@smartive/graphql-magic 1.0.1

package/dist/esm/models.d.ts

@@ -0,0 +1,170 @@
+import type { Context } from './context';
+import type { OrderBy } from './resolvers/arguments';
+import type { Directive, Value } from './values';
+export type RawModels = RawModel[];
+export type RawModel = ScalarModel | EnumModel | RawEnumModel | InterfaceModel | ObjectModel | RawObjectModel | JsonObjectModel;
+type BaseModel = {
+    name: string;
+    plural?: string;
+    description?: string;
+};
+export type ScalarModel = BaseModel & {
+    type: 'scalar';
+};
+export type EnumModel = BaseModel & {
+    type: 'enum';
+    values: string[];
+    deleted?: true;
+};
+export type RawEnumModel = BaseModel & {
+    type: 'raw-enum';
+    values: string[];
+};
+export type InterfaceModel = BaseModel & {
+    type: 'interface';
+    fields: ModelField[];
+};
+export type RawObjectModel = BaseModel & {
+    type: 'raw-object';
+    fields: ModelField[];
+    rawFilters?: {
+        name: string;
+        type: string;
+        list?: boolean;
+        nonNull?: boolean;
+    }[];
+};
+export type JsonObjectModel = BaseModel & {
+    type: 'json-object';
+    json: true;
+    fields: Pick<ModelField, 'type' | 'name' | 'nonNull'>[];
+};
+export type Entity = Record<string, any>;
+export type Action = 'create' | 'update' | 'delete' | 'restore';
+export type MutationHook = (model: Model, action: Action, when: 'before' | 'after', data: {
+    prev: Entity;
+    input: Entity;
+    normalizedInput: Entity;
+    next: Entity;
+}, ctx: Context) => Promise<void>;
+export type ObjectModel = BaseModel & {
+    type: 'object';
+    interfaces?: string[];
+    nonStrict?: boolean;
+    queriable?: boolean;
+    listQueriable?: boolean;
+    creatable?: boolean;
+    updatable?: boolean;
+    deletable?: boolean;
+    displayField?: string;
+    defaultOrderBy?: OrderBy;
+    fields: ModelField[];
+    deleted?: true;
+    oldName?: string;
+};
+export type InputObject = {
+    name: string;
+    type: string;
+    nonNull?: boolean;
+};
+export declare const isObjectModel: (model: RawModel) => model is ObjectModel;
+export declare const isEnumModel: (model: RawModel) => model is EnumModel;
+export declare const isRawEnumModel: (model: RawModel) => model is RawEnumModel;
+export declare const isScalarModel: (model: RawModel) => model is ScalarModel;
+export declare const isRawObjectModel: (model: RawModel) => model is RawObjectModel;
+export declare const isJsonObjectModel: (model: RawModel) => model is RawObjectModel;
+export declare const isEnumList: (models: RawModels, field: ModelField) => boolean;
+export declare const and: (...predicates: ((field: ModelField) => boolean)[]) => (field: ModelField) => boolean;
+export declare const not: (predicate: (field: ModelField) => boolean) => (field: ModelField) => boolean;
+export declare const isRelation: ({ relation }: ModelField) => boolean;
+export type VisibleRelationsByRole = Record<string, Record<string, string[]>>;
+export declare const isVisibleRelation: (visibleRelationsByRole: VisibleRelationsByRole, modelName: string, role: string) => ({ name }: Field) => boolean;
+export declare const isToOneRelation: ({ toOne }: ModelField) => boolean;
+export declare const isQueriableField: ({ queriable }: ModelField) => boolean;
+export declare const isRaw: ({ raw }: ModelField) => boolean;
+export declare const isVisible: ({ hidden }: ModelField) => boolean;
+export declare const isSimpleField: (field: ModelField) => boolean;
+export declare const isUpdatable: ({ updatable }: ModelField) => boolean;
+export declare const isCreatable: ({ creatable }: ModelField) => boolean;
+export declare const isQueriableBy: (role: string) => (field: ModelField) => boolean;
+export declare const isUpdatableBy: (role: string) => (field: ModelField) => boolean;
+export declare const isCreatableBy: (role: string) => (field: ModelField) => boolean;
+export declare const actionableRelations: (model: Model, action: 'create' | 'update' | 'filter') => ModelField[];
+export type Field = {
+    name: string;
+    type: string;
+    default?: Value;
+    list?: boolean;
+    nonNull?: boolean;
+    args?: Field[];
+    directives?: Directive[];
+};
+export type ModelField = Field & {
+    primary?: boolean;
+    unique?: boolean;
+    filterable?: boolean;
+    defaultFilter?: Value;
+    searchable?: boolean;
+    possibleValues?: Value[];
+    orderable?: boolean;
+    comparable?: boolean;
+    relation?: boolean;
+    onDelete?: 'cascade' | 'set-null';
+    reverse?: string;
+    toOne?: boolean;
+    foreignKey?: string;
+    queriable?: false;
+    queriableBy?: string[];
+    creatable?: boolean;
+    creatableBy?: string[];
+    updatable?: boolean;
+    updatableBy?: string[];
+    generated?: boolean;
+    raw?: boolean;
+    json?: boolean;
+    dateTimeType?: 'year' | 'date' | 'datetime' | 'year_and_month';
+    stringType?: 'email' | 'url' | 'phone';
+    floatType?: 'currency' | 'percentage';
+    unit?: 'million';
+    intType?: 'currency';
+    min?: number;
+    max?: number;
+    tooltip?: string;
+    description?: string;
+    large?: true;
+    maxLength?: number;
+    double?: boolean;
+    precision?: number;
+    scale?: number;
+    defaultValue?: string | number | ReadonlyArray<string> | undefined;
+    endOfDay?: boolean;
+    obfuscate?: true;
+    required?: boolean;
+    indent?: boolean;
+    hidden?: boolean;
+    deleted?: true;
+    oldName?: string;
+};
+export type Models = Model[];
+export type Model = ObjectModel & {
+    fieldsByName: Record<string, ModelField>;
+    relations: Relation[];
+    relationsByName: Record<string, Relation>;
+    reverseRelations: ReverseRelation[];
+    reverseRelationsByName: Record<string, ReverseRelation>;
+};
+export type Relation = {
+    field: ModelField;
+    model: Model;
+    reverseRelation: ReverseRelation;
+};
+export type ReverseRelation = {
+    name: string;
+    type: string;
+    foreignKey: string;
+    toOne: boolean;
+    model: Model;
+    field: ModelField;
+    fieldModel: Model;
+};
+export {};

