@prosopo/user-access-policy 3.12.8 → 3.12.10

package/dist/redis/reader/redisRulesQuery.js

@@ -1,125 +1,82 @@
-import { GLOBAL_CLIENT_SCOPE_SENTINEL, AccessPolicyType } from "../../rule.js";
-import { userScopeSchema } from "../../ruleInput/userScopeInput.js";
+import "../../_virtual/_rolldown/runtime.js";
 import { FilterScopeMatch } from "../../rulesStorage.js";
-const escapeTagValue = (value) => {
-  return value.replace(/([,.<>{}\[\]"':;!@#$%^&*()\-+=~|/\\])/g, "\\$1");
-};
-const REDIS_QUERY_DIALECT = 2;
-const userIpQueries = {
-  numericIp: (value, scope) => {
-    if (void 0 !== value) {
-      return `( @numericIp:[${value} ${value}] | ( @numericIpMaskMin:[-inf ${value}] @numericIpMaskMax:[${value} +inf] ) )`;
-    }
-    if (scope.numericIpMaskMin === void 0 && scope.numericIpMaskMax === void 0) {
-      return "ismissing(@numericIp) ismissing(@numericIpMaskMin) ismissing(@numericIpMaskMax)";
-    }
-    return "";
-  },
-  numericIpMaskMin: (value, scope) => {
-    if (scope.numericIp !== void 0) {
-      return "";
-    }
-    if (value === void 0 && scope.numericIpMaskMax === void 0) {
-      return "";
-    }
-    return value !== void 0 ? `@numericIpMaskMin:[-inf ${value}]` : "ismissing(@numericIpMaskMin)";
-  },
-  numericIpMaskMax: (value, scope) => {
-    if (scope.numericIp !== void 0) {
-      return "";
-    }
-    if (value === void 0 && scope.numericIpMaskMin === void 0) {
-      return "";
-    }
-    return value !== void 0 ? `@numericIpMaskMax:[${value} +inf]` : "ismissing(@numericIpMaskMax)";
-  }
+import { AccessPolicyType, GLOBAL_CLIENT_SCOPE_SENTINEL } from "../../rule.js";
+import { userScopeSchema } from "../../ruleInput/userScopeInput.js";
+//#region src/redis/reader/redisRulesQuery.ts
+/**
+* Escapes special characters for Redis TAG field queries.
+* Redis TAG fields treat these characters as special and they must be escaped with a backslash.
+*/
+var escapeTagValue = (value) => {
+	return value.replace(/([,.<>{}\[\]"':;!@#$%^&*()\-+=~|/\\])/g, "\\$1");
 };
-const getUserScopeQuery = (userScope, FilterScopeMatchType, matchingFieldsOnly) => {
-  let scopeEntries = Object.entries(userScope);
-  let scopeJoinType = " ";
-  if (FilterScopeMatchType === FilterScopeMatch.Greedy) {
-    scopeEntries = scopeEntries.filter(
-      ([_, value]) => value !== void 0
-    );
-    scopeJoinType = " | ";
-  }
-  if (matchingFieldsOnly) {
-    const scopeMap = new Map(scopeEntries);
-    if (scopeMap.has("numericIp") && scopeMap.get("numericIp") === void 0) {
-      scopeMap.set("numericIpMaskMin", void 0);
-      scopeMap.set("numericIpMaskMax", void 0);
-    }
-    for (const name of Object.keys(userScopeSchema.shape)) {
-      if (!scopeMap.has(name)) {
-        scopeMap.set(name, void 0);
-      }
-    }
-    scopeEntries = [...scopeMap.entries()];
-  }
-  const scopeObj = Object.fromEntries(scopeEntries);
-  return scopeEntries.map(
-    ([scopeFieldName, scopeFieldValue]) => getUserScopeFieldQuery(
-      scopeFieldName,
