete> Type key [json]` or `<connect|disconnect|update-edge> Type.field key → key [json]`"
     );
-  const [, e, t, a, c, n, o] = i, s = d.model.nodes.get(t);
+  const [, e, t, a, c, n, o] = i, s = l.model.nodes.get(t);
   if (!s) throw new Error(`${t} is not a @node type`);
-  const r = o ? JSON.parse(o) : {}, u = `${s.key.customScalar ?? s.key.type}!`, p = t.charAt(0).toLowerCase() + t.slice(1), $ = s.plural.charAt(0).toUpperCase() + s.plural.slice(1), m = ["connect", "disconnect", "update-edge"].includes(
+  const r = o ? JSON.parse(o) : {}, p = `${s.key.customScalar ?? s.key.type}!`, d = t.charAt(0).toLowerCase() + t.slice(1), $ = s.plural.charAt(0).toUpperCase() + s.plural.slice(1), w = ["connect", "disconnect", "update-edge"].includes(
     e
   );
-  if (m !== (a !== void 0 && n !== void 0))
+  if (w !== (a !== void 0 && n !== void 0))
     throw new Error(
-      m ? `${e} takes Type.field key → key` : `${e} takes Type key`
+      w ? `${e} takes Type.field key → key` : `${e} takes Type key`
     );
   switch (e) {
     case "read":
       return {
         operation: e,
-        source: `query($key: ${u}) { ${p}(${s.key.name}: $key) { ${s.key.name} } }`,
+        source: `query($key: ${p}) { ${d}(${s.key.name}: $key) { ${s.key.name} } }`,
         variables: { key: c },
         isRead: !0,
-        root: p
+        root: d
       };
     case "create":
       return {
@@ -137,37 +141,44 @@ function E(d, l) {
     case "update":
       return {
         operation: e,
-        source: `mutation($key: ${u}, $update: ${t}UpdateInput!) { update${t}(${s.key.name}: $key, update: $update) { __typename } }`,
+        source: `mutation($key: ${p}, $update: ${t}UpdateInput!) { update${t}(${s.key.name}: $key, update: $update) { ${d} { __typename } info { relationshipsDeleted } } }`,
         variables: { key: c, update: r },
         isRead: !1,
-        root: `update${t}`
+        root: `update${t}`,
+        wrote: (f) => f[d] != null
       };
     case "delete":
       return {
         operation: e,
-        source: `mutation($key: ${u}) { delete${t}(${s.key.name}: $key) { __typename } }`,
+        source: `mutation($key: ${p}) { delete${t}(${s.key.name}: $key) { nodesDeleted } }`,
         variables: { key: c },
         isRead: !1,
-        root: `delete${t}`
+        root: `delete${t}`,
+        wrote: (f) => Number(f.nodesDeleted ?? 0) > 0
       };
   }
-  const f = s.fields.get(a);
-  if (f?.kind !== "relationship")
+  const y = s.fields.get(a);
+  if (y?.kind !== "relationship")
     throw new Error(`${t}.${a} is not a relationship field`);
-  const y = d.model.nodes.get(f.target)?.key.name ?? "key", k = e === "connect" ? {
-    connect: f.list ? [{ [y]: n, ...o ? { edge: r } : {} }] : { [y]: n, ...o ? { edge: r } : {} }
-  } : e === "disconnect" ? { disconnect: f.list ? [n] : !0 } : { update: [{ [y]: n, edge: r }] };
+  const m = l.model.nodes.get(y.target)?.key.name ?? "key", k = e === "connect" ? {
+    connect: y.list ? [{ [m]: n, ...o ? { edge: r } : {} }] : { [m]: n, ...o ? { edge: r } : {} }
+  } : e === "disconnect" ? { disconnect: y.list ? [n] : !0 } : { update: [{ [m]: n, edge: r }] };
   return {
     operation: e,
-    source: `mutation($key: ${u}, $update: ${t}UpdateInput!) { update${t}(${s.key.name}: $key, update: $update) { __typename } }`,
+    source: `mutation($key: ${p}, $update: ${t}UpdateInput!) { update${t}(${s.key.name}: $key, update: $update) { ${d} { __typename } info { relationshipsDeleted } } }`,
     variables: { key: c, update: { [a]: k } },
     isRead: !1,
-    root: `update${t}`
+    root: `update${t}`,
+    // A hidden owner answers a null node; a disconnect of a pair the
+    // caller may not touch removes nothing.
+    wrote: (f) => f[d] != null && (e !== "disconnect" || Number(
+      f.info?.relationshipsDeleted ?? 0
+    ) > 0)
   };
 }
 export {
-  _ as createTestLoraGraphQL,
-  x as expectAccess,
-  N as expectSeeks
+  T as createTestLoraGraphQL,
+  _ as expectAccess,
+  x as expectSeeks
 };
 //# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -1 +1 @@
-{"version":3,"file":"testing.js","sources":["../src/testing.ts"],"sourcesContent":["// Test helpers: an in-memory LoraDB with the schema asserted, and a plan\n// assertion. Import from `@loradb/lora-graphql/testing`; needs\n// `@loradb/lora-node`. Framework-agnostic: failures throw plain errors.\n\nimport {\n  graphql,\n  type DocumentNode,\n  type ExecutionResult,\n  type GraphQLSchema,\n} from \"graphql\";\nimport { loraDriver, type LoraDatabaseLike } from \"./driver.js\";\nimport {\n  LoraGraphQL,\n  type LoraGraphQLOptions,\n  type StatementEvent,\n} from \"./lora-graphql.js\";\n\n/** The node binding's database, as far as tests use it. */\nexport type TestDatabase = LoraDatabaseLike & {\n  execute(query: string, params?: never): Promise<unknown>;\n  dispose?