@wbce/projen-d9 0.0.27 → 0.1.0

package/lib/cli/commands/cedar/cedar-translations.js

@@ -0,0 +1,213 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.addWhenClauses = addWhenClauses;
+exports.translateToCedar = translateToCedar;
+/** Local stand-in for lodash's `isPlainObject`, which this package does not depend on. */
+function isPlainObject(value) {
+    if (Object.prototype.toString.call(value) !== '[object Object]')
+        return false;
+    const proto = Object.getPrototypeOf(value);
+    return proto === null || proto === Object.prototype;
+}
+function getOperation(key, value) {
+    if (key.startsWith('_') && !['_and', '_or', '_none', '_some'].includes(key)) {
+        return { operator: key, value };
+    }
+    else if (isPlainObject(value) === false) {
+        return { operator: '_eq', value };
+    }
+    return getOperation(Object.keys(value)[0], Object.values(value)[0]);
+}
+function getFilterPath(key, value) {
+    const path = [key];
+    const childKey = Object.keys(value)[0];
+    if (typeof childKey === 'string' &&
+        childKey.startsWith('_') === true &&
+        !['_none', '_some'].includes(childKey)) {
+        return path;
+    }
+    if (isPlainObject(value)) {
+        path.push(...getFilterPath(childKey, Object.values(value)[0]));
+    }
+    return path;
+}
+function addWhenClauses(filter, subject = 'resource') {
+    const entries = Object.entries(filter);
+    if (!entries.length)
+        return;
+    const key = entries[0][0];
+    const value = entries[0][1];
+    if (key === '_or' || key === '_and') {
+        if (key === '_or' &&
+            value.some((subFilter) => Object.keys(subFilter).length === 0)) {
+            return;
+        }
+        const left = value[0];
+        const rightVal = value[1];
+        const operator = key === '_or' ? '||' : '&&';
+        if (rightVal) {
+            return {
+                [operator]: {
+                    left: addWhenClauses(left, subject),
+                    right: addWhenClauses({ [key]: value.slice(1) }, subject),
+                },
+            };
+        }
+        else {
+            return addWhenClauses(left, subject);
+        }
+    }
+    const filterPath = getFilterPath(key, value);
+    const { operator: filterOperator, value: filterValue } = getOperation(key, value);
+    if (entries.length > 1) {
+        delete filter[key];
+        return {
+            '&&': {
+                left: applyFilterToQuery(filterPath, filterOperator, filterValue, subject),
+                right: addWhenClauses(filter, subject),
+            },
+        };
+    }
+    else {
+        return applyFilterToQuery(filterPath, filterOperator, filterValue, subject);
+    }
+    function applyFilterToQuery(path, operator, compareValue, subjectVar = 'resource') {
+        function buildLeft(pathSegments, subj) {
+            let node = subj === 'context.newValue'
+                ? { '.': { left: { Var: 'context' }, attr: 'newValue' } }
+                : { Var: 'resource' };
+            for (const attr of pathSegments) {
+                node = { '.': { left: node, attr } };
+            }
+            return node;
+        }
+        const buildRight = (v) => v === '$CURRENT_USER' ? { Var: 'principal' } : { Value: v };
+        const left = buildLeft(path, subjectVar);
+        const right = buildRight(compareValue);
+        let expr = null;
+        const baseForParent = path.length <= 1
+            ? subjectVar === 'context.newValue'
+                ? { '.': { left: { Var: 'context' }, attr: 'newValue' } }
+                : { Var: 'resource' }
+            : buildLeft(path.slice(0, -1), subjectVar);
+        if (operator === '_null' ||
+            (operator === '_nnull' && compareValue === false)) {
+            expr = {
+                '!': {
+                    arg: { has: { left: baseForParent, attr: path[path.length - 1] } },
+                },
+            };
+        }
+        if (operator === '_nnull' ||
+            (operator === '_null' && compareValue === false)) {
+            expr = { has: { left: baseForParent, attr: path[path.length - 1] } };