-      scopeFieldValue,
-      FilterScopeMatchType,
-      scopeObj
-    )
-  ).filter(Boolean).join(scopeJoinType);
+var REDIS_QUERY_DIALECT = 2;
+var userIpQueries = {
+	numericIp: (value, scope) => {
+		if (void 0 !== value) return `( @numericIp:[${value} ${value}] | ( @numericIpMaskMin:[-inf ${value}] @numericIpMaskMax:[${value} +inf] ) )`;
+		if (scope.numericIpMaskMin === void 0 && scope.numericIpMaskMax === void 0) return "ismissing(@numericIp) ismissing(@numericIpMaskMin) ismissing(@numericIpMaskMax)";
+		return "";
+	},
+	numericIpMaskMin: (value, scope) => {
+		if (scope.numericIp !== void 0) return "";
+		if (value === void 0 && scope.numericIpMaskMax === void 0) return "";
+		return value !== void 0 ? `@numericIpMaskMin:[-inf ${value}]` : "ismissing(@numericIpMaskMin)";
+	},
+	numericIpMaskMax: (value, scope) => {
+		if (scope.numericIp !== void 0) return "";
+		if (value === void 0 && scope.numericIpMaskMin === void 0) return "";
+		return value !== void 0 ? `@numericIpMaskMax:[${value} +inf]` : "ismissing(@numericIpMaskMax)";
+	}
 };
-const FIELDS_REQUIRING_ESCAPE = /* @__PURE__ */ new Set([
-  "coords"
-]);
-const NUMERIC_FIELDS = /* @__PURE__ */ new Set(["asn"]);
-const getUserScopeFieldQuery = (fieldName, fieldValue, scopeMatch, fullScope) => {
-  if (fieldName in userIpQueries) {
-    const queryBuilder = userIpQueries[fieldName];
-    return queryBuilder(fieldValue, fullScope);
-  }
-  if (void 0 === fieldValue) {
-    return `ismissing(@${fieldName})`;
-  }
-  const stringValue = String(fieldValue);
-  if (NUMERIC_FIELDS.has(fieldName)) {
-    return `@${fieldName}:[${stringValue} ${stringValue}]`;
-  }
-  const queryValue = FIELDS_REQUIRING_ESCAPE.has(fieldName) ? escapeTagValue(stringValue) : stringValue;
-  return `@${fieldName}:{${queryValue}}`;
+var getUserScopeQuery = (userScope, FilterScopeMatchType, matchingFieldsOnly) => {
+	let scopeEntries = Object.entries(userScope);
+	let scopeJoinType = " ";
+	if (FilterScopeMatchType === FilterScopeMatch.Greedy) {
+		scopeEntries = scopeEntries.filter(([_, value]) => value !== void 0);
+		scopeJoinType = " | ";
+	}
+	if (matchingFieldsOnly) {
+		const scopeMap = new Map(scopeEntries);
+		if (scopeMap.has("numericIp") && scopeMap.get("numericIp") === void 0) {
+			scopeMap.set("numericIpMaskMin", void 0);
+			scopeMap.set("numericIpMaskMax", void 0);
+		}
+		for (const name of Object.keys(userScopeSchema.shape)) if (!scopeMap.has(name)) scopeMap.set(name, void 0);
+		scopeEntries = [...scopeMap.entries()];
+	}
+	const scopeObj = Object.fromEntries(scopeEntries);
+	return scopeEntries.map(([scopeFieldName, scopeFieldValue]) => getUserScopeFieldQuery(scopeFieldName, scopeFieldValue, FilterScopeMatchType, scopeObj)).filter(Boolean).join(scopeJoinType);
 };
-const GLOBAL_MATCH_CLAUSE_INNER = `@clientId:{${GLOBAL_CLIENT_SCOPE_SENTINEL}} | ismissing(@clientId)`;
-const getPolicyScopeQuery = (policyScope, scopeMatch) => {
-  const clientId = policyScope?.clientId;
