@objectstack/formula 10.2.0 → 11.0.0

package/dist/index.mjs

@@ -2,6 +2,7 @@
 import { Environment } from "@marcbachmann/cel-js";
 
 // src/stdlib.ts
+import { createEvalUser } from "@objectstack/spec";
 function partsInTz(d, tz) {
   const parts = new Intl.DateTimeFormat("en-US", {
     timeZone: tz,
@@ -122,13 +123,37 @@ function registerNumericCoercions(env) {
   }
   return env;
 }
+function toEvalUser(u) {
+  const legacyRole = typeof u.role === "string" && u.role ? [u.role] : [];
+  const roles = Array.isArray(u.roles) ? u.roles : [];
+  const canonical = createEvalUser({
+    id: u.id,
+    name: typeof u.name === "string" ? u.name : void 0,
+    email: typeof u.email === "string" ? u.email : void 0,
+    roles: [...roles, ...legacyRole],
+    organizationId: typeof u.organizationId === "string" || u.organizationId === null ? u.organizationId : void 0
+  });
+  if (typeof u.role === "string" && u.role) {
+    canonical.role = u.role;
+  }
+  return canonical;
+}
 function buildScope(ctx) {
   const scope = {};
   if (ctx.record !== void 0) scope.record = ctx.record;
   if (ctx.previous !== void 0) scope.previous = ctx.previous;
   if (ctx.input !== void 0) scope.input = ctx.input;
   const os = {};
-  if (ctx.user !== void 0) os.user = ctx.user;
+  if (ctx.user !== void 0) {
+    const currentUser = toEvalUser(ctx.user);
+    scope.current_user = currentUser;
+    scope.user = currentUser;
+    scope.ctx = {
+      ...typeof scope.ctx === "object" && scope.ctx !== null ? scope.ctx : {},
+      user: currentUser
+    };
+    os.user = currentUser;
+  }
   if (ctx.org !== void 0) os.org = ctx.org;
   if (ctx.env !== void 0) os.env = ctx.env;
   if (Object.keys(os).length > 0) scope.os = os;
@@ -218,6 +243,17 @@ function firstUndeclaredReference(source, knownFields = []) {
   }
   return null;
 }
+function inferCelType(source, knownFields = []) {
+  if (typeof source !== "string" || !source.trim()) return null;
+  try {
+    const env = knownFields.length === 0 ? recordScopeEnv ?? (recordScopeEnv = buildScopedEnv([])) : buildScopedEnv(knownFields);
+    const result = env.parse(source).check?.();
+    if (!result || result.valid === false) return null;
+    return typeof result.type === "string" ? result.type : null;
+  } catch {
+    return null;
+  }
+}
 function coerce(value) {
   if (typeof value === "bigint") {
     if (value >= BigInt(Number.MIN_SAFE_INTEGER) && value <= BigInt(Number.MAX_SAFE_INTEGER)) {
@@ -1167,6 +1203,30 @@ function levenshtein(a, b) {
   }
   return dp[m];
 }
+var ROLE_IN_RE = /(['"])([a-z0-9_]+)\1\s+in\s+(?:current_user|user|ctx\.user)\.roles\b/g;
+var ROLE_CONTAINS_RE = /(?:current_user|user|ctx\.user)\.roles\s*\.\s*contains\(\s*(['"])([a-z0-9_]+)\1\s*\)/g;
+var ROLE_EXISTS_RE = /(?:current_user|user|ctx\.user)\.roles\s*\.\s*exists\s*\([^,)]{0,64},[^)=]{0,128}==\s*(['"])([a-z0-9_]+)\1/g;
+var ROLE_EQ_RE = /(?:current_user|user|ctx\.user)\.role\s*==\s*(['"])([a-z0-9_]+)\1/g;
+function checkRoleCatalog(source, schema, errors) {
+  const catalog = schema?.roleCatalog;
+  if (!catalog || catalog.length === 0) return;
+  const known = new Set(catalog);
+  const seen = /* @__PURE__ */ new Set();
+  for (const re of [ROLE_IN_RE, ROLE_CONTAINS_RE, ROLE_EXISTS_RE, ROLE_EQ_RE]) {
+    re.lastIndex = 0;
+    let m;
+    while ((m = re.exec(source)) !== null) {
+      const name = m[2];
+      if (known.has(name) || seen.has(name)) continue;
+      seen.add(name);
+      const suggestion = nearest(name, catalog);
+      errors.push({
+        source,
+        message: `unknown role \`${name}\` \u2014 not a defined role` + (suggestion ? `; did you mean \`${suggestion}\`?` : ".") + ` Valid roles: ${catalog.join(", ")}.`
+      });
+    }
+  }
+}
 function validateExpression(role, input, schema) {
   const { dialect, source } = toSource2(input);
   const errors = [];
@@ -1198,6 +1258,7 @@ function validateExpression(role, input, schema) {
     });
   } else {
     checkFieldExistence(source, schema, errors);
+    checkRoleCatalog(source, schema, errors);
     if (schema?.scope === "record") {
       const bare = firstUndeclaredReference(source);
       if (bare) {
@@ -1230,10 +1291,32 @@ function introspectScope(role, schema) {
   return {
     dialect: expectedDialect(role),
     fields: [...schema?.fields ?? []],
-    roots: ["record", "previous", "input", "os", "vars"],
+    roots: ["record", "previous", "input", "os", "current_user", "user", "vars"],
+    roles: [...schema?.roleCatalog ?? []],
     functions: CEL_STDLIB_FUNCTIONS
   };
 }
+function celTypeToValueType(celType) {
+  switch (celType) {
+    case "int":
+    case "uint":
+    case "double":
+      return "number";
+    case "string":
+      return "text";
+    case "bool":
+      return "boolean";
+    case "google.protobuf.Timestamp":
+      return "date";
+    default:
+      return "unknown";
+  }
+}
+function inferExpressionType(input, schema) {
+  const { source } = toSource2(input);
+  if (!source.trim()) return "unknown";
+  return celTypeToValueType(inferCelType(source, schema?.fields));
+}
 var CEL_STDLIB_FUNCTIONS = [
   // Dates (registered stdlib)
   "now",
@@ -1287,6 +1370,7 @@ export {
   formatValue,
   getEngine,
   hasDialect,
+  inferExpressionType,
   introspectScope,
   isPushdownableCel,
   lowerCelAst,