@quickql/server 1.0.0

package/dist/server/src/resolver/generator.js

@@ -0,0 +1,65 @@
+/**
+ * QuickQL Resolver Generator
+ *
+ * Automated resolver generation for ORM-backed collections (Prisma, etc.),
+ * bridging the gap between QuickQL queries and native database operations.
+ *
+ * (c) 2024-2026 Udinmo Inc. All rights reserved.
+ * Author: Udinmo Inc. <engineering@udinmo.com>
+ * License: MIT
+ */
+import { PrismaMapper } from './mapper';
+export class ResolverGenerator {
+    /**
+     * Generates a single Prisma-backed resolver for a given collection.
+     * Handles findMany and findUnique operations.
+     */
+    static generateResolver(collection) {
+        if (collection.resolver)
+            return collection.resolver;
+        return async (query, ctx) => {
+            const { model } = collection;
+            const prismaModel = ctx.orm[model.charAt(0).toLowerCase() + model.slice(1)];
+            if (!prismaModel) {
+                throw new Error(`Prisma model '${model}' not found in the provided ORM client.`);
+            }
+            // Convert QuickQL to Prisma findMany format
+            const prismaArgs = PrismaMapper.mapQuery(query);
+            // Automatic findUnique vs findMany logic:
+            // If 'id' is in where and it's an 'eq' operator, we would use findUnique.
+            // But standard Prisma findMany with 'where' covers it for QuickQL's array-first return.
+            return await prismaModel.findMany(prismaArgs);
+        };
+    }
+    /**
+     * Generates an automatic Prisma mutation resolver for a collection.
+     * Supports create, update, and delete actions.
+     */
+    static generateMutationResolver(collection) {
+        if (collection.mutationResolver)
+            return collection.mutationResolver;
+        return async (mutation, ctx) => {
+            const { model } = collection;
+            const prismaModel = ctx.orm[model.charAt(0).toLowerCase() + model.slice(1)];
+            if (!prismaModel) {
+                throw new Error(`Prisma model '${model}' for mutation not found.`);
+            }
+            const prismaArgs = {};
+            // Auto-extract where clause from mutation
+            if (mutation.where) {
+                prismaArgs.where = PrismaMapper.mapQuery({ from: model, where: mutation.where }).where;
+            }
+            // Auto-extract and map fields to Prisma data format
+            if (mutation.data) {
+                prismaArgs.data = mutation.data;
+            }
+            switch (mutation.type) {
+                case 'create': return await prismaModel.create(prismaArgs);
+                case 'update': return await prismaModel.update(prismaArgs);
+                case 'delete': return await prismaModel.delete(prismaArgs);
+                default: throw new Error(`Mutation type '${mutation.type}' not natively supported for auto-generation.`);
+            }
+        };
+    }
+}
+//# sourceMappingURL=generator.js.map

package/dist/server/src/resolver/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator.js","sourceRoot":"","sources":["../../../../src/resolver/generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,OAAO,iBAAiB;IAC5B;;;OAGG;IACH,MAAM,CAAC,gBAAgB,CAAC,UAAgC;QACtD,IAAI,UAAU,CAAC,QAAQ;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;QAEpD,OAAO,KAAK,EAAE,KAAY,EAAE,GAAyB,EAAE,EAAE;YACvD,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAE5E,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,yCAAyC,CAAC,CAAC;YACnF,CAAC;YAED,4CAA4C;YAC5C,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAEhD,0CAA0C;YAC1C,0EAA0E;YAC1E,wFAAwF;YACxF,OAAO,MAAM,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,wBAAwB,CAAC,UAAgC;QAC9D,IAAI,UAAU,CAAC,gBAAgB;YAAE,OAAO,UAAU,CAAC,gBAAgB,CAAC;QAEpE,OAAO,KAAK,EAAE,QAAkB,EAAE,GAAyB,EAAE,EAAE;YAC7D,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAE5E,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,2BAA2B,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,UAAU,GAAwB,EAAE,CAAC;YAE3C,0CAA0C;YAC1C,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACnB,UAAU,CAAC,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAS,CAAC,CAAC,KAAK,CAAC;YAChG,CAAC;YAED,oDAAoD;YACpD,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClB,UAAU,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAClC,CAAC;YAED,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACtB,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC3D,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC3D,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC3D,OAAO,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,CAAC,IAAI,+CAA+C,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF"}