-  if ("string" === typeof clientId) {
-    return FilterScopeMatch.Exact === scopeMatch ? `@clientId:{${clientId}}` : `( @clientId:{${clientId}} | ${GLOBAL_MATCH_CLAUSE_INNER} )`;
-  }
-  return FilterScopeMatch.Exact === scopeMatch ? `( ${GLOBAL_MATCH_CLAUSE_INNER} )` : "";
+var FIELDS_REQUIRING_ESCAPE = /* @__PURE__ */ new Set(["coords"]);
+var NUMERIC_FIELDS = /* @__PURE__ */ new Set(["asn"]);
+var getUserScopeFieldQuery = (fieldName, fieldValue, scopeMatch, fullScope) => {
+	if (fieldName in userIpQueries) {
+		const queryBuilder = userIpQueries[fieldName];
+		return queryBuilder(fieldValue, fullScope);
+	}
+	if (void 0 === fieldValue) return `ismissing(@${fieldName})`;
+	const stringValue = String(fieldValue);
+	if (NUMERIC_FIELDS.has(fieldName)) return `@${fieldName}:[${stringValue} ${stringValue}]`;
+	return `@${fieldName}:{${FIELDS_REQUIRING_ESCAPE.has(fieldName) ? escapeTagValue(stringValue) : stringValue}}`;
 };
-const getRulesRedisQuery = (filter, matchingFieldsOnly) => {
-  const { policyScope, userScope } = filter;
-  const queryParts = [];
-  if (filter.groupId) {
-    queryParts.push(`@groupId:{${filter.groupId}}`);
-  }
-  if (filter.blockOnly) {
-    queryParts.push(`@type:{${AccessPolicyType.Block}}`);
-  }
-  const policyScopeQuery = getPolicyScopeQuery(
-    policyScope,
-    filter.policyScopeMatch
-  );
-  if (policyScopeQuery) {
-    queryParts.push(policyScopeQuery);
-  }
-  if (userScope && Object.keys(userScope).length > 0) {
-    const userScopeFilter = getUserScopeQuery(
-      userScope,
-      filter.userScopeMatch,
-      matchingFieldsOnly
-    );
-    queryParts.push(`( ${userScopeFilter} )`);
-  }
-  return queryParts.length > 0 ? queryParts.join(" ") : "*";
+var GLOBAL_MATCH_CLAUSE_INNER = `@clientId:{${GLOBAL_CLIENT_SCOPE_SENTINEL}} | ismissing(@clientId)`;
+var getPolicyScopeQuery = (policyScope, scopeMatch) => {
+	const clientId = policyScope?.clientId;
+	if ("string" === typeof clientId) return FilterScopeMatch.Exact === scopeMatch ? `@clientId:{${clientId}}` : `( @clientId:{${clientId}} | ${GLOBAL_MATCH_CLAUSE_INNER} )`;
+	return FilterScopeMatch.Exact === scopeMatch ? `( ${GLOBAL_MATCH_CLAUSE_INNER} )` : "";
 };
-export {
-  REDIS_QUERY_DIALECT,
-  getRulesRedisQuery
+var getRulesRedisQuery = (filter, matchingFieldsOnly) => {
+	const { policyScope, userScope } = filter;
+	const queryParts = [];
+	if (filter.groupId) queryParts.push(`@groupId:{${filter.groupId}}`);
+	if (filter.blockOnly) queryParts.push(`@type:{${AccessPolicyType.Block}}`);
+	const policyScopeQuery = getPolicyScopeQuery(policyScope, filter.policyScopeMatch);
+	if (policyScopeQuery) queryParts.push(policyScopeQuery);
+	if (userScope && Object.keys(userScope).length > 0) {
+		const userScopeFilter = getUserScopeQuery(userScope, filter.userScopeMatch, matchingFieldsOnly);
+		queryParts.push(`( ${userScopeFilter} )`);
+	}
+	return queryParts.length > 0 ? queryParts.join(" ") : "*";
 };
+//#endregion
+export { REDIS_QUERY_DIALECT, getRulesRedisQuery };