+        }
+        if (compareValue !== undefined && expr === null) {
+            if (operator === '_eq')
+                expr = { '==': { left, right } };
+            if (operator === '_neq')
+                expr = { '!=': { left, right } };
+            if (operator === '_gt')
+                expr = { '>': { left, right } };
+            if (operator === '_gte')
+                expr = { '>=': { left, right } };
+            if (operator === '_lt')
+                expr = { '<': { left, right } };
+            if (operator === '_lte')
+                expr = { '<=': { left, right } };
+            if (operator === '_icontains') {
+                // Cedar has no case-insensitive matching. Normalize the stored data and use
+                // _contains — https://docs.cedarpolicy.com/bestpractices/bp-normalize-data-input.html
+                throw new Error('_icontains is not supported in Cedar policies: normalize the data (e.g. lowercase) and use _contains instead');
+            }
+            if (operator === '_contains') {
+                expr = {
+                    like: {
+                        left,
+                        pattern: ['Wildcard', { Literal: compareValue }, 'Wildcard'],
+                    },
+                };
+            }
+            if (operator === '_starts_with') {
+                expr = { like: { left, pattern: [{ Literal: compareValue }, 'Wildcard'] } };
+            }
+            if (operator === '_ends_with') {
+                expr = { like: { left, pattern: ['Wildcard', { Literal: compareValue }] } };
+            }
+        }
+        if (expr === null)
+            return;
+        return expr;
+    }
+}
+function translateToCedar(permission) {
+    const principalConstraint = {
+        op: 'in',
+        entity: {
+            type: 'd9::UserGroup',
+            id: permission.roleName,
+        },
+    };
+    const action = {
+        op: '==',
+        entity: {
+            type: `Db::${permission.collection}::Action`,
+            id: permission.action,
+        },
+    };
+    const mainConditionBody = addWhenClauses(permission.permissions || {});
+    const mainConditions = mainConditionBody
+        ? [{ kind: 'when', body: mainConditionBody }]
+        : [];
+    const mainPolicy = {
+        effect: 'permit',
+        principal: principalConstraint,
+        action: action,
+        resource: { op: 'All' },
+        conditions: mainConditions,
+    };
+    // Field-level policy only when there is a fields restriction and/or validation
+    const fields = permission.fields ?? [];
+    const hasFields = fields.length > 0;
+    const hasValidationCond = permission.validation && Object.entries(permission.validation).length > 0;
+    let fieldPolicy;
+    let validationPolicy;
+    if (hasFields) {
+        const fieldConditions = [];
+        fieldConditions.push({
+            kind: 'when',
+            body: {
+                containsAll: {
+                    left: { Value: fields },
+                    right: {
+                        '.': {
+                            left: { Var: 'context' },
+                            attr: 'requestedFields',
+                        },
+                    },
+                },
+            },
+        });
+        fieldPolicy = {
+            effect: 'permit',
+            principal: principalConstraint,
+            action: action,
+            resource: { op: 'All' },
+            conditions: fieldConditions,
+        };
+    }
+    if (hasValidationCond) {
+        const validationConditions = [];
+        const validationBody = addWhenClauses(permission.validation || {}, 'context.newValue');
+        validationConditions.push({ kind: 'when', body: validationBody });
+        validationPolicy = {
+            effect: 'permit',
+            principal: principalConstraint,
+            action: action,
+            resource: { op: 'All' },
+            conditions: validationConditions,
+        };
+    }
+    return { mainPolicy, fieldPolicy, validationPolicy };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/cli/commands/cedar/d9-permission.d.ts

