@taruvi/refine-providers 1.0.8 → 1.0.10

package/dist/index.cjs

@@ -1,6 +1,11 @@
 'use strict';
 
 var sdk = require('@taruvi/sdk');
+var DataLoader = require('dataloader');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var DataLoader__default = /*#__PURE__*/_interopDefault(DataLoader);
 
 // src/dataProvider.ts
 var REFINE_TO_SDK_OPERATOR = {
@@ -43,7 +48,7 @@ function applyFilters(query, filters) {
       }
       let sdkValue;
       if (operator === "in" || operator === "nin") {
-        sdkValue = Array.isArray(value) ? value.join(",") : String(value);
+        sdkValue = Array.isArray(value) ? value : [value];
       } else if (operator === "null" || operator === "nnull") {
         sdkValue = true;
       } else if (typeof value === "boolean" || typeof value === "number") {
@@ -114,7 +119,7 @@ function dataProvider(client) {
       const tableName = getTableName(resource, taruviMeta);
       const idColumn = getIdColumn(taruviMeta);
       let query = new sdk.Database(client).from(tableName);
-      query = query.filter(idColumn, "in", ids.map(String).join(","));
+      query = query.filter(idColumn, "in", ids.map(String));
       query = applyPopulate(query, taruviMeta);
       const response = await query.execute();
       return { data: response.data };
@@ -426,43 +431,119 @@ function functionsDataProvider(client) {
   const baseApiUrl = `${config.baseUrl}/api/apps/${config.appSlug}`;
   const functions = new sdk.Functions(client);
   return {
-    custom: async (params) => {
-      const { url: functionSlug, payload, meta } = params;
+    /**
+     * Execute an edge function.
+     *
+     * @param resource - The function slug to execute
+     * @param variables - Parameters to pass to the function
+     * @param meta.async - Whether to execute asynchronously (default: false)
+     */
+    create: async ({
+      resource,
+      variables,
+      meta
+    }) => {
       const functionMeta = meta;
-      const response = await functions.execute(functionSlug, {
+      const response = await functions.execute(resource, {
         async: functionMeta?.async ?? false,
-        params: payload
+        params: variables
       });
       return { data: response.data };
     },
     getApiUrl: () => baseApiUrl,
-    // Edge functions don't support CRUD operations
+    // Edge functions don't support custom method - use create() instead
+    custom: async () => {
+      throw new Error(
+        "custom is not supported for edge functions. Use useCreate to execute functions."
+      );
+    },
+    // Edge functions don't support other CRUD operations
     getList: async () => {
-      throw new Error("getList is not supported for edge functions");
+      throw new Error(
+        "getList is not supported for edge functions. Use useCreate to execute functions."
+      );
+    },
+    getOne: async () => {
+      throw new Error(
+        "getOne is not supported for edge functions. Use useCreate to execute functions."
+      );
+    },
+    getMany: async () => {
+      throw new Error(
+        "getMany is not supported for edge functions. Use useCreate to execute functions."
+      );
+    },
+    createMany: async () => {
+      throw new Error(
+        "createMany is not supported for edge functions. Use useCreate to execute functions."
+      );
+    },
+    update: async () => {
+      throw new Error(
+        "update is not supported for edge functions. Use useCreate to execute functions."
+      );
+    },
+    updateMany: async () => {
+      throw new Error(
+        "updateMany is not supported for edge functions. Use useCreate to execute functions."
+      );
+    },
+    deleteOne: async () => {
+      throw new Error(
+        "deleteOne is not supported for edge functions. Use useCreate to execute functions."
+      );
+    },
+    deleteMany: async () => {
+      throw new Error(
+        "deleteMany is not supported for edge functions. Use useCreate to execute functions."
