@rocicorp/zero 0.25.0-canary.6 → 0.25.0-canary.8

package/out/zero-schema/src/builder/table-builder.js

@@ -0,0 +1,129 @@
+function table(name) {
+  return new TableBuilder({
+    name,
+    columns: {},
+    primaryKey: []
+  });
+}
+function string() {
+  return new ColumnBuilder({
+    type: "string",
+    optional: false,
+    customType: null
+  });
+}
+function number() {
+  return new ColumnBuilder({
+    type: "number",
+    optional: false,
+    customType: null
+  });
+}
+function boolean() {
+  return new ColumnBuilder({
+    type: "boolean",
+    optional: false,
+    customType: null
+  });
+}
+function json() {
+  return new ColumnBuilder({
+    type: "json",
+    optional: false,
+    customType: null
+  });
+}
+function enumeration() {
+  return new ColumnBuilder({
+    type: "string",
+    optional: false,
+    customType: null
+  });
+}
+class TableBuilder {
+  #schema;
+  constructor(schema) {
+    this.#schema = schema;
+  }
+  from(serverName) {
+    return new TableBuilder({
+      ...this.#schema,
+      // Strip the "public." schema if specified, as tables in the upstream
+      // "public" schema are created without the schema prefix on the replica.
+      // See liteTableName() in zero-cache/src/types/names.ts
+      serverName: serverName.startsWith("public.") ? serverName.substring("public.".length) : serverName
+    });
+  }
+  columns(columns) {
+    const columnSchemas = Object.fromEntries(
+      Object.entries(columns).map(([k, v]) => [k, v.schema])
+    );
+    return new TableBuilderWithColumns({
+      ...this.#schema,
+      columns: columnSchemas
+    });
+  }
+}
+class TableBuilderWithColumns {
+  #schema;
+  constructor(schema) {
+    this.#schema = schema;
+  }
+  primaryKey(...pkColumnNames) {
+    return new TableBuilderWithColumns({
+      ...this.#schema,
+      primaryKey: pkColumnNames
+    });
+  }
+  get schema() {
+    return this.#schema;
+  }
+  build() {
+    if (this.#schema.primaryKey.length === 0) {
+      throw new Error(`Table "${this.#schema.name}" is missing a primary key`);
+    }
+    const names = /* @__PURE__ */ new Set();
+    for (const [col, { serverName }] of Object.entries(this.#schema.columns)) {
+      const name = serverName ?? col;
+      if (names.has(name)) {
+        throw new Error(
+          `Table "${this.#schema.name}" has multiple columns referencing "${name}"`
+        );
+      }
+      names.add(name);
+    }
+    return this.#schema;
+  }
+}
+class ColumnBuilder {
+  #schema;
+  constructor(schema) {
+    this.#schema = schema;
+  }
+  from(serverName) {
+    return new ColumnBuilder({
+      ...this.#schema,
+      serverName
+    });
+  }
+  optional() {
+    return new ColumnBuilder({
+      ...this.#schema,
+      optional: true
+    });
+  }
+  get schema() {
+    return this.#schema;
+  }
+}
+export {
+  TableBuilder,
+  TableBuilderWithColumns,
+  boolean,
+  enumeration,
+  json,
+  number,
+  string,
+  table
+};
+//# sourceMappingURL=table-builder.js.map

