@zenstackhq/runtime 1.0.0-beta.20 → 1.0.0-beta.21

package/constants.d.ts

@@ -2,18 +2,6 @@
  * Default length of password hash salt (used by bcryptjs to hash password)
  */
 export declare const DEFAULT_PASSWORD_SALT_LENGTH = 12;
-/**
- * Auxiliary database field for supporting policy check for nested writes
- */
-export declare const TRANSACTION_FIELD_NAME = "zenstack_transaction";
-/**
- * Auxiliary database field for building up policy check queries
- */
-export declare const GUARD_FIELD_NAME = "zenstack_guard";
-/**
- * All Auxiliary fields.
- */
-export declare const AUXILIARY_FIELDS: string[];
 /**
  * Reasons for a CRUD operation to fail
  */

package/constants.js

@@ -1,22 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.HAS_FIELD_LEVEL_POLICY_FLAG = exports.FIELD_LEVEL_UPDATE_GUARD_PREFIX = exports.FIELD_LEVEL_READ_CHECKER_SELECTOR = exports.FIELD_LEVEL_READ_CHECKER_PREFIX = exports.PRE_UPDATE_VALUE_SELECTOR = exports.PRISMA_MINIMUM_VERSION = exports.PRISMA_PROXY_ENHANCER = exports.PRISMA_TX_FLAG = exports.PrismaErrorCode = exports.CrudFailureReason = exports.AUXILIARY_FIELDS = exports.GUARD_FIELD_NAME = exports.TRANSACTION_FIELD_NAME = exports.DEFAULT_PASSWORD_SALT_LENGTH = void 0;
+exports.HAS_FIELD_LEVEL_POLICY_FLAG = exports.FIELD_LEVEL_UPDATE_GUARD_PREFIX = exports.FIELD_LEVEL_READ_CHECKER_SELECTOR = exports.FIELD_LEVEL_READ_CHECKER_PREFIX = exports.PRE_UPDATE_VALUE_SELECTOR = exports.PRISMA_MINIMUM_VERSION = exports.PRISMA_PROXY_ENHANCER = exports.PRISMA_TX_FLAG = exports.PrismaErrorCode = exports.CrudFailureReason = exports.DEFAULT_PASSWORD_SALT_LENGTH = void 0;
 /**
  * Default length of password hash salt (used by bcryptjs to hash password)
  */
 exports.DEFAULT_PASSWORD_SALT_LENGTH = 12;
-/**
- * Auxiliary database field for supporting policy check for nested writes
- */
-exports.TRANSACTION_FIELD_NAME = 'zenstack_transaction';
-/**
- * Auxiliary database field for building up policy check queries
- */
-exports.GUARD_FIELD_NAME = 'zenstack_guard';
-/**
- * All Auxiliary fields.
- */
-exports.AUXILIARY_FIELDS = [exports.TRANSACTION_FIELD_NAME, exports.GUARD_FIELD_NAME];
 /**
  * Reasons for a CRUD operation to fail
  */

package/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACU,QAAA,4BAA4B,GAAG,EAAE,CAAC;AAE/C;;GAEG;AACU,QAAA,sBAAsB,GAAG,sBAAsB,CAAC;AAE7D;;GAEG;AACU,QAAA,gBAAgB,GAAG,gBAAgB,CAAC;AAEjD;;GAEG;AACU,QAAA,gBAAgB,GAAG,CAAC,8BAAsB,EAAE,wBAAgB,CAAC,CAAC;AAE3E;;GAEG;AACH,IAAY,iBAUX;AAVD,WAAY,iBAAiB;IACzB;;OAEG;IACH,gEAA2C,CAAA;IAE3C;;OAEG;IACH,4EAAuD,CAAA;AAC3D,CAAC,EAVW,iBAAiB,GAAjB,yBAAiB,KAAjB,yBAAiB,QAU5B;AAED;;GAEG;AACH,IAAY,eAoBX;AApBD,WAAY,eAAe;IACvB;;OAEG;IACH,qDAAkC,CAAA;IAElC;;OAEG;IACH,+CAA4B,CAAA;IAE5B;;OAEG;IACH,gEAA6C,CAAA;IAE7C;;OAEG;IACH,uDAAoC,CAAA;AACxC,CAAC,EApBW,eAAe,GAAf,uBAAe,KAAf,uBAAe,QAoB1B;AAED;;GAEG;AACU,QAAA,cAAc,GAAG,gBAAgB,CAAC;AAE/C;;GAEG;AACU,QAAA,qBAAqB,GAAG,sBAAsB,CAAC;AAE5D;;GAEG;AACU,QAAA,sBAAsB,GAAG,OAAO,CAAC;AAE9C;;GAEG;AACU,QAAA,yBAAyB,GAAG,gBAAgB,CAAC;AAE1D;;GAEG;AACU,QAAA,+BAA+B,GAAG,iBAAiB,CAAC;AAEjE;;GAEG;AACU,QAAA,iCAAiC,GAAG,iBAAiB,CAAC;AAEnE;;GAEG;AACU,QAAA,+BAA+B,GAAG,mBAAmB,CAAC;AAEnE;;GAEG;AACU,QAAA,2BAA2B,GAAG,qBAAqB,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACU,QAAA,4BAA4B,GAAG,EAAE,CAAC;AAE/C;;GAEG;AACH,IAAY,iBAUX;AAVD,WAAY,iBAAiB;IACzB;;OAEG;IACH,gEAA2C,CAAA;IAE3C;;OAEG;IACH,4EAAuD,CAAA;AAC3D,CAAC,EAVW,iBAAiB,GAAjB,yBAAiB,KAAjB,yBAAiB,QAU5B;AAED;;GAEG;AACH,IAAY,eAoBX;AApBD,WAAY,eAAe;IACvB;;OAEG;IACH,qDAAkC,CAAA;IAElC;;OAEG;IACH,+CAA4B,CAAA;IAE5B;;OAEG;IACH,gEAA6C,CAAA;IAE7C;;OAEG;IACH,uDAAoC,CAAA;AACxC,CAAC,EApBW,eAAe,GAAf,uBAAe,KAAf,uBAAe,QAoB1B;AAED;;GAEG;AACU,QAAA,cAAc,GAAG,gBAAgB,CAAC;AAE/C;;GAEG;AACU,QAAA,qBAAqB,GAAG,sBAAsB,CAAC;AAE5D;;GAEG;AACU,QAAA,sBAAsB,GAAG,OAAO,CAAC;AAE9C;;GAEG;AACU,QAAA,yBAAyB,GAAG,gBAAgB,CAAC;AAE1D;;GAEG;AACU,QAAA,+BAA+B,GAAG,iBAAiB,CAAC;AAEjE;;GAEG;AACU,QAAA,iCAAiC,GAAG,iBAAiB,CAAC;AAEnE;;GAEG;AACU,QAAA,+BAA+B,GAAG,mBAAmB,CAAC;AAEnE;;GAEG;AACU,QAAA,2BAA2B,GAAG,qBAAqB,CAAC"}

package/enhancements/policy/handler.d.ts

@@ -9,18 +9,22 @@ export declare class PolicyProxyHandler<DbClient extends DbClientContract> imple