package/dist/server/src/resolver/mapper.d.ts

@@ -0,0 +1,23 @@
+/**
+ * QuickQL Prisma Mapper
+ *
+ * Logic for translating abstract QuickQL queries and filters into native
+ * Prisma objects (where, select, include, take, skip, orderBy).
+ *
+ * (c) 2024-2026 Udinmo Inc. All rights reserved.
+ * Author: Udinmo Inc. <engineering@udinmo.com>
+ * License: MIT
+ */
+import { Query } from '@quickql/core';
+export declare class PrismaMapper {
+    /**
+     * Maps a standard QuickQL Query object into a valid Prisma findMany/findUnique argument.
+     */
+    static mapQuery(query: Query): Record<string, any>;
+    /**
+     * Automatically converts QuickQL filters into Prisma's native where object format.
+     * Handles AND/OR and all QuickQL operators (gt, lt, in, contains, etc).
+     */
+    private static mapWhere;
+}
+//# sourceMappingURL=mapper.d.ts.map

package/dist/server/src/resolver/mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapper.d.ts","sourceRoot":"","sources":["../../../../src/resolver/mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,KAAK,EAA2C,MAAM,eAAe,CAAC;AAE/E,qBAAa,YAAY;IACvB;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAyClD;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ;CA6CxB"}

package/dist/server/src/resolver/mapper.js

@@ -0,0 +1,96 @@
+/**
+ * QuickQL Prisma Mapper
+ *
+ * Logic for translating abstract QuickQL queries and filters into native
+ * Prisma objects (where, select, include, take, skip, orderBy).
+ *
+ * (c) 2024-2026 Udinmo Inc. All rights reserved.
+ * Author: Udinmo Inc. <engineering@udinmo.com>
+ * License: MIT
+ */
+export class PrismaMapper {
+    /**
+     * Maps a standard QuickQL Query object into a valid Prisma findMany/findUnique argument.
+     */
+    static mapQuery(query) {
+        const prismaQuery = {};
+        // 1. SELECT and INCLUDE normalization
+        if (query.select || query.include) {
+            prismaQuery.select = {};
+            // Map select array to Prisma { field: true }
+            if (query.select) {
+                query.select.forEach(field => {
+                    prismaQuery.select[field] = true;
+                });
+            }
+            // Map include to nested select
+            if (query.include) {
+                Object.entries(query.include).forEach(([relation, nested]) => {
+                    prismaQuery.select[relation] = this.mapQuery(nested);
+                });
+            }
+        }
+        // 2. WHERE clause mapping
+        if (query.where) {
+            prismaQuery.where = this.mapWhere(query.where);
+        }
+        // 3. Pagination
+        if (query.limit)
+            prismaQuery.take = query.limit;
+        if (query.offset)
+            prismaQuery.skip = query.offset;
+        // 4. Ordering
+        if (query.orderBy) {
+            prismaQuery.orderBy = Object.entries(query.orderBy).map(([field, dir]) => ({
+                [field]: dir
+            }));
+        }
+        return prismaQuery;
+    }
+    /**
+     * Automatically converts QuickQL filters into Prisma's native where object format.
+     * Handles AND/OR and all QuickQL operators (gt, lt, in, contains, etc).
+     */
+    static mapWhere(where) {
+        const prismaWhere = {};
+        if ('AND' in where && Array.isArray(where.AND)) {
+            prismaWhere.AND = where.AND.filter(sub => typeof sub === 'object').map(sub => this.mapWhere(sub));
+            return prismaWhere;
+        }
+        if ('OR' in where && Array.isArray(where.OR)) {
+            prismaWhere.OR = where.OR.filter(sub => typeof sub === 'object').map(sub => this.mapWhere(sub));
+            return prismaWhere;
+        }
+        // Default field-level filters
+        Object.entries(where).forEach(([rawField, condition]) => {
+            // 1. Handle flat syntax (e.g., age_gt: 18)
+            const opMatch = rawField.match(/^(.+)_(eq|ne|gt|lt|in|contains|startsWith|endsWith)$/);
+            let field = rawField;
+            let finalCondition = condition;
+            if (opMatch) {
+                field = opMatch[1];
+                const op = opMatch[2];
+                finalCondition = { [op]: condition };
+            }
+            if (typeof finalCondition !== 'object' || finalCondition === null || Array.isArray(finalCondition)) {
+                prismaWhere[field] = finalCondition;
+                return;
+            }
+            // Map QuickQL operators to Prisma operators
+            const prismaCondition = {};
+            Object.entries(finalCondition).forEach(([op, val]) => {
+                if (op === 'eq')
+                    prismaWhere[field] = val;
+                else if (op === 'ne')
+                    prismaCondition.not = val;
+                else
+                    prismaCondition[op] = val;
+            });
+            if (Object.keys(prismaCondition).length > 0) {
+                prismaWhere[field] = { ...prismaWhere[field], ...prismaCondition };
+            }
+        });
+        return prismaWhere;
+    }
+}
+//# sourceMappingURL=mapper.js.map