package/dist/esm/models.js

@@ -0,0 +1,27 @@
+export const isObjectModel = (model) => model.type === 'object';
+export const isEnumModel = (model) => model.type === 'enum';
+export const isRawEnumModel = (model) => model.type === 'raw-enum';
+export const isScalarModel = (model) => model.type === 'scalar';
+export const isRawObjectModel = (model) => model.type === 'raw-object';
+export const isJsonObjectModel = (model) => model.type === 'json-object';
+export const isEnumList = (models, field) => field?.list === true && models.find(({ name }) => name === field.type)?.type === 'enum';
+export const and = (...predicates) => (field) => predicates.every((predicate) => predicate(field));
+export const not = (predicate) => (field) => !predicate(field);
+export const isRelation = ({ relation }) => !!relation;
+export const isVisibleRelation = (visibleRelationsByRole, modelName, role) => {
+    const whitelist = visibleRelationsByRole[role]?.[modelName];
+    return ({ name }) => (whitelist ? whitelist.includes(name) : true);
+};
+export const isToOneRelation = ({ toOne }) => !!toOne;
+export const isQueriableField = ({ queriable }) => queriable !== false;
+export const isRaw = ({ raw }) => !!raw;
+export const isVisible = ({ hidden }) => hidden !== true;
+export const isSimpleField = and(not(isRelation), not(isRaw));
+export const isUpdatable = ({ updatable }) => !!updatable;
+export const isCreatable = ({ creatable }) => !!creatable;
+export const isQueriableBy = (role) => (field) => isQueriableField(field) && (!field.queriableBy || field.queriableBy.includes(role));
+export const isUpdatableBy = (role) => (field) => isUpdatable(field) && (!field.updatableBy || field.updatableBy.includes(role));
+export const isCreatableBy = (role) => (field) => isCreatable(field) && (!field.creatableBy || field.creatableBy.includes(role));
+export const actionableRelations = (model, action) => model.fields.filter(({ relation, ...field }) => relation &&
+    field[`${action === 'filter' ? action : action.slice(0, -1)}able`]);
+//# sourceMappingURL=models.js.map

