@mathrunet/masamune_cloudflare_turso 3.2.6 → 3.2.7

package/CHANGELOG.md

@@ -1,4 +1,4 @@
-## 3.2.6 (2026-07-01)
+## 3.2.7 (2026-07-01)
 
 
 ### chore

package/README.md

@@ -48,42 +48,26 @@ Pass the return value of the `deploy` function to `export default`. It is define
 
 ```typescript
 import * as m from "@mathrunet/masamune_cloudflare_turso";
-
-export default m.deploy([
-  m.Functions.turso({
-    organizationName: "xxxx",
-    groupName: "xxxx",
-    autoCreateDatabase: true,
-    autoCreateTable: true,
-    autoMigrateAddColumns: true,
-    rules: {
-      version: "1",
-      rules: {
-        "database/*/table/*/*": {
-          read: "deny",
-          write: "deny",
-        },
-        "database/main/table/users/*": {
-          read: "authenticated",
-          write: "authenticated",
-        },
-      },
-    },
-  }),
-  m.Functions.tursoToken({
-    organizationName: "xxxx",
-    groupName: "xxxx",
-    rules: {
-      version: "1",
-      rules: {
-        "database/main": {
-          read: "authenticated",
-          write: "deny",
-        },
-      },
-    },
-  }),
-]);
+import rulesJson from "../rules.json";
+
+export default m.deploy(
+  [
+    m.Functions.turso({
+      organizationName: "xxxx",
+      groupName: "xxxx",
+      autoCreateDatabase: true,
+      autoCreateTable: true,
+      autoMigrateAddColumns: true,
+    }),
+    m.Functions.tursoToken({
+      organizationName: "xxxx",
+      groupName: "xxxx",
+    }),
+  ],
+  {
+    rules: rulesJson,
+  },
+);
 ```
 
 Cloudflare bindings are also supported and take precedence over options:
@@ -195,6 +179,29 @@ CREATE TABLE IF NOT EXISTS table_name (
 
 Objects and arrays are stored as JSON strings.
 
+# Rules
+
+Rules are provided by `@mathrunet/masamune_cloudflare` and are shared with
+other Cloudflare database packages. Pass an imported `rules.json` to
+`WorkersOptions.rules` on `deploy`, or pass the same config to each function
+option.
+
+```json
+{
+  "version": "1",
+  "rules": {
+    "database/main": {
+      "read": "allow",
+      "write": "server"
+    },
+    "database/main/table/users/*": {
+      "read": "authenticated",
+      "write": { "type": "field", "field": "ownerId", "server": true }
+    }
+  }
+}
+```
+
 # Database-scoped short-lived token
 
 Use `/turso/token/database/{database}` to issue a Turso database token after
@@ -225,8 +232,8 @@ Named path parameters can be compared with the authenticated user ID:
   "version": "1",
   "rules": {
     "database/{uid}": {
-      "read": { "type": "pathParamMatch", "param": "uid" },
-      "write": { "type": "pathParamMatch", "param": "uid" }
+      "read": { "type": "path", "param": "uid" },
+      "write": { "type": "path", "param": "uid" }
     }
   }
 }
@@ -243,24 +250,24 @@ issuing only the direct Turso token that is safe for the requested scope:
   "version": "1",
   "rules": {
     "database/{uid}": {
-      "read": { "type": "pathParamMatch", "param": "uid" },
+      "read": { "type": "path", "param": "uid" },
       "write": {
-        "type": "pathParamMatch",
+        "type": "path",
         "param": "uid",
-        "serverOnly": true
+        "server": true
       }
     }
   }
 }
 ```
 
-`serverOnly` can also be used with `read` and `fieldMatch` rules. A
-server-only rule does not grant direct token access for that operation.
+`server` can also be used with `read` and `field` rules. A server-side rule
+does not grant direct token access for that operation.
 
 Table/document rules below the database path are also treated as server-side
 rules for token issuance when they restrict `read` or `write`. This is
 intentional because Turso Platform tokens are database-scoped and cannot enforce
-document-level `fieldMatch` or `pathParamMatch` checks on the client.
+document-level `field` or `path` checks on the client.
