@rocicorp/zero 0.26.1 → 0.26.2-canary.4

package/out/zero-schema/src/permissions.js

@@ -1,196 +1,109 @@
 import { assert } from "../../shared/src/asserts.js";
-import { toStaticParam, mapCondition } from "../../zero-protocol/src/ast.js";
+import { mapCondition, toStaticParam } from "../../zero-protocol/src/ast.js";
 import { newExpressionBuilder } from "../../zql/src/query/static-query.js";
 import { clientToServer } from "./name-mapper.js";
-const ANYONE_CAN = [
-  (_, eb) => eb.and()
-];
-const ANYONE_CAN_DO_ANYTHING = {
-  row: {
-    select: ANYONE_CAN,
-    insert: ANYONE_CAN,
-    update: {
-      preMutation: ANYONE_CAN,
-      postMutation: ANYONE_CAN
-    },
-    delete: ANYONE_CAN
-  }
-};
-const NOBODY_CAN = [];
+//#region ../zero-schema/src/permissions.ts
+var ANYONE_CAN = [(_, eb) => eb.and()];
+/**
+* @deprecated Use {@link ANYONE_CAN} instead.
+*/
+var ANYONE_CAN_DO_ANYTHING = { row: {
+	select: ANYONE_CAN,
+	insert: ANYONE_CAN,
+	update: {
+		preMutation: ANYONE_CAN,
+		postMutation: ANYONE_CAN
+	},
+	delete: ANYONE_CAN
+} };
+var NOBODY_CAN = [];
+/**
+* @deprecated Use {@link defineMutators} and {@link defineQueries} instead.
+*/
 async function definePermissions(schema, definer) {
-  const expressionBuilders = {};
-  for (const name of Object.keys(schema.tables)) {
-    expressionBuilders[name] = newExpressionBuilder(schema, name);
-  }
-  const config = await definer();
-  return compilePermissions(schema, config, expressionBuilders);
+	const expressionBuilders = {};
+	for (const name of Object.keys(schema.tables)) expressionBuilders[name] = newExpressionBuilder(schema, name);
+	return compilePermissions(schema, await definer(), expressionBuilders);
 }
 function compilePermissions(schema, authz, expressionBuilders) {
-  if (!authz) {
-    return void 0;
-  }
-  const nameMapper = clientToServer(schema.tables);
-  const ret = { tables: {} };
-  for (const [tableName, tableConfig] of Object.entries(authz)) {
-    const serverName = schema.tables[tableName].serverName ?? tableName;
-    ret.tables[serverName] = {
-      row: compileRowConfig(
-        nameMapper,
-        tableName,
-        tableConfig.row,
-        expressionBuilders[tableName]
-      ),
-      cell: compileCellConfig(
-        nameMapper,
-        tableName,
-        tableConfig.cell,
-        expressionBuilders[tableName]
-      )
-    };
-  }
-  return ret;
-}
-function compileRowConfig(clientToServer2, tableName, rowRules, expressionBuilder) {
-  if (!rowRules) {
-    return void 0;
-  }
-  return {
-    select: compileRules(
-      clientToServer2,
-      tableName,
-      rowRules.select,
-      expressionBuilder
-    ),
-    insert: compileRules(
-      clientToServer2,
-      tableName,
-      rowRules.insert,
-      expressionBuilder
-    ),
-    update: {
-      preMutation: compileRules(
-        clientToServer2,
-        tableName,
-        rowRules.update?.preMutation,
-        expressionBuilder
-      ),
-      postMutation: compileRules(
-        clientToServer2,
-        tableName,
-        rowRules.update?.postMutation,
-        expressionBuilder
-      )
-    },
-    delete: compileRules(
-      clientToServer2,
-      tableName,
-      rowRules.delete,
-      expressionBuilder
-    )
-  };
+	if (!authz) return;
+	const nameMapper = clientToServer(schema.tables);
+	const ret = { tables: {} };
+	for (const [tableName, tableConfig] of Object.entries(authz)) {
+		const serverName = schema.tables[tableName].serverName ?? tableName;
+		ret.tables[serverName] = {
+			row: compileRowConfig(nameMapper, tableName, tableConfig.row, expressionBuilders[tableName]),
+			cell: compileCellConfig(nameMapper, tableName, tableConfig.cell, expressionBuilders[tableName])
+		};
+	}
+	return ret;
 }
-function compileRules(clientToServer2, tableName, rules, expressionBuilder) {
-  if (!rules) {
-    return void 0;
-  }
-  return rules.map((rule) => {
-    const cond = rule(authDataRef, expressionBuilder);
-    return ["allow", mapCondition(cond, tableName, clientToServer2)];
-  });
+function compileRowConfig(clientToServer, tableName, rowRules, expressionBuilder) {
+	if (!rowRules) return;
+	return {
+		select: compileRules(clientToServer, tableName, rowRules.select, expressionBuilder),
+		insert: compileRules(clientToServer, tableName, rowRules.insert, expressionBuilder),
+		update: {
+			preMutation: compileRules(clientToServer, tableName, rowRules.update?.preMutation, expressionBuilder),
+			postMutation: compileRules(clientToServer, tableName, rowRules.update?.postMutation, expressionBuilder)
+		},
+		delete: compileRules(clientToServer, tableName, rowRules.delete, expressionBuilder)
+	};
 }
-function compileCellConfig(clientToServer2, tableName, cellRules, expressionBuilder) {
-  if (!cellRules) {
-    return void 0;
-  }
-  const ret = {};
-  for (const [columnName, rules] of Object.entries(cellRules)) {
-    ret[columnName] = {
-      select: compileRules(
-        clientToServer2,
-        tableName,
-        rules.select,
-        expressionBuilder
-      ),
-      insert: compileRules(
-        clientToServer2,
-        tableName,
-        rules.insert,
-        expressionBuilder
-      ),
-      update: {
-        preMutation: compileRules(
-          clientToServer2,
-          tableName,
-          rules.update?.preMutation,
-          expressionBuilder
-        ),
-        postMutation: compileRules(
-          clientToServer2,
-          tableName,
-          rules.update?.postMutation,
-          expressionBuilder
-        )
-      },
-      delete: compileRules(
-        clientToServer2,
-        tableName,
-        rules.delete,
-        expressionBuilder
-      )
-    };
-  }
-  return ret;
+/**
+* What is this "allow" and why are permissions policies an array of rules?