(): void;\n};\n\nexport interface TestLoraGraphQLOptions extends Omit<\n  LoraGraphQLOptions,\n  \"driver\"\n> {\n  /** Cypher to run after the schema is asserted, or a function given the database. */\n  seed?: string | string[] | ((db: TestDatabase) => Promise<void>);\n}\n\nexport interface TestLoraGraphQL {\n  lora: LoraGraphQL;\n  db: TestDatabase;\n  schema: GraphQLSchema;\n  /** Every statement run so far (clear with `statements.length = 0`). */\n  statements: StatementEvent[];\n  /** Execute a document; errors stay in the result. */\n  run: (\n    source: string,\n    variables?: Record<string, unknown>,\n    context?: Record<string, unknown>,\n  ) => Promise<ExecutionResult>;\n  /** Execute a document and return its data; throws on the first error. */\n  data: <T = Record<string, unknown>>(\n    source: string,\n    variables?: Record<string, unknown>,\n    context?: Record<string, unknown>,\n  ) => Promise<T>;\n  /** Release the database. */\n  close: () => void;\n}\n\n/** A LoraGraphQL over a fresh in-memory database, schema asserted and seeded. */\nexport async function createTestLoraGraphQL(\n  options: TestLoraGraphQLOptions,\n): Promise<TestLoraGraphQL> {\n  let createDatabase: () => Promise<TestDatabase>;\n  try {\n    ({ createDatabase } = (await import(\"@loradb/lora-node\")) as unknown as {\n      createDatabase: typeof createDatabase;\n    });\n  } catch {\n    throw new Error(\n      \"createTestLoraGraphQL needs @loradb/lora-node: npm install --save-dev @loradb/lora-node\",\n    );\n  }\n  const db = await createDatabase();\n  const statements: StatementEvent[] = [];\n  const { seed, onStatement, ...rest } = options;\n  const lora = new LoraGraphQL({\n    ...rest,\n    driver: loraDriver(db),\n    onStatement: (event) => {\n      statements.push(event);\n      onStatement?.(event);\n    },\n  });\n  await lora.assertSchema({ create: true });\n  if (typeof seed === \"function\") await seed(db);\n  else {\n    for (const text of typeof seed === \"string\" ? [seed] : (seed ?? [])) {\n      await db.execute(text);\n    }\n  }\n  const schema = lora.getSchema();\n  const run = (\n    source: string,\n    variables: Record<string, unknown> = {},\n    contextValue: Record<string, unknown> = {},\n  ) => graphql({ schema, source, variableValues: variables, contextValue });\n  return {\n    lora,\n    db,\n    schema,\n    statements,\n    run,\n    data: async <T>(\n      source: string,\n      variables?: Record<string, unknown>,\n      context?: Record<string, unknown>,\n    ) => {\n      const r = await run(source, variables, context);\n      if (r.errors) throw r.errors[0];\n      return r.data as T;\n    },\n    close: () => db.dispose?.(),\n  };\n}\n\n/**\n * Assert that every statement of a query's root fields uses the index\n * access it was compiled for (no label scans where a seek was expected,\n * no mutating plans, no row-budget excess). Throws listing each finding.\n */\nexport async function expectSeeks(\n  lora: LoraGraphQL,\n  document: string | DocumentNode,\n  variables: Record<string, unknown> = {},\n  options: { rowBudget?: number; context?: unknown } = {},\n): Promise<void> {\n  const fields = await lora.explain(document, variables, options);\n  const findings = fields.flatMap((f) =>\n    f.reports.flatMap((r) =>\n      r.findings.map((x) => `${f.field}: ${x.message}\\n  ${x.statement}`),\n    ),\n  );\n  if (findings.length > 0) {\n    throw new Error(\n      `expected every root field to seek:\\n${findings.join(\"\\n\")}`,\n    );\n  }\n}\n\n/** The access `expectAccess` expects: entries allowed, and entries denied. */\nexport interface AccessExpectations {\n  /** The claims to act as; undefined acts anonymously. */\n  as: Record<string, unknown> | undefined;\n  /** Other GraphQL context values the rules read (`$context.*`). */\n  context?: Record<string, unknown>;\n  allowed?: readonly string[];\n  denied?: readonly string[];\n}\n\n/**\n * Assert who may do what, against the database: each entry runs as the\n * caller in a transaction that is always rolled back, and every mismatch\n * is reported at once. Entries:\n *\n * - `read Trip lou:tomorrowland` (denied: not visible, or refused)\n * - `create Trip lou:x {\"name\": \"X\"}` (other input fields as JSON)\n * - `update Trip lou:x {\"name\": \"Y\"}` and `delete Trip lou:x`\n * - `connect Trip.members lou:tomorrowland → f1` (also `->`)\n * - `disconnect Trip.members lou:tomorrowland → f1`\n * - `update-edge Trip.members lou:tomorrowland → f1 {\"rsvp\": \"GOING\"}`\n *\n * Denied means `FORBIDDEN`, `UNAUTHENTICATED` or `NOT_FOUND` (a node the\n * caller cannot see); any other error is reported as a mismatch either way.\n */\nexport async function expectAccess(\n  target: LoraGraphQL | { lora: LoraGraphQL },\n  expectations: AccessExpectations,\n): Promise<void> {\n  const lora = target instanceof LoraGraphQL ? target : target.lora;\n  const problems: string[] = [];\n  const check = async (entry: string, allowed: boolean) => {\n    let outcome: AccessOutcome;\n    try {\n      outcome = await tryAccess(lora, entry, expectations);\n    } catch (err) {\n      problems.push(\n        `${entry}: ${err instanceof Error ? err.message : String(err)}`,\n      );\n      return;\n    }\n    if (outcome.kind === \"error\") {\n      problems.push(`${entry}: failed with ${outcome.message}`);\n    } else if (allowed && outcome.kind === \"denied\") {\n      problems.push(\n        `expected allowed, was denied: ${entry} (${outcome.message})`,\n      );\n    } else if (!allowed && outcome.kind === \"allowed\") {\n      problems.push(`expected denied, was allowed: ${entry}`);\n    }\n  };\n  for (const entry of expectations.allowed ?? []) await check(entry, true);\n  for (const entry of expectations.denied ?? []) await check(entry, false);\n  if (problems.length > 0) {\n    const who = expectations.as ? JSON.stringify(expectations.as) : \"anonymous\";\n    throw new Error(\n      `access as ${who} differs in ${problems.length} ${problems.length === 1 ? \"entry\" : \"entries\"}:\\n  ${problems.join(\"\\n  \")}`,\n    );\n  }\n}\n\ntype AccessOutcome =\n  | { kind: \"allowed\" }\n  | { kind: \"denied\"; message: string }\n  | { kind: \"error\"; message: string };\n\nconst DENIED = new Set([\"FORBIDDEN\", \"UNAUTHENTICATED\", \"NOT_FOUND\"]);\n\nasync function tryAccess(\n  lora: LoraGraphQL,\n  entry: string,\n  expectations: AccessExpectations,\n): Promise<AccessOutcome> {\n  const { source, variables, isRead, root } = accessOperation(lora, entry);\n  const tx = await lora.begin();\n  try {\n    const result = await lora.execute({\n      source,\n      variables,\n      context: {\n        ...expectations.context,\n        ...(expectations.as ? { jwt: expectations.as } : {}),\n        transaction: tx,\n      },\n    });\n    const error = result.errors?.[0];\n    if (error) {\n      const code = (error.extensions as Record<string, unknown> | undefined)?.[\n        \"code\"\n      ];\n      return typeof code === \"string\" && DENIED.has(code)\n        ? { kind: \"denied\", message: `${code}: ${error.message}` }\n        : {\n            kind: \"error\",\n            message: `${String(code ?? \"error\")}: ${error.message}`,\n          };\n    }\n    if (isRead) {\n      const value = (result.data as Record<string, unknown> | null)?.[root];\n      if (value == null) return { kind: \"denied\", message: \"not visible\" };\n    }\n    return { kind: \"allowed\" };\n  } finally {\n    await tx.rollback();\n  }\n}\n\nfunction accessOperation(\n  lora: LoraGraphQL,\n  entry: string,\n): {\n  operation: string;\n  source: string;\n  variables: Record<string, unknown>;\n  isRead: boolean;\n  root: string;\n} {\n  const m =\n    /^\\s*(read|create|update|delete|connect|disconnect|update-edge)\\s+([A-Za-z_][\\w]*)(?:\\.([A-Za-z_]\\w*))?\\s+(\\S+)(?:\\s*(?:→|->)\\s*(\\S+))?\\s*(\\{.*\\})?\\s*$/s.exec(\n      entry,\n    );\n  if (!m) {\n    throw new Error(\n      \"expected `<read|create|update|delete> Type key [json]` or `<connect|disconnect|update-edge> Type.field key → key [json]`\",\n    );\n  }\n  const [, operation, typeName, fieldName, key, other, json] = m as unknown as [\n    string,\n    string,\n    string,\n    string | undefined,\n    string,\n    string | undefined,\n    string | undefined,\n  ];\n  const node = lora.model.nodes.get(typeName);\n  if (!node) throw new Error(`${typeName} is not a @node type`);\n  const input = json ? (JSON.parse(json) as Record<string, unknown>) : {};\n  const keyType = `${node.key.customScalar ?? node.key.type}!`;\n  const lower = typeName.charAt(0).toLowerCase() + typeName.slice(1);\n  const upperPlural =\n    node.plural.charAt(0).toUpperCase() + node.plural.slice(1);\n  const relational = [\"connect\", \"disconnect\", \"update-edge\"].includes(\n    operation,\n  );\n  if (relational !== (fieldName !== undefined && other !== undefined)) {\n    throw new Error(\n      relational\n        ? `${operation} takes Type.field key → key`\n        : `${operation} takes Type key`,\n    );\n  }\n  switch (operation) {\n    case \"read\":\n      return {\n        operation,\n        source: `query($key: ${keyType}) { ${lower}(${node.key.name}: $key) { ${node.key.name} } }`,\n        variables: { key },\n        isRead: true,\n        root: lower,\n      };\n    case \"create\":\n      return {\n        operation,\n        source: `mutation($input: [${typeName}CreateInput!]!) { create${upperPlural}(input: $input) { __typename } }`,\n        variables: { input: [{ ...input, [node.key.name]: key }] },\n        isRead: false,\n        root: `create${upperPlural}`,\n      };\n    case \"update\":\n      return {\n        operation,\n        source: `mutation($key: ${keyType}, $update: ${typeName}UpdateInput!) { update${typeName}(${node.key.name}: $key, update: $update) { __typename } }`,\n        variables: { key, update: input },\n        isRead: false,\n        root: `update${typeName}`,\n      };\n    case \"delete\":\n      return {\n        operation,\n        source: `mutation($key: ${keyType}) { delete${typeName}(${node.key.name}: $key) { __typename } }`,\n        variables: { key },\n        isRead: false,\n        root: `delete${typeName}`,\n      };\n  }\n  const field = node.fields.get(fieldName!);\n  if (field?.kind !== \"relationship\") {\n    throw new Error(`${typeName}.${fieldName} is not a relationship field`);\n  }\n  const targetKey = lora.model.nodes.get(field.target)?.key.name ?? \"key\";\n  const change =\n    operation === \"connect\"\n      ? {\n          connect: field.list\n            ? [{ [targetKey]: other, ...(json ? { edge: input } : {}) }]\n            : { [targetKey]: other, ...