package/dist/esm/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/models.ts"],"names":[],"mappings":"AA+EA,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAe,EAAwB,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAEhG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAe,EAAsB,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;AAE1F,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAe,EAAyB,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;AAEpG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAe,EAAwB,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAEhG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAe,EAA2B,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;AAE1G,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAe,EAA2B,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC;AAE5G,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAiB,EAAE,KAAiB,EAAE,EAAE,CACjE,KAAK,EAAE,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,MAAM,CAAC;AAE1F,MAAM,CAAC,MAAM,GAAG,GACd,CAAC,GAAG,UAA8C,EAAE,EAAE,CACtD,CAAC,KAAiB,EAAE,EAAE,CACpB,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAEtD,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,SAAyC,EAAE,EAAE,CAAC,CAAC,KAAiB,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAE3G,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,EAAE,QAAQ,EAAc,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AAInE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,sBAA8C,EAAE,SAAiB,EAAE,IAAY,EAAE,EAAE;IACnH,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5D,OAAO,CAAC,EAAE,IAAI,EAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC5E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAAE,KAAK,EAAc,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAElE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,EAAE,SAAS,EAAc,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC;AAEnF,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,GAAG,EAAc,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AAEpD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,EAAE,MAAM,EAAc,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC;AAErE,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAE9D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,EAAE,SAAS,EAAc,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAEtE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,EAAE,SAAS,EAAc,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAEtE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,KAAiB,EAAE,EAAE,CACnE,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAEtF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,KAAiB,EAAE,EAAE,CACnE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAEjF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,KAAiB,EAAE,EAAE,CACnE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAEjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAY,EAAE,MAAsC,EAAE,EAAE,CAC1F,KAAK,CAAC,MAAM,CAAC,MAAM,CACjB,CAAC,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,CACzB,QAAQ;IACR,KAAK,CAAC,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAkD,CAAC,CACjH,CAAC"}

package/dist/esm/permissions/check.d.ts

@@ -0,0 +1,15 @@
+import { Knex } from 'knex';
+import { FullContext } from '../context';
+import { Model } from '../models';
+import { BasicValue } from '../values';
+import { PermissionAction, PermissionStack } from './generate';
+export declare const getPermissionStack: (ctx: Pick<FullContext, 'permissions' | 'user'>, type: string, action: PermissionAction) => boolean | PermissionStack;
+export declare const applyPermissions: (ctx: Pick<FullContext, 'models' | 'permissions' | 'user' | 'knex'>, type: string, tableAlias: string, query: Knex.QueryBuilder, action: PermissionAction, verifiedPermissionStack?: PermissionStack) => boolean | PermissionStack;
+/**
+ * Check whether entity as currently in db can be mutated (update or delete)
+ */
+export declare const getEntityToMutate: (ctx: Pick<FullContext, 'models' | 'permissions' | 'user' | 'knex'>, model: Model, where: Record<string, BasicValue>, action: 'UPDATE' | 'DELETE' | 'RESTORE') => Promise<any>;
+/**
+ * Check whether given data can be written to db (insert or update)
+ */
+export declare const checkCanWrite: (ctx: Pick<FullContext, 'models' | 'permissions' | 'user' | 'knex'>, model: Model, data: Record<string, BasicValue>, action: 'CREATE' | 'UPDATE') => Promise<void>;