+*
+* Please read: https://github.com/rocicorp/mono/pull/3184/files#r1869680716
+*/
+function compileRules(clientToServer, tableName, rules, expressionBuilder) {
+	if (!rules) return;
+	return rules.map((rule) => {
+		return ["allow", mapCondition(rule(authDataRef, expressionBuilder), tableName, clientToServer)];
+	});
 }
-class CallTracker {
-  #anchor;
-  #path;
-  constructor(anchor, path) {
-    this.#anchor = anchor;
-    this.#path = path;
-  }
-  get(target, prop) {
-    if (prop === toStaticParam) {
-      return target[toStaticParam];
-    }
-    assert(
-      typeof prop === "string",
-      () => `Expected prop to be a string, got ${typeof prop}`
-    );
-    const path = [...this.#path, prop];
-    return new Proxy(
-      {
-        [toStaticParam]: () => staticParam(this.#anchor, path)
-      },
-      new CallTracker(this.#anchor, path)
-    );
-  }
+function compileCellConfig(clientToServer, tableName, cellRules, expressionBuilder) {
+	if (!cellRules) return;
+	const ret = {};
+	for (const [columnName, rules] of Object.entries(cellRules)) ret[columnName] = {
+		select: compileRules(clientToServer, tableName, rules.select, expressionBuilder),
+		insert: compileRules(clientToServer, tableName, rules.insert, expressionBuilder),
+		update: {
+			preMutation: compileRules(clientToServer, tableName, rules.update?.preMutation, expressionBuilder),
+			postMutation: compileRules(clientToServer, tableName, rules.update?.postMutation, expressionBuilder)
+		},
+		delete: compileRules(clientToServer, tableName, rules.delete, expressionBuilder)
+	};
+	return ret;
 }
+var CallTracker = class CallTracker {
+	#anchor;
+	#path;
+	constructor(anchor, path) {
+		this.#anchor = anchor;
+		this.#path = path;
+	}
+	get(target, prop) {
+		if (prop === toStaticParam) return target[toStaticParam];
+		assert(typeof prop === "string", () => `Expected prop to be a string, got ${typeof prop}`);
+		const path = [...this.#path, prop];
+		return new Proxy({ [toStaticParam]: () => staticParam(this.#anchor, path) }, new CallTracker(this.#anchor, path));
+	}
+};
 function baseTracker(anchor) {
-  return new Proxy(
-    {
-      [toStaticParam]: () => {
-        throw new Error("no JWT field specified");
-      }
-    },
-    new CallTracker(anchor, [])
-  );
+	return new Proxy({ [toStaticParam]: () => {
+		throw new Error("no JWT field specified");
+	} }, new CallTracker(anchor, []));
 }
-const authDataRef = baseTracker("authData");
+var authDataRef = baseTracker("authData");
 baseTracker("preMutationRow");
 function staticParam(anchorClass, field) {
-  return {
-    type: "static",
-    anchor: anchorClass,
-    // for backwards compatibility
-    field: field.length === 1 ? field[0] : field
-  };
+	return {
+		type: "static",
+		anchor: anchorClass,
+		field: field.length === 1 ? field[0] : field
+	};
 }
-export {
-  ANYONE_CAN,
-  ANYONE_CAN_DO_ANYTHING,
-  NOBODY_CAN,
-  authDataRef,
-  definePermissions,
-  staticParam
-};
-//# sourceMappingURL=permissions.js.map
+//#endregion
+export { ANYONE_CAN, ANYONE_CAN_DO_ANYTHING, NOBODY_CAN, definePermissions };
+
+//# sourceMappingURL=permissions.js.map

package/out/zero-schema/src/permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.js","sources":["../../../../zero-schema/src/permissions.ts"],"sourcesContent":["import {assert} from '../../shared/src/asserts.ts';\nimport {\n  mapCondition,\n  toStaticParam,\n  type Condition,\n  type Parameter,\n} from '../../zero-protocol/src/ast.ts';\nimport type {Schema} from '../../zero-types/src/schema.ts';\nimport type {ExpressionBuilder} from '../../zql/src/query/expression.ts';\nimport type {Query} from '../../zql/src/query/query.ts';\nimport {newExpressionBuilder} from '../../zql/src/query/static-query.ts';\nimport type {\n  AssetPermissions as CompiledAssetPermissions,\n  PermissionsConfig as CompiledPermissionsConfig,\n  TablePermissions,\n} from './compiled-permissions.ts';\nimport type {NameMapper} from './name-mapper.ts';\nimport {clientToServer} from './name-mapper.ts';\n\nexport const ANYONE_CAN = [\n  (_: unknown, eb: ExpressionBuilder<never, Schema>) => eb.and(),\n];\n\n/**\n * @deprecated Use {@link ANYONE_CAN} instead.\n */\nexport const ANYONE_CAN_DO_ANYTHING = {\n  row: {\n    select: ANYONE_CAN,\n    insert: ANYONE_CAN,\n    update: {\n      preMutation: ANYONE_CAN,\n      postMutation: ANYONE_CAN,\n    },\n    delete: ANYONE_CAN,\n  },\n};\n\nexport const NOBODY_CAN = [];\n\nexport type Anchor = 'authData' | 'preMutationRow';\n\nexport type Queries<TSchema extends Schema> = {\n  [K in keyof TSchema['tables']]: Query<K & string, TSchema>;\n};\n\nexport type PermissionRule<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n> = (\n  authData: TAuthDataShape,\n  eb: ExpressionBuilder<TTable, TSchema>,\n) => Condition;\n\nexport type AssetPermissions<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n> = {\n  // Why an array of rules?: https://github.com/rocicorp/mono/pull/3184/files#r1869680716\n  select?: PermissionRule<TAuthDataShape, TSchema, TTable>[] | undefined;\n  /**\n   * @deprecated Use Mutators instead.\n   * @see {@link https://zero.rocicorp.dev/docs/writing-data}\n   */\n  insert?: PermissionRule<TAuthDataShape, TSchema, TTable>[] | undefined;\n  /**\n   * @deprecated Use Mutators instead.\n   * @see {@link https://zero.rocicorp.dev/docs/writing-data}\n   */\n  update?:\n    | {\n        preMutation?: PermissionRule<TAuthDataShape, TSchema, TTable>[];\n        postMutation?: PermissionRule<TAuthDataShape, TSchema, TTable>[];\n      }\n    | undefined;\n  /**\n   * @deprecated Use Mutators instead.\n   * @see {@link https://zero.rocicorp.dev/docs/writing-data}\n   */\n  delete?: PermissionRule<TAuthDataShape, TSchema, TTable>[] | undefined;\n};\n\nexport type PermissionsConfig<TAuthDataShape, TSchema extends Schema> = {\n  [K in keyof TSchema['tables']]?: {\n    row?: AssetPermissions<TAuthDataShape, TSchema, K & string> | undefined;\n    cell?:\n      | {\n          [C in keyof TSchema['tables'][K]['columns']]?: Omit<\n            AssetPermissions<TAuthDataShape, TSchema, K & string>,\n            'cell'\n          >;\n        }\n      | undefined;\n  };\n};\n\n/**\n * @deprecated Use {@link defineMutators} and {@link defineQueries} instead.