(json ? { edge: input } : {}) },\n        }\n      : operation === \"disconnect\"\n        ? { disconnect: field.list ? [other] : true }\n        : { update: [{ [targetKey]: other, edge: input }] };\n  return {\n    operation,\n    source: `mutation($key: ${keyType}, $update: ${typeName}UpdateInput!) { update${typeName}(${node.key.name}: $key, update: $update) { __typename } }`,\n    variables: { key, update: { [fieldName!]: change } },\n    isRead: false,\n    root: `update${typeName}`,\n  };\n}\n"],"names":["createTestLoraGraphQL","options","createDatabase","db","statements","seed","onStatement","rest","lora","LoraGraphQL","loraDriver","event","text","schema","run","source","variables","contextValue","graphql","context","r","expectSeeks","document","findings","f","x","expectAccess","target","expectations","problems","check","entry","allowed","outcome","tryAccess","err","who","DENIED","isRead","root","accessOperation","tx","result","error","code","m","operation","typeName","fieldName","key","other","json","node","input","keyType","lower","upperPlural","relational","field","targetKey","change"],"mappings":";;AAsDA,eAAsBA,EACpBC,GAC0B;AAC1B,MAAIC;AACJ,MAAI;AACF,KAAC,EAAE,gBAAAA,EAAA,IAAoB,MAAM,OAAO,mBAAmB;AAAA,EAGzD,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AACA,QAAMC,IAAK,MAAMD,EAAA,GACXE,IAA+B,CAAA,GAC/B,EAAE,MAAAC,GAAM,aAAAC,GAAa,GAAGC,MAASN,GACjCO,IAAO,IAAIC,EAAY;AAAA,IAC3B,GAAGF;AAAA,IACH,QAAQG,EAAWP,CAAE;AAAA,IACrB,aAAa,CAACQ,MAAU;AACtB,MAAAP,EAAW,KAAKO,CAAK,GACrBL,IAAcK,CAAK;AAAA,IACrB;AAAA,EAAA,CACD;AAED,MADA,MAAMH,EAAK,aAAa,EAAE,QAAQ,IAAM,GACpC,OAAOH,KAAS,WAAY,OAAMA,EAAKF,CAAE;AAAA;AAE3C,eAAWS,KAAQ,OAAOP,KAAS,WAAW,CAACA,CAAI,IAAKA,KAAQ;AAC9D,YAAMF,EAAG,QAAQS,CAAI;AAGzB,QAAMC,IAASL,EAAK,UAAA,GACdM,IAAM,CACVC,GACAC,IAAqC,CAAA,GACrCC,IAAwC,CAAA,MACrCC,EAAQ,EAAE,QAAAL,GAAQ,QAAAE,GAAQ,gBAAgBC,GAAW,cAAAC,GAAc;AACxE,SAAO;AAAA,IACL,MAAAT;AAAA,IACA,IAAAL;AAAA,IACA,QAAAU;AAAA,IACA,YAAAT;AAAA,IACA,KAAAU;AAAA,IACA,MAAM,OACJC,GACAC,GACAG,MACG;AACH,YAAMC,IAAI,MAAMN,EAAIC,GAAQC,GAAWG,CAAO;AAC9C,UAAIC,EAAE,OAAQ,OAAMA,EAAE,OAAO,CAAC;AAC9B,aAAOA,EAAE;AAAA,IACX;AAAA,IACA,OAAO,MAAMjB,EAAG,UAAA;AAAA,EAAU;AAE9B;AAOA,eAAsBkB,EACpBb,GACAc,GACAN,IAAqC,CAAA,GACrCf,IAAqD,IACtC;AAEf,QAAMsB,KADS,MAAMf,EAAK,QAAQc,GAAUN,GAAWf,CAAO,GACtC;AAAA,IAAQ,CAACuB,MAC/BA,EAAE,QAAQ;AAAA,MAAQ,CAACJ,MACjBA,EAAE,SAAS,IAAI,CAACK,MAAM,GAAGD,EAAE,KAAK,KAAKC,EAAE,OAAO;AAAA,IAAOA,EAAE,SAAS,EAAE;AAAA,IAAA;AAAA,EACpE;AAEF,MAAIF,EAAS,SAAS;AACpB,UAAM,IAAI;AAAA,MACR;AAAA,EAAuCA,EAAS,KAAK;AAAA,CAAI,CAAC;AAAA,IAAA;AAGhE;AA2BA,eAAsBG,EACpBC,GACAC,GACe;AACf,QAAMpB,IAAOmB,aAAkBlB,IAAckB,IAASA,EAAO,MACvDE,IAAqB,CAAA,GACrBC,IAAQ,OAAOC,GAAeC,MAAqB;AACvD,QAAIC;AACJ,QAAI;AACF,MAAAA,IAAU,MAAMC,EAAU1B,GAAMuB,GAAOH,CAAY;AAAA,IACrD,SAASO,GAAK;AACZ,MAAAN,EAAS;AAAA,QACP,GAAGE,CAAK,KAAKI,aAAe,QAAQA,EAAI,UAAU,OAAOA,CAAG,CAAC;AAAA,MAAA;AAE/D;AAAA,IACF;AACA,IAAIF,EAAQ,SAAS,UACnBJ,EAAS,KAAK,GAAGE,CAAK,iBAAiBE,EAAQ,OAAO,EAAE,IAC/CD,KAAWC,EAAQ,SAAS,WACrCJ,EAAS;AAAA,MACP,iCAAiCE,CAAK,KAAKE,EAAQ,OAAO;AAAA,IAAA,IAEnD,CAACD,KAAWC,EAAQ,SAAS,aACtCJ,EAAS,KAAK,iCAAiCE,CAAK,EAAE;AAAA,EAE1D;AACA,aAAWA,KAASH,EAAa,WAAW,CAAA,EAAI,OAAME,EAAMC,GAAO,EAAI;AACvE,aAAWA,KAASH,EAAa,UAAU,CAAA,EAAI,OAAME,EAAMC,GAAO,EAAK;AACvE,MAAIF,EAAS,SAAS,GAAG;AACvB,UAAMO,IAAMR,EAAa,KAAK,KAAK,UAAUA,EAAa,EAAE,IAAI;AAChE,UAAM,IAAI;AAAA,MACR,aAAaQ,CAAG,eAAeP,EAAS,MAAM,IAAIA,EAAS,WAAW,IAAI,UAAU,SAAS;AAAA,IAAQA,EAAS,KAAK;AAAA,GAAM,CAAC;AAAA,IAAA;AAAA,EAE9H;AACF;AAOA,MAAMQ,IAAS,oBAAI,IAAI,CAAC,aAAa,mBAAmB,WAAW,CAAC;AAEpE,eAAeH,EACb1B,GACAuB,GACAH,GACwB;AACxB,QAAM,EAAE,QAAAb,GAAQ,WAAAC,GAAW,QAAAsB,GAAQ,MAAAC,MAASC,EAAgBhC,GAAMuB,CAAK,GACjEU,IAAK,MAAMjC,EAAK,MAAA;AACtB,MAAI;AACF,UAAMkC,IAAS,MAAMlC,EAAK,QAAQ;AAAA,MAChC,QAAAO;AAAA,MACA,WAAAC;AAAA,MACA,SAAS;AAAA,QACP,GAAGY,EAAa;AAAA,QAChB,GAAIA,EAAa,KAAK,EAAE,KAAKA,EAAa,GAAA,IAAO,CAAA;AAAA,QACjD,aAAaa;AAAA,MAAA;AAAA,IACf,CACD,GACKE,IAAQD,EAAO,SAAS,CAAC;AAC/B,QAAIC,GAAO;AACT,YAAMC,IAAQD,EAAM,YAClB;AAEF,aAAO,OAAOC,KAAS,YAAYP,EAAO,IAAIO,CAAI,IAC9C,EAAE,MAAM,UAAU,SAAS,GAAGA,CAAI,KAAKD,EAAM,OAAO,OACpD;AAAA,QACE,MAAM;AAAA,QACN,SAAS,GAAG,OAAOC,KAAQ,OAAO,CAAC,KAAKD,EAAM,OAAO;AAAA,MAAA;AAAA,IAE7D;AACA,WAAIL,KACaI,EAAO,OAA0CH,CAAI,KACvD,OAAa,EAAE,MAAM,UAAU,SAAS,cAAA,IAEhD,EAAE,MAAM,UAAA;AAAA,EACjB,UAAA;AACE,UAAME,EAAG,SAAA;AAAA,EACX;AACF;AAEA,SAASD,EACPhC,GACAuB,GAOA;AACA,QAAMc,IACJ,0JAA0J;AAAA,IACxJd;AAAA,EAAA;AAEJ,MAAI,CAACc;AACH,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAGJ,QAAM,CAAA,EAAGC,GAAWC,GAAUC,GAAWC,GAAKC,GAAOC,CAAI,IAAIN,GASvDO,IAAO5C,EAAK,MAAM,MAAM,IAAIuC,CAAQ;AAC1C,MAAI,CAACK,EAAM,OAAM,IAAI,MAAM,GAAGL,CAAQ,sBAAsB;AAC5D,QAAMM,IAAQF,IAAQ,KAAK,MAAMA,CAAI,IAAgC,CAAA,GAC/DG,IAAU,GAAGF,EAAK,IAAI,gBAAgBA,EAAK,IAAI,IAAI,KACnDG,IAAQR,EAAS,OAAO,CAAC,EAAE,gBAAgBA,EAAS,MAAM,CAAC,GAC3DS,IACJJ,EAAK,OAAO,OAAO,CAAC,EAAE,YAAA,IAAgBA,EAAK,OAAO,MAAM,CAAC,GACrDK,IAAa,CAAC,WAAW,cAAc,aAAa,EAAE;AAAA,IAC1DX;AAAA,EAAA;AAEF,MAAIW,OAAgBT,MAAc,UAAaE,MAAU;AACvD,UAAM,IAAI;AAAA,MACRO,IACI,GAAGX,CAAS,gCACZ,GAAGA,CAAS;AAAA,IAAA;AAGpB,UAAQA,GAAA;AAAA,IACN,KAAK;AACH,aAAO;AAAA,QACL,WAAAA;AAAA,QACA,QAAQ,eAAeQ,CAAO,OAAOC,CAAK,IAAIH,EAAK,IAAI,IAAI,aAAaA,EAAK,IAAI,IAAI;AAAA,QACrF,WAAW,EAAE,KAAAH,EAAA;AAAA,QACb,QAAQ;AAAA,QACR,MAAMM;AAAA,MAAA;AAAA,IAEV,KAAK;AACH,aAAO;AAAA,QACL,WAAAT;AAAA,QACA,QAAQ,qBAAqBC,CAAQ,2BAA2BS,CAAW;AAAA,QAC3E,WAAW,EAAE,OAAO,CAAC,EAAE,GAAGH,GAAO,CAACD,EAAK,IAAI,IAAI,GAAGH,EAAA,CAAK,EAAA;AAAA,QACvD,QAAQ;AAAA,QACR,MAAM,SAASO,CAAW;AAAA,MAAA;AAAA,IAE9B,KAAK;AACH,aAAO;AAAA,QACL,WAAAV;AAAA,QACA,QAAQ,kBAAkBQ,CAAO,cAAcP,CAAQ,yBAAyBA,CAAQ,IAAIK,EAAK,IAAI,IAAI;AAAA,QACzG,WAAW,EAAE,KAAAH,GAAK,QAAQI,EAAA;AAAA,QAC1B,QAAQ;AAAA,QACR,MAAM,SAASN,CAAQ;AAAA,MAAA;AAAA,IAE3B,KAAK;AACH,aAAO;AAAA,QACL,WAAAD;AAAA,QACA,QAAQ,kBAAkBQ,CAAO,aAAaP,CAAQ,IAAIK,EAAK,IAAI,IAAI;AAAA,QACvE,WAAW,EAAE,KAAAH,EAAA;AAAA,QACb,QAAQ;AAAA,QACR,MAAM,SAASF,CAAQ;AAAA,MAAA;AAAA,EACzB;AAEJ,QAAMW,IAAQN,EAAK,OAAO,IAAIJ,CAAU;AACxC,MAAIU,GAAO,SAAS;AAClB,UAAM,IAAI,MAAM,GAAGX,CAAQ,IAAIC,CAAS,8BAA8B;AAExE,QAAMW,IAAYnD,EAAK,MAAM,MAAM,IAAIkD,EAAM,MAAM,GAAG,IAAI,QAAQ,OAC5DE,IACJd,MAAc,YACV;AAAA,IACE,SAASY,EAAM,OACX,CAAC,EAAE,CAACC,CAAS,GAAGT,GAAO,GAAIC,IAAO,EAAE,MAAME,EAAA,IAAU,GAAC,CAAI,IACzD,EAAE,CAACM,CAAS,GAAGT,GAAO,GAAIC,IAAO,EAAE,MAAME,EAAA,IAAU,CAAA,EAAC;AAAA,EAAG,IAE7DP,MAAc,eACZ,EAAE,YAAYY,EAAM,OAAO,CAACR,CAAK,IAAI,GAAA,IACrC,EAAE,QAAQ,CAAC,EAAE,CAACS,CAAS,GAAGT,GAAO,MAAMG,EAAA,CAAO,EAAA;AACtD,SAAO;AAAA,IACL,WAAAP;AAAA,IACA,QAAQ,kBAAkBQ,CAAO,cAAcP,CAAQ,yBAAyBA,CAAQ,IAAIK,EAAK,IAAI,IAAI;AAAA,IACzG,WAAW,EAAE,KAAAH,GAAK,QAAQ,EAAE,CAACD,CAAU,GAAGY,IAAO;AAAA,IACjD,QAAQ;AAAA,IACR,MAAM,SAASb,CAAQ;AAAA,EAAA;AAE3B;"}
+{"version":3,"file":"testing.js","sources":["../src/testing.ts"],"sourcesContent":["// Test helpers: an in-memory LoraDB with the schema asserted, and a plan\n// assertion. Import from `@loradb/lora-graphql/testing`; needs\n// `@loradb/lora-node`. Framework-agnostic: failures throw plain errors.\n\nimport {\n  graphql,\n  type DocumentNode,\n  type ExecutionResult,\n  type GraphQLSchema,\n} from \"graphql\";\nimport { loraDriver, type LoraDatabaseLike } from \"./driver.js\";\nimport {\n  LoraGraphQL,\n  type LoraGraphQLOptions,\n  type StatementEvent,\n} from \"./lora-graphql.js\";\n\n/** The node binding's database, as far as tests use it. */\nexport type TestDatabase = LoraDatabaseLike & {\n  execute(query: string, params?: never): Promise<unknown>;\n  dispose?(): void;\n};\n\nexport interface TestLoraGraphQLOptions extends Omit<\n  LoraGraphQLOptions,\n  \"driver\"\n> {\n  /** Cypher to run after the schema is asserted, or a function given the database. */\n  seed?: string | string[] | ((db: TestDatabase) => Promise<void>);\n}\n\nexport interface TestLoraGraphQL {\n  lora: LoraGraphQL;\n  db: TestDatabase;\n  schema: GraphQLSchema;\n  /** Every statement run so far (clear with `statements.length = 0`). */\n  statements: StatementEvent[];\n  /** Execute a document; errors stay in the result. */\n  run: (\n    source: string,\n    variables?: Record<string, unknown>,\n    context?: Record<string, unknown>,\n  ) => Promise<ExecutionResult>;\n  /** Execute a document and return its data; throws on the first error. */\n  data: <T = Record<string, unknown>>(\n    source: string,\n    variables?: Record<string, unknown>,\n    context?: Record<string, unknown>,\n  ) => Promise<T>;\n  /** Release the database. */\n  close: () => void;\n}\n\n/** A LoraGraphQL over a fresh in-memory database, schema asserted and seeded. */\nexport async function createTestLoraGraphQL(\n  options: TestLoraGraphQLOptions,\n): Promise<TestLoraGraphQL> {\n  let createDatabase: () => Promise<TestDatabase>;\n  try {\n    ({ createDatabase } = (await import(\"@loradb/lora-node\")) as unknown as {\n      createDatabase: typeof createDatabase;\n    });\n  } catch {\n    throw new Error(\n      \"createTestLoraGraphQL needs @loradb/lora-node: npm install --save-dev @loradb/lora-node\",\n    );\n  }\n  const db = await createDatabase();\n  const statements: StatementEvent[] = [];\n  const { seed, onStatement, ...rest } = options;\n  const lora = new LoraGraphQL({\n    ...rest,\n    driver: loraDriver(db),\n    onStatement: (event) => {\n      statements.push(event);\n      onStatement?.(event);\n    },\n  });\n  await lora.assertSchema({ create: true });\n  if (typeof seed === \"function\") await seed(db);\n  else {\n    for (const text of typeof seed === \"string\" ? [seed] : (seed ?? [])) {\n      await db.execute(text);\n    }\n  }\n  const schema = lora.getSchema();\n  const run = (\n    source: string,\n    variables: Record<string, unknown> = {},\n    contextValue: Record<string, unknown> = {},\n  ) => graphql({ schema, source, variableValues: variables, contextValue });\n  return {\n    lora,\n    db,\n    schema,\n    statements,\n    run,\n    data: async <T>(\n      source: string,\n      variables?: Record<string, unknown>,\n      context?: Record<string, unknown>,\n    ) => {\n      const r = await run(source, variables, context);\n      if (r.errors) throw r.errors[0];\n      return r.data as T;\n    },\n    close: () => db.dispose?.(),\n  };\n}\n\n/**\n * Assert that every statement of a query's root fields uses the index\n * access it was compiled for (no label scans where a seek was expected,\n * no mutating plans, no row-budget excess). Throws listing each finding.\n */\nexport async function expectSeeks(\n  lora: LoraGraphQL,\n  document: string | DocumentNode,\n  variables: Record<string, unknown> = {},\n  options: { rowBudget?: number; context?: unknown } = {},\n): Promise<void> {\n  const fields = await lora.explain(document, variables, options);\n  const findings = fields.flatMap((f) =>\n    f.reports.flatMap((r) =>\n      r.findings.map((x) => `${f.field}: ${x.message}\\n  ${x.statement}`),\n    ),\n  );\n  if (findings.length > 0) {\n    throw new Error(\n      `expected every root field to seek:\\n${findings.join(\"\\n\")}`,\n    );\n  }\n}\n\n/** The access `expectAccess` expects: entries allowed, and entries denied. */\nexport interface AccessExpectations {\n  /** The claims to act as; undefined acts anonymously. */\n  as: Record<string, unknown> | undefined;\n  /** Other GraphQL context values the rules read (`$context.