package/dist/server/src/resolver/mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapper.js","sourceRoot":"","sources":["../../../../src/resolver/mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,OAAO,YAAY;IACvB;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,KAAY;QAC1B,MAAM,WAAW,GAAwB,EAAE,CAAC;QAE5C,sCAAsC;QACtC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC;YAExB,6CAA6C;YAC7C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;oBAC3B,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;gBACnC,CAAC,CAAC,CAAC;YACL,CAAC;YAED,+BAA+B;YAC/B,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE;oBAC3D,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAe,CAAC,CAAC;gBAChE,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,WAAW,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;QAED,gBAAgB;QAChB,IAAI,KAAK,CAAC,KAAK;YAAE,WAAW,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAChD,IAAI,KAAK,CAAC,MAAM;YAAE,WAAW,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;QAElD,cAAc;QACd,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,WAAW,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzE,CAAC,KAAK,CAAC,EAAE,GAAG;aACb,CAAC,CAAC,CAAC;QACN,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,QAAQ,CAAC,KAAqC;QAC3D,MAAM,WAAW,GAAwB,EAAE,CAAC;QAE5C,IAAI,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,WAAW,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAU,CAAC,CAAC,CAAC;YACzG,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7C,WAAW,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAU,CAAC,CAAC,CAAC;YACvG,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,8BAA8B;QAC9B,MAAM,CAAC,OAAO,CAAC,KAAoB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE;YACrE,2CAA2C;YAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;YACvF,IAAI,KAAK,GAAG,QAAQ,CAAC;YACrB,IAAI,cAAc,GAAG,SAAS,CAAC;YAE/B,IAAI,OAAO,EAAE,CAAC;gBACX,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACnB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAa,CAAC;gBAClC,cAAc,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;YACxC,CAAC;YAED,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;gBACnG,WAAW,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC;gBACpC,OAAO;YACT,CAAC;YAED,4CAA4C;YAC5C,MAAM,eAAe,GAAwB,EAAE,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,cAAuC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;gBAC5E,IAAI,EAAE,KAAK,IAAI;oBAAE,WAAW,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;qBACrC,IAAI,EAAE,KAAK,IAAI;oBAAE,eAAe,CAAC,GAAG,GAAG,GAAG,CAAC;;oBAC3C,eAAe,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,eAAe,EAAE,CAAC;YACrE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACrB,CAAC;CACF"}