\n */\nexport async function definePermissions<TAuthDataShape, TSchema extends Schema>(\n  schema: TSchema,\n  definer: () =>\n    | Promise<PermissionsConfig<TAuthDataShape, TSchema>>\n    | PermissionsConfig<TAuthDataShape, TSchema>,\n): Promise<CompiledPermissionsConfig | undefined> {\n  const expressionBuilders = {} as Record<\n    string,\n    ExpressionBuilder<string, TSchema>\n  >;\n  for (const name of Object.keys(schema.tables)) {\n    expressionBuilders[name] = newExpressionBuilder(schema, name);\n  }\n\n  const config = await definer();\n  return compilePermissions(schema, config, expressionBuilders);\n}\n\nfunction compilePermissions<TAuthDataShape, TSchema extends Schema>(\n  schema: TSchema,\n  authz: PermissionsConfig<TAuthDataShape, TSchema> | undefined,\n  expressionBuilders: Record<string, ExpressionBuilder<string, TSchema>>,\n): CompiledPermissionsConfig | undefined {\n  if (!authz) {\n    return undefined;\n  }\n  const nameMapper = clientToServer(schema.tables);\n  const ret = {tables: {} as TablePermissions};\n  for (const [tableName, tableConfig] of Object.entries(authz)) {\n    const serverName = schema.tables[tableName].serverName ?? tableName;\n    ret.tables[serverName] = {\n      row: compileRowConfig(\n        nameMapper,\n        tableName,\n        tableConfig.row,\n        expressionBuilders[tableName],\n      ),\n      cell: compileCellConfig(\n        nameMapper,\n        tableName,\n        tableConfig.cell,\n        expressionBuilders[tableName],\n      ),\n    };\n  }\n\n  return ret;\n}\n\nfunction compileRowConfig<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n>(\n  clientToServer: NameMapper,\n  tableName: TTable,\n  rowRules: AssetPermissions<TAuthDataShape, TSchema, TTable> | undefined,\n  expressionBuilder: ExpressionBuilder<TTable, TSchema>,\n): CompiledAssetPermissions | undefined {\n  if (!rowRules) {\n    return undefined;\n  }\n  return {\n    select: compileRules(\n      clientToServer,\n      tableName,\n      rowRules.select,\n      expressionBuilder,\n    ),\n    insert: compileRules(\n      clientToServer,\n      tableName,\n      rowRules.insert,\n      expressionBuilder,\n    ),\n    update: {\n      preMutation: compileRules(\n        clientToServer,\n        tableName,\n        rowRules.update?.preMutation,\n        expressionBuilder,\n      ),\n      postMutation: compileRules(\n        clientToServer,\n        tableName,\n        rowRules.update?.postMutation,\n        expressionBuilder,\n      ),\n    },\n    delete: compileRules(\n      clientToServer,\n      tableName,\n      rowRules.delete,\n      expressionBuilder,\n    ),\n  };\n}\n\n/**\n * What is this \"allow\" and why are permissions policies an array of rules?\n *\n * Please read: https://github.com/rocicorp/mono/pull/3184/files#r1869680716\n */\nfunction compileRules<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n>(\n  clientToServer: NameMapper,\n  tableName: TTable,\n  rules: PermissionRule<TAuthDataShape, TSchema, TTable>[] | undefined,\n  expressionBuilder: ExpressionBuilder<TTable, TSchema>,\n): ['allow', Condition][] | undefined {\n  if (!rules) {\n    return undefined;\n  }\n\n  return rules.map(rule => {\n    const cond = rule(authDataRef as TAuthDataShape, expressionBuilder);\n    return ['allow', mapCondition(cond, tableName, clientToServer)] as const;\n  });\n}\n\nfunction compileCellConfig<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n>(\n  clientToServer: NameMapper,\n  tableName: TTable,\n  cellRules:\n    | Record<string, AssetPermissions<TAuthDataShape, TSchema, TTable>>\n    | undefined,\n  expressionBuilder: ExpressionBuilder<TTable, TSchema>,\n): Record<string, CompiledAssetPermissions> | undefined {\n  if (!cellRules) {\n    return undefined;\n  }\n  const ret: Record<string, CompiledAssetPermissions> = {};\n  for (const [columnName, rules] of Object.entries(cellRules)) {\n    ret[columnName] = {\n      select: compileRules(\n        clientToServer,\n        tableName,\n        rules.select,\n        expressionBuilder,\n      ),\n      insert: compileRules(\n        clientToServer,\n        tableName,\n        rules.insert,\n        expressionBuilder,\n      ),\n      update: {\n        preMutation: compileRules(\n          clientToServer,\n          tableName,\n          rules.update?.preMutation,\n          expressionBuilder,\n        ),\n        postMutation: compileRules(\n          clientToServer,\n          tableName,\n          rules.update?.postMutation,\n          expressionBuilder,\n        ),\n      },\n      delete: compileRules(\n        clientToServer,\n        tableName,\n        rules.delete,\n        expressionBuilder,\n      ),\n    };\n  }\n  return ret;\n}\n\nclass CallTracker {\n  readonly #anchor: Anchor;\n  readonly #path: string[];\n  constructor(anchor: Anchor, path: string[]) {\n    this.#anchor = anchor;\n    this.#path = path;\n  }\n\n  get(target: {[toStaticParam]: () => Parameter}, prop: string | symbol) {\n    if (prop === toStaticParam) {\n      return target[toStaticParam];\n    }\n    assert(\n      typeof prop === 'string',\n      () => `Expected prop to be a string, got ${typeof prop}`,\n    );\n    const path = [...this.#path, prop];\n    return new Proxy(\n      {\n        [toStaticParam]: () => staticParam(this.#anchor, path),\n      },\n      new CallTracker(this.