     private readonly policy;
     private readonly modelMeta;
     private readonly zodSchemas;
-    private readonly model;
     private readonly user?;
     private readonly logPrismaQuery?;
     private readonly logger;
     private readonly utils;
+    private readonly model;
     constructor(prisma: DbClient, policy: PolicyDef, modelMeta: ModelMeta, zodSchemas: ZodSchemas | undefined, model: string, user?: AuthUser | undefined, logPrismaQuery?: boolean | undefined);
     private get modelClient();
     findUnique(args: any): Promise<unknown>;
     findUniqueOrThrow(args: any): Promise<unknown>;
-    findFirst(args: any): Promise<unknown>;
+    findFirst(args?: any): Promise<unknown>;
     findFirstOrThrow(args: any): Promise<unknown>;
-    findMany(args: any): Promise<unknown[]>;
+    findMany(args?: any): Promise<unknown[]>;
+    private findWithFluentCallStubs;
+    private doFind;
+    private fluentCall;
+    private addFluentFunctions;
     create(args: any): Promise<any>;
     private doCreate;
     private hasNestedCreateOrConnect;
@@ -38,11 +42,13 @@ export declare class PolicyProxyHandler<DbClient extends DbClientContract> imple
     deleteMany(args: any): Promise<{
         count: number;
     }>;
-    aggregate(args: any): Promise<unknown>;
-    groupBy(args: any): Promise<unknown>;
-    count(args: any): Promise<unknown>;
-    subscribe(args: any): Promise<unknown>;
+    aggregate(args: any): Promise<any>;
+    groupBy(args: any): Promise<any>;
+    count(args: any): Promise<any>;
+    subscribe(args: any): Promise<any>;
     private get shouldLogQuery();
     private transaction;
     private runPostWriteChecks;
+    private makeHandler;
+    private requireBackLink;
 }

package/enhancements/policy/handler.js

@@ -22,6 +22,7 @@ var __rest = (this && this.__rest) || function (s, e) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PolicyProxyHandler = void 0;
+const lower_case_first_1 = require("lower-case-first");
 const upper_case_first_1 = require("upper-case-first");
 const zod_validation_error_1 = require("zod-validation-error");
 const constants_1 = require("../../constants");
@@ -31,6 +32,7 @@ const nested_write_vistor_1 = require("../nested-write-vistor");
 const utils_1 = require("../utils");
 const logger_1 = require("./logger");
 const policy_utils_1 = require("./policy-utils");
+const promise_1 = require("./promise");
 /**
  * Prisma proxy handler for injecting access policy check.
  */
@@ -40,11 +42,11 @@ class PolicyProxyHandler {
         this.policy = policy;
         this.modelMeta = modelMeta;
         this.zodSchemas = zodSchemas;
-        this.model = model;
         this.user = user;
         this.logPrismaQuery = logPrismaQuery;
         this.logger = new logger_1.Logger(prisma);
         this.utils = new policy_utils_1.PolicyUtil(this.prisma, this.modelMeta, this.policy, this.zodSchemas, this.user, this.shouldLogQuery);
+        this.model = (0, lower_case_first_1.lowerCaseFirst)(model);
     }
     get modelClient() {
         return this.prisma[this.model];
@@ -52,96 +54,111 @@ class PolicyProxyHandler {
     //#region Find
     // find operations behaves as if the entities that don't match access policies don't exist
     findUnique(args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (!args) {
-                throw (0, utils_1.prismaClientValidationError)(this.prisma, 'query argument is required');
-            }
-            if (!args.where) {
-                throw (0, utils_1.prismaClientValidationError)(this.prisma, 'where field is required in query argument');
-            }
-            const origArgs = args;
-            args = this.utils.clone(args);
-            if (!(yield this.utils.injectForRead(this.prisma, this.model, args))) {
-                return null;
-            }
-            this.utils.injectReadCheckSelect(this.model, args);
-            if (this.shouldLogQuery) {
-                this.logger.info(`[policy] \`findUnique\` ${this.model}:\n${(0, utils_1.formatObject)(args)}`);
-            }
