@loradb/lora-graphql 0.25.2 → 0.25.3

package/dist/model/build/authorization.d.ts

@@ -18,7 +18,9 @@ export declare const PROPERTY_OPS: Set<AuthOperation>;
 /**
  * Whether a request without a token could pass the rule: some branch
  * reads no claim. A claim read without a token denies its branch (and
- * the whole rule under NOT), so those branches never pass.
+ * the whole rule under NOT), so those branches never pass. An `isViewer`
+ * test is the exception: without a token it is false for every node (see
+ * `VIEWER_TEST`), so under `none`, `NOT` or `all` it can pass.
  */
 export declare function passableWithoutClaims(where: unknown): boolean;
 export declare function claimsOnlyViolations(where: unknown, path?: string): string[];

package/dist/model/desugar.d.ts

@@ -36,6 +36,16 @@ export interface DesugarContext {
     member?: NodeType;
     at: (message: string) => void;
 }
+/**
+ * Marks the operator object `isViewer` expands to (`{ eq: "$jwt.<claim>" }`
+ * on the viewer field). With a claim to compare, it compiles like the
+ * hand-written test. Without one (a signed-out caller, or a token without
+ * the claim) there is no viewer, so no node is the viewer: the test is
+ * false for every node, rather than unknown like a test of a missing claim.
+ * `none` and `NOT … some` then hold, while `some` and a bare `isViewer`
+ * fail. A symbol key, so operator walks (`Object.entries`) never see it.
+ */
+export declare const VIEWER_TEST: unique symbol;
 /**
  * A rule's where, sugar expanded. `owner` is the type the rule's `node`
  * part tests (undefined on relationship properties: claims only).

package/dist/testing.js

@@ -1,5 +1,5 @@
 import { graphql as g } from "graphql";
-import { a as h, l as b } from "./lora-graphql-RvZQdHNA.js";
+import { a as h, l as b } from "./lora-graphql-BWLKVLr0.js";
 async function T(l) {
   let u;
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loradb/lora-graphql",
-  "version": "0.25.2",
+  "version": "0.25.3",
   "description": "Schema-first GraphQL for LoraDB: one annotated SDL becomes an executable, index-aware GraphQL API that compiles every operation to a single Cypher statement.",
   "license": "BUSL-1.1",
   "packageManager": "yarn@4.5.1",
@@ -65,7 +65,7 @@
     "bench:load": "node bench/load/main.mjs"
   },
   "peerDependencies": {
-    "@loradb/lora-node": "^0.25.2",
+    "@loradb/lora-node": "^0.25.3",
     "graphql": "^16.8.0 || ^17.0.0"
   },
   "devDependencies": {