package/out/zero-schema/src/builder/table-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"table-builder.js","sources":["../../../../../zero-schema/src/builder/table-builder.ts"],"sourcesContent":["import type {ReadonlyJSONValue} from '../../../shared/src/json.ts';\nimport type {PrimaryKey} from '../../../zero-protocol/src/primary-key.ts';\nimport type {SchemaValue, TableSchema} from '../table-schema.ts';\n\n/* oxlint-disable @typescript-eslint/no-explicit-any */\nexport function table<TName extends string>(name: TName) {\n  return new TableBuilder({\n    name,\n    columns: {},\n    primaryKey: [] as any as PrimaryKey,\n  });\n}\n\nexport function string<T extends string = string>() {\n  return new ColumnBuilder({\n    type: 'string',\n    optional: false,\n    customType: null as unknown as T,\n  });\n}\n\nexport function number<T extends number = number>() {\n  return new ColumnBuilder({\n    type: 'number',\n    optional: false,\n    customType: null as unknown as T,\n  });\n}\n\nexport function boolean<T extends boolean = boolean>() {\n  return new ColumnBuilder({\n    type: 'boolean',\n    optional: false,\n    customType: null as unknown as T,\n  });\n}\n\nexport function json<T extends ReadonlyJSONValue = ReadonlyJSONValue>() {\n  return new ColumnBuilder({\n    type: 'json',\n    optional: false,\n    customType: null as unknown as T,\n  });\n}\n\nexport function enumeration<T extends string>() {\n  return new ColumnBuilder({\n    type: 'string',\n    optional: false,\n    customType: null as unknown as T,\n  });\n}\n\nexport const column = {\n  string,\n  number,\n  boolean,\n  json,\n  enumeration,\n};\n\nexport class TableBuilder<TShape extends TableSchema> {\n  readonly #schema: TShape;\n  constructor(schema: TShape) {\n    this.#schema = schema;\n  }\n\n  from<ServerName extends string>(serverName: ServerName) {\n    return new TableBuilder<TShape>({\n      ...this.#schema,\n      // Strip the \"public.\" schema if specified, as tables in the upstream\n      // \"public\" schema are created without the schema prefix on the replica.\n      // See liteTableName() in zero-cache/src/types/names.ts\n      serverName: serverName.startsWith('public.')\n        ? serverName.substring('public.'.length)\n        : serverName,\n    });\n  }\n\n  columns<const TColumns extends Record<string, ColumnBuilder<SchemaValue>>>(\n    columns: TColumns,\n  ): TableBuilderWithColumns<{\n    name: TShape['name'];\n    columns: {[K in keyof TColumns]: TColumns[K]['schema']};\n    primaryKey: TShape['primaryKey'];\n  }> {\n    const columnSchemas = Object.fromEntries(\n      Object.entries(columns).map(([k, v]) => [k, v.schema]),\n    ) as {[K in keyof TColumns]: TColumns[K]['schema']};\n    return new TableBuilderWithColumns({\n      ...this.#schema,\n      columns: columnSchemas,\n    }) as any;\n  }\n}\n\nexport class TableBuilderWithColumns<TShape extends TableSchema> {\n  readonly #schema: TShape;\n\n  constructor(schema: TShape) {\n    this.#schema = schema;\n  }\n\n  primaryKey<TPKColNames extends (keyof TShape['columns'])[]>(\n    ...pkColumnNames: TPKColNames\n  ) {\n    return new TableBuilderWithColumns({\n      ...this.#schema,\n      primaryKey: pkColumnNames,\n    });\n  }\n\n  get schema() {\n    return this.#schema;\n  }\n\n  build() {\n    // We can probably get the type system to throw an error if primaryKey is not called\n    // before passing the schema to createSchema\n    // Till then --\n    if (this.#schema.primaryKey.length === 0) {\n      throw new Error(`Table \"${this.#schema.name}\" is missing a primary key`);\n    }\n    const names = new Set<string>();\n    for (const [col, {serverName}] of Object.entries(this.#schema.columns)) {\n      const name = serverName ?? col;\n      if (names.has(name)) {\n        throw new Error(\n          `Table \"${\n            this.#schema.name\n          }\" has multiple columns referencing \"${name}\"`,\n        );\n      }\n      names.add(name);\n    }\n    return this.#schema;\n  }\n}\n\nclass ColumnBuilder<TShape extends SchemaValue<any>> {\n  readonly #schema: TShape;\n  constructor(schema: TShape) {\n    this.#schema = schema;\n  }\n\n  from<ServerName extends string>(serverName: ServerName) {\n    return new ColumnBuilder<TShape & {serverName: string}>({\n      ...this.#schema,\n      serverName,\n    });\n  }\n\n  optional(): ColumnBuilder<Omit<TShape, 'optional'> & {optional: true}> {\n    return new ColumnBuilder({\n      ...this.#schema,\n      optional: true,\n    });\n  }\n\n  get schema() {\n    return this.#schema;\n  }\n}\n\nexport type {ColumnBuilder};\n"],"names":[],"mappings":"AAKO,SAAS,MAA4B,MAAa;AACvD,SAAO,IAAI,aAAa;AAAA,IACtB;AAAA,IACA,SAAS,CAAA;AAAA,IACT,YAAY,CAAA;AAAA,EAAC,CACd;AACH;AAEO,SAAS,SAAoC;AAClD,SAAO,IAAI,cAAc;AAAA,IACvB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,EAAA,CACb;AACH;AAEO,SAAS,SAAoC;AAClD,SAAO,IAAI,cAAc;AAAA,IACvB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,EAAA,CACb;AACH;AAEO,SAAS,UAAuC;AACrD,SAAO,IAAI,cAAc;AAAA,IACvB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,EAAA,CACb;AACH;AAEO,SAAS,OAAwD;AACtE,SAAO,IAAI,cAAc;AAAA,IACvB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,EAAA,CACb;AACH;AAEO,SAAS,cAAgC;AAC9C,SAAO,IAAI,cAAc;AAAA,IACvB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,EAAA,CACb;AACH;AAUO,MAAM,aAAyC;AAAA,EAC3C;AAAA,EACT,YAAY,QAAgB;AAC1B,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,KAAgC,YAAwB;AACtD,WAAO,IAAI,aAAqB;AAAA,MAC9B,GAAG,KAAK;AAAA;AAAA;AAAA;AAAA,MAIR,YAAY,WAAW,WAAW,SAAS,IACvC,WAAW,UAAU,UAAU,MAAM,IACrC;AAAA,IAAA,CACL;AAAA,EACH;AAAA,EAEA,QACE,SAKC;AACD,UAAM,gBAAgB,OAAO;AAAA,MAC3B,OAAO,QAAQ,OAAO,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AAAA,IAAA;AAEvD,WAAO,IAAI,wBAAwB;AAAA,MACjC,GAAG,KAAK;AAAA,MACR,SAAS;AAAA,IAAA,CACV;AAAA,EACH;AACF;AAEO,MAAM,wBAAoD;AAAA,EACtD;AAAA,EAET,YAAY,QAAgB;AAC1B,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,cACK,eACH;AACA,WAAO,IAAI,wBAAwB;AAAA,MACjC,GAAG,KAAK;AAAA,MACR,YAAY;AAAA,IAAA,CACb;AAAA,EACH;AAAA,EAEA,IAAI,SAAS;AACX,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,QAAQ;AAIN,QAAI,KAAK,QAAQ,WAAW,WAAW,GAAG;AACxC,YAAM,IAAI,MAAM,UAAU,KAAK,QAAQ,IAAI,4BAA4B;AAAA,IACzE;AACA,UAAM,4BAAY,IAAA;AAClB,eAAW,CAAC,KAAK,EAAC,YAAW,KAAK,OAAO,QAAQ,KAAK,QAAQ,OAAO,GAAG;AACtE,YAAM,OAAO,cAAc;AAC3B,UAAI,MAAM,IAAI,IAAI,GAAG;AACnB,cAAM,IAAI;AAAA,UACR,UACE,KAAK,QAAQ,IACf,uCAAuC,IAAI;AAAA,QAAA;AAAA,MAE/C;AACA,YAAM,IAAI,IAAI;AAAA,IAChB;AACA,WAAO,KAAK;AAAA,EACd;AACF;AAEA,MAAM,cAA+C;AAAA,EAC1C;AAAA,EACT,YAAY,QAAgB;AAC1B,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,KAAgC,YAAwB;AACtD,WAAO,IAAI,cAA6C;AAAA,MACtD,GAAG,KAAK;AAAA,MACR;AAAA,IAAA,CACD;AAAA,EACH;AAAA,EAEA,WAAuE;AACrE,WAAO,IAAI,cAAc;AAAA,MACvB,GAAG,KAAK;AAAA,MACR,UAAU;AAAA,IAAA,CACX;AAAA,EACH;AAAA,EAEA,IAAI,SAAS;AACX,WAAO,KAAK;AAAA,EACd;AACF;"}

package/out/zero-schema/src/compiled-permissions.js

@@ -1,22 +1,26 @@
-import * as v from "../../shared/src/valita.js";
+import "../../shared/src/valita.js";
 import { conditionSchema } from "../../zero-protocol/src/ast.js";
-const ruleSchema = v.tuple([v.literal('allow'), conditionSchema]);
-const policySchema = v.array(ruleSchema);
-const assetSchema = v.object({
-    select: policySchema.optional(),
-    insert: policySchema.optional(),
-    update: v
-        .object({
-        preMutation: policySchema.optional(),
-        postMutation: policySchema.optional(),
-    })
-        .optional(),
-    delete: policySchema.optional(),
+import { tuple, literal, array, object, record } from "@badrap/valita";
+const ruleSchema = tuple([literal("allow"), conditionSchema]);
+const policySchema = array(ruleSchema);
+const assetSchema = object({
+  select: policySchema.optional(),
+  insert: policySchema.optional(),
+  update: object({
+    preMutation: policySchema.optional(),
+    postMutation: policySchema.optional()
+  }).optional(),
+  delete: policySchema.optional()
 });
-export const permissionsConfigSchema = v.object({
-    tables: v.record(v.object({
-        row: assetSchema.optional(),
-        cell: v.record(assetSchema).optional(),
-    })),
+const permissionsConfigSchema = object({
+  tables: record(
+    object({
+      row: assetSchema.optional(),
+      cell: record(assetSchema).optional()
+    })
+  )
 });
-//# sourceMappingURL=compiled-permissions.js.map
+export {
+  permissionsConfigSchema
+};
+//# sourceMappingURL=compiled-permissions.js.map