 
 For a database-level Turso token, send `operations` without a table:
 

package/dist/lib/rules.d.ts

@@ -1,66 +1,5 @@
-import { AuthenticationContext, RulesAccessRule, RulesConfig, RulesOperation, RulesOperationKey, TursoTokenAccessMode, TursoTokenScopeInput, TursoTokenScopeOutput } from "./types";
-export interface RulesEvaluationInput {
-    path: string;
-    operation: RulesOperation | RulesOperationKey;
-    authentication?: AuthenticationContext | undefined;
-    fetchDocument?: (() => Promise<Record<string, unknown> | null | undefined>) | undefined;
-    server?: boolean | undefined;
-}
-export interface RulesEvaluationResult {
-    allowed: boolean;
-    rulePath?: string | undefined;
-    access?: RulesAccessRule | undefined;
-    params?: Record<string, string> | undefined;
-}
-export type TursoDatabaseTokenAuthorization = "read-only" | "full-access";
-export interface TursoDatabaseTokenAccess {
-    authorization?: TursoDatabaseTokenAuthorization | undefined;
-    readMode: TursoTokenAccessMode;
-    writeMode: TursoTokenAccessMode;
-    scopes: TursoTokenScopeOutput[];
-}
-export declare class RulesEngine {
-    constructor(config?: RulesConfig | undefined);
-    private readonly config;
-    evaluate(input: RulesEvaluationInput): Promise<RulesEvaluationResult>;
-    hasScopedRestriction({ database, table, operation, }: {
-        database: string;
-        table: string;
-        operation: RulesOperation | RulesOperationKey;
-    }): boolean;
-    hasScopedDeny({ database, table, operation, }: {
-        database: string;
-        table: string;
-        operation: RulesOperation | RulesOperationKey;
-    }): boolean;
-}
-export declare function createTursoRulesEngine(config?: RulesConfig | undefined): RulesEngine;
-export declare function buildRulesPath({ database, table, indexKey, }: {
-    database: string;
-    table: string;
-    indexKey: string;
-}): string;
-export declare function buildDatabaseRulesPath({ database, }: {
-    database: string;
-}): string;
-export declare function normalizeHttpMethodToRulesOperation(method: string): RulesOperation;
-export declare function normalizeRulesOperation(operation: RulesOperation | RulesOperationKey): RulesOperation;
-export declare function expandRulesOperation(operation: RulesOperationKey): RulesOperation[];
-export declare function filterAllowedScope({ engine, database, scope, authentication, }: {
-    engine: RulesEngine;
-    database: string;
-    scope: TursoTokenScopeInput[];
-    authentication?: AuthenticationContext | undefined;
-}): Promise<TursoTokenScopeInput[]>;
-export declare function resolveDatabaseTokenAccess({ engine, database, operations, scope, authentication, }: {
-    engine: RulesEngine;
-    database: string;
-    operations?: RulesOperationKey[] | undefined;
-    scope?: TursoTokenScopeInput[] | undefined;
-    authentication?: AuthenticationContext | undefined;
-}): Promise<TursoDatabaseTokenAccess | undefined>;
-export declare function resolveDatabaseTokenAuthorization({ engine, database, authentication, }: {
-    engine: RulesEngine;
-    database: string;
-    authentication?: AuthenticationContext | undefined;
-}): Promise<TursoDatabaseTokenAuthorization | undefined>;
+import { RulesEngine, type RulesConfig, type RulesDatabaseTokenAccess, type RulesDatabaseTokenAuthorization, type WorkersRulesOption } from "@mathrunet/masamune_cloudflare";
+export { buildDatabaseRulesPath, buildRulesPath, expandRulesOperation, filterAllowedScope, normalizeHttpMethodToRulesOperation, normalizeRulesOperation, resolveDatabaseTokenAccess, resolveDatabaseTokenAuthorization, RulesEngine, } from "@mathrunet/masamune_cloudflare";
+export type TursoDatabaseTokenAuthorization = RulesDatabaseTokenAuthorization;
+export type TursoDatabaseTokenAccess = RulesDatabaseTokenAccess;
+export declare function createTursoRulesEngine(config?: RulesConfig | WorkersRulesOption | null | undefined): RulesEngine;

package/dist/lib/rules.js

@@ -1,593 +1,27 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RulesEngine = void 0;
+exports.RulesEngine = exports.resolveDatabaseTokenAuthorization = exports.resolveDatabaseTokenAccess = exports.normalizeRulesOperation = exports.normalizeHttpMethodToRulesOperation = exports.filterAllowedScope = exports.expandRulesOperation = exports.buildRulesPath = exports.buildDatabaseRulesPath = void 0;
 exports.createTursoRulesEngine = createTursoRulesEngine;
-exports.buildRulesPath = buildRulesPath;
-exports.buildDatabaseRulesPath = buildDatabaseRulesPath;
-exports.normalizeHttpMethodToRulesOperation = normalizeHttpMethodToRulesOperation;
-exports.normalizeRulesOperation = normalizeRulesOperation;
-exports.expandRulesOperation = expandRulesOperation;
-exports.filterAllowedScope = filterAllowedScope;
-exports.resolveDatabaseTokenAccess = resolveDatabaseTokenAccess;
-exports.resolveDatabaseTokenAuthorization = resolveDatabaseTokenAuthorization;
-class RulesEngine {
-    constructor(config) {
-        this.config = normalizeRulesConfig(config);
-    }
-    config;
-    async evaluate(input) {
-        const operation = normalizeRulesOperation(input.operation);
-        const matches = Object.keys(this.config.rules)
-            .map((rulePath) => matchRulePath(rulePath, input.path))
-            .filter((match) => match.matched)
-            .sort(compareRulePathMatch);
-        if (matches.length === 0) {
-            return { allowed: false };
-        }
-        const resolved = resolveInheritedRule(matches.map((match) => ({
-            rulePath: match.rulePath,
-            entry: this.config.rules[match.rulePath],
-            params: match.params,
-        })));
-        const resolvedAccess = resolveAccessRule(resolved.entry, resolved.params, operation);
-        if (!resolvedAccess) {
-            return {
-                allowed: false,
-                rulePath: resolved.rulePath,
-            };
-        }
-        return {
-            allowed: await evaluateAccessRule(resolvedAccess.access, input.authentication, input.fetchDocument, resolvedAccess.params, input.server === true),