package/dist/server/src/schema/builder.d.ts

@@ -0,0 +1,21 @@
+/**
+ * QuickQL Schema Builder
+ *
+ * Helper utilities for defining collections and schemas in a clean, code-first manner.
+ *
+ * (c) 2024-2026 Udinmo Inc. All rights reserved.
+ * Author: Udinmo Inc. <engineering@udinmo.com>
+ * License: MIT
+ */
+import { SchemaOptions, CollectionDefinition } from './types';
+/**
+ * Clean Schema Builder for QuickQL (Code-First)
+ */
+export declare function createSchema(options: SchemaOptions): SchemaOptions;
+/**
+ * Utility to define individual collections with full type inference.
+ */
+export declare function defineCollection(config: CollectionDefinition): CollectionDefinition;
+export { createServer } from '../engine';
+export type { ExtendedServerOptions } from '../engine';
+//# sourceMappingURL=builder.d.ts.map

package/dist/server/src/schema/builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../../../../src/schema/builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAiB,aAAa,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAE7E;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,CAElE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,GAAG,oBAAoB,CAEnF;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,YAAY,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC"}

package/dist/server/src/schema/builder.js

@@ -0,0 +1,23 @@
+/**
+ * QuickQL Schema Builder
+ *
+ * Helper utilities for defining collections and schemas in a clean, code-first manner.
+ *
+ * (c) 2024-2026 Udinmo Inc. All rights reserved.
+ * Author: Udinmo Inc. <engineering@udinmo.com>
+ * License: MIT
+ */
+/**
+ * Clean Schema Builder for QuickQL (Code-First)
+ */
+export function createSchema(options) {
+    return options;
+}
+/**
+ * Utility to define individual collections with full type inference.
+ */
+export function defineCollection(config) {
+    return config;
+}
+export { createServer } from '../engine';
+//# sourceMappingURL=builder.js.map

package/dist/server/src/schema/builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../../../src/schema/builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA4B;IAC3D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC"}

package/dist/server/src/schema/types.d.ts

@@ -0,0 +1,81 @@
+/**
+ * QuickQL Schema Types
+ *
+ * Data structures and interfaces for defining collections, fields, and relations.
+ *
+ * (c) 2024-2026 Udinmo Inc. All rights reserved.
+ * Author: Udinmo Inc. <engineering@udinmo.com>
+ * License: MIT
+ */
+import { Query, Mutation } from '@quickql/core';
+export type FieldType = 'string' | 'number' | 'boolean' | 'datetime' | 'json';
+export interface FieldDefinition {
+    type: FieldType;
+    primary?: boolean;
+    required?: boolean;
+    unique?: boolean;
+    /**
+     * Private fields are never returned in results unless explicitly allowed.
+     */
+    private?: boolean;
+    /**
+     * Field-level authorization rule.
+     */
+    auth?: (ctx: any) => boolean | Promise<boolean>;
+    /**
+     * Field-level roles (RBAC).
+     */
+    roles?: string[];
+}
+export interface RelationDefinition {
+    type: 'one' | 'many';
+    model: string;
+    foreignKey: string;
+    localKey?: string;
+    /**
+     * Relation-level authorization rule.
+     */
+    auth?: (ctx: any) => boolean | Promise<boolean>;
+}
+export interface CollectionDefinition {
+    model: string;
+    fields: Record<string, FieldDefinition | FieldType>;
+    relations?: Record<string, RelationDefinition>;
+    /**
+     * Collection-level authorization rule.
+     */
+    auth?: (ctx: any) => boolean | Promise<boolean>;
+    /**
+     * Collection-level roles (RBAC).
+     */
+    roles?: string[];
+    /**
+     * Pre-defined security policies (e.g. 'owner-only', 'public').
+     */
+    policy?: 'public' | 'private' | 'authenticated' | 'owner-only';
+    resolver?: (query: Query, ctx: any) => Promise<any[]>;
+    mutationResolver?: (mutation: Mutation, ctx: any) => Promise<any>;
+}
+export type QuickQLSchema = Record<string, CollectionDefinition>;
+export interface CustomMutation {
+    args?: Record<string, FieldType>;
+    resolve: (args: any, ctx: any) => Promise<any>;
+    /**
+     * Mutation-level authorization rule.
+     */
+    auth?: (ctx: any) => boolean | Promise<boolean>;
+    /**
+     * Roles allowed to execute this mutation.
+     */
+    roles?: string[];
+}
+export interface SchemaOptions {
+    collections: QuickQLSchema;
+    mutations?: Record<string, CustomMutation>;
+}
+export interface QuickQLServerContext {
+    orm: any;
+    user?: any;
+    [key: string]: any;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/server/src/schema/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/schema/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAE9E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;OAEG;IACH,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC,CAAC;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC/C;;OAEG;IACH,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;OAEG;IACH,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,eAAe,GAAG,YAAY,CAAC;IAE/D,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CACnE;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;AAEjE,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C;;OAEG;IACH,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,aAAa,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,GAAG,CAAC;IACT,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB"}