package/out/zero-schema/src/compiled-permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"compiled-permissions.js","sourceRoot":"","sources":["../../../../zero-schema/src/compiled-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,4BAA4B,CAAC;AAChD,OAAO,EAAC,eAAe,EAAC,MAAM,gCAAgC,CAAC;AAE/D,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;AAElE,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAGzC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,WAAW,EAAE,YAAY,CAAC,QAAQ,EAAE;QACpC,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;KACtC,CAAC;SACD,QAAQ,EAAE;IACb,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,EAAE,WAAW,CAAC,QAAQ,EAAE;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;KACvC,CAAC,CACH;CACF,CAAC,CAAC"}
+{"version":3,"file":"compiled-permissions.js","sources":["../../../../zero-schema/src/compiled-permissions.ts"],"sourcesContent":["import * as v from '../../shared/src/valita.ts';\nimport {conditionSchema} from '../../zero-protocol/src/ast.ts';\n\nconst ruleSchema = v.tuple([v.literal('allow'), conditionSchema]);\nexport type Rule = v.Infer<typeof ruleSchema>;\nconst policySchema = v.array(ruleSchema);\nexport type Policy = v.Infer<typeof policySchema>;\n\nconst assetSchema = v.object({\n  select: policySchema.optional(),\n  insert: policySchema.optional(),\n  update: v\n    .object({\n      preMutation: policySchema.optional(),\n      postMutation: policySchema.optional(),\n    })\n    .optional(),\n  delete: policySchema.optional(),\n});\n\nexport type AssetPermissions = v.Infer<typeof assetSchema>;\n\nexport const permissionsConfigSchema = v.object({\n  tables: v.record(\n    v.object({\n      row: assetSchema.optional(),\n      cell: v.record(assetSchema).optional(),\n    }),\n  ),\n});\n\nexport type TablePermissions = v.Infer<\n  typeof permissionsConfigSchema.shape.tables\n>;\nexport type PermissionsConfig = v.Infer<typeof permissionsConfigSchema>;\n"],"names":["v.tuple","v.literal","v.array","v.object","v.record"],"mappings":";;;AAGA,MAAM,aAAaA,MAAQ,CAACC,QAAU,OAAO,GAAG,eAAe,CAAC;AAEhE,MAAM,eAAeC,MAAQ,UAAU;AAGvC,MAAM,cAAcC,OAAS;AAAA,EAC3B,QAAQ,aAAa,SAAA;AAAA,EACrB,QAAQ,aAAa,SAAA;AAAA,EACrB,QAAQA,OACE;AAAA,IACN,aAAa,aAAa,SAAA;AAAA,IAC1B,cAAc,aAAa,SAAA;AAAA,EAAS,CACrC,EACA,SAAA;AAAA,EACH,QAAQ,aAAa,SAAA;AACvB,CAAC;AAIM,MAAM,0BAA0BA,OAAS;AAAA,EAC9C,QAAQC;AAAAA,IACND,OAAS;AAAA,MACP,KAAK,YAAY,SAAA;AAAA,MACjB,MAAMC,OAAS,WAAW,EAAE,SAAA;AAAA,IAAS,CACtC;AAAA,EAAA;AAEL,CAAC;"}

package/out/zero-schema/src/name-mapper.js

@@ -1,51 +1,56 @@
 import { NameMapper } from "../../zero-types/src/name-mapper.js";
-export { NameMapper };
-export function clientToServer(tables) {
-    return createMapperFrom('client', tables);
+function clientToServer(tables) {
+  return createMapperFrom("client", tables);
 }
-export function serverToClient(tables) {
-    return createMapperFrom('server', tables);
+function serverToClient(tables) {
+  return createMapperFrom("server", tables);
 }
 function createMapperFrom(src, tables) {
-    const mapping = new Map(Object.entries(tables).map(([tableName, { serverName: serverTableName, columns }]) => {
+  const mapping = new Map(
+    Object.entries(tables).map(
+      ([tableName, { serverName: serverTableName, columns }]) => {
         let allColumnsSame = true;
         const names = {};
         for (const [name, { serverName }] of Object.entries(columns)) {
-            if (serverName && serverName !== name) {
-                allColumnsSame = false;
-            }
-            if (src === 'client') {
-                names[name] = serverName ?? name;
-            }
-            else {
-                names[serverName ?? name] = name;
-            }
+          if (serverName && serverName !== name) {
+            allColumnsSame = false;
+          }
+          if (src === "client") {
+            names[name] = serverName ?? name;
+          } else {
+            names[serverName ?? name] = name;
+          }
         }
         return [
-            src === 'client' ? tableName : (serverTableName ?? tableName),
-            {
-                tableName: src === 'client' ? (serverTableName ?? tableName) : tableName,
-                columns: names,
-                allColumnsSame,
-            },
+          src === "client" ? tableName : serverTableName ?? tableName,
+          {
+            tableName: src === "client" ? serverTableName ?? tableName : tableName,
+            columns: names,
+            allColumnsSame
+          }
         ];
-    }));
-    return new NameMapper(mapping);
+      }
+    )
+  );
+  return new NameMapper(mapping);
 }
-/**
- * Returns an "identity" NameMapper that simply serves the purpose
- * of validating that all table and column names conform to the
- * specified `tablesToColumns` map.
- */
-export function validator(tablesToColumns) {
-    const identity = new Map([...tablesToColumns.entries()].map(([tableName, columns]) => [
+function validator(tablesToColumns) {
+  const identity = new Map(
+    [...tablesToColumns.entries()].map(([tableName, columns]) => [
+      tableName,
+      {
         tableName,
-        {
-            tableName,
-            columns: Object.fromEntries(columns.map(c => [c, c])),
-            allColumnsSame: true,
-        },
-    ]));
-    return new NameMapper(identity);
+        columns: Object.fromEntries(columns.map((c) => [c, c])),
+        allColumnsSame: true
+      }
+    ])
+  );
+  return new NameMapper(identity);
 }
-//# sourceMappingURL=name-mapper.js.map
+export {
+  NameMapper,
+  clientToServer,
+  serverToClient,
+  validator
+};
+//# sourceMappingURL=name-mapper.js.map