-            rulePath: resolved.rulePath,
-            access: resolvedAccess.access,
-            params: resolvedAccess.params,
-        };
-    }
-    hasScopedRestriction({ database, table, operation, }) {
-        const normalized = normalizeRulesOperation(operation);
-        for (const [rulePath, entry] of Object.entries(this.config.rules)) {
-            if (!isRulePathInTableScope(rulePath, database, table)) {
-                continue;
-            }
-            const access = resolveAccessRule(entry, {}, normalized)?.access;
-            if (!access || isDirectSafeScopeAccess(access)) {
-                continue;
-            }
-            return true;
-        }
-        return false;
-    }
-    hasScopedDeny({ database, table, operation, }) {
-        const normalized = normalizeRulesOperation(operation);
-        for (const [rulePath, entry] of Object.entries(this.config.rules)) {
-            if (!isRulePathInTableScope(rulePath, database, table)) {
-                continue;
-            }
-            const access = resolveAccessRule(entry, {}, normalized)?.access;
-            if (access === "deny") {
-                return true;
-            }
-        }
-        return false;
-    }
-}
-exports.RulesEngine = RulesEngine;
+const masamune_cloudflare_1 = require("@mathrunet/masamune_cloudflare");
+var masamune_cloudflare_2 = require("@mathrunet/masamune_cloudflare");
+Object.defineProperty(exports, "buildDatabaseRulesPath", { enumerable: true, get: function () { return masamune_cloudflare_2.buildDatabaseRulesPath; } });
+Object.defineProperty(exports, "buildRulesPath", { enumerable: true, get: function () { return masamune_cloudflare_2.buildRulesPath; } });
+Object.defineProperty(exports, "expandRulesOperation", { enumerable: true, get: function () { return masamune_cloudflare_2.expandRulesOperation; } });
+Object.defineProperty(exports, "filterAllowedScope", { enumerable: true, get: function () { return masamune_cloudflare_2.filterAllowedScope; } });
+Object.defineProperty(exports, "normalizeHttpMethodToRulesOperation", { enumerable: true, get: function () { return masamune_cloudflare_2.normalizeHttpMethodToRulesOperation; } });
+Object.defineProperty(exports, "normalizeRulesOperation", { enumerable: true, get: function () { return masamune_cloudflare_2.normalizeRulesOperation; } });
+Object.defineProperty(exports, "resolveDatabaseTokenAccess", { enumerable: true, get: function () { return masamune_cloudflare_2.resolveDatabaseTokenAccess; } });
+Object.defineProperty(exports, "resolveDatabaseTokenAuthorization", { enumerable: true, get: function () { return masamune_cloudflare_2.resolveDatabaseTokenAuthorization; } });
+Object.defineProperty(exports, "RulesEngine", { enumerable: true, get: function () { return masamune_cloudflare_2.RulesEngine; } });
 function createTursoRulesEngine(config) {
-    return new RulesEngine(config);
-}
-function buildRulesPath({ database, table, indexKey, }) {
-    return [
-        "database",
-        encodePathSegment(database),
-        "table",
-        encodePathSegment(table),
-        encodePathSegment(indexKey),
-    ].join("/");
-}
-function buildDatabaseRulesPath({ database, }) {
-    return [
-        "database",
-        encodePathSegment(database),
-    ].join("/");
-}
-function normalizeHttpMethodToRulesOperation(method) {
-    switch (method.toUpperCase()) {
-        case "GET":
-            return "get";
-        case "POST":
-            return "create";
-        case "PUT":
-            return "update";
-        case "DELETE":
-            return "delete";
-        default:
-            throw new Error(`Unsupported HTTP method for rules: ${method}`);
-    }
-}
-function normalizeRulesOperation(operation) {
-    switch (operation) {
-        case "read":
-            return "get";
-        case "write":
-            return "create";
-        case "get":
-        case "create":
-        case "update":
-        case "delete":
-            return operation;
-    }
-}
-function expandRulesOperation(operation) {
-    switch (operation) {
-        case "read":
-            return ["get"];
-        case "write":
-            return ["create", "update", "delete"];
-        case "get":
-        case "create":
-        case "update":
-        case "delete":
-            return [operation];
-    }
-}
-async function filterAllowedScope({ engine, database, scope, authentication, }) {
-    const allowed = [];
-    for (const item of scope) {
-        const operations = [];
-        for (const operationKey of item.operations) {
-            const expanded = expandRulesOperation(operationKey);
-            const results = await Promise.all(expanded.map((operation) => {
-                return engine.evaluate({
-                    path: buildRulesPath({
-                        database,
-                        table: item.table,
-                        indexKey: "*",
-                    }),
-                    operation,
-                    authentication,
-                });
-            }));
-            if (results.every((result) => result.allowed)) {
-                operations.push(operationKey);
-            }
-        }
-        if (operations.length > 0) {
-            allowed.push({
-                table: item.table,
-                operations,
-            });
-        }
-    }
-    return allowed;
-}
-async function resolveDatabaseTokenAccess({ engine, database, operations, scope = [], authentication, }) {
-    const path = buildDatabaseRulesPath({ database });
-    const directRead = await engine.evaluate({
-        path,
-        operation: "read",
-        authentication,
-        server: false,
-    });
-    const serverRead = directRead.allowed
-        ? directRead
-        : await engine.evaluate({
-            path,
-            operation: "read",
-            authentication,
-            server: true,
-        });
-    if (!serverRead.allowed) {