#anchor, path),\n    );\n  }\n}\n\nfunction baseTracker(anchor: Anchor) {\n  return new Proxy(\n    {\n      [toStaticParam]: () => {\n        throw new Error('no JWT field specified');\n      },\n    },\n    new CallTracker(anchor, []),\n  );\n}\n\nexport const authDataRef = baseTracker('authData');\nexport const preMutationRowRef = baseTracker('preMutationRow');\nexport function staticParam(\n  anchorClass: 'authData' | 'preMutationRow',\n  field: string | string[],\n): Parameter {\n  return {\n    type: 'static',\n    anchor: anchorClass,\n    // for backwards compatibility\n    field: field.length === 1 ? field[0] : field,\n  };\n}\n"],"names":["clientToServer"],"mappings":";;;;AAmBO,MAAM,aAAa;AAAA,EACxB,CAAC,GAAY,OAAyC,GAAG,IAAA;AAC3D;AAKO,MAAM,yBAAyB;AAAA,EACpC,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,MACN,aAAa;AAAA,MACb,cAAc;AAAA,IAAA;AAAA,IAEhB,QAAQ;AAAA,EAAA;AAEZ;AAEO,MAAM,aAAa,CAAA;AA+D1B,eAAsB,kBACpB,QACA,SAGgD;AAChD,QAAM,qBAAqB,CAAA;AAI3B,aAAW,QAAQ,OAAO,KAAK,OAAO,MAAM,GAAG;AAC7C,uBAAmB,IAAI,IAAI,qBAAqB,QAAQ,IAAI;AAAA,EAC9D;AAEA,QAAM,SAAS,MAAM,QAAA;AACrB,SAAO,mBAAmB,QAAQ,QAAQ,kBAAkB;AAC9D;AAEA,SAAS,mBACP,QACA,OACA,oBACuC;AACvC,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AACA,QAAM,aAAa,eAAe,OAAO,MAAM;AAC/C,QAAM,MAAM,EAAC,QAAQ,GAAC;AACtB,aAAW,CAAC,WAAW,WAAW,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC5D,UAAM,aAAa,OAAO,OAAO,SAAS,EAAE,cAAc;AAC1D,QAAI,OAAO,UAAU,IAAI;AAAA,MACvB,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA,YAAY;AAAA,QACZ,mBAAmB,SAAS;AAAA,MAAA;AAAA,MAE9B,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,YAAY;AAAA,QACZ,mBAAmB,SAAS;AAAA,MAAA;AAAA,IAC9B;AAAA,EAEJ;AAEA,SAAO;AACT;AAEA,SAAS,iBAKPA,iBACA,WACA,UACA,mBACsC;AACtC,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,MACNA;AAAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IAAA;AAAA,IAEF,QAAQ;AAAA,MACNA;AAAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IAAA;AAAA,IAEF,QAAQ;AAAA,MACN,aAAa;AAAA,QACXA;AAAAA,QACA;AAAA,QACA,SAAS,QAAQ;AAAA,QACjB;AAAA,MAAA;AAAA,MAEF,cAAc;AAAA,QACZA;AAAAA,QACA;AAAA,QACA,SAAS,QAAQ;AAAA,QACjB;AAAA,MAAA;AAAA,IACF;AAAA,IAEF,QAAQ;AAAA,MACNA;AAAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IAAA;AAAA,EACF;AAEJ;AAOA,SAAS,aAKPA,iBACA,WACA,OACA,mBACoC;AACpC,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAEA,SAAO,MAAM,IAAI,CAAA,SAAQ;AACvB,UAAM,OAAO,KAAK,aAA+B,iBAAiB;AAClE,WAAO,CAAC,SAAS,aAAa,MAAM,WAAWA,eAAc,CAAC;AAAA,EAChE,CAAC;AACH;AAEA,SAAS,kBAKPA,iBACA,WACA,WAGA,mBACsD;AACtD,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AACA,QAAM,MAAgD,CAAA;AACtD,aAAW,CAAC,YAAY,KAAK,KAAK,OAAO,QAAQ,SAAS,GAAG;AAC3D,QAAI,UAAU,IAAI;AAAA,MAChB,QAAQ;AAAA,QACNA;AAAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN;AAAA,MAAA;AAAA,MAEF,QAAQ;AAAA,QACNA;AAAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN;AAAA,MAAA;AAAA,MAEF,QAAQ;AAAA,QACN,aAAa;AAAA,UACXA;AAAAA,UACA;AAAA,UACA,MAAM,QAAQ;AAAA,UACd;AAAA,QAAA;AAAA,QAEF,cAAc;AAAA,UACZA;AAAAA,UACA;AAAA,UACA,MAAM,QAAQ;AAAA,UACd;AAAA,QAAA;AAAA,MACF;AAAA,MAEF,QAAQ;AAAA,QACNA;AAAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN;AAAA,MAAA;AAAA,IACF;AAAA,EAEJ;AACA,SAAO;AACT;AAEA,MAAM,YAAY;AAAA,EACP;AAAA,EACA;AAAA,EACT,YAAY,QAAgB,MAAgB;AAC1C,SAAK,UAAU;AACf,SAAK,QAAQ;AAAA,EACf;AAAA,EAEA,IAAI,QAA4C,MAAuB;AACrE,QAAI,SAAS,eAAe;AAC1B,aAAO,OAAO,aAAa;AAAA,IAC7B;AACA;AAAA,MACE,OAAO,SAAS;AAAA,MAChB,MAAM,qCAAqC,OAAO,IAAI;AAAA,IAAA;AAExD,UAAM,OAAO,CAAC,GAAG,KAAK,OAAO,IAAI;AACjC,WAAO,IAAI;AAAA,MACT;AAAA,QACE,CAAC,aAAa,GAAG,MAAM,YAAY,KAAK,SAAS,IAAI;AAAA,MAAA;AAAA,MAEvD,IAAI,YAAY,KAAK,SAAS,IAAI;AAAA,IAAA;AAAA,EAEtC;AACF;AAEA,SAAS,YAAY,QAAgB;AACnC,SAAO,IAAI;AAAA,IACT;AAAA,MACE,CAAC,aAAa,GAAG,MAAM;AACrB,cAAM,IAAI,MAAM,wBAAwB;AAAA,MAC1C;AAAA,IAAA;AAAA,IAEF,IAAI,YAAY,QAAQ,CAAA,CAAE;AAAA,EAAA;AAE9B;AAEO,MAAM,cAAc,YAAY,UAAU;AAChB,YAAY,gBAAgB;AACtD,SAAS,YACd,aACA,OACW;AACX,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ;AAAA;AAAA,IAER,OAAO,MAAM,WAAW,IAAI,MAAM,CAAC,IAAI;AAAA,EAAA;AAE3C;"}
+{"version":3,"file":"permissions.js","names":["#anchor","#path"],"sources":["../../../../zero-schema/src/permissions.ts"],"sourcesContent":["import {assert} from '../../shared/src/asserts.ts';\nimport {\n  mapCondition,\n  toStaticParam,\n  type Condition,\n  type Parameter,\n} from '../../zero-protocol/src/ast.ts';\nimport type {Schema} from '../../zero-types/src/schema.ts';\nimport type {ExpressionBuilder} from '../../zql/src/query/expression.ts';\nimport type {Query} from '../../zql/src/query/query.ts';\nimport {newExpressionBuilder} from '../../zql/src/query/static-query.ts';\nimport type {\n  AssetPermissions as CompiledAssetPermissions,\n  PermissionsConfig as CompiledPermissionsConfig,\n  TablePermissions,\n} from './compiled-permissions.ts';\nimport type {NameMapper} from './name-mapper.ts';\nimport {clientToServer} from './name-mapper.ts';\n\nexport const ANYONE_CAN = [\n  (_: unknown, eb: ExpressionBuilder<never, Schema>) => eb.and(),\n];\n\n/**\n * @deprecated Use {@link ANYONE_CAN} instead.\n */\nexport const ANYONE_CAN_DO_ANYTHING = {\n  row: {\n    select: ANYONE_CAN,\n    insert: ANYONE_CAN,\n    update: {\n      preMutation: ANYONE_CAN,\n      postMutation: ANYONE_CAN,\n    },\n    delete: ANYONE_CAN,\n  },\n};\n\nexport const NOBODY_CAN = [];\n\nexport type Anchor = 'authData' | 'preMutationRow';\n\nexport type Queries<TSchema extends Schema> = {\n  [K in keyof TSchema['tables']]: Query<K & string, TSchema>;\n};\n\nexport type PermissionRule<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n> = (\n  authData: TAuthDataShape,\n  eb: ExpressionBuilder<TTable, TSchema>,\n) => Condition;\n\nexport type AssetPermissions<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n> = {\n  // Why an array of rules?: https://github.com/rocicorp/mono/pull/3184/files#r1869680716\n  select?: PermissionRule<TAuthDataShape, TSchema, TTable>[] | undefined;\n  /**\n   * @deprecated Use Mutators instead.\n   * @see {@link https://zero.rocicorp.dev/docs/writing-data}\n   */\n  insert?: PermissionRule<TAuthDataShape, TSchema, TTable>[] | undefined;\n  /**\n   * @deprecated Use Mutators instead.\n   * @see {@link https://zero.rocicorp.dev/docs/writing-data}\n   */\n  update?:\n    | {\n        preMutation?: PermissionRule<TAuthDataShape, TSchema, TTable>[];\n        postMutation?: PermissionRule<TAuthDataShape, TSchema, TTable>[];\n      }\n    | undefined;\n  /**\n   * @deprecated Use Mutators instead.\n   * @see {@link https://zero.rocicorp.dev/docs/writing-data}\n   */\n  delete?: PermissionRule<TAuthDataShape, TSchema, TTable>[] | undefined;\n};\n\nexport type PermissionsConfig<TAuthDataShape, TSchema extends Schema> = {\n  [K in keyof TSchema['tables']]?: {\n    row?: AssetPermissions<TAuthDataShape, TSchema, K & string> | undefined;\n    cell?:\n      | {\n          [C in keyof TSchema['tables'][K]['columns']]?: Omit<\n            AssetPermissions<TAuthDataShape, TSchema, K & string>,\n            'cell'\n          >;\n        }\n      | undefined;\n  };\n};\n\n/**\n * @deprecated Use {@link defineMutators} and {@link defineQueries} instead.