package/out/zero-schema/src/name-mapper.js.map

@@ -1 +1 @@
-{"version":3,"file":"name-mapper.js","sourceRoot":"","sources":["../../../../zero-schema/src/name-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,qCAAqC,CAAC;AAG/D,OAAO,EAAC,UAAU,EAAC,CAAC;AAEpB,MAAM,UAAU,cAAc,CAC5B,MAAmC;IAEnC,OAAO,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAmC;IAEnC,OAAO,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAwB,EACxB,MAAmC;IAEnC,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CACxB,CAAC,CAAC,SAAS,EAAE,EAAC,UAAU,EAAE,eAAe,EAAE,OAAO,EAAC,CAAC,EAAE,EAAE;QACtD,IAAI,cAAc,GAAG,IAAI,CAAC;QAC1B,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAC,UAAU,EAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,IAAI,UAAU,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACtC,cAAc,GAAG,KAAK,CAAC;YACzB,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,IAAI,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;YACnC,CAAC;QACH,CAAC;QACD,OAAO;YACL,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,SAAS,CAAC;YAC7D;gBACE,SAAS,EACP,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/D,OAAO,EAAE,KAAK;gBACd,cAAc;aACf;SACF,CAAC;IACJ,CAAC,CACF,CACF,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,eAAsC;IAC9D,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;QAC3D,SAAS;QACT;YACE,SAAS;YACT,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACrD,cAAc,EAAE,IAAI;SACrB;KACF,CAAC,CACH,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC"}
+{"version":3,"file":"name-mapper.js","sources":["../../../../zero-schema/src/name-mapper.ts"],"sourcesContent":["import {NameMapper} from '../../zero-types/src/name-mapper.ts';\nimport type {TableSchema} from './table-schema.ts';\n\nexport {NameMapper};\n\nexport function clientToServer(\n  tables: Record<string, TableSchema>,\n): NameMapper {\n  return createMapperFrom('client', tables);\n}\n\nexport function serverToClient(\n  tables: Record<string, TableSchema>,\n): NameMapper {\n  return createMapperFrom('server', tables);\n}\n\nfunction createMapperFrom(\n  src: 'client' | 'server',\n  tables: Record<string, TableSchema>,\n): NameMapper {\n  const mapping = new Map(\n    Object.entries(tables).map(\n      ([tableName, {serverName: serverTableName, columns}]) => {\n        let allColumnsSame = true;\n        const names: Record<string, string> = {};\n        for (const [name, {serverName}] of Object.entries(columns)) {\n          if (serverName && serverName !== name) {\n            allColumnsSame = false;\n          }\n          if (src === 'client') {\n            names[name] = serverName ?? name;\n          } else {\n            names[serverName ?? name] = name;\n          }\n        }\n        return [\n          src === 'client' ? tableName : (serverTableName ?? tableName),\n          {\n            tableName:\n              src === 'client' ? (serverTableName ?? tableName) : tableName,\n            columns: names,\n            allColumnsSame,\n          },\n        ];\n      },\n    ),\n  );\n  return new NameMapper(mapping);\n}\n\n/**\n * Returns an \"identity\" NameMapper that simply serves the purpose\n * of validating that all table and column names conform to the\n * specified `tablesToColumns` map.\n */\nexport function validator(tablesToColumns: Map<string, string[]>): NameMapper {\n  const identity = new Map(\n    [...tablesToColumns.entries()].map(([tableName, columns]) => [\n      tableName,\n      {\n        tableName,\n        columns: Object.fromEntries(columns.map(c => [c, c])),\n        allColumnsSame: true,\n      },\n    ]),\n  );\n  return new NameMapper(identity);\n}\n"],"names":[],"mappings":";AAKO,SAAS,eACd,QACY;AACZ,SAAO,iBAAiB,UAAU,MAAM;AAC1C;AAEO,SAAS,eACd,QACY;AACZ,SAAO,iBAAiB,UAAU,MAAM;AAC1C;AAEA,SAAS,iBACP,KACA,QACY;AACZ,QAAM,UAAU,IAAI;AAAA,IAClB,OAAO,QAAQ,MAAM,EAAE;AAAA,MACrB,CAAC,CAAC,WAAW,EAAC,YAAY,iBAAiB,QAAA,CAAQ,MAAM;AACvD,YAAI,iBAAiB;AACrB,cAAM,QAAgC,CAAA;AACtC,mBAAW,CAAC,MAAM,EAAC,WAAA,CAAW,KAAK,OAAO,QAAQ,OAAO,GAAG;AAC1D,cAAI,cAAc,eAAe,MAAM;AACrC,6BAAiB;AAAA,UACnB;AACA,cAAI,QAAQ,UAAU;AACpB,kBAAM,IAAI,IAAI,cAAc;AAAA,UAC9B,OAAO;AACL,kBAAM,cAAc,IAAI,IAAI;AAAA,UAC9B;AAAA,QACF;AACA,eAAO;AAAA,UACL,QAAQ,WAAW,YAAa,mBAAmB;AAAA,UACnD;AAAA,YACE,WACE,QAAQ,WAAY,mBAAmB,YAAa;AAAA,YACtD,SAAS;AAAA,YACT;AAAA,UAAA;AAAA,QACF;AAAA,MAEJ;AAAA,IAAA;AAAA,EACF;AAEF,SAAO,IAAI,WAAW,OAAO;AAC/B;AAOO,SAAS,UAAU,iBAAoD;AAC5E,QAAM,WAAW,IAAI;AAAA,IACnB,CAAC,GAAG,gBAAgB,SAAS,EAAE,IAAI,CAAC,CAAC,WAAW,OAAO,MAAM;AAAA,MAC3D;AAAA,MACA;AAAA,QACE;AAAA,QACA,SAAS,OAAO,YAAY,QAAQ,IAAI,OAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAAA,QACpD,gBAAgB;AAAA,MAAA;AAAA,IAClB,CACD;AAAA,EAAA;AAEH,SAAO,IAAI,WAAW,QAAQ;AAChC;"}