package/dist/esm/permissions/check.js

@@ -0,0 +1,162 @@
+import { NotFoundError, PermissionError } from '../errors';
+import { AliasGenerator, hash, ors } from '../resolvers/utils';
+import { get, getModelPlural, summonByName } from '../utils';
+export const getPermissionStack = (ctx, type, action) => {
+    const rolePermissions = ctx.permissions[ctx.user.role];
+    if (typeof rolePermissions === 'boolean' || rolePermissions === undefined) {
+        return !!rolePermissions;
+    }
+    const typePermissions = rolePermissions[type];
+    if (typeof typePermissions === 'boolean' || typePermissions === undefined) {
+        return !!typePermissions;
+    }
+    const actionPermission = typePermissions[action];
+    if (typeof actionPermission === 'boolean' || actionPermission === undefined) {
+        return !!actionPermission;
+    }
+    return actionPermission;
+};
+export const applyPermissions = (ctx, type, tableAlias, query, action, verifiedPermissionStack) => {
+    const permissionStack = getPermissionStack(ctx, type, action);
+    if (permissionStack === true) {
+        return permissionStack;
+    }
+    if (permissionStack === false) {
+        // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+        query.where(false);
+        return permissionStack;
+    }
+    if (verifiedPermissionStack?.every((prefixChain) => permissionStack.some((chain) => hash(prefixChain) === hash(chain.slice(0, -1)) &&
+        // TODO: this is stricter than it could be if we add these checks to the query
+        !('where' in get(chain, chain.length - 1)) &&
+        !('me' in get(chain, chain.length - 1))))) {
+        // The user has access to a parent entity with one or more from a set of rules, all of which are inherited by this entity
+        // No need for additional checks
+        return permissionStack;
+    }
+    // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+    ors(query, permissionStack.map((links) => (query) => query
+        .whereNull(`${tableAlias}.id`)
+        .orWhereExists((subQuery) => permissionLinkQuery(ctx, subQuery, links, ctx.knex.raw(`"${tableAlias}".id`)))));
+    return permissionStack;
+};
+/**
+ * Check whether entity as currently in db can be mutated (update or delete)
+ */
+export const getEntityToMutate = async (ctx, model, where, action) => {
+    const query = ctx.knex(model.name).where(where).first();
+    let entity = await query.clone();
+    if (!entity) {
+        throw new NotFoundError('Entity to mutate');
+    }
+    applyPermissions(ctx, model.name, model.name, query, action);
+    entity = await query;
+    if (!entity) {
+        throw new PermissionError(action, `this ${model.name}`);
+    }
+    return entity;
+};
+/**
+ * Check whether given data can be written to db (insert or update)
+ */
+export const checkCanWrite = async (ctx, model, data, action) => {
+    const permissionStack = getPermissionStack(ctx, model.name, action);
+    if (permissionStack === true) {
+        return;
+    }
+    if (permissionStack === false) {
+        throw new PermissionError(action, getModelPlural(model));
+    }
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any -- using `select(1 as any)` to instantiate an "empty" query builder
+    const query = ctx.knex.select(1).first();
+    let linked = false;
+    for (const field of model.fields
+        .filter(({ relation }) => relation)
+        .filter((field) => field.generated || (action === 'CREATE' ? field.creatable : field.updatable))) {
+        const foreignKey = field.foreignKey || `${field.name}Id`;
+        const foreignId = data[foreignKey];
+        if (!foreignId) {
+            continue;
+        }
+        const fieldPermissions = field[action === 'CREATE' ? 'creatableBy' : 'updatableBy'];
+        if (fieldPermissions && !fieldPermissions.includes(ctx.user.role)) {
+            throw new PermissionError(action, `this ${model.name}'s ${field.name}`);
+        }
+        linked = true;
+        const fieldPermissionStack = getPermissionStack(ctx, field.type, 'LINK');
+        if (fieldPermissionStack === true) {
+            // User can link any entity from this type, just check whether it exists
+            // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+            query.whereExists((subQuery) => subQuery.from(`${field.type} as a`).whereRaw(`a.id = ?`, foreignId));
+            continue;
+        }
+        if (fieldPermissionStack === false || !fieldPermissionStack.length) {
+            throw new PermissionError(action, `this ${model.name}'s ${field.name}`);
+        }
+        // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+        ors(query, fieldPermissionStack.map((links) => (query) => query.whereExists((subQuery) => permissionLinkQuery(ctx, subQuery, links, foreignId))));
+    }
+    if (linked) {
+        const canMutate = await query;
+        if (!canMutate) {
+            throw new PermissionError(action, `this ${model.name} because there are no entities you can link it to`);
+        }
+    }
+    else if (action === 'CREATE') {
+        throw new PermissionError(action, `this ${model.name} because there are no entity types you can link it to`);
+    }
+};
+const permissionLinkQuery = (ctx, subQuery, links, id) => {
+    const aliases = new AliasGenerator();
+    let alias = aliases.getShort();
+    const { type, me, where } = links[0];
+    // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+    subQuery.from(`${type} as ${alias}`);
+    if (me) {
+        // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+        subQuery.where({ [`${alias}.id`]: ctx.user.id });
+    }
+    if (where) {
+        applyWhere(summonByName(ctx.models, type), subQuery, alias, where, aliases);
+    }
+    for (const { type, foreignKey, reverse, where } of links) {
+        const model = summonByName(ctx.models, type);
+        const subAlias = aliases.getShort();
+        if (reverse) {
+            // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+            subQuery.leftJoin(`${type} as ${subAlias}`, `${alias}.${foreignKey || 'id'}`, `${subAlias}.id`);
+        }
+        else {
+            // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+            subQuery.rightJoin(`${type} as ${subAlias}`, `${alias}.id`, `${subAlias}.${foreignKey || 'id'}`);
+        }
+        // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+        subQuery.where({ [`${subAlias}.deleted`]: false });
+        if (where) {
+            applyWhere(model, subQuery, subAlias, where, aliases);
+        }
+        alias = subAlias;
+    }
+    // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+    subQuery.whereRaw(`"${alias}".id = ?`, id);
+};
+const applyWhere = (model, query, alias, where, aliases) => {
+    for (const [key, value] of Object.entries(where)) {
+        const relation = model.relationsByName[key];
+        if (relation) {
+            const subAlias = aliases.getShort();
+            // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+            query.leftJoin(`${relation.model.name} as ${subAlias}`, `${alias}.${relation.field.foreignKey || `${relation.field.name}Id`}`, `${subAlias}.id`);
+            applyWhere(relation.model, query, subAlias, value, aliases);
+        }
+        else if (Array.isArray(value)) {
+            // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+            query.whereIn(`${alias}.${key}`, value);
+        }
+        else {
+            // eslint-disable-next-line @typescript-eslint/no-floating-promises -- we do not need to await knex here
+            query.where({ [`${alias}.${key}`]: value });
+        }
+    }
+};
+//# sourceMappingURL=check.js.map