\n */\nexport async function definePermissions<TAuthDataShape, TSchema extends Schema>(\n  schema: TSchema,\n  definer: () =>\n    | Promise<PermissionsConfig<TAuthDataShape, TSchema>>\n    | PermissionsConfig<TAuthDataShape, TSchema>,\n): Promise<CompiledPermissionsConfig | undefined> {\n  const expressionBuilders = {} as Record<\n    string,\n    ExpressionBuilder<string, TSchema>\n  >;\n  for (const name of Object.keys(schema.tables)) {\n    expressionBuilders[name] = newExpressionBuilder(schema, name);\n  }\n\n  const config = await definer();\n  return compilePermissions(schema, config, expressionBuilders);\n}\n\nfunction compilePermissions<TAuthDataShape, TSchema extends Schema>(\n  schema: TSchema,\n  authz: PermissionsConfig<TAuthDataShape, TSchema> | undefined,\n  expressionBuilders: Record<string, ExpressionBuilder<string, TSchema>>,\n): CompiledPermissionsConfig | undefined {\n  if (!authz) {\n    return undefined;\n  }\n  const nameMapper = clientToServer(schema.tables);\n  const ret = {tables: {} as TablePermissions};\n  for (const [tableName, tableConfig] of Object.entries(authz)) {\n    const serverName = schema.tables[tableName].serverName ?? tableName;\n    ret.tables[serverName] = {\n      row: compileRowConfig(\n        nameMapper,\n        tableName,\n        tableConfig.row,\n        expressionBuilders[tableName],\n      ),\n      cell: compileCellConfig(\n        nameMapper,\n        tableName,\n        tableConfig.cell,\n        expressionBuilders[tableName],\n      ),\n    };\n  }\n\n  return ret;\n}\n\nfunction compileRowConfig<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n>(\n  clientToServer: NameMapper,\n  tableName: TTable,\n  rowRules: AssetPermissions<TAuthDataShape, TSchema, TTable> | undefined,\n  expressionBuilder: ExpressionBuilder<TTable, TSchema>,\n): CompiledAssetPermissions | undefined {\n  if (!rowRules) {\n    return undefined;\n  }\n  return {\n    select: compileRules(\n      clientToServer,\n      tableName,\n      rowRules.select,\n      expressionBuilder,\n    ),\n    insert: compileRules(\n      clientToServer,\n      tableName,\n      rowRules.insert,\n      expressionBuilder,\n    ),\n    update: {\n      preMutation: compileRules(\n        clientToServer,\n        tableName,\n        rowRules.update?.preMutation,\n        expressionBuilder,\n      ),\n      postMutation: compileRules(\n        clientToServer,\n        tableName,\n        rowRules.update?.postMutation,\n        expressionBuilder,\n      ),\n    },\n    delete: compileRules(\n      clientToServer,\n      tableName,\n      rowRules.delete,\n      expressionBuilder,\n    ),\n  };\n}\n\n/**\n * What is this \"allow\" and why are permissions policies an array of rules?\n *\n * Please read: https://github.com/rocicorp/mono/pull/3184/files#r1869680716\n */\nfunction compileRules<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n>(\n  clientToServer: NameMapper,\n  tableName: TTable,\n  rules: PermissionRule<TAuthDataShape, TSchema, TTable>[] | undefined,\n  expressionBuilder: ExpressionBuilder<TTable, TSchema>,\n): ['allow', Condition][] | undefined {\n  if (!rules) {\n    return undefined;\n  }\n\n  return rules.map(rule => {\n    const cond = rule(authDataRef as TAuthDataShape, expressionBuilder);\n    return ['allow', mapCondition(cond, tableName, clientToServer)] as const;\n  });\n}\n\nfunction compileCellConfig<\n  TAuthDataShape,\n  TSchema extends Schema,\n  TTable extends keyof TSchema['tables'] & string,\n>(\n  clientToServer: NameMapper,\n  tableName: TTable,\n  cellRules:\n    | Record<string, AssetPermissions<TAuthDataShape, TSchema, TTable>>\n    | undefined,\n  expressionBuilder: ExpressionBuilder<TTable, TSchema>,\n): Record<string, CompiledAssetPermissions> | undefined {\n  if (!cellRules) {\n    return undefined;\n  }\n  const ret: Record<string, CompiledAssetPermissions> = {};\n  for (const [columnName, rules] of Object.entries(cellRules)) {\n    ret[columnName] = {\n      select: compileRules(\n        clientToServer,\n        tableName,\n        rules.select,\n        expressionBuilder,\n      ),\n      insert: compileRules(\n        clientToServer,\n        tableName,\n        rules.insert,\n        expressionBuilder,\n      ),\n      update: {\n        preMutation: compileRules(\n          clientToServer,\n          tableName,\n          rules.update?.preMutation,\n          expressionBuilder,\n        ),\n        postMutation: compileRules(\n          clientToServer,\n          tableName,\n          rules.update?.postMutation,\n          expressionBuilder,\n        ),\n      },\n      delete: compileRules(\n        clientToServer,\n        tableName,\n        rules.delete,\n        expressionBuilder,\n      ),\n    };\n  }\n  return ret;\n}\n\nclass CallTracker {\n  readonly #anchor: Anchor;\n  readonly #path: string[];\n  constructor(anchor: Anchor, path: string[]) {\n    this.#anchor = anchor;\n    this.#path = path;\n  }\n\n  get(target: {[toStaticParam]: () => Parameter}, prop: string | symbol) {\n    if (prop === toStaticParam) {\n      return target[toStaticParam];\n    }\n    assert(\n      typeof prop === 'string',\n      () => `Expected prop to be a string, got ${typeof prop}`,\n    );\n    const path = [...this.#path, prop];\n    return new Proxy(\n      {\n        [toStaticParam]: () => staticParam(this.#anchor, path),\n      },\n      new CallTracker(this.