package/out/zero-schema/src/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../zero-schema/src/permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,aAAa,EACb,KAAK,SAAS,EACd,KAAK,SAAS,EACf,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,gCAAgC,CAAC;AAC3D,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAC,KAAK,EAAC,MAAM,8BAA8B,CAAC;AAExD,OAAO,KAAK,EAEV,iBAAiB,IAAI,yBAAyB,EAC/C,MAAM,2BAA2B,CAAC;AAGnC,eAAO,MAAM,UAAU,OACjB,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,iBAClD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB;;qBAN7B,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;qBAA7C,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;;8BAA7C,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;+BAA7C,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;;qBAA7C,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;;CAgBlD,CAAC;AAEF,eAAO,MAAM,UAAU,SAAK,CAAC;AAE7B,MAAM,MAAM,MAAM,GAAG,UAAU,GAAG,gBAAgB,CAAC;AAEnD,MAAM,MAAM,OAAO,CAAC,OAAO,SAAS,MAAM,IAAI;KAC3C,CAAC,IAAI,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,cAAc,CACxB,cAAc,EACd,OAAO,SAAS,MAAM,EACtB,MAAM,SAAS,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,IAC7C,CACF,QAAQ,EAAE,cAAc,EACxB,EAAE,EAAE,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,KACnC,SAAS,CAAC;AAEf,MAAM,MAAM,gBAAgB,CAC1B,cAAc,EACd,OAAO,SAAS,MAAM,EACtB,MAAM,SAAS,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,IAC7C;IAEF,MAAM,CAAC,EAAE,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC;IACvE;;;OAGG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC;IACvE;;;OAGG;IACH,MAAM,CAAC,EACH;QACE,WAAW,CAAC,EAAE,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAChE,YAAY,CAAC,EAAE,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;KAClE,GACD,SAAS,CAAC;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC;CACxE,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,cAAc,EAAE,OAAO,SAAS,MAAM,IAAI;KACrE,CAAC,IAAI,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;QAC/B,GAAG,CAAC,EAAE,gBAAgB,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,SAAS,CAAC;QACxE,IAAI,CAAC,EACD;aACG,CAAC,IAAI,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,CACjD,gBAAgB,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,EACrD,MAAM,CACP;SACF,GACD,SAAS,CAAC;KACf;CACF,CAAC;AAEF,wBAAsB,iBAAiB,CAAC,cAAc,EAAE,OAAO,SAAS,MAAM,EAC5E,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,MACL,OAAO,CAAC,iBAAiB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,GACnD,iBAAiB,CAAC,cAAc,EAAE,OAAO,CAAC,GAC7C,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAgBhD;AAoMD,eAAO,MAAM,WAAW;qBA1BQ,MAAM,SAAS;CA0BG,CAAC;AACnD,eAAO,MAAM,iBAAiB;qBA3BE,MAAM,SAAS;CA2Be,CAAC;AAC/D,wBAAgB,WAAW,CACzB,WAAW,EAAE,UAAU,GAAG,gBAAgB,EAC1C,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GACvB,SAAS,CAOX"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../zero-schema/src/permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,aAAa,EACb,KAAK,SAAS,EACd,KAAK,SAAS,EACf,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,gCAAgC,CAAC;AAC3D,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAC,KAAK,EAAC,MAAM,8BAA8B,CAAC;AAExD,OAAO,KAAK,EAEV,iBAAiB,IAAI,yBAAyB,EAC/C,MAAM,2BAA2B,CAAC;AAInC,eAAO,MAAM,UAAU,OACjB,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,iBAClD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB;;qBAN7B,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;qBAA7C,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;;8BAA7C,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;+BAA7C,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;;qBAA7C,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;;CAgBlD,CAAC;AAEF,eAAO,MAAM,UAAU,SAAK,CAAC;AAE7B,MAAM,MAAM,MAAM,GAAG,UAAU,GAAG,gBAAgB,CAAC;AAEnD,MAAM,MAAM,OAAO,CAAC,OAAO,SAAS,MAAM,IAAI;KAC3C,CAAC,IAAI,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,cAAc,CACxB,cAAc,EACd,OAAO,SAAS,MAAM,EACtB,MAAM,SAAS,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,IAC7C,CACF,QAAQ,EAAE,cAAc,EACxB,EAAE,EAAE,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,KACnC,SAAS,CAAC;AAEf,MAAM,MAAM,gBAAgB,CAC1B,cAAc,EACd,OAAO,SAAS,MAAM,EACtB,MAAM,SAAS,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,IAC7C;IAEF,MAAM,CAAC,EAAE,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC;IACvE;;;OAGG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC;IACvE;;;OAGG;IACH,MAAM,CAAC,EACH;QACE,WAAW,CAAC,EAAE,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAChE,YAAY,CAAC,EAAE,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;KAClE,GACD,SAAS,CAAC;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC;CACxE,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,cAAc,EAAE,OAAO,SAAS,MAAM,IAAI;KACrE,CAAC,IAAI,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;QAC/B,GAAG,CAAC,EAAE,gBAAgB,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,SAAS,CAAC;QACxE,IAAI,CAAC,EACD;aACG,CAAC,IAAI,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,CACjD,gBAAgB,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,EACrD,MAAM,CACP;SACF,GACD,SAAS,CAAC;KACf;CACF,CAAC;AAEF,wBAAsB,iBAAiB,CAAC,cAAc,EAAE,OAAO,SAAS,MAAM,EAC5E,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,MACL,OAAO,CAAC,iBAAiB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,GACnD,iBAAiB,CAAC,cAAc,EAAE,OAAO,CAAC,GAC7C,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAgBhD;AAoMD,eAAO,MAAM,WAAW;qBA1BQ,MAAM,SAAS;CA0BG,CAAC;AACnD,eAAO,MAAM,iBAAiB;qBA3BE,MAAM,SAAS;CA2Be,CAAC;AAC/D,wBAAgB,WAAW,CACzB,WAAW,EAAE,UAAU,GAAG,gBAAgB,EAC1C,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GACvB,SAAS,CAOX"}

package/out/zero-schema/src/permissions.js

@@ -0,0 +1,199 @@
+import { assert } from "../../shared/src/asserts.js";
+import { toStaticParam, mapCondition } from "../../zero-protocol/src/ast.js";
+import { defaultFormat } from "../../zero-types/src/format.js";
+import { StaticQuery } from "../../zql/src/query/static-query.js";
+import { clientToServer } from "./name-mapper.js";
+const ANYONE_CAN = [
+  (_, eb) => eb.and()
+];
+const ANYONE_CAN_DO_ANYTHING = {
+  row: {
+    select: ANYONE_CAN,
+    insert: ANYONE_CAN,
+    update: {
+      preMutation: ANYONE_CAN,
+      postMutation: ANYONE_CAN
+    },
+    delete: ANYONE_CAN
+  }
+};
+const NOBODY_CAN = [];
+async function definePermissions(schema, definer) {
+  const expressionBuilders = {};
+  for (const name of Object.keys(schema.tables)) {
+    expressionBuilders[name] = new StaticQuery(
+      schema,
+      name,
+      { table: name },
+      defaultFormat
+    ).expressionBuilder();
+  }
+  const config = await definer();
+  return compilePermissions(schema, config, expressionBuilders);
+}
+function compilePermissions(schema, authz, expressionBuilders) {
+  if (!authz) {
+    return void 0;
+  }
+  const nameMapper = clientToServer(schema.tables);
+  const ret = { tables: {} };
+  for (const [tableName, tableConfig] of Object.entries(authz)) {
+    const serverName = schema.tables[tableName].serverName ?? tableName;
+    ret.tables[serverName] = {
+      row: compileRowConfig(
+        nameMapper,
+        tableName,
+        tableConfig.row,
+        expressionBuilders[tableName]
+      ),
+      cell: compileCellConfig(
+        nameMapper,
+        tableName,
+        tableConfig.cell,
+        expressionBuilders[tableName]
+      )
+    };
+  }
+  return ret;
+}
+function compileRowConfig(clientToServer2, tableName, rowRules, expressionBuilder) {
+  if (!rowRules) {
+    return void 0;
+  }
+  return {
+    select: compileRules(
+      clientToServer2,
+      tableName,
+      rowRules.select,
+      expressionBuilder
+    ),
+    insert: compileRules(
+      clientToServer2,
+      tableName,
+      rowRules.insert,
+      expressionBuilder
+    ),
+    update: {
+      preMutation: compileRules(
+        clientToServer2,
+        tableName,
+        rowRules.update?.preMutation,
+        expressionBuilder
+      ),
+      postMutation: compileRules(
+        clientToServer2,
+        tableName,
+        rowRules.update?.postMutation,
+        expressionBuilder
+      )
+    },
+    delete: compileRules(
+      clientToServer2,
+      tableName,
+      rowRules.delete,
+      expressionBuilder
+    )
+  };
+}
+function compileRules(clientToServer2, tableName, rules, expressionBuilder) {
+  if (!rules) {
+    return void 0;
+  }
+  return rules.map((rule) => {
+    const cond = rule(authDataRef, expressionBuilder);
+    return ["allow", mapCondition(cond, tableName, clientToServer2)];
+  });
+}
+function compileCellConfig(clientToServer2, tableName, cellRules, expressionBuilder) {
+  if (!cellRules) {
+    return void 0;
+  }
+  const ret = {};
+  for (const [columnName, rules] of Object.entries(cellRules)) {
+    ret[columnName] = {
+      select: compileRules(
+        clientToServer2,
+        tableName,
+        rules.select,
+        expressionBuilder
+      ),
+      insert: compileRules(
+        clientToServer2,
+        tableName,
+        rules.insert,
+        expressionBuilder
+      ),
+      update: {
+        preMutation: compileRules(
+          clientToServer2,
+          tableName,
+          rules.update?.preMutation,
+          expressionBuilder
+        ),
+        postMutation: compileRules(
+          clientToServer2,
+          tableName,
+          rules.update?.postMutation,
+          expressionBuilder
+        )
+      },
+      delete: compileRules(
+        clientToServer2,
+        tableName,
+        rules.delete,
+        expressionBuilder
+      )
+    };
+  }
+  return ret;
+}
+class CallTracker {
+  #anchor;
+  #path;
+  constructor(anchor, path) {
+    this.#anchor = anchor;
+    this.#path = path;
+  }
+  get(target, prop) {
+    if (prop === toStaticParam) {
+      return target[toStaticParam];
+    }
+    assert(typeof prop === "string");
+    const path = [...this.#path, prop];
+    return new Proxy(
+      {
+        [toStaticParam]: () => staticParam(this.#anchor, path)
+      },
+      new CallTracker(this.#anchor, path)
+    );
+  }
+}
+function baseTracker(anchor) {
+  return new Proxy(
+    {
+      [toStaticParam]: () => {
+        throw new Error("no JWT field specified");
+      }
+    },
+    new CallTracker(anchor, [])
+  );
+}
+const authDataRef = baseTracker("authData");
+baseTracker("preMutationRow");
+function staticParam(anchorClass, field) {
+  return {
+    type: "static",
+    anchor: anchorClass,
+    // for backwards compatibility
+    field: field.length === 1 ? field[0] : field
+  };
+}
+export {
+  ANYONE_CAN,
+  ANYONE_CAN_DO_ANYTHING,
+  NOBODY_CAN,
+  authDataRef,
+  definePermissions,
+  staticParam
+};
+//# sourceMappingURL=permissions.js.map