package/dist/esm/permissions/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../../src/permissions/check.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAI7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,GAA8C,EAC9C,IAAY,EACZ,MAAwB,EACG,EAAE;IAC7B,MAAM,eAAe,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,OAAO,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,EAAE;QACzE,OAAO,CAAC,CAAC,eAAe,CAAC;KAC1B;IAED,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,OAAO,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,EAAE;QACzE,OAAO,CAAC,CAAC,eAAe,CAAC;KAC1B;IAED,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,OAAO,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS,EAAE;QAC3E,OAAO,CAAC,CAAC,gBAAgB,CAAC;KAC3B;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,GAAkE,EAClE,IAAY,EACZ,UAAkB,EAClB,KAAwB,EACxB,MAAwB,EACxB,uBAAyC,EACd,EAAE;IAC7B,MAAM,eAAe,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE9D,IAAI,eAAe,KAAK,IAAI,EAAE;QAC5B,OAAO,eAAe,CAAC;KACxB;IAED,IAAI,eAAe,KAAK,KAAK,EAAE;QAC7B,wGAAwG;QACxG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,eAAe,CAAC;KACxB;IAED,IACE,uBAAuB,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAC7C,eAAe,CAAC,IAAI,CAClB,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,8EAA8E;QAC9E,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAC1C,CACF,EACD;QACA,yHAAyH;QACzH,gCAAgC;QAChC,OAAO,eAAe,CAAC;KACxB;IAED,wGAAwG;IACxG,GAAG,CACD,KAAK,EACL,eAAe,CAAC,GAAG,CACjB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK;SACF,SAAS,CAAC,GAAG,UAAU,KAAK,CAAC;SAC7B,aAAa,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,MAAM,CAAC,CAAC,CAAC,CAChH,CACF,CAAC;IAEF,OAAO,eAAe,CAAC;AACzB,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,GAAkE,EAClE,KAAY,EACZ,KAAiC,EACjC,MAAuC,EACvC,EAAE;IACF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IACxD,IAAI,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,EAAE;QACX,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;KAC7C;IAED,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,GAAG,MAAM,KAAK,CAAC;IACrB,IAAI,CAAC,MAAM,EAAE;QACX,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;KACzD;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,GAAkE,EAClE,KAAY,EACZ,IAAgC,EAChC,MAA2B,EAC3B,EAAE;IACF,MAAM,eAAe,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEpE,IAAI,eAAe,KAAK,IAAI,EAAE;QAC5B,OAAO;KACR;IACD,IAAI,eAAe,KAAK,KAAK,EAAE;QAC7B,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;KAC1D;IAED,kIAAkI;IAClI,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM;SAC7B,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC;SAClC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE;QAClG,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC;QACzD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAW,CAAC;QAC7C,IAAI,CAAC,SAAS,EAAE;YACd,SAAS;SACV;QAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QACpF,IAAI,gBAAgB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACjE,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;SACzE;QAED,MAAM,GAAG,IAAI,CAAC;QAEd,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAEzE,IAAI,oBAAoB,KAAK,IAAI,EAAE;YACjC,wEAAwE;YACxE,wGAAwG;YACxG,KAAK,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;YACrG,SAAS;SACV;QAED,IAAI,oBAAoB,KAAK,KAAK,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE;YAClE,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;SACzE;QAED,wGAAwG;QACxG,GAAG,CACD,KAAK,EACL,oBAAoB,CAAC,GAAG,CACtB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAC5G,CACF,CAAC;KACH;IAED,IAAI,MAAM,EAAE;QACV,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC;QAC9B,IAAI,CAAC,SAAS,EAAE;YACd,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,KAAK,CAAC,IAAI,mDAAmD,CAAC,CAAC;SAC1G;KACF;SAAM,IAAI,MAAM,KAAK,QAAQ,EAAE;QAC9B,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,KAAK,CAAC,IAAI,uDAAuD,CAAC,CAAC;KAC9G;AACH,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,GAAyC,EACzC,QAA2B,EAC3B,KAAuB,EACvB,EAAoC,EACpC,EAAE;IACF,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;IACrC,IAAI,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC/B,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACtC,wGAAwG;IACxG,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC;IACrC,IAAI,EAAE,EAAE;QACN,wGAAwG;QACxG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;KAClD;IACD,IAAI,KAAK,EAAE;QACT,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;KAC7E;IAED,KAAK,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,EAAE;QACxD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,OAAO,EAAE;YACX,wGAAwG;YACxG,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,OAAO,QAAQ,EAAE,EAAE,GAAG,KAAK,IAAI,UAAU,IAAI,IAAI,EAAE,EAAE,GAAG,QAAQ,KAAK,CAAC,CAAC;SACjG;aAAM;YACL,wGAAwG;YACxG,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI,OAAO,QAAQ,EAAE,EAAE,GAAG,KAAK,KAAK,EAAE,GAAG,QAAQ,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC;SAClG;QACD,wGAAwG;QACxG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,QAAQ,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,IAAI,KAAK,EAAE;YACT,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;SACvD;QACD,KAAK,GAAG,QAAQ,CAAC;KAClB;IACD,wGAAwG;IACxG,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAY,EAAE,KAAwB,EAAE,KAAa,EAAE,KAAU,EAAE,OAAuB,EAAE,EAAE;IAChH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,QAAQ,EAAE;YACZ,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;YACpC,wGAAwG;YACxG,KAAK,CAAC,QAAQ,CACZ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,QAAQ,EAAE,EACvC,GAAG,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,UAAU,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,EACrE,GAAG,QAAQ,KAAK,CACjB,CAAC;YACF,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;SAC7D;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YAC/B,wGAAwG;YACxG,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;SACzC;aAAM;YACL,wGAAwG;YACxG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;SAC7C;KACF;AACH,CAAC,CAAC"}