-        return undefined;
-    }
-    const directDatabaseWrite = await evaluateDatabaseWrite({
-        engine,
-        path,
-        authentication,
-        server: false,
-    });
-    const serverDatabaseWrite = directDatabaseWrite
-        ? true
-        : await evaluateDatabaseWrite({
-            engine,
-            path,
-            authentication,
-            server: true,
-        });
-    const scopes = await resolveScopeModes({
-        engine,
-        database,
-        scope,
-        authentication,
-    });
-    const readScopes = scopes.filter((item) => requiresRead(item.operations));
-    const writeScopes = scopes.filter((item) => requiresWrite(item.operations));
-    const requestedOperations = operations ?? [];
-    const requestsDatabaseRead = requiresRead(requestedOperations);
-    const requestsDatabaseWrite = requiresWrite(requestedOperations);
-    const hasTargets = scope.length > 0;
-    const readMode = resolveOverallMode(readScopes.map((item) => item.readMode ?? "none"), !hasTargets && (requestedOperations.length === 0 || requestsDatabaseRead)
-        ? directRead.allowed ? "direct" : "functions"
-        : "none");
-    let writeMode = resolveOverallMode(writeScopes.map((item) => item.writeMode ?? "none"), !hasTargets && (requestedOperations.length === 0 || requestsDatabaseWrite)
-        ? directDatabaseWrite ? "direct" : serverDatabaseWrite ? "functions" : "none"
-        : "none");
-    if (readMode === "functions" && writeMode === "direct") {
-        writeMode = serverDatabaseWrite ? "functions" : "none";
-    }
-    const authorization = resolveTokenAuthorization(readMode, writeMode);
-    return {
-        authorization,
-        readMode,
-        writeMode,
-        scopes,
-    };
-}
-async function resolveScopeModes({ engine, database, scope, authentication, }) {
-    const resolved = [];
-    for (const item of scope) {
-        const readMode = requiresRead(item.operations)
-            ? await resolveScopedOperationMode({
-                engine,
-                database,
-                table: item.table,
-                operation: "read",
-                authentication,
-            })
-            : undefined;
-        const writeMode = requiresWrite(item.operations)
-            ? await resolveScopedOperationMode({
-                engine,
-                database,
-                table: item.table,
-                operation: "write",
-                authentication,
-            })
-            : undefined;
-        resolved.push({
-            table: item.table,
-            operations: item.operations,
-            ...(readMode ? { readMode } : {}),
-            ...(writeMode ? { writeMode } : {}),
-        });
-    }
-    return resolved;
-}
-async function resolveScopedOperationMode({ engine, database, table, operation, authentication, }) {
-    const path = buildRulesPath({
-        database,
-        table,
-        indexKey: "*",
-    });
-    const expanded = expandRulesOperation(operation);
-    const direct = await Promise.all(expanded.map((item) => engine.evaluate({
-        path,
-        operation: item,
-        authentication,
-        server: false,
-    })));
-    const directAllowed = direct.every((result) => result.allowed);
-    const restricted = expanded.some((item) => engine.hasScopedRestriction({
-        database,
-        table,
-        operation: item,
-    }));
-    if (directAllowed && !restricted) {
-        return "direct";
-    }
-    const denied = expanded.some((item) => engine.hasScopedDeny({
-        database,
-        table,
-        operation: item,
-    }));
-    if (restricted && !denied) {
-        return "functions";
-    }
-    const server = await Promise.all(expanded.map((item) => engine.evaluate({
-        path,
-        operation: item,
-        authentication,
-        server: true,
-    })));
-    return server.every((result) => result.allowed) ? "functions" : "none";
-}
-function resolveOverallMode(scopedModes, fallback) {
-    if (scopedModes.length === 0) {
-        return fallback;
-    }
-    if (scopedModes.every((mode) => mode === "direct")) {
-        return "direct";
-    }
-    if (scopedModes.some((mode) => mode === "none")) {
-        return "none";
-    }
-    return "functions";
-}
-function resolveTokenAuthorization(readMode, writeMode) {
-    if (writeMode === "direct") {
-        return "full-access";
-    }
-    if (readMode === "direct") {
-        return "read-only";
-    }
-    return undefined;
-}
-function requiresRead(operations) {
-    return operations.some((operation) => expandRulesOperation(operation).includes("get"));
-}
-function requiresWrite(operations) {
-    return operations.some((operation) => {
-        const expanded = expandRulesOperation(operation);
-        return expanded.includes("create") || expanded.includes("update") || expanded.includes("delete");
-    });
-}
-async function evaluateDatabaseWrite({ engine, path, authentication, server, }) {
-    const results = await Promise.all(expandRulesOperation("write").map((operation) => {
-        return engine.evaluate({
-            path,
-            operation,
-            authentication,
-            server,
-        });
-    }));
-    return results.every((result) => result.allowed);
-}
-async function resolveDatabaseTokenAuthorization({ engine, database, authentication, }) {
-    const access = await resolveDatabaseTokenAccess({
-        engine,
-        database,
-        authentication,
-    });
-    return access?.authorization;
-}
-function normalizeRulesConfig(config) {
-    if (!config) {
-        return {
-            version: "1",
-            rules: {
-                "database/**": {
-                    read: "deny",
-                    write: "deny",
-                },
+    return new masamune_cloudflare_1.RulesEngine((0, masamune_cloudflare_1.isRulesConfig)(config) ? config : {
+        version: "1",
+        rules: {
+            "database/**": {
+                read: "deny",
+                write: "deny",