*`). */\n  context?: Record<string, unknown>;\n  allowed?: readonly string[];\n  denied?: readonly string[];\n}\n\n/**\n * Assert who may do what, against the database: each entry runs as the\n * caller in a transaction that is always rolled back, and every mismatch\n * is reported at once. Entries:\n *\n * - `read Trip lou:tomorrowland` (denied: not visible, or refused)\n * - `create Trip lou:x {\"name\": \"X\"}` (other input fields as JSON)\n * - `update Trip lou:x {\"name\": \"Y\"}` and `delete Trip lou:x`\n * - `connect Trip.members lou:tomorrowland → f1` (also `->`)\n * - `disconnect Trip.members lou:tomorrowland → f1`\n * - `update-edge Trip.members lou:tomorrowland → f1 {\"rsvp\": \"GOING\"}`\n *\n * Denied means `FORBIDDEN`, `UNAUTHENTICATED` or `NOT_FOUND` (a node the\n * caller cannot see); any other error is reported as a mismatch either way.\n */\nexport async function expectAccess(\n  target: LoraGraphQL | { lora: LoraGraphQL },\n  expectations: AccessExpectations,\n): Promise<void> {\n  const lora = target instanceof LoraGraphQL ? target : target.lora;\n  const problems: string[] = [];\n  const check = async (entry: string, allowed: boolean) => {\n    let outcome: AccessOutcome;\n    try {\n      outcome = await tryAccess(lora, entry, expectations);\n    } catch (err) {\n      problems.push(\n        `${entry}: ${err instanceof Error ? err.message : String(err)}`,\n      );\n      return;\n    }\n    if (outcome.kind === \"error\") {\n      problems.push(`${entry}: failed with ${outcome.message}`);\n    } else if (allowed && outcome.kind === \"denied\") {\n      problems.push(\n        `expected allowed, was denied: ${entry} (${outcome.message})`,\n      );\n    } else if (!allowed && outcome.kind === \"allowed\") {\n      problems.push(`expected denied, was allowed: ${entry}`);\n    }\n  };\n  for (const entry of expectations.allowed ?? []) await check(entry, true);\n  for (const entry of expectations.denied ?? []) await check(entry, false);\n  if (problems.length > 0) {\n    const who = expectations.as ? JSON.stringify(expectations.as) : \"anonymous\";\n    throw new Error(\n      `access as ${who} differs in ${problems.length} ${problems.length === 1 ? \"entry\" : \"entries\"}:\\n  ${problems.join(\"\\n  \")}`,\n    );\n  }\n}\n\ntype AccessOutcome =\n  | { kind: \"allowed\" }\n  | { kind: \"denied\"; message: string }\n  | { kind: \"error\"; message: string };\n\nconst DENIED = new Set([\"FORBIDDEN\", \"UNAUTHENTICATED\", \"NOT_FOUND\"]);\n\nasync function tryAccess(\n  lora: LoraGraphQL,\n  entry: string,\n  expectations: AccessExpectations,\n): Promise<AccessOutcome> {\n  const { source, variables, isRead, root, wrote } = accessOperation(\n    lora,\n    entry,\n  );\n  const tx = await lora.begin();\n  try {\n    const result = await lora.execute({\n      source,\n      variables,\n      context: {\n        ...expectations.context,\n        ...(expectations.as ? { jwt: expectations.as } : {}),\n        transaction: tx,\n      },\n    });\n    const error = result.errors?.[0];\n    if (error) {\n      const code = (error.extensions as Record<string, unknown> | undefined)?.[\n        \"code\"\n      ];\n      return typeof code === \"string\" && DENIED.has(code)\n        ? { kind: \"denied\", message: `${code}: ${error.message}` }\n        : {\n            kind: \"error\",\n            message: `${String(code ?? \"error\")}: ${error.message}`,\n          };\n    }\n    const payload = (result.data as Record<string, unknown> | null)?.[root];\n    if (\n      wrote &&\n      (payload == null || !wrote(payload as Record<string, unknown>))\n    ) {\n      return { kind: \"denied\", message: \"not visible, nothing written\" };\n    }\n    if (isRead) {\n      const value = (result.data as Record<string, unknown> | null)?.[root];\n      if (value == null) return { kind: \"denied\", message: \"not visible\" };\n    }\n    return { kind: \"allowed\" };\n  } finally {\n    await tx.rollback();\n  }\n}\n\nfunction accessOperation(\n  lora: LoraGraphQL,\n  entry: string,\n): {\n  operation: string;\n  source: string;\n  variables: Record<string, unknown>;\n  isRead: boolean;\n  root: string;\n  /** How the payload says nothing was written: a hidden target answers no error. */\n  wrote?: (payload: Record<string, unknown>) => boolean;\n} {\n  const m =\n    /^\\s*(read|create|update|delete|connect|disconnect|update-edge)\\s+([A-Za-z_][\\w]*)(?:\\.([A-Za-z_]\\w*))?\\s+(\\S+)(?:\\s*(?:→|->)\\s*(\\S+))?\\s*(\\{.*\\})?\\s*$/s.exec(\n      entry,\n    );\n  if (!m) {\n    throw new Error(\n      \"expected `<read|create|update|delete> Type key [json]` or `<connect|disconnect|update-edge> Type.field key → key [json]`\",\n    );\n  }\n  const [, operation, typeName, fieldName, key, other, json] = m as unknown as [\n    string,\n    string,\n    string,\n    string | undefined,\n    string,\n    string | undefined,\n    string | undefined,\n  ];\n  const node = lora.model.nodes.get(typeName);\n  if (!node) throw new Error(`${typeName} is not a @node type`);\n  const input = json ? (JSON.parse(json) as Record<string, unknown>) : {};\n  const keyType = `${node.key.customScalar ?? node.key.type}!