package/dist/esm/permissions/generate.d.ts

@@ -0,0 +1,45 @@
+import { Models } from '../models';
+export type PermissionAction = 'READ' | 'CREATE' | 'UPDATE' | 'DELETE' | 'RESTORE' | 'LINK';
+/**
+ * Initial representation (tree structure, as defined by user).
+ */
+export type PermissionsConfig = {
+    [role: string]: true | {
+        [type: string]: PermissionsBlock;
+    };
+};
+export type PermissionsBlock = {
+    [action in PermissionAction]?: true;
+} & {
+    WHERE?: Record<string, any>;
+    RELATIONS?: {
+        [relation: string]: PermissionsBlock;
+    };
+};
+/**
+ * Final representation (lookup table (role, model, action) -> permission stack).
+ */
+export type Permissions = {
+    [role: string]: true | RolePermissions;
+};
+type RolePermissions = {
+    [type: string]: {
+        [action in PermissionAction]?: true | PermissionStack;
+    };
+};
+/**
+ * For a given role, model and action,
+ * this represents the list of potential (join) paths
+ * that would grant permission to perform that action.
+ */
+export type PermissionStack = PermissionChain[];
+export type PermissionChain = PermissionLink[];
+export type PermissionLink = {
+    type: string;
+    foreignKey?: string;
+    reverse?: boolean;
+    me?: boolean;
+    where?: any;
+};
+export declare const generatePermissions: (models: Models, config: PermissionsConfig) => Permissions;
+export {};