             },
-        };
-    }
-    if (typeof config.version !== "string" || !isRecord(config.rules)) {
-        throw new Error("Invalid rules config.");
-    }
-    for (const path of Object.keys(config.rules)) {
-        validateRulePath(path);
-    }
-    return config;
-}
-function matchRulePath(rulePath, requestPath) {
-    validateRulePath(rulePath);
-    const ruleSegments = splitPath(rulePath);
-    const requestSegments = splitPath(requestPath);
-    const params = {};
-    let literalSegments = 0;
-    let namedWildcardSegments = 0;
-    let wildcardSegments = 0;
-    let deepWildcardSegments = 0;
-    for (let i = 0; i < ruleSegments.length; i++) {
-        const ruleSegment = ruleSegments[i];
-        if (ruleSegment === "**") {
-            deepWildcardSegments = 1;
-            return {
-                matched: true,
-                rulePath,
-                params,
-                literalSegments,
-                namedWildcardSegments,
-                wildcardSegments,
-                deepWildcardSegments,
-                matchedSegments: requestSegments.length,
-            };
-        }
-        const requestSegment = requestSegments[i];
-        if (requestSegment === undefined) {
-            return createUnmatched(rulePath);
-        }
-        if (ruleSegment === "*") {
-            wildcardSegments++;
-            continue;
-        }
-        const paramName = parseNamedPathParam(ruleSegment);
-        if (paramName) {
-            params[paramName] = requestSegment;
-            namedWildcardSegments++;
-            wildcardSegments++;
-            continue;
-        }
-        if (ruleSegment !== requestSegment) {
-            return createUnmatched(rulePath);
-        }
-        literalSegments++;
-    }
-    if (ruleSegments.length !== requestSegments.length) {
-        return createUnmatched(rulePath);
-    }
-    return {
-        matched: true,
-        rulePath,
-        params,
-        literalSegments,
-        namedWildcardSegments,
-        wildcardSegments,
-        deepWildcardSegments,
-        matchedSegments: requestSegments.length,
-    };
-}
-function compareRulePathMatch(a, b) {
-    if (a.literalSegments !== b.literalSegments) {
-        return b.literalSegments - a.literalSegments;
-    }
-    if (a.deepWildcardSegments !== b.deepWildcardSegments) {
-        return a.deepWildcardSegments - b.deepWildcardSegments;
-    }
-    if (a.namedWildcardSegments !== b.namedWildcardSegments) {
-        return b.namedWildcardSegments - a.namedWildcardSegments;
-    }
-    if (a.wildcardSegments !== b.wildcardSegments) {
-        return a.wildcardSegments - b.wildcardSegments;
-    }
-    if (a.matchedSegments !== b.matchedSegments) {
-        return b.matchedSegments - a.matchedSegments;
-    }
-    return a.rulePath.localeCompare(b.rulePath);
-}
-function resolveInheritedRule(matches) {
-    const inherited = {};
-    const inheritedParams = {};
-    let rulePath = matches[0]?.rulePath ?? "";
-    for (const match of [...matches].reverse()) {
-        if (!match.entry) {
-            continue;
-        }
-        rulePath = match.rulePath;
-        for (const [operation, access] of Object.entries(match.entry)) {
-            inherited[operation] = access;
-            inheritedParams[operation] = match.params;
-        }
-    }
-    return {
-        rulePath,
-        entry: inherited,
-        params: inheritedParams,
-    };
-}
-function resolveAccessRule(entry, params, operation) {
-    for (const operationKey of resolveRulesOperation(operation)) {
-        const access = entry[operationKey];
-        if (access) {
-            return {
-                access,
-                params: params[operationKey] ?? {},
-            };
-        }
-    }
-    return undefined;
-}
-function resolveRulesOperation(operation) {
-    switch (operation) {
-        case "get":
-            return ["get", "read"];
-        case "create":
-            return ["create", "write"];
-        case "update":
-            return ["update", "write"];
-        case "delete":
-            return ["delete", "write"];
-    }
-}
-async function evaluateAccessRule(access, authentication, fetchDocument, params = {}, server = false) {
-    switch (access) {
-        case "deny":
-            return false;
-        case "allow":
-            return true;
-        case "authenticated":
-            return !!authentication?.uid;
-        default:
-            break;
-    }
-    if ("serverOnly" in access && access.serverOnly === true && !server) {
-        return false;
-    }
-    switch (access.type) {
-        case "serverOnly":
-            return server;
-        case "fieldMatch": {
-            const uid = authentication?.uid;
-            if (!uid || !fetchDocument) {
-                return false;
-            }
-            const document = await fetchDocument();
-            return document?.[access.field] === uid;
-        }
-        case "pathParamMatch": {
-            const uid = authentication?.uid;
-            return !!uid && params[access.param] === uid;
-        }
-    }
-}
-function validateRulePath(path) {
-    if (path.length === 0 || path.startsWith("/") || path.endsWith("/")) {
-        throw new Error(`Invalid rule path: ${path}`);
-    }
-    const segments = path.split("/");
-    if (segments.some((segment) => segment.length === 0)) {
-        throw new Error(`Invalid rule path: ${path}`);
-    }
-    const paramNames = new Set();
-    for (const segment of segments) {
-        if ((segment.startsWith("{") || segment.endsWith("}")) && !parseNamedPathParam(segment)) {
-            throw new Error(`Invalid path parameter segment '${segment}' in rule path: ${path}`);
-        }
-        const paramName = parseNamedPathParam(segment);
-        if (!paramName) {
-            continue;
-        }
-        if (paramNames.has(paramName)) {
-            throw new Error(`Duplicate path parameter '${paramName}' in rule path: ${path}`);
-        }