package/out/zero-schema/src/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sources":["../../../../zero-schema/src/permissions.ts"],"sourcesContent":["import {assert} from '../../shared/src/asserts.ts';\nimport {\n  mapCondition,\n  toStaticParam,\n  type Condition,\n  type Parameter,\n} from '../../zero-protocol/src/ast.ts';\nimport {defaultFormat} from '../../zero-types/src/format.ts';\nimport type {Schema} from '../../zero-types/src/schema.ts';\nimport type {ExpressionBuilder} from '../../zql/src/query/expression.ts';\nimport type {Query} from '../../zql/src/query/query.ts';\nimport {StaticQuery} from '../../zql/src/query/static-query.ts';\nimport type {\n  AssetPermissions as CompiledAssetPermissions,\n  PermissionsConfig as CompiledPermissionsConfig,\n} from './compiled-permissions.ts';\nimport type {NameMapper} from './name-mapper.ts';\nimport {clientToServer} from './name-mapper.ts';\n\nexport const ANYONE_CAN = [\n  (_: unknown, eb: ExpressionBuilder<Schema, never>) => eb.and(),\n];\n\n/**\n * @deprecated Use {@link ANYONE_CAN} instead.\n */\nexport const ANYONE_CAN_DO_ANYTHING = {\n  row: {\n    select: ANYONE_CAN,\n    insert: ANYONE_CAN,\n    update: {\n      preMutation: ANYONE_CAN,\n      postMutation: ANYONE_CAN,\n    },\n    delete: ANYONE_CAN,\n  },\n};\n\nexport const NOBODY_CAN = [];\n\nexport type Anchor = 'authData' | 'preMutationRow';\n\nexport type Queries<TSchema extends Schema> = {\n  [K in keyof TSchema['tables']]: Query<Schema, K & string>;\n};\n\nexport type PermissionRule<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n> = (\n  authData: TAuthDataShape,\n  eb: ExpressionBuilder<TSchema, TTable>,\n) => Condition;\n\nexport type AssetPermissions<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n> = {\n  // Why an array of rules?: https://github.com/rocicorp/mono/pull/3184/files#r1869680716\n  select?: PermissionRule<TAuthDataShape, TSchema, TTable>[] | undefined;\n  /**\n   * @deprecated Use Mutators instead.\n   * @see {@link https://zero.rocicorp.dev/docs/writing-data}\n   */\n  insert?: PermissionRule<TAuthDataShape, TSchema, TTable>[] | undefined;\n  /**\n   * @deprecated Use Mutators instead.\n   * @see {@link https://zero.rocicorp.dev/docs/writing-data}\n   */\n  update?:\n    | {\n        preMutation?: PermissionRule<TAuthDataShape, TSchema, TTable>[];\n        postMutation?: PermissionRule<TAuthDataShape, TSchema, TTable>[];\n      }\n    | undefined;\n  /**\n   * @deprecated Use Mutators instead.\n   * @see {@link https://zero.rocicorp.dev/docs/writing-data}\n   */\n  delete?: PermissionRule<TAuthDataShape, TSchema, TTable>[] | undefined;\n};\n\nexport type PermissionsConfig<TAuthDataShape, TSchema extends Schema> = {\n  [K in keyof TSchema['tables']]?: {\n    row?: AssetPermissions<TAuthDataShape, TSchema, K & string> | undefined;\n    cell?:\n      | {\n          [C in keyof TSchema['tables'][K]['columns']]?: Omit<\n            AssetPermissions<TAuthDataShape, TSchema, K & string>,\n            'cell'\n          >;\n        }\n      | undefined;\n  };\n};\n\nexport async function definePermissions<TAuthDataShape, TSchema extends Schema>(\n  schema: TSchema,\n  definer: () =>\n    | Promise<PermissionsConfig<TAuthDataShape, TSchema>>\n    | PermissionsConfig<TAuthDataShape, TSchema>,\n): Promise<CompiledPermissionsConfig | undefined> {\n  const expressionBuilders = {} as Record<\n    string,\n    ExpressionBuilder<Schema, string>\n  >;\n  for (const name of Object.keys(schema.tables)) {\n    expressionBuilders[name] = new StaticQuery(\n      schema,\n      name,\n      {table: name},\n      defaultFormat,\n    ).expressionBuilder();\n  }\n\n  const config = await definer();\n  return compilePermissions(schema, config, expressionBuilders);\n}\n\nfunction compilePermissions<TAuthDataShape, TSchema extends Schema>(\n  schema: TSchema,\n  authz: PermissionsConfig<TAuthDataShape, TSchema> | undefined,\n  expressionBuilders: Record<string, ExpressionBuilder<Schema, string>>,\n): CompiledPermissionsConfig | undefined {\n  if (!authz) {\n    return undefined;\n  }\n  const nameMapper = clientToServer(schema.tables);\n  const ret: CompiledPermissionsConfig = {tables: {}};\n  for (const [tableName, tableConfig] of Object.entries(authz)) {\n    const serverName = schema.tables[tableName].serverName ?? tableName;\n    ret.tables[serverName] = {\n      row: compileRowConfig(\n        nameMapper,\n        tableName,\n        tableConfig.row,\n        expressionBuilders[tableName],\n      ),\n      cell: compileCellConfig(\n        nameMapper,\n        tableName,\n        tableConfig.cell,\n        expressionBuilders[tableName],\n      ),\n    };\n  }\n\n  return ret;\n}\n\nfunction compileRowConfig<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n>(\n  clientToServer: NameMapper,\n  tableName: TTable,\n  rowRules: AssetPermissions<TAuthDataShape, TSchema, TTable> | undefined,\n  expressionBuilder: ExpressionBuilder<TSchema, TTable>,\n): CompiledAssetPermissions | undefined {\n  if (!rowRules) {\n    return undefined;\n  }\n  return {\n    select: compileRules(\n      clientToServer,\n      tableName,\n      rowRules.select,\n      expressionBuilder,\n    ),\n    insert: compileRules(\n      clientToServer,\n      tableName,\n      rowRules.insert,\n      expressionBuilder,\n    ),\n    update: {\n      preMutation: compileRules(\n        clientToServer,\n        tableName,\n        rowRules.update?.preMutation,\n        expressionBuilder,\n      ),\n      postMutation: compileRules(\n        clientToServer,\n        tableName,\n        rowRules.update?.postMutation,\n        expressionBuilder,\n      ),\n    },\n    delete: compileRules(\n      clientToServer,\n      tableName,\n      rowRules.delete,\n      expressionBuilder,\n    ),\n  };\n}\n\n/**\n * What is this \"allow\" and why are permissions policies an array of rules?