package/dist/esm/permissions/generate.js

@@ -0,0 +1,77 @@
+import { summonByName } from '../utils';
+const ACTIONS = ['READ', 'CREATE', 'UPDATE', 'DELETE', 'RESTORE', 'LINK'];
+export const generatePermissions = (models, config) => {
+    const permissions = {};
+    for (const [role, roleConfig] of Object.entries(config)) {
+        if (roleConfig === true) {
+            permissions[role] = true;
+            continue;
+        }
+        const rolePermissions = {};
+        for (const [key, block] of Object.entries(roleConfig)) {
+            const type = key === 'me' ? 'User' : key;
+            if (key !== 'me' && !('WHERE' in block)) {
+                rolePermissions[type] = {};
+                for (const action of ACTIONS) {
+                    if (action === 'READ' || action in block) {
+                        rolePermissions[type][action] = true;
+                    }
+                }
+            }
+            addPermissions(models, rolePermissions, [
+                {
+                    type,
+                    ...(key === 'me' && { me: true }),
+                    ...('WHERE' in block && { where: block.WHERE }),
+                },
+            ], block);
+        }
+        permissions[role] = rolePermissions;
+    }
+    return permissions;
+};
+const addPermissions = (models, permissions, links, block) => {
+    const { type } = links[links.length - 1];
+    const model = summonByName(models, type);
+    for (const action of ACTIONS) {
+        if (action === 'READ' || action in block) {
+            if (!permissions[type]) {
+                permissions[type] = {};
+            }
+            if (!permissions[type][action]) {
+                permissions[type][action] = [];
+            }
+            if (permissions[type][action] !== true) {
+                permissions[type][action].push(links);
+            }
+        }
+    }
+    if (block.RELATIONS) {
+        for (const [relation, subBlock] of Object.entries(block.RELATIONS)) {
+            const field = model.fields.find((field) => field.relation && field.name === relation);
+            let link;
+            if (field) {
+                link = {
+                    type: field.type,
+                    foreignKey: field.foreignKey || `${field.name}Id`,
+                    reverse: true,
+                };
+            }
+            else {
+                const field = model.reverseRelationsByName[relation];
+                if (!field) {
+                    throw new Error(`Relation ${relation} in model ${model.name} does not exist.`);
+                }
+                link = {
+                    type: field.model.name,
+                    foreignKey: field.foreignKey,
+                };
+            }
+            if (subBlock.WHERE) {
+                link.where = subBlock.WHERE;
+            }
+            addPermissions(models, permissions, [...links, link], subBlock);
+        }
+    }
+};
+//# sourceMappingURL=generate.js.map

package/dist/esm/permissions/generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../../src/permissions/generate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAIxC,MAAM,OAAO,GAAuB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAsD9F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAE,MAAyB,EAAE,EAAE;IAC/E,MAAM,WAAW,GAAgB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACvD,IAAI,UAAU,KAAK,IAAI,EAAE;YACvB,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACzB,SAAS;SACV;QACD,MAAM,eAAe,GAAoB,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;YACrD,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;YACzC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE;gBACvC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE;oBAC5B,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,IAAI,KAAK,EAAE;wBACxC,eAAe,CAAC,IAAI,CAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;qBACvC;iBACF;aACF;YACD,cAAc,CACZ,MAAM,EACN,eAAe,EACf;gBACE;oBACE,IAAI;oBACJ,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;oBACjC,GAAG,CAAC,OAAO,IAAI,KAAK,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;iBAChD;aACF,EACD,KAAK,CACN,CAAC;SACH;QACD,WAAW,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;KACrC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,MAAc,EAAE,WAA4B,EAAE,KAAuB,EAAE,KAAuB,EAAE,EAAE;IACxH,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAEzC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE;QAC5B,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,IAAI,KAAK,EAAE;YACxC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;gBACtB,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;aACxB;YACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAE,CAAC,MAAM,CAAC,EAAE;gBAC/B,WAAW,CAAC,IAAI,CAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;aACjC;YACD,IAAI,WAAW,CAAC,IAAI,CAAE,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;gBACtC,WAAW,CAAC,IAAI,CAAE,CAAC,MAAM,CAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aAC7D;SACF;KACF;IAED,IAAI,KAAK,CAAC,SAAS,EAAE;QACnB,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;YAClE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YACtF,IAAI,IAAoB,CAAC;YACzB,IAAI,KAAK,EAAE;gBACT,IAAI,GAAG;oBACL,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI;oBACjD,OAAO,EAAE,IAAI;iBACd,CAAC;aACH;iBAAM;gBACL,MAAM,KAAK,GAAG,KAAK,CAAC,sBAAsB,CAAC,QAAQ,CAAE,CAAC;gBAEtD,IAAI,CAAC,KAAK,EAAE;oBACV,MAAM,IAAI,KAAK,CAAC,YAAY,QAAQ,aAAa,KAAK,CAAC,IAAI,kBAAkB,CAAC,CAAC;iBAChF;gBAED,IAAI,GAAG;oBACL,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;oBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC7B,CAAC;aACH;YACD,IAAI,QAAQ,CAAC,KAAK,EAAE;gBAClB,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;aAC7B;YACD,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;SACjE;KACF;AACH,CAAC,CAAC"}

package/dist/esm/permissions/index.d.ts

@@ -0,0 +1,2 @@
+export * from './check';
+export * from './generate';