-        paramNames.add(paramName);
-    }
-    const deepWildcardIndex = segments.indexOf("**");
-    if (deepWildcardIndex >= 0 && deepWildcardIndex !== segments.length - 1) {
-        throw new Error(`'**' must be the last segment in rule path: ${path}`);
-    }
-}
-function isRulePathInTableScope(rulePath, database, table) {
-    const segments = splitPath(rulePath);
-    if (segments.length <= 4) {
-        return false;
-    }
-    return segmentMatches(segments[0], "database") &&
-        segmentMatches(segments[1], database) &&
-        segmentMatches(segments[2], "table") &&
-        segmentMatches(segments[3], table);
-}
-function segmentMatches(ruleSegment, value) {
-    if (!ruleSegment) {
-        return false;
-    }
-    if (ruleSegment === "**") {
-        return true;
-    }
-    return ruleSegment === "*" || !!parseNamedPathParam(ruleSegment) || ruleSegment === value;
-}
-function isDirectSafeScopeAccess(access) {
-    return access === "allow";
-}
-function splitPath(path) {
-    if (path.length === 0 || path.startsWith("/") || path.endsWith("/")) {
-        return [];
-    }
-    return path.split("/");
-}
-function createUnmatched(rulePath) {
-    return {
-        matched: false,
-        rulePath,
-        params: {},
-        literalSegments: 0,
-        namedWildcardSegments: 0,
-        wildcardSegments: 0,
-        deepWildcardSegments: 0,
-        matchedSegments: 0,
-    };
-}
-function parseNamedPathParam(segment) {
-    const match = /^\{([A-Za-z_][A-Za-z0-9_]*)\}$/.exec(segment);
-    return match?.[1];
-}
-function encodePathSegment(segment) {
-    if (segment.length === 0 || segment.includes("/")) {
-        throw new Error(`Invalid path segment: ${segment}`);
-    }
-    return segment;
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null;
+        },
+    });
 }
 //# sourceMappingURL=rules.js.map

package/dist/lib/rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/lib/rules.ts"],"names":[],"mappings":";;;AAuIA,wDAEC;AAED,wCAgBC;AAED,wDASC;AAED,kFAaC;AAED,0DAYC;AAED,oDAYC;AAED,gDAuCC;AAED,gEA+EC;AA8JD,8EAeC;AAzcD,MAAa,WAAW;IACtB,YAAY,MAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAEgB,MAAM,CAAc;IAErC,KAAK,CAAC,QAAQ,CAAC,KAA2B;QACxC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;aAC3C,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;aACtD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;aAChC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5D,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;YACxC,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC,CAAC,CAAC;QACL,MAAM,cAAc,GAAG,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,MAAM,kBAAkB,CAC/B,cAAc,CAAC,MAAM,EACrB,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,aAAa,EACnB,cAAc,CAAC,MAAM,EACrB,KAAK,CAAC,MAAM,KAAK,IAAI,CACtB;YACD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,MAAM,EAAE,cAAc,CAAC,MAAM;SAC9B,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,EACnB,QAAQ,EACR,KAAK,EACL,SAAS,GAKV;QACC,MAAM,UAAU,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;gBACvD,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC;YAChE,IAAI,CAAC,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/C,SAAS;YACX,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,EACZ,QAAQ,EACR,KAAK,EACL,SAAS,GAKV;QACC,MAAM,UAAU,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;gBACvD,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC;YAChE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAtFD,kCAsFC;AAED,SAAgB,sBAAsB,CAAC,MAAgC;IACrE,OAAO,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,SAAgB,cAAc,CAAC,EAC7B,QAAQ,EACR,KAAK,EACL,QAAQ,GAKT;IACC,OAAO;QACL,UAAU;QACV,iBAAiB,CAAC,QAAQ,CAAC;QAC3B,OAAO;QACP,iBAAiB,CAAC,KAAK,CAAC;QACxB,iBAAiB,CAAC,QAAQ,CAAC;KAC5B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAgB,sBAAsB,CAAC,EACrC,QAAQ,GAGT;IACC,OAAO;QACL,UAAU;QACV,iBAAiB,CAAC,QAAQ,CAAC;KAC5B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAgB,mCAAmC,CAAC,MAAc;IAChE,QAAQ,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,KAAK;YACR,OAAO,KAAK,CAAC;QACf,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,QAAQ,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB;YACE,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAgB,uBAAuB,CAAC,SAA6C;IACnF,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,KAAK,CAAC;QACf,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC;QAClB,KAAK,KAAK,CAAC;QACX,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAgB,oBAAoB,CAAC,SAA4B;IAC/D,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxC,KAAK,KAAK,CAAC;QACX,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,EACvC,MAAM,EACN,QAAQ,EACR,KAAK,EACL,cAAc,GAMf;IACC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;gBAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC;oBACrB,IAAI,EAAE,cAAc,CAAC;wBACnB,QAAQ;wBACR,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,QAAQ,EAAE,GAAG;qBACd,CAAC;oBACF,SAAS;oBACT,cAAc;iBACf,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,CAAC;YACJ,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,MAA6B,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrE,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAAC,EAC/C,MAAM,EACN,QAAQ,EACR,UAAU,EACV,KAAK,GAAG,EAAE,EACV,cAAc,GAOf;IACC,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;QACvC,IAAI;QACJ,SAAS,EAAE,MAAM;QACjB,cAAc;QACd,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO;QACnC,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC;YACpB,IAAI;YACJ,SAAS,EAAE,MAAM;YACjB,cAAc;YACd,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACP,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,mBAAmB,GAAG,MAAM,qBAAqB,CAAC;QACtD,MAAM;QACN,IAAI;QACJ,cAAc;QACd,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,mBAAmB;QAC7C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,qBAAqB,CAAC;YAC1B,MAAM;YACN,IAAI;YACJ,cAAc;YACd,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACP,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,MAAM;QACN,QAAQ;QACR,KAAK;QACL,cAAc;KACf,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