-            const result = yield this.modelClient.findUnique(args);
-            this.utils.postProcessForRead(result, this.model, origArgs);
-            return result;
-        });
+        if (!args) {
+            throw (0, utils_1.prismaClientValidationError)(this.prisma, 'query argument is required');
+        }
+        if (!args.where) {
+            throw (0, utils_1.prismaClientValidationError)(this.prisma, 'where field is required in query argument');
+        }
+        return this.findWithFluentCallStubs(args, 'findUnique', false, () => null);
     }
     findUniqueOrThrow(args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (!args) {
-                throw (0, utils_1.prismaClientValidationError)(this.prisma, 'query argument is required');
-            }
-            if (!args.where) {
-                throw (0, utils_1.prismaClientValidationError)(this.prisma, 'where field is required in query argument');
-            }
-            const origArgs = args;
-            args = this.utils.clone(args);
-            if (!(yield this.utils.injectForRead(this.prisma, this.model, args))) {
-                throw this.utils.notFound(this.model);
-            }
-            this.utils.injectReadCheckSelect(this.model, args);
-            if (this.shouldLogQuery) {
-                this.logger.info(`[policy] \`findUniqueOrThrow\` ${this.model}:\n${(0, utils_1.formatObject)(args)}`);
-            }
-            const result = yield this.modelClient.findUniqueOrThrow(args);
-            this.utils.postProcessForRead(result, this.model, origArgs);
-            return result;
+        if (!args) {
+            throw (0, utils_1.prismaClientValidationError)(this.prisma, 'query argument is required');
+        }
+        if (!args.where) {
+            throw (0, utils_1.prismaClientValidationError)(this.prisma, 'where field is required in query argument');
+        }
+        return this.findWithFluentCallStubs(args, 'findUniqueOrThrow', true, () => {
+            throw this.utils.notFound(this.model);
         });
     }
     findFirst(args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const origArgs = args;
-            args = args ? this.utils.clone(args) : {};
-            if (!(yield this.utils.injectForRead(this.prisma, this.model, args))) {
-                return null;
-            }
-            this.utils.injectReadCheckSelect(this.model, args);
-            if (this.shouldLogQuery) {
-                this.logger.info(`[policy] \`findFirst\` ${this.model}:\n${(0, utils_1.formatObject)(args)}`);
-            }
-            const result = yield this.modelClient.findFirst(args);
-            this.utils.postProcessForRead(result, this.model, origArgs);
-            return result;
-        });
+        return this.findWithFluentCallStubs(args, 'findFirst', false, () => null);
     }
     findFirstOrThrow(args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const origArgs = args;
-            args = args ? this.utils.clone(args) : {};
-            if (!(yield this.utils.injectForRead(this.prisma, this.model, args))) {
-                throw this.utils.notFound(this.model);
-            }
-            this.utils.injectReadCheckSelect(this.model, args);
-            if (this.shouldLogQuery) {
-                this.logger.info(`[policy] \`findFirstOrThrow\` ${this.model}:\n${(0, utils_1.formatObject)(args)}`);
-            }
-            const result = yield this.modelClient.findFirstOrThrow(args);
-            this.utils.postProcessForRead(result, this.model, origArgs);
-            return result;
+        return this.findWithFluentCallStubs(args, 'findFirstOrThrow', true, () => {
+            throw this.utils.notFound(this.model);
         });
     }
     findMany(args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const origArgs = args;
-            args = args ? this.utils.clone(args) : {};
-            if (!(yield this.utils.injectForRead(this.prisma, this.model, args))) {
-                return [];
+        return (0, promise_1.createDeferredPromise)(() => this.doFind(args, 'findMany', () => []));
+    }