package/dist/esm/permissions/index.js

@@ -0,0 +1,4 @@
+// created from 'create-ts-index'
+export * from './check';
+export * from './generate';
+//# sourceMappingURL=index.js.map

package/dist/esm/permissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/permissions/index.ts"],"names":[],"mappings":"AAAA,iCAAiC;AAEjC,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC"}

package/dist/esm/resolvers/arguments.d.ts

@@ -0,0 +1,26 @@
+import type { GraphQLSchema, TypeDefinitionNode, TypeNode } from 'graphql';
+import { Value } from '../values';
+import { FieldResolverNode } from './node';
+import { Maybe } from './utils';
+export type Where = Record<string, Value>;
+export type OrderBy = Record<string, 'ASC' | 'DESC'>[];
+export type Args = {
+    where?: Where | null;
+};
+export type ListArgs = {
+    limit?: number | null | undefined;
+    offset?: number | null | undefined;
+    orderBy?: string[];
+};
+export type NormalizedArguments = {
+    limit?: number;
+    offset?: number;
+    orderBy?: OrderBy;
+    where?: Where;
+    search?: string;
+    mine?: boolean;
+    language?: string;
+};
+export declare const normalizeArguments: (node: FieldResolverNode) => NormalizedArguments;
+export declare function normalizeValue(value: Value, type: TypeNode, schema: GraphQLSchema): Value;
+export declare const normalizeValueByTypeDefinition: (value: Value, type: Maybe<TypeDefinitionNode>, schema: GraphQLSchema) => any;

package/dist/esm/resolvers/arguments.js

@@ -0,0 +1,88 @@
+import { Kind } from 'graphql';
+import { summonByKey } from '../utils';
+function getRawValue(value, values) {
+    switch (value.kind) {
+        case Kind.LIST:
+            if (!values) {
+                return;
+            }
+            return value.values.map((value) => getRawValue(value, values));
+        case Kind.VARIABLE:
+            return values?.[value.name.value];
+        case Kind.INT:
+            return parseInt(value.value, 10);
+        case Kind.NULL:
+            return null;
+        case Kind.FLOAT:
+            return parseFloat(value.value);
+        case Kind.STRING:
+        case Kind.BOOLEAN:
+        case Kind.ENUM:
+            return value.value;
+        case Kind.OBJECT: {
+            if (!value.fields.length) {
+                return;
+            }
+            const res = {};
+            for (const field of value.fields) {
+                res[field.name.value] = getRawValue(field.value, values);
+            }
+            return res;
+        }
+    }
+}
+export const normalizeArguments = (node) => {
+    const normalizedArguments = {};
+    if (node.field.arguments) {
+        for (const argument of node.field.arguments) {
+            const rawValue = getRawValue(argument.value, node.ctx.info.variableValues);
+            const normalizedValue = normalizeValue(rawValue, summonByKey(node.fieldDefinition.arguments || [], 'name.value', argument.name.value).type, node.ctx.info.schema);
+            if (normalizedValue === undefined) {
+                continue;
+            }
+            normalizedArguments[argument.name.value] = normalizedValue;
+        }
+    }
+    return normalizedArguments;
+};
+export function normalizeValue(value, type, schema) {
+    switch (type.kind) {
+        case Kind.LIST_TYPE: {
+            if (Array.isArray(value)) {
+                const res = [];
+                for (const v of value) {
+                    res.push(normalizeValue(v, type.type, schema));
+                }
+                return res;
+            }
+            const normalizedValue = normalizeValue(value, type.type, schema);
+            if (normalizedValue === undefined) {
+                return;
+            }
+            return [normalizedValue];
+        }
+        case Kind.NON_NULL_TYPE:
+            return normalizeValue(value, type.type, schema);
+        case Kind.NAMED_TYPE:
+            return normalizeValueByTypeDefinition(value, schema.getType(type.name.value)?.astNode, schema);
+    }
+}
+export const normalizeValueByTypeDefinition = (value, type, schema) => {
+    if (!type || type.kind !== Kind.INPUT_OBJECT_TYPE_DEFINITION) {
+        return value;
+    }
+    if (!value) {
+        return;
+    }
+    const res = {};
+    for (const key of Object.keys(value)) {
+        const field = summonByKey(type.fields, 'name.value', key);
+        const normalizedValue = normalizeValue(value[key], field.type, schema);
+        if (normalizedValue === undefined) {
+            continue;
+        }
+        res[key] = normalizedValue;
+    }
+    return res;
+};
+//# sourceMappingURL=arguments.js.map