\n *\n * Please read: https://github.com/rocicorp/mono/pull/3184/files#r1869680716\n */\nfunction compileRules<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n>(\n  clientToServer: NameMapper,\n  tableName: TTable,\n  rules: PermissionRule<TAuthDataShape, TSchema, TTable>[] | undefined,\n  expressionBuilder: ExpressionBuilder<TSchema, TTable>,\n): ['allow', Condition][] | undefined {\n  if (!rules) {\n    return undefined;\n  }\n\n  return rules.map(rule => {\n    const cond = rule(authDataRef as TAuthDataShape, expressionBuilder);\n    return ['allow', mapCondition(cond, tableName, clientToServer)] as const;\n  });\n}\n\nfunction compileCellConfig<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n>(\n  clientToServer: NameMapper,\n  tableName: TTable,\n  cellRules:\n    | Record<string, AssetPermissions<TAuthDataShape, TSchema, TTable>>\n    | undefined,\n  expressionBuilder: ExpressionBuilder<TSchema, TTable>,\n): Record<string, CompiledAssetPermissions> | undefined {\n  if (!cellRules) {\n    return undefined;\n  }\n  const ret: Record<string, CompiledAssetPermissions> = {};\n  for (const [columnName, rules] of Object.entries(cellRules)) {\n    ret[columnName] = {\n      select: compileRules(\n        clientToServer,\n        tableName,\n        rules.select,\n        expressionBuilder,\n      ),\n      insert: compileRules(\n        clientToServer,\n        tableName,\n        rules.insert,\n        expressionBuilder,\n      ),\n      update: {\n        preMutation: compileRules(\n          clientToServer,\n          tableName,\n          rules.update?.preMutation,\n          expressionBuilder,\n        ),\n        postMutation: compileRules(\n          clientToServer,\n          tableName,\n          rules.update?.postMutation,\n          expressionBuilder,\n        ),\n      },\n      delete: compileRules(\n        clientToServer,\n        tableName,\n        rules.delete,\n        expressionBuilder,\n      ),\n    };\n  }\n  return ret;\n}\n\nclass CallTracker {\n  readonly #anchor: Anchor;\n  readonly #path: string[];\n  constructor(anchor: Anchor, path: string[]) {\n    this.#anchor = anchor;\n    this.#path = path;\n  }\n\n  get(target: {[toStaticParam]: () => Parameter}, prop: string | symbol) {\n    if (prop === toStaticParam) {\n      return target[toStaticParam];\n    }\n    assert(typeof prop === 'string');\n    const path = [...this.#path, prop];\n    return new Proxy(\n      {\n        [toStaticParam]: () => staticParam(this.#anchor, path),\n      },\n      new CallTracker(this.#anchor, path),\n    );\n  }\n}\n\nfunction baseTracker(anchor: Anchor) {\n  return new Proxy(\n    {\n      [toStaticParam]: () => {\n        throw new Error('no JWT field specified');\n      },\n    },\n    new CallTracker(anchor, []),\n  );\n}\n\nexport const authDataRef = baseTracker('authData');\nexport const preMutationRowRef = baseTracker('preMutationRow');\nexport function staticParam(\n  anchorClass: 'authData' | 'preMutationRow',\n  field: string | string[],\n): Parameter {\n  return {\n    type: 'static',\n    anchor: anchorClass,\n    // for backwards compatibility\n    field: field.length === 1 ? field[0] : field,\n  };\n}\n"],"names":["clientToServer"],"mappings":";;;;;AAmBO,MAAM,aAAa;AAAA,EACxB,CAAC,GAAY,OAAyC,GAAG,IAAA;AAC3D;AAKO,MAAM,yBAAyB;AAAA,EACpC,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,MACN,aAAa;AAAA,MACb,cAAc;AAAA,IAAA;AAAA,IAEhB,QAAQ;AAAA,EAAA;AAEZ;AAEO,MAAM,aAAa,CAAA;AA4D1B,eAAsB,kBACpB,QACA,SAGgD;AAChD,QAAM,qBAAqB,CAAA;AAI3B,aAAW,QAAQ,OAAO,KAAK,OAAO,MAAM,GAAG;AAC7C,uBAAmB,IAAI,IAAI,IAAI;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,EAAC,OAAO,KAAA;AAAA,MACR;AAAA,IAAA,EACA,kBAAA;AAAA,EACJ;AAEA,QAAM,SAAS,MAAM,QAAA;AACrB,SAAO,mBAAmB,QAAQ,QAAQ,kBAAkB;AAC9D;AAEA,SAAS,mBACP,QACA,OACA,oBACuC;AACvC,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AACA,QAAM,aAAa,eAAe,OAAO,MAAM;AAC/C,QAAM,MAAiC,EAAC,QAAQ,GAAC;AACjD,aAAW,CAAC,WAAW,WAAW,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC5D,UAAM,aAAa,OAAO,OAAO,SAAS,EAAE,cAAc;AAC1D,QAAI,OAAO,UAAU,IAAI;AAAA,MACvB,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA,YAAY;AAAA,QACZ,mBAAmB,SAAS;AAAA,MAAA;AAAA,MAE9B,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,YAAY;AAAA,QACZ,mBAAmB,SAAS;AAAA,MAAA;AAAA,IAC9B;AAAA,EAEJ;AAEA,SAAO;AACT;AAEA,SAAS,iBAKPA,iBACA,WACA,UACA,mBACsC;AACtC,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,MACNA;AAAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IAAA;AAAA,IAEF,QAAQ;AAAA,MACNA;AAAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IAAA;AAAA,IAEF,QAAQ;AAAA,MACN,aAAa;AAAA,QACXA;AAAAA,QACA;AAAA,QACA,SAAS,QAAQ;AAAA,QACjB;AAAA,MAAA;AAAA,MAEF,cAAc;AAAA,QACZA;AAAAA,QACA;AAAA,QACA,SAAS,QAAQ;AAAA,QACjB;AAAA,MAAA;AAAA,IACF;AAAA,IAEF,QAAQ;AAAA,MACNA;AAAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IAAA;AAAA,EACF;AAEJ;AAOA,SAAS,aAKPA,iBACA,WACA,OACA,mBACoC;AACpC,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAEA,SAAO,MAAM,IAAI,CAAA,SAAQ;AACvB,UAAM,OAAO,KAAK,aAA+B,iBAAiB;AAClE,WAAO,CAAC,SAAS,aAAa,MAAM,WAAWA,eAAc,CAAC;AAAA,EAChE,CAAC;AACH;AAEA,SAAS,kBAKPA,iBACA,WACA,WAGA,mBACsD;AACtD,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AACA,QAAM,MAAgD,CAAA;AACtD,aAAW,CAAC,YAAY,KAAK,KAAK,OAAO,QAAQ,SAAS,GAAG;AAC3D,QAAI,UAAU,IAAI;AAAA,MAChB,QAAQ;AAAA,QACNA;AAAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN;AAAA,MAAA;AAAA,MAEF,QAAQ;AAAA,QACNA;AAAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN;AAAA,MAAA;AAAA,MAEF,QAAQ;AAAA,QACN,aAAa;AAAA,UACXA;AAAAA,UACA;AAAA,UACA,MAAM,QAAQ;AAAA,UACd;AAAA,QAAA;AAAA,QAEF,cAAc;AAAA,UACZA;AAAAA,UACA;AAAA,UACA,MAAM,QAAQ;AAAA,UACd;AAAA,QAAA;AAAA,MACF;AAAA,MAEF,QAAQ;AAAA,QACNA;AAAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN;AAAA,MAAA;AAAA,IACF;AAAA,EAEJ;AACA,SAAO;AACT;AAEA,MAAM,YAAY;AAAA,EACP;AAAA,EACA;AAAA,EACT,YAAY,QAAgB,MAAgB;AAC1C,SAAK,UAAU;AACf,SAAK,QAAQ;AAAA,EACf;AAAA,EAEA,IAAI,QAA4C,MAAuB;AACrE,QAAI,SAAS,eAAe;AAC1B,aAAO,OAAO,aAAa;AAAA,IAC7B;AACA,WAAO,OAAO,SAAS,QAAQ;AAC/B,UAAM,OAAO,CAAC,GAAG,KAAK,OAAO,IAAI;AACjC,WAAO,IAAI;AAAA,MACT;AAAA,QACE,CAAC,aAAa,GAAG,MAAM,YAAY,KAAK,SAAS,IAAI;AAAA,MAAA;AAAA,MAEvD,IAAI,YAAY,KAAK,SAAS,IAAI;AAAA,IAAA;AAAA,EAEtC;AACF;AAEA,SAAS,YAAY,QAAgB;AACnC,SAAO,IAAI;AAAA,IACT;AAAA,MACE,CAAC,aAAa,GAAG,MAAM;AACrB,cAAM,IAAI,MAAM,wBAAwB;AAAA,MAC1C;AAAA,IAAA;AAAA,IAEF,IAAI,YAAY,QAAQ,CAAA,CAAE;AAAA,EAAA;AAE9B;AAEO,MAAM,cAAc,YAAY,UAAU;AAChB,YAAY,gBAAgB;AACtD,SAAS,YACd,aACA,OACW;AACX,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ;AAAA;AAAA,IAER,OAAO,MAAM,WAAW,IAAI,MAAM,CAAC,IAAI;AAAA,EAAA;AAE3C;"}