+    // returns a promise for the given find operation, together with function stubs for fluent API calls
+    findWithFluentCallStubs(args, actionName, resolveRoot, handleRejection) {
+        // create a deferred promise so it's only evaluated when awaited or .then() is called
+        const result = (0, promise_1.createDeferredPromise)(() => this.doFind(args, actionName, handleRejection));
+        this.addFluentFunctions(result, this.model, args === null || args === void 0 ? void 0 : args.where, resolveRoot ? result : undefined);
+        return result;
+    }
+    doFind(args, actionName, handleRejection) {
+        const origArgs = args;
+        const _args = this.utils.clone(args);
+        if (!this.utils.injectForRead(this.prisma, this.model, _args)) {
+            return handleRejection();
+        }
+        this.utils.injectReadCheckSelect(this.model, _args);
+        if (this.shouldLogQuery) {
+            this.logger.info(`[policy] \`${actionName}\` ${this.model}:\n${(0, utils_1.formatObject)(_args)}`);
+        }
+        return new Promise((resolve, reject) => {
+            this.modelClient[actionName](_args).then((value) => {
+                this.utils.postProcessForRead(value, this.model, origArgs);
+                resolve(value);
+            }, (err) => reject(err));
+        });
+    }
+    // returns a fluent API call function
+    fluentCall(filter, fieldInfo, rootPromise) {
+        return (args) => {
+            args = this.utils.clone(args);
+            // combine the parent filter with the current one
+            const backLinkField = this.requireBackLink(fieldInfo);
+            const condition = backLinkField.isArray
+                ? { [backLinkField.name]: { some: filter } }
+                : { [backLinkField.name]: { is: filter } };
+            args.where = this.utils.and(args.where, condition);
+            const promise = (0, promise_1.createDeferredPromise)(() => {
+                // Promise for fetching
+                const fetchFluent = (resolve, reject) => {
+                    const handler = this.makeHandler(fieldInfo.type);
+                    if (fieldInfo.isArray) {
+                        // fluent call stops here
+                        handler.findMany(args).then((value) => resolve(value), (err) => reject(err));
+                    }
+                    else {
+                        handler.findFirst(args).then((value) => resolve(value), (err) => reject(err));
+                    }
+                };
+                return new Promise((resolve, reject) => {
+                    if (rootPromise) {
+                        // if a root promise exists, resolve it before fluent API call,
+                        // so that fluent calls start with `findUniqueOrThrow` and `findFirstOrThrow`
+                        // can throw error properly if the root promise is rejected
+                        rootPromise.then(() => fetchFluent(resolve, reject), (err) => reject(err));
+                    }
+                    else {
+                        fetchFluent(resolve, reject);
+                    }
+                });
+            });
+            if (!fieldInfo.isArray) {
+                // prepare for a chained fluent API call
+                this.addFluentFunctions(promise, fieldInfo.type, args.where, rootPromise);
             }
-            this.utils.injectReadCheckSelect(this.model, args);
-            if (this.shouldLogQuery) {
-                this.logger.info(`[policy] \`findMany\` ${this.model}:\n${(0, utils_1.formatObject)(args)}`);
+            return promise;
+        };
+    }
+    // add fluent API functions to the given promise
+    addFluentFunctions(promise, model, filter, rootPromise) {
+        const fields = this.utils.getModelFields(model);
+        if (fields) {
+            for (const [field, fieldInfo] of Object.entries(fields)) {
+                if (fieldInfo.isDataModel) {
+                    promise[field] = this.fluentCall(filter, fieldInfo, rootPromise);
+                }
             }
-            const result = yield this.modelClient.findMany(args);