+      );
+    }
+  };
+}
+function appDataProvider(client) {
+  const config = client.getConfig();
+  const baseApiUrl = `${config.baseUrl}/api/apps/${config.appSlug}`;
+  return {
+    getList: async (params) => {
+      const { resource } = params;
+      if (resource === "roles") {
+        const app = new sdk.App(client);
+        const response = await app.roles().execute();
+        return {
+          data: response.data || response,
+          total: response.total ?? (Array.isArray(response) ? response.length : response.data?.length ?? 0)
+        };
+      }
+      throw new Error(`Unknown app resource: ${resource}. Supported resources: roles`);
     },
+    getApiUrl: () => baseApiUrl,
+    // App resources are read-only
     getOne: async () => {
-      throw new Error("getOne is not supported for edge functions");
+      throw new Error("getOne is not supported for app resources");
     },
     getMany: async () => {
-      throw new Error("getMany is not supported for edge functions");
+      throw new Error("getMany is not supported for app resources");
     },
     create: async () => {
-      throw new Error("create is not supported for edge functions");
+      throw new Error("create is not supported for app resources");
     },
     createMany: async () => {
-      throw new Error("createMany is not supported for edge functions");
+      throw new Error("createMany is not supported for app resources");
     },
     update: async () => {
-      throw new Error("update is not supported for edge functions");
+      throw new Error("update is not supported for app resources");
     },
     updateMany: async () => {
-      throw new Error("updateMany is not supported for edge functions");
+      throw new Error("updateMany is not supported for app resources");
     },
     deleteOne: async () => {
-      throw new Error("deleteOne is not supported for edge functions");
+      throw new Error("deleteOne is not supported for app resources");
     },
     deleteMany: async () => {
-      throw new Error("deleteMany is not supported for edge functions");
+      throw new Error("deleteMany is not supported for app resources");
+    },
+    custom: async () => {
+      throw new Error("custom is not supported for app resources");
     }
   };
 }
@@ -526,41 +607,68 @@ function analyticsDataProvider(client) {
   const baseApiUrl = `${config.baseUrl}/api/apps/${config.appSlug}`;
   const analytics = new sdk.Analytics(client);
   return {
-    custom: async (params) => {
-      const { url: querySlug, payload } = params;
-      const response = await analytics.execute(querySlug, {
-        params: payload
+    /**
+     * Execute an analytics query.
+     *
+     * @param resource - The query slug to execute
+     * @param variables - Parameters to pass to the query
+     */
+    create: async ({
+      resource,
+      variables
+    }) => {
+      const response = await analytics.execute(resource, {
+        params: variables
       });
       return { data: response.data };
     },
     getApiUrl: () => baseApiUrl,
-    // Analytics queries don't support standard CRUD operations
+    // Analytics don't support custom method - use create() instead
+    custom: async () => {
+      throw new Error(
+        "custom is not supported for analytics. Use useCreate to execute queries."
+      );
+    },
+    // Analytics queries don't support other CRUD operations
     getList: async () => {
-      throw new Error("getList is not supported for analytics. Use custom() to execute queries");
+      throw new Error(
+        "getList is not supported for analytics. Use useCreate to execute queries."
+      );
     },
     getOne: async () => {
-      throw new Error("getOne is not supported for analytics. Use custom() to execute queries");
+      throw new Error(
+        "getOne is not supported for analytics. Use useCreate to execute queries."
+      );
     },
     getMany: async () => {
-      throw new Error("getMany is not supported for analytics. Use custom() to execute queries");
-    },
-    create: async () => {
-      throw new Error("create is not supported for analytics. Use custom() to execute queries");
+      throw new Error(
+        "getMany is not supported for analytics. Use useCreate to execute queries."
+      );
     },
     createMany: async () => {
-      throw new Error("createMany is not supported for analytics. Use custom() to execute queries");
+      throw new Error(
+        "createMany is not supported for analytics. Use useCreate to execute queries."
+      );
     },
     update: async () => {
-      throw new Error("update is not supported for analytics. Use custom() to execute queries");
+      throw new Error(
+        "update is not supported for analytics. Use useCreate to execute queries."
+      );
     },
     updateMany: async () => {
-      throw new Error("updateMany is not supported for analytics. Use custom() to execute queries");
+      throw new Error(
+        "updateMany is not supported for analytics. Use useCreate to execute queries."
+      );
     },
     deleteOne: async () => {
-      throw new Error("deleteOne is not supported for analytics. Use custom() to execute queries");
+      throw new Error(
+        "deleteOne is not supported for analytics. Use useCreate to execute queries."
+      );
     },
     deleteMany: async () => {
-      throw new Error("deleteMany is not supported for analytics. Use custom() to execute queries");
+      throw new Error(
+        "deleteMany is not supported for analytics. Use useCreate to execute queries."