@@ -0,0 +1,27 @@
+/** The `Filter` type of `@wbce-d9/types`, inlined so the CLI does not depend on it. */
+export type Filter = Record<string, any>;
+/**
+ * A d9 permission, shared by both translation directions:
+ *  - forward (d9-to-cedar): `new D9Permission(row)` parses a CSV row;
+ *  - reverse (cedar-to-d9): `D9Permission.empty(...)` starts a blank permission that
+ *    is filled as each `.cedar` file is parsed, then rendered back via `*Cell()`.
+ * `id`/`role`/`presets` are CSV-only columns, populated only on the forward side.
+ */
+export declare class D9Permission {
+    /** Blank permission to accumulate reconstructed Cedar clauses onto (reverse direction). */
+    static empty(roleName: string, collection: string, action: string): D9Permission;
+    roleName: string;
+    collection: string;
+    action: string;
+    permissions?: Filter;
+    validation?: Filter;
+    fields?: string[];
+    id?: number;
+    role?: string;
+    presets?: Record<string, any>;
+    /** Parse a `directus_permissions.csv` row. `roleName` is resolved separately from the role UUID. */
+    constructor(row: Record<string, string>);
+    permissionsCell(): string;
+    validationCell(): string;
+    fieldsCell(): string;
+}

package/lib/cli/commands/cedar/d9-permission.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.D9Permission = void 0;
+function parseStringFieldToJSON(field) {
+    return field?.length ? JSON.parse(field) : undefined;
+}
+/**
+ * A d9 permission, shared by both translation directions:
+ *  - forward (d9-to-cedar): `new D9Permission(row)` parses a CSV row;
+ *  - reverse (cedar-to-d9): `D9Permission.empty(...)` starts a blank permission that
+ *    is filled as each `.cedar` file is parsed, then rendered back via `*Cell()`.
+ * `id`/`role`/`presets` are CSV-only columns, populated only on the forward side.
+ */
+class D9Permission {
+    /** Blank permission to accumulate reconstructed Cedar clauses onto (reverse direction). */
+    static empty(roleName, collection, action) {
+        const perm = Object.create(D9Permission.prototype);
+        perm.roleName = roleName;
+        perm.collection = collection;
+        perm.action = action;
+        return perm;
+    }
+    /** Parse a `directus_permissions.csv` row. `roleName` is resolved separately from the role UUID. */
+    constructor(row) {
+        this.collection = row.collection;
+        this.action = row.action;
+        this.id = Number(row.id);
+        this.role = row.role;
+        this.permissions = parseStringFieldToJSON(row.permissions);
+        this.validation = parseStringFieldToJSON(row.validation);
+        this.fields = row.fields?.split(',') || [];
+        this.presets = parseStringFieldToJSON(row.presets);
+    }
+    permissionsCell() {
+        return JSON.stringify(this.permissions ?? {});
+    }
+    validationCell() {
+        return JSON.stringify(this.validation ?? {});
+    }
+    fieldsCell() {
+        return this.fields ? this.fields.join(',') : '*';
+    }
+}
+exports.D9Permission = D9Permission;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/cli/commands/cedar/d9-to-cedar.d.ts

@@ -0,0 +1,33 @@
+import type { PolicyJson } from '@cedar-policy/cedar-wasm/nodejs';
+import { D9Permission } from './d9-permission';
+import { RolesTable } from './roles-table';
+export declare class CedarManager {
+    permissionPath: string;
+    sqlPath: string;
+    fieldsPolicies: Map<string, PolicyJson[]>;
+    mainPolicies: Map<string, PolicyJson[]>;
+    validationPolicies: Map<string, PolicyJson[]>;
+    roles: RolesTable;
+    d9Permissions: D9Permission[];
+    constructor(opts?: {
+        permissionPath?: string;
+        sqlPath?: string;
+    });
+    readPermissionFile(): Promise<void>;
+    readRoleFile(): Promise<void>;
+    refactoPolicies(policyKey: 'mainPolicies' | 'fieldsPolicies' | 'validationPolicies'): void;
+    sortPolicies(policyKey: 'mainPolicies' | 'fieldsPolicies' | 'validationPolicies'): void;
+    translateAndSortPermission(): Promise<void>;
+    writePoliciesToFile(roleName: string, fileTitle: string, policies: PolicyJson[]): Promise<void>;
+    writePolicies(policyKey: 'mainPolicies' | 'fieldsPolicies' | 'validationPolicies', fileName: string): Promise<void>;
+    readCsvAndWriteAllFiles(): Promise<void>;
+}
+/**
+ * CLI action: regenerate the Cedar policy folders from directus_permissions.csv.
+ * The folder is wiped first, reproducing what `formatePermission` does in app-api2,
+ * so a role removed from the CSV leaves no orphan files.
+ */
+export declare function d9ToCedar(options?: {
+    permissionPath?: string;
+    sqlPath?: string;
+}): Promise<void>;