`;\n  const lower = typeName.charAt(0).toLowerCase() + typeName.slice(1);\n  const upperPlural =\n    node.plural.charAt(0).toUpperCase() + node.plural.slice(1);\n  const relational = [\"connect\", \"disconnect\", \"update-edge\"].includes(\n    operation,\n  );\n  if (relational !== (fieldName !== undefined && other !== undefined)) {\n    throw new Error(\n      relational\n        ? `${operation} takes Type.field key → key`\n        : `${operation} takes Type key`,\n    );\n  }\n  switch (operation) {\n    case \"read\":\n      return {\n        operation,\n        source: `query($key: ${keyType}) { ${lower}(${node.key.name}: $key) { ${node.key.name} } }`,\n        variables: { key },\n        isRead: true,\n        root: lower,\n      };\n    case \"create\":\n      return {\n        operation,\n        source: `mutation($input: [${typeName}CreateInput!]!) { create${upperPlural}(input: $input) { __typename } }`,\n        variables: { input: [{ ...input, [node.key.name]: key }] },\n        isRead: false,\n        root: `create${upperPlural}`,\n      };\n    case \"update\":\n      return {\n        operation,\n        source: `mutation($key: ${keyType}, $update: ${typeName}UpdateInput!) { update${typeName}(${node.key.name}: $key, update: $update) { ${lower} { __typename } info { relationshipsDeleted } } }`,\n        variables: { key, update: input },\n        isRead: false,\n        root: `update${typeName}`,\n        wrote: (p) => p[lower] != null,\n      };\n    case \"delete\":\n      return {\n        operation,\n        source: `mutation($key: ${keyType}) { delete${typeName}(${node.key.name}: $key) { nodesDeleted } }`,\n        variables: { key },\n        isRead: false,\n        root: `delete${typeName}`,\n        wrote: (p) => Number(p[\"nodesDeleted\"] ?? 0) > 0,\n      };\n  }\n  const field = node.fields.get(fieldName!);\n  if (field?.kind !== \"relationship\") {\n    throw new Error(`${typeName}.${fieldName} is not a relationship field`);\n  }\n  const targetKey = lora.model.nodes.get(field.target)?.key.name ?? \"key\";\n  const change =\n    operation === \"connect\"\n      ? {\n          connect: field.list\n            ? [{ [targetKey]: other, ...(json ? { edge: input } : {}) }]\n            : { [targetKey]: other, ...(json ? { edge: input } : {}) },\n        }\n      : operation === \"disconnect\"\n        ? { disconnect: field.list ? [other] : true }\n        : { update: [{ [targetKey]: other, edge: input }] };\n  return {\n    operation,\n    source: `mutation($key: ${keyType}, $update: ${typeName}UpdateInput!) { update${typeName}(${node.key.name}: $key, update: $update) { ${lower} { __typename } info { relationshipsDeleted } } }`,\n    variables: { key, update: { [fieldName!]: change } },\n    isRead: false,\n    root: `update${typeName}`,\n    // A hidden owner answers a null node; a disconnect of a pair the\n    // caller may not touch removes nothing.\n    wrote: (p) =>\n      p[lower] != null &&\n      (operation !== \"disconnect\" ||\n        Number(\n          (p[\"info\"] as Record<string, unknown> | undefined)?.[\n            \"relationshipsDeleted\"\n          ] ?? 0,\n        ) > 0),\n  };\n}\n"],"names":["createTestLoraGraphQL","options","createDatabase","db","statements","seed","onStatement","rest","lora","LoraGraphQL","loraDriver","event","text","schema","run","source","variables","contextValue","graphql","context","r","expectSeeks","document","findings","f","x","expectAccess","target","expectations","problems","check","entry","allowed","outcome","tryAccess","err","who","DENIED","isRead","root","wrote","accessOperation","tx","result","error","code","payload","m","operation","typeName","fieldName","key","other","json","node","input","keyType","lower","upperPlural","relational","p","field","targetKey","change"],"mappings":";;AAsDA,eAAsBA,EACpBC,GAC0B;AAC1B,MAAIC;AACJ,MAAI;AACF,KAAC,EAAE,gBAAAA,EAAA,IAAoB,MAAM,OAAO,mBAAmB;AAAA,EAGzD,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AACA,QAAMC,IAAK,MAAMD,EAAA,GACXE,IAA+B,CAAA,GAC/B,EAAE,MAAAC,GAAM,aAAAC,GAAa,GAAGC,MAASN,GACjCO,IAAO,IAAIC,EAAY;AAAA,IAC3B,GAAGF;AAAA,IACH,QAAQG,EAAWP,CAAE;AAAA,IACrB,aAAa,CAACQ,MAAU;AACtB,MAAAP,EAAW,KAAKO,CAAK,GACrBL,IAAcK,CAAK;AAAA,IACrB;AAAA,EAAA,CACD;AAED,MADA,MAAMH,EAAK,aAAa,EAAE,QAAQ,IAAM,GACpC,OAAOH,KAAS,WAAY,OAAMA,EAAKF,CAAE;AAAA;AAE3C,eAAWS,KAAQ,OAAOP,KAAS,WAAW,CAACA,CAAI,IAAKA,KAAQ;AAC9D,YAAMF,EAAG,QAAQS,CAAI;AAGzB,QAAMC,IAASL,EAAK,UAAA,GACdM,IAAM,CACVC,GACAC,IAAqC,CAAA,GACrCC,IAAwC,CAAA,MACrCC,EAAQ,EAAE,QAAAL,GAAQ,QAAAE,GAAQ,gBAAgBC,GAAW,cAAAC,GAAc;AACxE,SAAO;AAAA,IACL,MAAAT;AAAA,IACA,IAAAL;AAAA,IACA,QAAAU;AAAA,IACA,YAAAT;AAAA,IACA,KAAAU;AAAA,IACA,MAAM,OACJC,GACAC,GACAG,MACG;AACH,YAAMC,IAAI,MAAMN,EAAIC,GAAQC,GAAWG,CAAO;AAC9C,UAAIC,EAAE,OAAQ,OAAMA,EAAE,OAAO,CAAC;AAC9B,aAAOA,EAAE;AAAA,IACX;AAAA,IACA,OAAO,MAAMjB,EAAG,UAAA;AAAA,EAAU;AAE9B;AAOA,eAAsBkB,EACpBb,GACAc,GACAN,IAAqC,CAAA,GACrCf,IAAqD,IACtC;AAEf,QAAMsB,KADS,MAAMf,EAAK