package/dist/server/src/schema/types.js

@@ -0,0 +1,11 @@
+/**
+ * QuickQL Schema Types
+ *
+ * Data structures and interfaces for defining collections, fields, and relations.
+ *
+ * (c) 2024-2026 Udinmo Inc. All rights reserved.
+ * Author: Udinmo Inc. <engineering@udinmo.com>
+ * License: MIT
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/server/src/schema/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/schema/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/server/src/schema/utils.d.ts

@@ -0,0 +1,16 @@
+/**
+ * QuickQL Schema Utilities
+ *
+ * Collection of utility functions for schema reflection, prisma model mapping,
+ * and automated boilerplate generation.
+ *
+ * (c) 2024-2026 Udinmo Inc. All rights reserved.
+ * Author: Udinmo Inc. <engineering@udinmo.com>
+ * License: MIT
+ */
+import { CollectionDefinition } from './types';
+/**
+ * Generates a QuickQL Schema definition from a Prisma or compatible ORM model.
+ */
+export declare function generateSchemaFromModel(model: any): CollectionDefinition;
+//# sourceMappingURL=utils.d.ts.map

package/dist/server/src/schema/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/schema/utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,oBAAoB,EAAa,MAAM,SAAS,CAAC;AAE1D;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,GAAG,GAAG,oBAAoB,CAkBxE"}

package/dist/server/src/schema/utils.js

@@ -0,0 +1,42 @@
+/**
+ * QuickQL Schema Utilities
+ *
+ * Collection of utility functions for schema reflection, prisma model mapping,
+ * and automated boilerplate generation.
+ *
+ * (c) 2024-2026 Udinmo Inc. All rights reserved.
+ * Author: Udinmo Inc. <engineering@udinmo.com>
+ * License: MIT
+ */
+/**
+ * Generates a QuickQL Schema definition from a Prisma or compatible ORM model.
+ */
+export function generateSchemaFromModel(model) {
+    const fields = {};
+    // Heuristic based on Prisma properties
+    if (model.fields) {
+        model.fields.forEach((f) => {
+            fields[f.name] = {
+                type: mapType(f.type),
+                required: f.isRequired,
+                private: f.isId && f.name === 'password'
+            };
+        });
+    }
+    return {
+        model: model.name,
+        fields
+    };
+}
+function mapType(type) {
+    switch (type.toLowerCase()) {
+        case 'string': return 'string';
+        case 'int':
+        case 'float':
+        case 'decimal': return 'number';
+        case 'boolean': return 'boolean';
+        case 'datetime': return 'datetime';
+        default: return 'string';
+    }
+}
+//# sourceMappingURL=utils.js.map