package/out/zero-schema/src/schema-config.js

@@ -1,59 +1,43 @@
-import * as v from "../../shared/src/valita.js";
+import { readonlyObject, literalUnion, readonly } from "../../shared/src/valita.js";
 import { compoundKeySchema } from "../../zero-protocol/src/ast.js";
 import { valueTypeSchema } from "../../zero-protocol/src/client-schema.js";
 import { primaryKeySchema } from "../../zero-protocol/src/primary-key.js";
-import { permissionsConfigSchema, } from "./compiled-permissions.js";
-const relationshipPart = v.readonlyObject({
-    sourceField: compoundKeySchema,
-    destField: compoundKeySchema,
-    destSchema: v.string(),
-    cardinality: v.literalUnion('one', 'many'),
+import "./compiled-permissions.js";
+import { string, union, tuple, boolean, record } from "@badrap/valita";
+const relationshipPart = readonlyObject({
+  sourceField: compoundKeySchema,
+  destField: compoundKeySchema,
+  destSchema: string(),
+  cardinality: literalUnion("one", "many")
 });
-export const relationshipSchema = v.union(v.readonly(v.tuple([relationshipPart])), v.readonly(v.tuple([relationshipPart, relationshipPart])));
-export const schemaValueSchema = v.readonlyObject({
-    type: valueTypeSchema,
-    serverName: v.string().optional(),
-    optional: v.boolean().optional(),
+const relationshipSchema = union(
+  readonly(tuple([relationshipPart])),
+  readonly(tuple([relationshipPart, relationshipPart]))
+);
+const schemaValueSchema = readonlyObject({
+  type: valueTypeSchema,
+  serverName: string().optional(),
+  optional: boolean().optional()
 });
-export const tableSchemaSchema = v.readonlyObject({
-    name: v.string(),
-    serverName: v.string().optional(),
-    columns: v.record(schemaValueSchema),
-    primaryKey: primaryKeySchema,
+const tableSchemaSchema = readonlyObject({
+  name: string(),
+  serverName: string().optional(),
+  columns: record(schemaValueSchema),
+  primaryKey: primaryKeySchema
 });
-export const schemaSchema = v.readonlyObject({
-    tables: v.record(tableSchemaSchema),
-    relationships: v.record(v.record(relationshipSchema)),
-    enableLegacyQueries: v.boolean().optional(),
-    enableLegacyMutators: v.boolean().optional(),
+readonlyObject({
+  tables: record(tableSchemaSchema),
+  relationships: record(record(relationshipSchema)),
+  enableLegacyQueries: boolean().optional(),
+  enableLegacyMutators: boolean().optional()
 });
-// oxlint-disable-next-line @typescript-eslint/no-explicit-any
-export function isSchemaConfig(value) {
-    // oxlint-disable-next-line eqeqeq
-    return value != null && 'schema' in value && 'permissions' in value;
+function isSchemaConfig(value) {
+  return value != null && "schema" in value && "permissions" in value;
 }
-export async function stringifySchema(module) {
-    if (!isSchemaConfig(module)) {
-        throw new Error('Schema file must have a export `schema` and `permissions`.');
-    }
-    const schemaConfig = module;
-    const permissions = v.parse(await schemaConfig.permissions, permissionsConfigSchema);
-    return JSON.stringify({
-        permissions,
-        schema: schemaConfig.schema,
-    }, undefined, 2);
-}
-export function parseSchema(input, source) {
-    try {
-        const config = JSON.parse(input);
-        const permissions = v.parse(config.permissions, permissionsConfigSchema);
-        return {
-            permissions,
-            schema: config.schema,
-        };
-    }
-    catch (e) {
-        throw new Error(`Failed to parse schema config from ${source}: ${e}`);
-    }
-}
-//# sourceMappingURL=schema-config.js.map
+export {
+  isSchemaConfig,
+  relationshipSchema,
+  schemaValueSchema,
+  tableSchemaSchema
+};
+//# sourceMappingURL=schema-config.js.map