-            this.utils.postProcessForRead(result, this.model, origArgs);
-            return result;
-        });
+        }
     }
     //#endregion
     //#region Create
@@ -153,7 +170,7 @@ class PolicyProxyHandler {
             if (!args.data) {
                 throw (0, utils_1.prismaClientValidationError)(this.prisma, 'data field is required in query argument');
             }
-            yield this.utils.tryReject(this.prisma, this.model, 'create');
+            this.utils.tryReject(this.prisma, this.model, 'create');
             const origArgs = args;
             args = this.utils.clone(args);
             // static input policy check for top-level create data
@@ -517,7 +534,7 @@ class PolicyProxyHandler {
                 let createData = args;
                 if ((_a = context.field) === null || _a === void 0 ? void 0 : _a.backLink) {
                     // handles the connection to upstream entity
-                    const reversedQuery = yield this.utils.buildReversedQuery(context);
+                    const reversedQuery = this.utils.buildReversedQuery(context);
                     if (reversedQuery[context.field.backLink]) {
                         // the built reverse query contains a condition for the backlink field, build a "connect" with it
                         createData = Object.assign(Object.assign({}, createData), { [context.field.backLink]: {
@@ -537,7 +554,7 @@ class PolicyProxyHandler {
                 var _b;
                 if ((_b = context.field) === null || _b === void 0 ? void 0 : _b.backLink) {
                     // handles the connection to upstream entity
-                    const reversedQuery = yield this.utils.buildReversedQuery(context);
+                    const reversedQuery = this.utils.buildReversedQuery(context);
                     for (const item of (0, utils_1.enumerate)(args.data)) {
                         Object.assign(item, reversedQuery);
                     }
@@ -563,7 +580,7 @@ class PolicyProxyHandler {
                 update: (model, args, context) => __awaiter(this, void 0, void 0, function* () {
                     var _d;
                     // build a unique query including upstream conditions
-                    const uniqueFilter = yield this.utils.buildReversedQuery(context);
+                    const uniqueFilter = this.utils.buildReversedQuery(context);
                     // handle not-found
                     const existing = yield this.utils.checkExistence(db, model, uniqueFilter, true);
                     // check if the update actually writes to this model
@@ -606,7 +623,7 @@ class PolicyProxyHandler {
                 }),
                 updateMany: (model, args, context) => __awaiter(this, void 0, void 0, function* () {
                     // injects auth guard into where clause
-                    yield this.utils.injectAuthGuard(db, args, model, 'update');
+                    this.utils.injectAuthGuard(db, args, model, 'update');
                     // prepare for post-update check
                     if (this.utils.hasAuthGuard(model, 'postUpdate') || this.utils.getZodSchema(model)) {
                         let select = this.utils.makeIdSelection(model);
@@ -614,9 +631,9 @@ class PolicyProxyHandler {
                         if (preValueSelect) {
                             select = Object.assign(Object.assign({}, select), preValueSelect);
                         }
-                        const reversedQuery = yield this.utils.buildReversedQuery(context);
+                        const reversedQuery = this.utils.buildReversedQuery(context);
                         const currentSetQuery = { select, where: reversedQuery };
-                        yield this.utils.injectAuthGuard(db, currentSetQuery, model, 'read');
+                        this.utils.injectAuthGuard(db, currentSetQuery, model, 'read');
                         if (this.shouldLogQuery) {
                             this.logger.info(`[policy] \`findMany\` ${model}:\n${(0, utils_1.formatObject)(currentSetQuery)}`);