,QAAQc,GAAUN,GAAWf,CAAO,GACtC;AAAA,IAAQ,CAACuB,MAC/BA,EAAE,QAAQ;AAAA,MAAQ,CAACJ,MACjBA,EAAE,SAAS,IAAI,CAACK,MAAM,GAAGD,EAAE,KAAK,KAAKC,EAAE,OAAO;AAAA,IAAOA,EAAE,SAAS,EAAE;AAAA,IAAA;AAAA,EACpE;AAEF,MAAIF,EAAS,SAAS;AACpB,UAAM,IAAI;AAAA,MACR;AAAA,EAAuCA,EAAS,KAAK;AAAA,CAAI,CAAC;AAAA,IAAA;AAGhE;AA2BA,eAAsBG,EACpBC,GACAC,GACe;AACf,QAAMpB,IAAOmB,aAAkBlB,IAAckB,IAASA,EAAO,MACvDE,IAAqB,CAAA,GACrBC,IAAQ,OAAOC,GAAeC,MAAqB;AACvD,QAAIC;AACJ,QAAI;AACF,MAAAA,IAAU,MAAMC,EAAU1B,GAAMuB,GAAOH,CAAY;AAAA,IACrD,SAASO,GAAK;AACZ,MAAAN,EAAS;AAAA,QACP,GAAGE,CAAK,KAAKI,aAAe,QAAQA,EAAI,UAAU,OAAOA,CAAG,CAAC;AAAA,MAAA;AAE/D;AAAA,IACF;AACA,IAAIF,EAAQ,SAAS,UACnBJ,EAAS,KAAK,GAAGE,CAAK,iBAAiBE,EAAQ,OAAO,EAAE,IAC/CD,KAAWC,EAAQ,SAAS,WACrCJ,EAAS;AAAA,MACP,iCAAiCE,CAAK,KAAKE,EAAQ,OAAO;AAAA,IAAA,IAEnD,CAACD,KAAWC,EAAQ,SAAS,aACtCJ,EAAS,KAAK,iCAAiCE,CAAK,EAAE;AAAA,EAE1D;AACA,aAAWA,KAASH,EAAa,WAAW,CAAA,EAAI,OAAME,EAAMC,GAAO,EAAI;AACvE,aAAWA,KAASH,EAAa,UAAU,CAAA,EAAI,OAAME,EAAMC,GAAO,EAAK;AACvE,MAAIF,EAAS,SAAS,GAAG;AACvB,UAAMO,IAAMR,EAAa,KAAK,KAAK,UAAUA,EAAa,EAAE,IAAI;AAChE,UAAM,IAAI;AAAA,MACR,aAAaQ,CAAG,eAAeP,EAAS,MAAM,IAAIA,EAAS,WAAW,IAAI,UAAU,SAAS;AAAA,IAAQA,EAAS,KAAK;AAAA,GAAM,CAAC;AAAA,IAAA;AAAA,EAE9H;AACF;AAOA,MAAMQ,IAAS,oBAAI,IAAI,CAAC,aAAa,mBAAmB,WAAW,CAAC;AAEpE,eAAeH,EACb1B,GACAuB,GACAH,GACwB;AACxB,QAAM,EAAE,QAAAb,GAAQ,WAAAC,GAAW,QAAAsB,GAAQ,MAAAC,GAAM,OAAAC,MAAUC;AAAA,IACjDjC;AAAA,IACAuB;AAAA,EAAA,GAEIW,IAAK,MAAMlC,EAAK,MAAA;AACtB,MAAI;AACF,UAAMmC,IAAS,MAAMnC,EAAK,QAAQ;AAAA,MAChC,QAAAO;AAAA,MACA,WAAAC;AAAA,MACA,SAAS;AAAA,QACP,GAAGY,EAAa;AAAA,QAChB,GAAIA,EAAa,KAAK,EAAE,KAAKA,EAAa,GAAA,IAAO,CAAA;AAAA,QACjD,aAAac;AAAA,MAAA;AAAA,IACf,CACD,GACKE,IAAQD,EAAO,SAAS,CAAC;AAC/B,QAAIC,GAAO;AACT,YAAMC,IAAQD,EAAM,YAClB;AAEF,aAAO,OAAOC,KAAS,YAAYR,EAAO,IAAIQ,CAAI,IAC9C,EAAE,MAAM,UAAU,SAAS,GAAGA,CAAI,KAAKD,EAAM,OAAO,OACpD;AAAA,QACE,MAAM;AAAA,QACN,SAAS,GAAG,OAAOC,KAAQ,OAAO,CAAC,KAAKD,EAAM,OAAO;AAAA,MAAA;AAAA,IAE7D;AACA,UAAME,IAAWH,EAAO,OAA0CJ,CAAI;AACtE,WACEC,MACCM,KAAW,QAAQ,CAACN,EAAMM,CAAkC,KAEtD,EAAE,MAAM,UAAU,SAAS,+BAAA,IAEhCR,KACaK,EAAO,OAA0CJ,CAAI,KACvD,OAAa,EAAE,MAAM,UAAU,SAAS,cAAA,IAEhD,EAAE,MAAM,UAAA;AAAA,EACjB,UAAA;AACE,UAAMG,EAAG,SAAA;AAAA,EACX;AACF;AAEA,SAASD,EACPjC,GACAuB,GASA;AACA,QAAMgB,IACJ,0JAA0J;AAAA,IACxJhB;AAAA,EAAA;AAEJ,MAAI,CAACgB;AACH,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAGJ,QAAM,CAAA,EAAGC,GAAWC,GAAUC,GAAWC,GAAKC,GAAOC,CAAI,IAAIN,GASvDO,IAAO9C,EAAK,MAAM,MAAM,IAAIyC,CAAQ;AAC1C,MAAI,CAACK,EAAM,OAAM,IAAI,MAAM,GAAGL,CAAQ,sBAAsB;AAC5D,QAAMM,IAAQF,IAAQ,KAAK,MAAMA,CAAI,IAAgC,CAAA,GAC/DG,IAAU,GAAGF,EAAK,IAAI,gBAAgBA,EAAK,IAAI,IAAI,KACnDG,IAAQR,EAAS,OAAO,CAAC,EAAE,gBAAgBA,EAAS,MAAM,CAAC,GAC3DS,IACJJ,EAAK,OAAO,OAAO,CAAC,EAAE,YAAA,IAAgBA,EAAK,OAAO,MAAM,CAAC,GACrDK,IAAa,CAAC,WAAW,cAAc,aAAa,EAAE;AAAA,IAC1DX;AAAA,EAAA;AAEF,MAAIW,OAAgBT,MAAc,UAAaE,MAAU;AACvD,UAAM,IAAI;AAAA,MACRO,IACI,GAAGX,CAAS,gCACZ,GAAGA,CAAS;AAAA,IAAA;AAGpB,UAAQA,GAAA;AAAA,IACN,KAAK;AACH,aAAO;AAAA,QACL,WAAAA;AAAA,QACA,QAAQ,eAAeQ,CAAO,OAAOC,CAAK,IAAIH,EAAK,IAAI,IAAI,aAAaA,EAAK,IAAI,IAAI;AAAA,QACrF,WAAW,EAAE,KAAAH,EAAA;AAAA,QACb,QAAQ;AAAA,QACR,MAAMM;AAAA,MAAA;AAAA,IAEV,KAAK;AACH,aAAO;AAAA,QACL,WAAAT;AAAA,QACA,QAAQ,qBAAqBC,CAAQ,2BAA2BS,CAAW;AAAA,QAC3E,WAAW,EAAE,OAAO,CAAC,EAAE,GAAGH,GAAO,CAACD,EAAK,IAAI,IAAI,GAAGH,EAAA,CAAK,EAAA;AAAA,QACvD,QAAQ;AAAA,QACR,MAAM,SAASO,CAAW;AAAA,MAAA;AAAA,IAE9B,KAAK;AACH,aAAO;AAAA,QACL,WAAAV;AAAA,QACA,QAAQ,kBAAkBQ,CAAO,cAAcP,CAAQ,yBAAyBA,CAAQ,IAAIK,EAAK,IAAI,IAAI,8BAA8BG,CAAK;AAAA,QAC5I,WAAW,EAAE,KAAAN,GAAK,QAAQI,EAAA;AAAA,QAC1B,QAAQ;AAAA,QACR,MAAM,SAASN,CAAQ;AAAA,QACvB,OAAO,CAACW,MAAMA,EAAEH,CAAK,KAAK;AAAA,MAAA;AAAA,IAE9B,KAAK;AACH,aAAO;AAAA,QACL,WAAAT;AAAA,QACA,QAAQ,kBAAkBQ,CAAO,aAAaP,CAAQ,IAAIK,EAAK,IAAI,IAAI;AAAA,QACvE,WAAW,EAAE,KAAAH,EAAA;AAAA,QACb,QAAQ;AAAA,QACR,MAAM,SAASF,CAAQ;AAAA,QACvB,OAAO,CAACW,MAAM,OAAOA,EAAE,gBAAmB,CAAC,IAAI;AAAA,MAAA;AAAA,EACjD;AAEJ,QAAMC,IAAQP,EAAK,OAAO,IAAIJ,CAAU;AACxC,MAAIW,GAAO,SAAS;AAClB,UAAM,IAAI,MAAM,GAAGZ,CAAQ,IAAIC,CAAS,8BAA8B;AAExE,QAAMY,IAAYtD,EAAK,MAAM,MAAM,IAAIqD,EAAM,MAAM,GAAG,IAAI,QAAQ,OAC5DE,IACJf,MAAc,YACV;AAAA,IACE,SAASa,EAAM,OACX,CAAC,EAAE,CAACC,CAAS,GAAGV,GAAO,GAAIC,IAAO,EAAE,MAAME,EAAA,IAAU,GAAC,CAAI,IACzD,EAAE,CAACO,CAAS,GAAGV,GAAO,GAAIC,IAAO,EAAE,MAAME,EAAA,IAAU,CAAA,EAAC;AAAA,EAAG,IAE7DP,MAAc,eACZ,EAAE,YAAYa,EAAM,OAAO,CAACT,CAAK,IAAI,GAAA,IACrC,EAAE,QAAQ,CAAC,EAAE,CAACU,CAAS,GAAGV,GAAO,MAAMG,EAAA,CAAO,EAAA;AACtD,SAAO;AAAA,IACL,WAAAP;AAAA,IACA,QAAQ,kBAAkBQ,CAAO,cAAcP,CAAQ,yBAAyBA,CAAQ,IAAIK,EAAK,IAAI,IAAI,8BAA8BG,CAAK;AAAA,IAC5I,WAAW,EAAE,KAAAN,GAAK,QAAQ,EAAE,CAACD,CAAU,GAAGa,IAAO;AAAA,IACjD,QAAQ;AAAA,IACR,MAAM,SAASd,CAAQ;AAAA;AAAA;AAAA,IAGvB,OAAO,CAACW,MACNA,EAAEH,CAAK,KAAK,SACXT,MAAc,gBACb;AAAA,MACGY,EAAE,MACD,wBACG;AAAA,IAAA,IACH;AAAA,EAAA;AAEZ;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loradb/lora-graphql",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "description": "Schema-first GraphQL for LoraDB: one annotated SDL becomes an executable, index-aware GraphQL API that compiles every operation to a single Cypher statement.",
   "license": "BUSL-1.1",
   "packageManager": "yarn@4.5.1",
@@ -65,7 +65,7 @@
     "bench:load": "node bench/load/main.mjs"
   },
   "peerDependencies": {
-    "@loradb/lora-node": "^0.20.0",
+    "@loradb/lora-node": "^0.20.1",
     "graphql": "^16.8.0 || ^17.0.0"
   },
   "devDependencies": {