#anchor, path),\n    );\n  }\n}\n\nfunction baseTracker(anchor: Anchor) {\n  return new Proxy(\n    {\n      [toStaticParam]: () => {\n        throw new Error('no JWT field specified');\n      },\n    },\n    new CallTracker(anchor, []),\n  );\n}\n\nexport const authDataRef = baseTracker('authData');\nexport const preMutationRowRef = baseTracker('preMutationRow');\nexport function staticParam(\n  anchorClass: 'authData' | 'preMutationRow',\n  field: string | string[],\n): Parameter {\n  return {\n    type: 'static',\n    anchor: anchorClass,\n    // for backwards compatibility\n    field: field.length === 1 ? field[0] : field,\n  };\n}\n"],"mappings":";;;;;AAmBA,IAAa,aAAa,EACvB,GAAY,OAAyC,GAAG,KAAK,CAC/D;;;;AAKD,IAAa,yBAAyB,EACpC,KAAK;CACH,QAAQ;CACR,QAAQ;CACR,QAAQ;EACN,aAAa;EACb,cAAc;EACf;CACD,QAAQ;CACT,EACF;AAED,IAAa,aAAa,EAAE;;;;AA+D5B,eAAsB,kBACpB,QACA,SAGgD;CAChD,MAAM,qBAAqB,EAAE;AAI7B,MAAK,MAAM,QAAQ,OAAO,KAAK,OAAO,OAAO,CAC3C,oBAAmB,QAAQ,qBAAqB,QAAQ,KAAK;AAI/D,QAAO,mBAAmB,QADX,MAAM,SAAS,EACY,mBAAmB;;AAG/D,SAAS,mBACP,QACA,OACA,oBACuC;AACvC,KAAI,CAAC,MACH;CAEF,MAAM,aAAa,eAAe,OAAO,OAAO;CAChD,MAAM,MAAM,EAAC,QAAQ,EAAE,EAAqB;AAC5C,MAAK,MAAM,CAAC,WAAW,gBAAgB,OAAO,QAAQ,MAAM,EAAE;EAC5D,MAAM,aAAa,OAAO,OAAO,WAAW,cAAc;AAC1D,MAAI,OAAO,cAAc;GACvB,KAAK,iBACH,YACA,WACA,YAAY,KACZ,mBAAmB,WACpB;GACD,MAAM,kBACJ,YACA,WACA,YAAY,MACZ,mBAAmB,WACpB;GACF;;AAGH,QAAO;;AAGT,SAAS,iBAKP,gBACA,WACA,UACA,mBACsC;AACtC,KAAI,CAAC,SACH;AAEF,QAAO;EACL,QAAQ,aACN,gBACA,WACA,SAAS,QACT,kBACD;EACD,QAAQ,aACN,gBACA,WACA,SAAS,QACT,kBACD;EACD,QAAQ;GACN,aAAa,aACX,gBACA,WACA,SAAS,QAAQ,aACjB,kBACD;GACD,cAAc,aACZ,gBACA,WACA,SAAS,QAAQ,cACjB,kBACD;GACF;EACD,QAAQ,aACN,gBACA,WACA,SAAS,QACT,kBACD;EACF;;;;;;;AAQH,SAAS,aAKP,gBACA,WACA,OACA,mBACoC;AACpC,KAAI,CAAC,MACH;AAGF,QAAO,MAAM,KAAI,SAAQ;AAEvB,SAAO,CAAC,SAAS,aADJ,KAAK,aAA+B,kBAAkB,EAC/B,WAAW,eAAe,CAAC;GAC/D;;AAGJ,SAAS,kBAKP,gBACA,WACA,WAGA,mBACsD;AACtD,KAAI,CAAC,UACH;CAEF,MAAM,MAAgD,EAAE;AACxD,MAAK,MAAM,CAAC,YAAY,UAAU,OAAO,QAAQ,UAAU,CACzD,KAAI,cAAc;EAChB,QAAQ,aACN,gBACA,WACA,MAAM,QACN,kBACD;EACD,QAAQ,aACN,gBACA,WACA,MAAM,QACN,kBACD;EACD,QAAQ;GACN,aAAa,aACX,gBACA,WACA,MAAM,QAAQ,aACd,kBACD;GACD,cAAc,aACZ,gBACA,WACA,MAAM,QAAQ,cACd,kBACD;GACF;EACD,QAAQ,aACN,gBACA,WACA,MAAM,QACN,kBACD;EACF;AAEH,QAAO;;AAGT,IAAM,cAAN,MAAM,YAAY;CAChB;CACA;CACA,YAAY,QAAgB,MAAgB;AAC1C,QAAA,SAAe;AACf,QAAA,OAAa;;CAGf,IAAI,QAA4C,MAAuB;AACrE,MAAI,SAAS,cACX,QAAO,OAAO;AAEhB,SACE,OAAO,SAAS,gBACV,qCAAqC,OAAO,OACnD;EACD,MAAM,OAAO,CAAC,GAAG,MAAA,MAAY,KAAK;AAClC,SAAO,IAAI,MACT,GACG,sBAAsB,YAAY,MAAA,QAAc,KAAK,EACvD,EACD,IAAI,YAAY,MAAA,QAAc,KAAK,CACpC;;;AAIL,SAAS,YAAY,QAAgB;AACnC,QAAO,IAAI,MACT,GACG,sBAAsB;AACrB,QAAM,IAAI,MAAM,yBAAyB;IAE5C,EACD,IAAI,YAAY,QAAQ,EAAE,CAAC,CAC5B;;AAGH,IAAa,cAAc,YAAY,WAAW;AACjB,YAAY,iBAAiB;AAC9D,SAAgB,YACd,aACA,OACW;AACX,QAAO;EACL,MAAM;EACN,QAAQ;EAER,OAAO,MAAM,WAAW,IAAI,MAAM,KAAK;EACxC"}

package/out/zero-schema/src/schema-config.js

@@ -1,43 +1,37 @@
-import { readonlyObject, literalUnion, readonly } from "../../shared/src/valita.js";
+import { literalUnion, readonly, readonlyObject, valita_exports } from "../../shared/src/valita.js";
 import { compoundKeySchema } from "../../zero-protocol/src/ast.js";
 import { valueTypeSchema } from "../../zero-protocol/src/client-schema.js";
 import { primaryKeySchema } from "../../zero-protocol/src/primary-key.js";
 import "./compiled-permissions.js";
-import { string, union, tuple, boolean, record } from "@badrap/valita";
-const relationshipPart = readonlyObject({
-  sourceField: compoundKeySchema,
-  destField: compoundKeySchema,
-  destSchema: string(),
-  cardinality: literalUnion("one", "many")
+//#region ../zero-schema/src/schema-config.ts
+var relationshipPart = readonlyObject({
+	sourceField: compoundKeySchema,
+	destField: compoundKeySchema,
+	destSchema: valita_exports.string(),
+	cardinality: literalUnion("one", "many")
 });
-const relationshipSchema = union(
-  readonly(tuple([relationshipPart])),
-  readonly(tuple([relationshipPart, relationshipPart]))
-);
-const schemaValueSchema = readonlyObject({
-  type: valueTypeSchema,
-  serverName: string().optional(),
-  optional: boolean().optional()
+var relationshipSchema = valita_exports.union(readonly(valita_exports.tuple([relationshipPart])), readonly(valita_exports.tuple([relationshipPart, relationshipPart])));
+var schemaValueSchema = readonlyObject({
+	type: valueTypeSchema,
+	serverName: valita_exports.string().optional(),
+	optional: valita_exports.boolean().optional()
 });
-const tableSchemaSchema = readonlyObject({
-  name: string(),
-  serverName: string().optional(),
-  columns: record(schemaValueSchema),
-  primaryKey: primaryKeySchema
+var tableSchemaSchema = readonlyObject({
+	name: valita_exports.string(),
+	serverName: valita_exports.string().optional(),
+	columns: valita_exports.record(schemaValueSchema),
+	primaryKey: primaryKeySchema
 });
 readonlyObject({
-  tables: record(tableSchemaSchema),
-  relationships: record(record(relationshipSchema)),
-  enableLegacyQueries: boolean().optional(),
-  enableLegacyMutators: boolean().optional()
+	tables: valita_exports.record(tableSchemaSchema),
+	relationships: valita_exports.record(valita_exports.record(relationshipSchema)),
+	enableLegacyQueries: valita_exports.boolean().optional(),
+	enableLegacyMutators: valita_exports.boolean().optional()
 });
 function isSchemaConfig(value) {
-  return value != null && "schema" in value;
+	return value != null && "schema" in value;
 }
-export {
-  isSchemaConfig,
-  relationshipSchema,
-  schemaValueSchema,
-  tableSchemaSchema
-};
-//# sourceMappingURL=schema-config.js.map
+//#endregion
+export { isSchemaConfig };
+
+//# sourceMappingURL=schema-config.js.map

package/out/zero-schema/src/schema-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema-config.js","sources":["../../../../zero-schema/src/schema-config.ts"],"sourcesContent":["import * as v from '../../shared/src/valita.ts';\nimport {compoundKeySchema} from '../../zero-protocol/src/ast.ts';\nimport {valueTypeSchema} from '../../zero-protocol/src/client-schema.ts';\nimport {primaryKeySchema} from '../../zero-protocol/src/primary-key.ts';\nimport type {Schema} from '../../zero-types/src/schema.ts';\nimport {type PermissionsConfig} from './compiled-permissions.ts';\nimport type {Relationship, TableSchema} from './table-schema.ts';\n\nexport type SchemaConfig = {\n  schema: Schema;\n  permissions: PermissionsConfig;\n};\n\nconst relationshipPart = v.readonlyObject({\n  sourceField: compoundKeySchema,\n  destField: compoundKeySchema,\n  destSchema: v.string(),\n  cardinality: v.literalUnion('one', 'many'),\n});\n\nexport const relationshipSchema: v.Type<Relationship> = v.union(\n  