                         }
@@ -647,7 +664,7 @@ class PolicyProxyHandler {
                 }),
                 upsert: (model, args, context) => __awaiter(this, void 0, void 0, function* () {
                     // build a unique query including upstream conditions
-                    const uniqueFilter = yield this.utils.buildReversedQuery(context);
+                    const uniqueFilter = this.utils.buildReversedQuery(context);
                     // branch based on if the update target exists
                     const existing = yield this.utils.checkExistence(db, model, uniqueFilter);
                     if (existing) {
@@ -688,7 +705,7 @@ class PolicyProxyHandler {
                 disconnect: (model, args, context) => __awaiter(this, void 0, void 0, function* () { return _connectDisconnect(model, args, context); }),
                 set: (model, args, context) => __awaiter(this, void 0, void 0, function* () {
                     // find the set of items to be replaced
-                    const reversedQuery = yield this.utils.buildReversedQuery(context);
+                    const reversedQuery = this.utils.buildReversedQuery(context);
                     const findCurrSetArgs = {
                         select: this.utils.makeIdSelection(model),
                         where: reversedQuery,
@@ -704,7 +721,7 @@ class PolicyProxyHandler {
                 }),
                 delete: (model, args, context) => __awaiter(this, void 0, void 0, function* () {
                     // build a unique query including upstream conditions
-                    const uniqueFilter = yield this.utils.buildReversedQuery(context);
+                    const uniqueFilter = this.utils.buildReversedQuery(context);
                     // handle not-found
                     yield this.utils.checkExistence(db, model, uniqueFilter, true);
                     // check delete guard
@@ -737,9 +754,9 @@ class PolicyProxyHandler {
             if (!args.data) {
                 throw (0, utils_1.prismaClientValidationError)(this.prisma, 'data field is required in query argument');
             }
-            yield this.utils.tryReject(this.prisma, this.model, 'update');
+            this.utils.tryReject(this.prisma, this.model, 'update');
             args = this.utils.clone(args);
-            yield this.utils.injectAuthGuard(this.prisma, args, this.model, 'update');
+            this.utils.injectAuthGuard(this.prisma, args, this.model, 'update');
             if (this.utils.hasAuthGuard(this.model, 'postUpdate') || this.utils.getZodSchema(this.model)) {
                 // use a transaction to do post-update checks
                 const postWriteChecks = [];
@@ -751,7 +768,7 @@ class PolicyProxyHandler {
                         select = Object.assign(Object.assign({}, select), preValueSelect);
                     }
                     const currentSetQuery = { select, where: args.where };
-                    yield this.utils.injectAuthGuard(tx, currentSetQuery, this.model, 'read');
+                    this.utils.injectAuthGuard(tx, currentSetQuery, this.model, 'read');
                     if (this.shouldLogQuery) {
                         this.logger.info(`[policy] \`findMany\` ${this.model}: ${(0, utils_1.formatObject)(currentSetQuery)}`);
                     }
@@ -792,8 +809,8 @@ class PolicyProxyHandler {
             if (!args.update) {
                 throw (0, utils_1.prismaClientValidationError)(this.prisma, 'update field is required in query argument');
             }
-            yield this.utils.tryReject(this.prisma, this.model, 'create');
-            yield this.utils.tryReject(this.prisma, this.model, 'update');
+            this.utils.tryReject(this.prisma, this.model, 'create');
+            this.utils.tryReject(this.prisma, this.model, 'update');
             args = this.utils.clone(args);
             // We can call the native "upsert" because we can't tell if an entity was created or updated
             // for doing post-write check accordingly. Instead, decompose it into create or update.