package/lib/cli/commands/cedar/d9-to-cedar.js

@@ -0,0 +1,157 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CedarManager = void 0;
+exports.d9ToCedar = d9ToCedar;
+const promises_1 = require("fs/promises");
+const cedar = require("@cedar-policy/cedar-wasm/nodejs");
+const cedar_format_1 = require("./cedar-format");
+const cedar_translations_1 = require("./cedar-translations");
+const d9_permission_1 = require("./d9-permission");
+const roles_table_1 = require("./roles-table");
+const logger_1 = require("../../logger");
+const utils_1 = require("../save/utils");
+class CedarManager {
+    constructor(opts) {
+        this.fieldsPolicies = new Map();
+        this.mainPolicies = new Map();
+        this.validationPolicies = new Map();
+        this.d9Permissions = [];
+        this.permissionPath = opts?.permissionPath || './permissions';
+        this.sqlPath = opts?.sqlPath || './sql/data';
+    }
+    async readPermissionFile() {
+        const permissions = await (0, utils_1.readCsvFile)(`${this.sqlPath}/directus_permissions.csv`);
+        this.d9Permissions = permissions.map((p) => new d9_permission_1.D9Permission(p));
+    }
+    async readRoleFile() {
+        this.roles = await roles_table_1.RolesTable.load(this.sqlPath);
+        for (const permission of this.d9Permissions) {
+            permission.roleName = permission.role
+                ? this.roles.getNameFromId(permission.role)
+                : 'Public';
+        }
+    }
+    refactoPolicies(policyKey) {
+        for (const [groupName, policies] of this[policyKey]) {
+            const groupedPolicies = new Map();
+            for (const policy of policies) {
+                const conditionsKey = JSON.stringify(policy.conditions.map((c) => c.body));
+                if (!groupedPolicies.has(conditionsKey)) {
+                    groupedPolicies.set(conditionsKey, []);
+                }
+                groupedPolicies.get(conditionsKey).push(policy);
+            }
+            // Combine policies in each group
+            const refactored = [];
+            for (const group of groupedPolicies.values()) {
+                if (group.length === 1) {
+                    // No optimization needed for single policy
+                    refactored.push(group[0]);
+                }
+                else {
+                    // Multiple policies with same conditions - combine actions
+                    const actions = group
+                        .map((p) => p.action.entity)
+                        .sort((a, b) => `${a.id}${a.type}`.localeCompare(`${b.id}${b.type}`));
+                    // Create combined policy with "action in [...]"
+                    const combinedPolicy = {
+                        effect: group[0].effect,
+                        principal: group[0].principal,
+                        action: {
+                            op: 'in',
+                            entities: actions,
+                        },
+                        resource: group[0].resource,
+                        conditions: group[0].conditions,
+                    };
+                    refactored.push(combinedPolicy);
+                }
+            }
+            this[policyKey].set(groupName, refactored);
+        }
+    }
+    sortPolicies(policyKey) {
+        for (const [groupName, policies] of this[policyKey]) {
+            this[policyKey].set(groupName, policies.sort((p1, p2) => {
+                const a1 = p1.action;
+                const a2 = p2.action;
+                const t1 = (a1.entities?.[0] || a1.entity).type;
+                const t2 = (a2.entities?.[0] || a2.entity).type;
+                return t1.localeCompare(t2);
+            }));
+        }
+    }
+    async translateAndSortPermission() {
+        for (const permission of this.d9Permissions) {
+            const cedarPolicies = await (0, cedar_translations_1.translateToCedar)(permission);
+            const mainPolicies = this.mainPolicies.get(permission.roleName) || [];
+            this.mainPolicies.set(permission.roleName, [
+                ...mainPolicies,
+                cedarPolicies.mainPolicy,
+            ]);
+            if (cedarPolicies.fieldPolicy) {
+                const fieldPolicies = this.fieldsPolicies.get(permission.roleName) || [];
+                this.fieldsPolicies.set(permission.roleName, [
+                    ...fieldPolicies,
+                    cedarPolicies.fieldPolicy,
+                ]);
+            }
+            if (cedarPolicies.validationPolicy) {
+                const validationPolicies = this.validationPolicies.get(permission.roleName) || [];
+                this.validationPolicies.set(permission.roleName, [
+                    ...validationPolicies,
+                    cedarPolicies.validationPolicy,
+                ]);
+            }
+        }
+        const policyKeys = ['mainPolicies', 'fieldsPolicies', 'validationPolicies'];
+        for (const pKey of policyKeys) {
+            this.refactoPolicies(pKey);
+            this.sortPolicies(pKey);
+        }
+    }
+    async writePoliciesToFile(roleName, fileTitle, policies) {
+        await (0, promises_1.mkdir)(`${this.permissionPath}/${roleName}`, { recursive: true });
+        const policiesText = policies.map(cedar_format_1.policyToCedarText).join('\n\n') + '\n';
+        // Our own condition layout must still be valid Cedar.
+        const parsed = cedar.policySetTextToParts(policiesText);
+        if (parsed.type === 'failure') {
+            logger_1.logger.error({ policiesText }, 'generated policies are not valid Cedar');
+            throw new Error(parsed.errors);
+        }
+        await (0, promises_1.writeFile)(`${this.permissionPath}/${roleName}/${fileTitle}`, policiesText);
+    }
+    async writePolicies(policyKey, fileName) {
+        for (const [group, policies] of this[policyKey]) {
+            await this.writePoliciesToFile(group, fileName, policies);
+        }
+    }
+    async readCsvAndWriteAllFiles() {
+        logger_1.logger.info('read permission file');
+        await this.readPermissionFile();
+        logger_1.logger.info(`found ${this.d9Permissions.length} permissions`);
+        logger_1.logger.info('read role file');
+        await this.readRoleFile();
+        logger_1.logger.info('roles imported');
+        logger_1.logger.info('grouping and sorting permissions');
+        await this.translateAndSortPermission();
+        logger_1.logger.info(`having ${this.mainPolicies.size} main policies and ${this.fieldsPolicies.size} fields policies`);
+        logger_1.logger.info('writing cedar policies files');
+        await this.writePolicies('mainPolicies', 'authorize.cedar');
+        await this.writePolicies('fieldsPolicies', 'check-fields.cedar');
+        await this.writePolicies('validationPolicies', 'validate.cedar');
+        logger_1.logger.info('files wroten');
+    }
+}
+exports.CedarManager = CedarManager;
+/**
+ * CLI action: regenerate the Cedar policy folders from directus_permissions.csv.
+ * The folder is wiped first, reproducing what `formatePermission` does in app-api2,
+ * so a role removed from the CSV leaves no orphan files.
+ */
+async function d9ToCedar(options) {
+    const manager = new CedarManager(options);
+    await (0, promises_1.rm)(manager.permissionPath, { recursive: true, force: true });
+    await manager.readCsvAndWriteAllFiles();
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/cli/commands/cedar/roles-table.d.ts