v.readonly(v.tuple([relationshipPart])),\n  v.readonly(v.tuple([relationshipPart, relationshipPart])),\n);\n\nexport const schemaValueSchema = v.readonlyObject({\n  type: valueTypeSchema,\n  serverName: v.string().optional(),\n  optional: v.boolean().optional(),\n});\n\nexport const tableSchemaSchema: v.Type<TableSchema> = v.readonlyObject({\n  name: v.string(),\n  serverName: v.string().optional(),\n  columns: v.record(schemaValueSchema),\n  primaryKey: primaryKeySchema,\n});\n\nexport const schemaSchema = v.readonlyObject({\n  tables: v.record(tableSchemaSchema),\n  relationships: v.record(v.record(relationshipSchema)),\n  enableLegacyQueries: v.boolean().optional(),\n  enableLegacyMutators: v.boolean().optional(),\n});\n\n// oxlint-disable-next-line @typescript-eslint/no-explicit-any\nexport function isSchemaConfig(value: any): value is SchemaConfig {\n  // oxlint-disable-next-line eqeqeq\n  return value != null && 'schema' in value;\n}\n"],"names":["v.readonlyObject","v.string","v.literalUnion","v.union","v.readonly","v.tuple","v.boolean","v.record"],"mappings":";;;;;;AAaA,MAAM,mBAAmBA,eAAiB;AAAA,EACxC,aAAa;AAAA,EACb,WAAW;AAAA,EACX,YAAYC,OAAE;AAAA,EACd,aAAaC,aAAe,OAAO,MAAM;AAC3C,CAAC;AAEM,MAAM,qBAA2CC;AAAAA,EACtDC,SAAWC,MAAQ,CAAC,gBAAgB,CAAC,CAAC;AAAA,EACtCD,SAAWC,MAAQ,CAAC,kBAAkB,gBAAgB,CAAC,CAAC;AAC1D;AAEO,MAAM,oBAAoBL,eAAiB;AAAA,EAChD,MAAM;AAAA,EACN,YAAYC,OAAE,EAAS,SAAA;AAAA,EACvB,UAAUK,QAAE,EAAU,SAAA;AACxB,CAAC;AAEM,MAAM,oBAAyCN,eAAiB;AAAA,EACrE,MAAMC,OAAE;AAAA,EACR,YAAYA,OAAE,EAAS,SAAA;AAAA,EACvB,SAASM,OAAS,iBAAiB;AAAA,EACnC,YAAY;AACd,CAAC;AAE2BP,eAAiB;AAAA,EAC3C,QAAQO,OAAS,iBAAiB;AAAA,EAClC,eAAeA,OAASA,OAAS,kBAAkB,CAAC;AAAA,EACpD,qBAAqBD,QAAE,EAAU,SAAA;AAAA,EACjC,sBAAsBA,QAAE,EAAU,SAAA;AACpC,CAAC;AAGM,SAAS,eAAe,OAAmC;AAEhE,SAAO,SAAS,QAAQ,YAAY;AACtC;"}
+{"version":3,"file":"schema-config.js","names":[],"sources":["../../../../zero-schema/src/schema-config.ts"],"sourcesContent":["import * as v from '../../shared/src/valita.ts';\nimport {compoundKeySchema} from '../../zero-protocol/src/ast.ts';\nimport {valueTypeSchema} from '../../zero-protocol/src/client-schema.ts';\nimport {primaryKeySchema} from '../../zero-protocol/src/primary-key.ts';\nimport type {Schema} from '../../zero-types/src/schema.ts';\nimport {type PermissionsConfig} from './compiled-permissions.ts';\nimport type {Relationship, TableSchema} from './table-schema.ts';\n\nexport type SchemaConfig = {\n  schema: Schema;\n  permissions: PermissionsConfig;\n};\n\nconst relationshipPart = v.readonlyObject({\n  sourceField: compoundKeySchema,\n  destField: compoundKeySchema,\n  destSchema: v.string(),\n  cardinality: v.literalUnion('one', 'many'),\n});\n\nexport const relationshipSchema: v.Type<Relationship> = v.union(\n  v.readonly(v.tuple([relationshipPart])),\n  v.readonly(v.tuple([relationshipPart, relationshipPart])),\n);\n\nexport const schemaValueSchema = v.readonlyObject({\n  type: valueTypeSchema,\n  serverName: v.string().optional(),\n  optional: v.boolean().optional(),\n});\n\nexport const tableSchemaSchema: v.Type<TableSchema> = v.readonlyObject({\n  name: v.string(),\n  serverName: v.string().optional(),\n  columns: v.record(schemaValueSchema),\n  primaryKey: primaryKeySchema,\n});\n\nexport const schemaSchema = v.readonlyObject({\n  tables: v.record(tableSchemaSchema),\n  relationships: v.record(v.record(relationshipSchema)),\n  enableLegacyQueries: v.boolean().optional(),\n  enableLegacyMutators: v.boolean().optional(),\n});\n\n// oxlint-disable-next-line @typescript-eslint/no-explicit-any\nexport function isSchemaConfig(value: any): value is SchemaConfig {\n  // oxlint-disable-next-line eqeqeq\n  return value != null && 'schema' in value;\n}\n"],"mappings":";;;;;;AAaA,IAAM,mBAAmB,eAAiB;CACxC,aAAa;CACb,WAAW;CACX,YAAY,eAAE,QAAQ;CACtB,aAAa,aAAe,OAAO,OAAO;CAC3C,CAAC;AAEF,IAAa,qBAA2C,eAAE,MACxD,SAAW,eAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,EACvC,SAAW,eAAE,MAAM,CAAC,kBAAkB,iBAAiB,CAAC,CAAC,CAC1D;AAED,IAAa,oBAAoB,eAAiB;CAChD,MAAM;CACN,YAAY,eAAE,QAAQ,CAAC,UAAU;CACjC,UAAU,eAAE,SAAS,CAAC,UAAU;CACjC,CAAC;AAEF,IAAa,oBAAyC,eAAiB;CACrE,MAAM,eAAE,QAAQ;CAChB,YAAY,eAAE,QAAQ,CAAC,UAAU;CACjC,SAAS,eAAE,OAAO,kBAAkB;CACpC,YAAY;CACb,CAAC;AAE0B,eAAiB;CAC3C,QAAQ,eAAE,OAAO,kBAAkB;CACnC,eAAe,eAAE,OAAO,eAAE,OAAO,mBAAmB,CAAC;CACrD,qBAAqB,eAAE,SAAS,CAAC,UAAU;CAC3C,sBAAsB,eAAE,SAAS,CAAC,UAAU;CAC7C,CAAC;AAGF,SAAgB,eAAe,OAAmC;AAEhE,QAAO,SAAS,QAAQ,YAAY"}

package/out/zero-server/src/adapters/drizzle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"drizzle.d.ts","sourceRoot":"","sources":["../../../../../zero-server/src/adapters/drizzle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,gBAAgB,EAChB,aAAa,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAC,0BAA0B,EAAC,MAAM,uBAAuB,CAAC;AAGtE,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,mCAAmC,CAAC;AAE9D,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACb,GAAG,EACJ,MAAM,mCAAmC,CAAC;AAG3C,OAAO,EAAC,WAAW,EAAC,MAAM,oBAAoB,CAAC;AAE/C,YAAY,EAAC,WAAW,EAAC,CAAC;AAE1B,MAAM,MAAM,eAAe,CACzB,YAAY,SAAS,gBAAgB,GAAG,gBAAgB,EACxD,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAC/D,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;AAEtC;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,CAC5B,WAAW,SAAS,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7D,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,SAAS,UAAU,CACtE,gBAAgB,EAChB,MAAM,eAAe,CACtB,GACG,eAAe,GACf,WAAW,IACb,aAAa,CACf,gBAAgB,EAChB,OAAO,EACP,0BAA0B,CAAC,OAAO,CAAC,CACpC,CAAC;AAEF,qBAAa,iBAAiB,CAC5B,QAAQ,SAAS,eAAe,EAChC,YAAY,SACV,kBAAkB,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAC7D,YAAW,YAAY,CAAC,YAAY,CAAC;;gBAIzB,OAAO,EAAE,QAAQ;IAI7B,WAAW,CAAC,CAAC,EACX,EAAE,EAAE,CAAC,EAAE,EAAE,aAAa,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAClD,OAAO,CAAC,CAAC,CAAC;CASd;AA+CD,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAuB7D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,WAAW,CACzB,OAAO,SAAS,MAAM,EACtB,QAAQ,SAAS,eAAe,EAEhC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,QAAQ,GACf,WAAW,CAAC,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAKpD"}