package/dist/server/src/schema/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../src/schema/utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAU;IAChD,MAAM,MAAM,GAAwB,EAAE,CAAC;IAEvC,uCAAuC;IACvC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAM,EAAE,EAAE;YAC5B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG;gBACb,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;gBACrB,QAAQ,EAAE,CAAC,CAAC,UAAU;gBACtB,OAAO,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;aAC3C,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,IAAI;QACjB,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IACzB,QAAQ,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC/B,KAAK,KAAK,CAAC;QACX,KAAK,OAAO,CAAC;QACb,KAAK,SAAS,CAAC,CAAC,OAAO,QAAQ,CAAC;QAChC,KAAK,SAAS,CAAC,CAAC,OAAO,SAAS,CAAC;QACjC,KAAK,UAAU,CAAC,CAAC,OAAO,UAAiB,CAAC;QAC1C,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC;IAC7B,CAAC;AACL,CAAC"}

package/dist/server/src/security.d.ts

@@ -0,0 +1,46 @@
+/**
+ * QuickQL Security Engine
+ *
+ * Enforces authentication, authorization (RBAC), complexity limits, and rate limiting.
+ *
+ * (c) 2024-2026 Udinmo Inc. All rights reserved.
+ * Author: Udinmo Inc. <engineering@udinmo.com>
+ * License: MIT
+ */
+import { Query } from '@quickql/core';
+import { CollectionDefinition, QuickQLServerContext } from './schema/types';
+import { RBACConfig, AuthConfig } from './types';
+export declare class SecurityEngine {
+    private options;
+    private schemaSnapshot?;
+    private rateLimitMap;
+    constructor(options: {
+        maxDepth: number;
+        rateLimit?: number;
+        maxComplexity?: number;
+        rbac?: RBACConfig;
+        auth?: AuthConfig;
+    }, schemaSnapshot?: any | undefined);
+    /**
+     * Enforces strict query depth limiting for security.
+     */
+    validateDepth(query: Query, currentDepth?: number): void;
+    private calculateComplexity;
+    /**
+     * Verifies if the current context is authorized to access the collection or mutation.
+     */
+    validateAuth(name: string, definition: CollectionDefinition | any, ctx: QuickQLServerContext, isMutation?: boolean): Promise<void>;
+    /**
+     * Filters the results to remove fields marked as 'private' or failing field-level auth.
+     */
+    filterResults(collection: CollectionDefinition, data: any[], ctx: QuickQLServerContext): Promise<any[]>;
+    /**
+     * Simple Memory-based Rate Limiter.
+     */
+    checkRateLimit(key: string): void;
+    /**
+     * Basic input sanitization.
+     */
+    sanitize(input: any): any;
+}
+//# sourceMappingURL=security.d.ts.map

package/dist/server/src/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,EAAY,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEjD,qBAAa,cAAc;IAIvB,OAAO,CAAC,OAAO;IAOf,OAAO,CAAC,cAAc,CAAC;IAVzB,OAAO,CAAC,YAAY,CAA2D;gBAGrE,OAAO,EAAE;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,EAAE,UAAU,CAAC;QAClB,IAAI,CAAC,EAAE,UAAU,CAAC;KACnB,EACO,cAAc,CAAC,EAAE,GAAG,YAAA;IAG9B;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,SAAI,GAAG,IAAI;IAkBnD,OAAO,CAAC,mBAAmB;IAU3B;;OAEG;IACG,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,oBAAoB,GAAG,GAAG,EACtC,GAAG,EAAE,oBAAoB,EACzB,UAAU,UAAQ,GACjB,OAAO,CAAC,IAAI,CAAC;IAuDhB;;OAEG;IACG,aAAa,CACjB,UAAU,EAAE,oBAAoB,EAChC,IAAI,EAAE,GAAG,EAAE,EACX,GAAG,EAAE,oBAAoB,GACxB,OAAO,CAAC,GAAG,EAAE,CAAC;IAmDjB;;OAEG;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAqBjC;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG;CAmB1B"}