+      );
     }
   };
 }
@@ -682,60 +790,97 @@ function authProvider(client) {
     }
   };
 }
-function accessControlProvider(client) {
+function accessControlProvider(client, options) {
   const policy = new sdk.Policy(client);
   const auth = new sdk.Auth(client);
-  return {
-    can: async ({ resource, action, params }) => {
+  const { batchDelayMs = 50 } = options ?? {};
+  const permissionLoader = new DataLoader__default.default(
+    async (checks) => {
       const user = auth.getCurrentUser();
       if (!user) {
-        return {
+        return checks.map(() => ({
           can: false,
           reason: "User not authenticated"
-        };
+        }));
       }
-      if (!resource) {
-        return {
-          can: false,
-          reason: "Resource not specified"
-        };
+      const uniqueResources = /* @__PURE__ */ new Map();
+      for (const check of checks) {
+        const recordId = check.params?.id ? String(check.params.id) : "*";
+        const key = `${check.resource}:${recordId}`;
+        if (!uniqueResources.has(key)) {
+          uniqueResources.set(key, {
+            entityType: check.entityType,
+            tableName: check.resource,
+            recordId,
+            attributes: check.params || {},
+            actions: /* @__PURE__ */ new Set()
+          });
+        }
+        uniqueResources.get(key).actions.add(check.action);
       }
+      const batchPayload = Array.from(uniqueResources.values()).map((entry) => ({
+        entityType: entry.entityType ?? entry.tableName,
+        // Default to tableName if entityType not specified
+        tableName: entry.tableName,
+        recordId: entry.recordId,
+        attributes: entry.attributes,
+        actions: Array.from(entry.actions)
+      }));
       try {
-        const entityType = params?.resource?.meta?.entityType;
-        const resources = [
-          {
-            entityType,
-            tableName: resource,
-            recordId: params?.id ? String(params.id) : "*",
-            attributes: params || {},
-            actions: [action]
-          }
-        ];
-        const result = await policy.checkResource(resources);
-        if (result && typeof result === "object") {
-          const actionResult = result.results?.[0]?.actions?.[action];
-          const allowed = actionResult === "EFFECT_ALLOW" || result.allowed === true;
+        const result = await policy.checkResource(batchPayload);
+        const resultsByResource = /* @__PURE__ */ new Map();
+        result?.results?.forEach((r, index) => {
+          const payload = batchPayload[index];
+          const key = `${payload.tableName}:${payload.recordId}`;
+          resultsByResource.set(key, r.actions || {});
+        });
+        return checks.map((check) => {
+          const recordId = check.params?.id ? String(check.params.id) : "*";
+          const key = `${check.resource}:${recordId}`;
+          const actions = resultsByResource.get(key) || {};
+          const allowed = actions[check.action] === "EFFECT_ALLOW";
           return {
             can: allowed,
-            reason: result.reason || (allowed ? void 0 : "Permission denied by policy")
+            reason: allowed ? void 0 : "Permission denied by policy"
           };
-        }
-        return {
-          can: false,
-          reason: "Invalid policy response"
-        };
+        });
       } catch (error) {
-        console.error("Cerbos permission check failed:", error);
-        return {
+        console.error("Batch permission check failed:", error);
+        return checks.map(() => ({
           can: false,
           reason: error instanceof Error ? error.message : "Permission check failed"
-        };
+        }));
+      }
+    },
+    {
+      batchScheduleFn: (callback) => setTimeout(callback, batchDelayMs),
+      cache: false
+      // TanStack Query handles caching
+    }
+  );
+  return {
+    can: async ({ resource, action, params }) => {
+      if (!resource) {
+        return { can: false, reason: "Resource not specified" };
       }
+      const entityType = params?.resource?.meta?.entityType;
+      return permissionLoader.load({
+        resource,
+        action,
+        params,
+        entityType
+      });
     },
     options: {
       buttons: {
         enableAccessControl: true,
-        hideIfUnauthorized: false
+        hideIfUnauthorized: true
+      },
+      queryOptions: {
+        staleTime: 5 * 60 * 1e3,
+        // 5 minutes
+        gcTime: 10 * 60 * 1e3
+        // 10 minutes
       }
     }
   };
@@ -772,6 +917,7 @@ Object.defineProperty(exports, "User", {
 exports.REFINE_OPERATOR_MAP = REFINE_OPERATOR_MAP;
 exports.accessControlProvider = accessControlProvider;
 exports.analyticsDataProvider = analyticsDataProvider;
+exports.appDataProvider = appDataProvider;
 exports.authProvider = authProvider;
 exports.buildQueryString = buildQueryString;
 exports.buildRefineQueryParams = buildRefineQueryParams;