+{"version":3,"file":"drizzle.d.ts","sourceRoot":"","sources":["../../../../../zero-server/src/adapters/drizzle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,gBAAgB,EAChB,aAAa,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAC,0BAA0B,EAAC,MAAM,uBAAuB,CAAC;AAGtE,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,mCAAmC,CAAC;AAE9D,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACb,GAAG,EACJ,MAAM,mCAAmC,CAAC;AAG3C,OAAO,EAAC,WAAW,EAAC,MAAM,oBAAoB,CAAC;AAE/C,YAAY,EAAC,WAAW,EAAC,CAAC;AAE1B,MAAM,MAAM,eAAe,CACzB,YAAY,SAAS,gBAAgB,GAAG,gBAAgB,EACxD,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAC/D,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;AAEtC;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,CAC5B,WAAW,SAAS,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7D,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,SAAS,UAAU,CACtE,gBAAgB,EAChB,MAAM,eAAe,CACtB,GACG,eAAe,GACf,WAAW,IACb,aAAa,CACf,gBAAgB,EAChB,OAAO,EACP,0BAA0B,CAAC,OAAO,CAAC,CACpC,CAAC;AAEF,qBAAa,iBAAiB,CAC5B,QAAQ,SAAS,eAAe,EAChC,YAAY,SAAS,kBAAkB,CAAC,QAAQ,CAAC,GAC/C,kBAAkB,CAAC,QAAQ,CAAC,CAC9B,YAAW,YAAY,CAAC,YAAY,CAAC;;gBAGzB,OAAO,EAAE,QAAQ;IAI7B,WAAW,CAAC,CAAC,EACX,EAAE,EAAE,CAAC,EAAE,EAAE,aAAa,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAClD,OAAO,CAAC,CAAC,CAAC;CASd;AA8CD,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAuB7D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,WAAW,CACzB,OAAO,SAAS,MAAM,EACtB,QAAQ,SAAS,eAAe,EAEhC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,QAAQ,GACf,WAAW,CAAC,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAKpD"}

package/out/zero-server/src/adapters/drizzle.js

@@ -1,84 +1,87 @@
 import { executePostgresQuery } from "../pg-query-executor.js";
 import { ZQLDatabase } from "../zql-database.js";
-class DrizzleConnection {
-  #drizzle;
-  constructor(drizzle) {
-    this.#drizzle = drizzle;
-  }
-  transaction(fn) {
-    return this.#drizzle.transaction(
-      (drizzleTx) => fn(
-        new DrizzleInternalTransaction(
-          drizzleTx
-        )
-      )
-    );
-  }
-}
-class DrizzleInternalTransaction {
-  wrappedTransaction;
-  constructor(drizzleTx) {
-    this.wrappedTransaction = drizzleTx;
-  }
-  runQuery(ast, format, schema, serverSchema) {
-    return executePostgresQuery(
-      this,
-      ast,
-      format,
-      schema,
-      serverSchema
-    );
-  }
-  async query(sql, params) {
-    const prepared = this.wrappedTransaction._.session.prepareQuery(
-      { sql, params },
-      void 0,
-      void 0,
-      false
-    );
-    const result = await prepared.execute();
-    return toIterableRows(result);
-  }
-}
+//#region ../zero-server/src/adapters/drizzle.ts
+var DrizzleConnection = class {
+	#drizzle;
+	constructor(drizzle) {
+		this.#drizzle = drizzle;
+	}
+	transaction(fn) {
+		return this.#drizzle.transaction((drizzleTx) => fn(new DrizzleInternalTransaction(drizzleTx)));
+	}
+};
+var DrizzleInternalTransaction = class {
+	wrappedTransaction;
+	constructor(drizzleTx) {
+		this.wrappedTransaction = drizzleTx;
+	}
+	runQuery(ast, format, schema, serverSchema) {
+		return executePostgresQuery(this, ast, format, schema, serverSchema);
+	}
+	async query(sql, params) {
+		return toIterableRows(await this.wrappedTransaction._.session.prepareQuery({
+			sql,
+			params
+		}, void 0, void 0, false).execute());
+	}
+};
 function isIterable(value) {
-  return (
-    // oxlint-disable-next-line eqeqeq
-    value != null && typeof value[Symbol.iterator] === "function"
-  );
+	return value != null && typeof value[Symbol.iterator] === "function";
 }
 function toIterableRows(result) {
-  if (result === null || result === void 0) {
-    return [];
-  }
-  if (Array.isArray(result)) {
-    return result;
-  }
-  if (isIterable(result)) {
-    return result;
-  }
-  if (typeof result === "object") {
-    const rows = result.rows;
-    if (rows === null || rows === void 0) {
-      return [];
-    }
-    if (Array.isArray(rows)) {
-      return rows;
-    }
-    if (isIterable(rows)) {
-      return rows;
-    }
-  }
-  throw new TypeError("Drizzle query result is not iterable");
+	if (result === null || result === void 0) return [];
+	if (Array.isArray(result)) return result;
+	if (isIterable(result)) return result;
+	if (typeof result === "object") {
+		const rows = result.rows;
+		if (rows === null || rows === void 0) return [];
+		if (Array.isArray(rows)) return rows;
+		if (isIterable(rows)) return rows;
+	}
+	throw new TypeError("Drizzle query result is not iterable");
 }
+/**
+* Wrap a `drizzle-orm` database for Zero ZQL.
+*
+* Provides ZQL querying plus access to the underlying drizzle transaction.
+* Use {@link DrizzleTransaction} to type your server mutator transaction.
+*
+* @param schema - Zero schema.
+* @param client - Drizzle database.
+*
+* @example
+* ```ts
+* import {Pool} from 'pg';
+* import {drizzle} from 'drizzle-orm/node-postgres';
+* import {defineMutator, defineMutators} from '@rocicorp/zero';
+* import {zeroDrizzle} from '@rocicorp/zero/server/adapters/drizzle';
+* import {z} from 'zod/mini';
+*
+* const pool = new Pool({connectionString: process.env.ZERO_UPSTREAM_DB!});
+* const drizzleDb = drizzle(pool, {schema: drizzleSchema});
+* const zql = zeroDrizzle(schema, drizzleDb);
+*
+* export const serverMutators = defineMutators({
+*   user: {
+*     create: defineMutator(
+*       z.object({id: z.string(), name: z.string()}),
+*       async ({tx, args}) => {
+*         if (tx.location !== 'server') {
+*           throw new Error('Server-only mutator');
+*         }
+*         await tx.dbTransaction.wrappedTransaction
+*           .insert(drizzleSchema.user)
+*           .values({id: args.id, name: args.name, status: 'active'});
+*       },
+*     ),
+*   },
+* });
+* ```
+*/
 function zeroDrizzle(schema, client) {
-  return new ZQLDatabase(
-    new DrizzleConnection(client),
-    schema
-  );
+	return new ZQLDatabase(new DrizzleConnection(client), schema);
 }
-export {
-  DrizzleConnection,
-  toIterableRows,
-  zeroDrizzle
-};
-//# sourceMappingURL=drizzle.js.map
+//#endregion
+export { DrizzleConnection, toIterableRows, zeroDrizzle };
+
+//# sourceMappingURL=drizzle.js.map