5E,MAAM,mBAAmB,GAAG,UAAU,IAAI,EAAE,CAAC;IAC7C,MAAM,oBAAoB,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;IAC/D,MAAM,qBAAqB,GAAG,aAAa,CAAC,mBAAmB,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,kBAAkB,CACjC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,EACjD,CAAC,UAAU,IAAI,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,IAAI,oBAAoB,CAAC;QACvE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW;QAC7C,CAAC,CAAC,MAAM,CACX,CAAC;IACF,IAAI,SAAS,GAAG,kBAAkB,CAChC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,EACnD,CAAC,UAAU,IAAI,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,IAAI,qBAAqB,CAAC;QACxE,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;QAC7E,CAAC,CAAC,MAAM,CACX,CAAC;IACF,IAAI,QAAQ,KAAK,WAAW,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvD,SAAS,GAAG,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;IACzD,CAAC;IACD,MAAM,aAAa,GAAG,yBAAyB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACrE,OAAO;QACL,aAAa;QACb,QAAQ;QACR,SAAS;QACT,MAAM;KACP,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,EAC/B,MAAM,EACN,QAAQ,EACR,KAAK,EACL,cAAc,GAMf;IACC,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;YAC5C,CAAC,CAAC,MAAM,0BAA0B,CAAC;gBAC/B,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,MAAM;gBACjB,cAAc;aACf,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;YAC9C,CAAC,CAAC,MAAM,0BAA0B,CAAC;gBAC/B,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,OAAO;gBAClB,cAAc;aACf,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC;QACd,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,EACxC,MAAM,EACN,QAAQ,EACR,KAAK,EACL,SAAS,EACT,cAAc,GAOf;IACC,MAAM,IAAI,GAAG,cAAc,CAAC;QAC1B,QAAQ;QACR,KAAK;QACL,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtE,IAAI;QACJ,SAAS,EAAE,IAAI;QACf,cAAc;QACd,MAAM,EAAE,KAAK;KACd,CAAC,CAAC,CAAC,CAAC;IACL,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC;QACrE,QAAQ;QACR,KAAK;QACL,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC,CAAC;IACJ,IAAI,aAAa,IAAI,CAAC,UAAU,EAAE,CAAC;QACjC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;QAC1D,QAAQ;QACR,KAAK;QACL,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC,CAAC;IACJ,IAAI,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtE,IAAI;QACJ,SAAS,EAAE,IAAI;QACf,cAAc;QACd,MAAM,EAAE,IAAI;KACb,CAAC,CAAC,CAAC,CAAC;IACL,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;AACzE,CAAC;AAED,SAAS,kBAAkB,CACzB,WAAmC,EACnC,QAA8B;IAE9B,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACnD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,yBAAyB,CAChC,QAA8B,EAC9B,SAA+B;IAE/B,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,UAA+B;IACnD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,aAAa,CAAC,UAA+B;IACpD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACnC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACjD,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,EACnC,MAAM,EACN,IAAI,EACJ,cAAc,EACd,MAAM,GAMP;IACC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC9C,OAAO,MAAM,CAAC,QAAQ,CAAC;YACrB,IAAI;YACJ,SAAS;YACT,cAAc;YACd,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IACF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACnD,CAAC;AAEM,KAAK,UAAU,iCAAiC,CAAC,EACtD,MAAM,EACN,QAAQ,EACR,cAAc,GAKf;IACC,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;QAC9C,MAAM;QACN,QAAQ;QACR,cAAc;KACf,CAAC,CAAC;IACH,OAAO,MAAM,EAAE,aAAa,CAAC;AAC/B,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAgC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,GAAG;YACZ,KAAK,EAAE;gBACL,aAAa,EAAE;oBACb,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,MAAM;iBACd;aACF;SACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,WAAmB;IAC1D,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,eAAe,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,qBAAqB,GAAG,CAAC,CAAC;IAC9B,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,oBAAoB,GAAG,CAAC,CAAC;YACzB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ;gBACR,MAAM;gBACN,eAAe;gBACf,qBAAqB;gBACrB,gBAAgB;gBAChB,oBAAoB;gBACpB,eAAe,EAAE,eAAe,CAAC,MAAM;aACxC,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;YACxB,gBAAgB,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC;YACnC,qBAAqB,EAAE,CAAC;YACxB,gBAAgB,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;YACnC,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QACD,eAAe,EAAE,CAAC;IACpB,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,QAAQ;QACR,MAAM;QACN,eAAe;QACf,qBAAqB;QACrB,gBAAgB;QAChB,oBAAoB;QACpB,eAAe,EAAE,eAAe,CAAC,MAAM;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAgB,EAAE,CAAgB;IAC9D,IAAI,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;QAC5C,OAAO,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,CAAC,oBAAoB,KAAK,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACtD,OAAO,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,oBAAoB,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,CAAC,qBAAqB,KAAK,CAAC,CAAC,qBAAqB,EAAE,CAAC;QACxD,OAAO,CAAC,CAAC,qBAAqB,GAAG,CAAC,CAAC,qBAAqB,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;QAC5C,OAAO,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC;IAC/C,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAIG;IAMH,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,MAAM,eAAe,GAA+D,EAAE,CAAC;IACvF,IAAI,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC1B,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9D,SAAS,CAAC,SAA8B,CAAC,GAAG,MAAM,CAAC;YACnD,eAAe,CAAC,SAA8B,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO;QACL,QAAQ;QACR,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,eAAe;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAiB,EACjB,MAAkE,EAClE,SAAyB;IAKzB,KAAK,MAAM,YAAY,IAAI,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,MAAM;gBACN,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE;aACnC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAyB;IACtD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,KAAK,QAAQ;YACX,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAuB,EACvB,cAAkD,EAClD,aAAuF,EACvF,SAAiC,EAAE,EACnC,MAAM,GAAG,KAAK;IAEd,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,KAAK,CAAC;QACf,KAAK,OAAO;YACV,OAAO,IAAI,CAAC;QACd,KAAK,eAAe;YAClB,OAAO,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC;QAC/B;YACE,MAAM;IACV,CAAC;IACD,IAAI,YAAY,IAAI,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,YAAY;YACf,OAAO,MAAM,CAAC;QAChB,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,GAAG,GAAG,cAAc,EAAE,GAAG,CAAC;YAChC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;YACvC,OAAO,QAAQ,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC;QAC1C,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,GAAG,GAAG,cAAc,EAAE,GAAG,CAAC;YAChC,OAAO,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC;QAC/C,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,mBAAmB,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,mBAAmB,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,iBAAiB,IAAI,CAAC,IAAI,iBAAiB,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAAgB,EAChB,QAAgB,EAChB,KAAa;IAEb,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;QAC5C,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;QACrC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;QACpC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CAAC,WAA+B,EAAE,KAAa;IACpE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,WAAW,KAAK,GAAG,IAAI,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,WAAW,KAAK,KAAK,CAAC;AAC5F,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAuB;IACtD,OAAO,MAAM,KAAK,OAAO,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO;QACL,OAAO,EAAE,KAAK;QACd,QAAQ;QACR,MAAM,EAAE,EAAE;QACV,eAAe,EAAE,CAAC;QAClB,qBAAqB,EAAE,CAAC;QACxB,gBAAgB,EAAE,CAAC;QACnB,oBAAoB,EAAE,CAAC;QACvB,eAAe,EAAE,CAAC;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC"}
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/lib/rules.ts"],"names":[],"mappings":";;;AAwBA,wDAYC;AApCD,wEAOwC;AAExC,sEAUwC;AATtC,6HAAA,sBAAsB,OAAA;AACtB,qHAAA,cAAc,OAAA;AACd,2HAAA,oBAAoB,OAAA;AACpB,yHAAA,kBAAkB,OAAA;AAClB,0IAAA,mCAAmC,OAAA;AACnC,8HAAA,uBAAuB,OAAA;AACvB,iIAAA,0BAA0B,OAAA;AAC1B,wIAAA,iCAAiC,OAAA;AACjC,kHAAA,WAAW,OAAA;AAMb,SAAgB,sBAAsB,CACpC,MAA4D;IAE5D,OAAO,IAAI,iCAAW,CAAC,IAAA,mCAAa,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,OAAO,EAAE,GAAG;QACZ,KAAK,EAAE;YACL,aAAa,EAAE;gBACb,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,MAAM;aACd;SACF;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/types.d.ts

@@ -1,29 +1,11 @@
-import { WorkersOptions } from "@mathrunet/masamune_cloudflare";
+import { RulesAccessMode, RulesAccessRule, RulesConfig, RulesEntry, RulesOperation, RulesOperationAlias, RulesOperationKey, RulesTokenTargetInput, RulesTokenTargetOutput, WorkersAuthContext, WorkersOptions } from "@mathrunet/masamune_cloudflare";
 export type TursoCrudMethod = "GET" | "POST" | "PUT" | "DELETE";
-export type RulesOperation = "get" | "create" | "update" | "delete";
-export type RulesOperationAlias = "read" | "write";
-export type RulesOperationKey = RulesOperation | RulesOperationAlias;
-export type RulesAccessRule = "deny" | "allow" | "authenticated" | {
-    type: "serverOnly";
-} | {
-    type: "fieldMatch";
-    field: string;
-    serverOnly?: boolean | undefined;
-} | {
-    type: "pathParamMatch";
-    param: string;
-    serverOnly?: boolean | undefined;
-};
-export type RulesEntry = Partial<Record<RulesOperationKey, RulesAccessRule>>;
-export interface RulesConfig {
-    version: string;
-    rules: Record<string, RulesEntry>;
-}
+export type { RulesAccessRule, RulesConfig, RulesEntry, RulesOperation, RulesOperationAlias, RulesOperationKey, };
 export interface TursoDatabaseConnection {
     url: string;
     authToken?: string | undefined;
 }
-export interface TursoWorkersOptions extends Omit<WorkersOptions, "rules"> {
+export interface TursoWorkersOptions extends WorkersOptions {
     databaseNamePrefix?: string | undefined;
     organizationName?: string | undefined;
     groupName?: string | undefined;
@@ -32,7 +14,6 @@ export interface TursoWorkersOptions extends Omit<WorkersOptions, "rules"> {
     autoCreateTable?: boolean | undefined;
     autoMigrateAddColumns?: boolean | undefined;
     maxTtlSeconds?: number | undefined;
-    rules?: RulesConfig | undefined;
 }
 export interface TursoRequestBody {
     database?: string | undefined;
@@ -53,15 +34,9 @@ export interface TursoOrderCondition {
     key?: string | undefined;
     descending?: boolean | undefined;
 }
-export interface TursoTokenScopeInput {
-    table: string;
-    operations: RulesOperationKey[];
-}
-export type TursoTokenAccessMode = "none" | "functions" | "direct";
-export interface TursoTokenScopeOutput extends TursoTokenScopeInput {
-    readMode?: TursoTokenAccessMode | undefined;
-    writeMode?: TursoTokenAccessMode | undefined;
-}
+export type TursoTokenAccessMode = RulesAccessMode;
+export type TursoTokenScopeInput = RulesTokenTargetInput;
+export type TursoTokenScopeOutput = RulesTokenTargetOutput;
 export interface TursoTokenRequestBody {
     database?: string | undefined;
     operations?: RulesOperationKey[] | undefined;
@@ -69,7 +44,4 @@ export interface TursoTokenRequestBody {
     scope?: TursoTokenScopeInput[] | undefined;
     ttlSeconds?: number | undefined;
 }
-export interface AuthenticationContext {
-    uid?: string | undefined;
-    token?: unknown;
-}
+export type AuthenticationContext = WorkersAuthContext;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mathrunet/masamune_cloudflare_turso",
-  "version": "3.2.6",
+  "version": "3.2.7",
   "description": "Server-side package of the Masamune framework for working with Turso via Cloudflare.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -41,7 +41,7 @@
   "homepage": "https://github.com/mathrunet/node_masamune#readme",
   "dependencies": {
     "@mathrunet/masamune": "^3.10.2",
-    "@mathrunet/masamune_cloudflare": "^3.1.7",
+    "@mathrunet/masamune_cloudflare": "^3.1.8",
     "@tursodatabase/serverless": "^1.2.3",
     "hono": "^4.12.27",
     "typescript": "^5.9.2"