@@ -0,0 +1,14 @@
+interface Role {
+    id: string;
+    name: string;
+}
+/** Lookup over `directus_roles.csv`, shared by the d9<->cedar managers. */
+export declare class RolesTable {
+    static load(sqlPath: string): Promise<RolesTable>;
+    byId: Map<string, Role>;
+    byName: Map<string, Role>;
+    getNameFromId(id: string): string | undefined;
+    /** Role UUID for a role name; `''` for the implicit `Public` role. */
+    getIdFromName(roleName: string): string | undefined;
+}
+export {};

package/lib/cli/commands/cedar/roles-table.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RolesTable = void 0;
+const utils_1 = require("../save/utils");
+/** Lookup over `directus_roles.csv`, shared by the d9<->cedar managers. */
+class RolesTable {
+    constructor() {
+        this.byId = new Map();
+        this.byName = new Map();
+    }
+    static async load(sqlPath) {
+        const table = new RolesTable();
+        const roles = (await (0, utils_1.readCsvFile)(`${sqlPath}/directus_roles.csv`));
+        for (const role of roles) {
+            table.byId.set(role.id, role);
+            table.byName.set(role.name, role);
+        }
+        return table;
+    }
+    getNameFromId(id) {
+        return this.byId.get(id)?.name;
+    }
+    /** Role UUID for a role name; `''` for the implicit `Public` role. */
+    getIdFromName(roleName) {
+        return roleName === 'Public' ? '' : this.byName.get(roleName)?.id;
+    }
+}
+exports.RolesTable = RolesTable;
+//# sourceMappingURL=data:application/json;base64,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