@@ -833,7 +850,7 @@ class PolicyProxyHandler {
             if (!args.where) {
                 throw (0, utils_1.prismaClientValidationError)(this.prisma, 'where field is required in query argument');
             }
-            yield this.utils.tryReject(this.prisma, this.model, 'delete');
+            this.utils.tryReject(this.prisma, this.model, 'delete');
             const { result, error } = yield this.transaction((tx) => __awaiter(this, void 0, void 0, function* () {
                 // do a read-back before delete
                 const r = yield this.utils.readBack(tx, this.model, 'delete', args, args.where);
@@ -860,10 +877,10 @@ class PolicyProxyHandler {
     }
     deleteMany(args) {
         return __awaiter(this, void 0, void 0, function* () {
-            yield this.utils.tryReject(this.prisma, this.model, 'delete');
+            this.utils.tryReject(this.prisma, this.model, 'delete');
             // inject policy conditions
             args = args !== null && args !== void 0 ? args : {};
-            yield this.utils.injectAuthGuard(this.prisma, args, this.model, 'delete');
+            this.utils.injectAuthGuard(this.prisma, args, this.model, 'delete');
             // conduct the deletion
             if (this.shouldLogQuery) {
                 this.logger.info(`[policy] \`deleteMany\` ${this.model}:\n${(0, utils_1.formatObject)(args)}`);
@@ -880,7 +897,7 @@ class PolicyProxyHandler {
             }
             args = this.utils.clone(args);
             // inject policy conditions
-            yield this.utils.injectAuthGuard(this.prisma, args, this.model, 'read');
+            this.utils.injectAuthGuard(this.prisma, args, this.model, 'read');
             if (this.shouldLogQuery) {
                 this.logger.info(`[policy] \`aggregate\` ${this.model}:\n${(0, utils_1.formatObject)(args)}`);
             }
@@ -894,7 +911,7 @@ class PolicyProxyHandler {
             }
             args = this.utils.clone(args);
             // inject policy conditions
-            yield this.utils.injectAuthGuard(this.prisma, args, this.model, 'read');
+            this.utils.injectAuthGuard(this.prisma, args, this.model, 'read');
             if (this.shouldLogQuery) {
                 this.logger.info(`[policy] \`groupBy\` ${this.model}:\n${(0, utils_1.formatObject)(args)}`);
             }
@@ -905,7 +922,7 @@ class PolicyProxyHandler {
         return __awaiter(this, void 0, void 0, function* () {
             // inject policy conditions
             args = args ? this.utils.clone(args) : {};
-            yield this.utils.injectAuthGuard(this.prisma, args, this.model, 'read');
+            this.utils.injectAuthGuard(this.prisma, args, this.model, 'read');
             if (this.shouldLogQuery) {
                 this.logger.info(`[policy] \`count\` ${this.model}:\n${(0, utils_1.formatObject)(args)}`);
             }
@@ -975,6 +992,16 @@ class PolicyProxyHandler {
             yield Promise.all(postWriteChecks.map(({ model, operation, uniqueFilter, preValue }) => __awaiter(this, void 0, void 0, function* () { return this.utils.checkPolicyForUnique(model, uniqueFilter, operation, db, undefined, preValue); })));
         });
     }
+    makeHandler(model) {
+        return new PolicyProxyHandler(this.prisma, this.policy, this.modelMeta, this.zodSchemas, model, this.user, this.logPrismaQuery);
+    }
+    requireBackLink(fieldInfo) {
+        const backLinkField = fieldInfo.backLink && (0, model_meta_1.resolveField)(this.modelMeta, fieldInfo.type, fieldInfo.backLink);
+        if (!backLinkField) {
+            throw new Error('Missing back link for field: ' + fieldInfo.name);
+        }
+        return backLinkField;
+    }
 }
 exports.PolicyProxyHandler = PolicyProxyHandler;
 //# sourceMappingURL=handler.js.map