@zenstackhq/runtime 2.16.0 → 3.0.0-alpha.0

package/enhancements/node/password.d.ts

@@ -1,7 +0,0 @@
-import { InternalEnhancementOptions } from './create-enhancement';
-/**
- * Gets an enhanced Prisma client that supports `@password` attribute.
- *
- * @private
- */
-export declare function withPassword<DbClient extends object = any>(prisma: DbClient, options: InternalEnhancementOptions): DbClient;

package/enhancements/node/password.js

@@ -1,64 +0,0 @@
-"use strict";
-/* eslint-disable @typescript-eslint/no-explicit-any */
-/* eslint-disable @typescript-eslint/no-unused-vars */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.withPassword = withPassword;
-const constants_1 = require("../../constants");
-const cross_1 = require("../../cross");
-const proxy_1 = require("./proxy");
-/**
- * Gets an enhanced Prisma client that supports `@password` attribute.
- *
- * @private
- */
-function withPassword(prisma, options) {
-    return (0, proxy_1.makeProxy)(prisma, options.modelMeta, (_prisma, model) => new PasswordHandler(_prisma, model, options), 'password');
-}
-// eslint-disable-next-line @typescript-eslint/no-var-requires
-const hashFunc = typeof EdgeRuntime === 'string' ? require('bcryptjs').hashSync : require('bcryptjs').hash;
-class PasswordHandler extends proxy_1.DefaultPrismaProxyHandler {
-    constructor(prisma, model, options) {
-        super(prisma, model, options);
-    }
-    // base override
-    preprocessArgs(action, args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (args && constants_1.ACTIONS_WITH_WRITE_PAYLOAD.includes(action)) {
-                yield this.preprocessWritePayload(this.model, action, args);
-            }
-            return args;
-        });
-    }
-    preprocessWritePayload(model, action, args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const visitor = new cross_1.NestedWriteVisitor(this.options.modelMeta, {
-                field: (field, _action, data, context) => __awaiter(this, void 0, void 0, function* () {
-                    var _a, _b, _c;
-                    const pwdAttr = (_a = field.attributes) === null || _a === void 0 ? void 0 : _a.find((attr) => attr.name === '@password');
-                    if (pwdAttr && field.type === 'String') {
-                        // hash password value
-                        let salt = (_b = pwdAttr.args.find((arg) => arg.name === 'salt')) === null || _b === void 0 ? void 0 : _b.value;
-                        if (!salt) {
-                            salt = (_c = pwdAttr.args.find((arg) => arg.name === 'saltLength')) === null || _c === void 0 ? void 0 : _c.value;
-                        }
-                        if (!salt) {
-                            salt = constants_1.DEFAULT_PASSWORD_SALT_LENGTH;
-                        }
-                        context.parent[field.name] = yield hashFunc(data, salt);
-                    }
-                }),
-            });
-            yield visitor.visit(model, action, args);
-        });
-    }
-}
-//# sourceMappingURL=password.js.map

package/enhancements/node/password.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../src/enhancements/node/password.ts"],"names":[],"mappings":";AAAA,uDAAuD;AACvD,sDAAsD;;;;;;;;;;;AAatD,oCAUC;AArBD,+CAA2F;AAC3F,uCAA6E;AAG7E,mCAAmF;AAEnF;;;;GAIG;AACH,SAAgB,YAAY,CACxB,MAAgB,EAChB,OAAmC;IAEnC,OAAO,IAAA,iBAAS,EACZ,MAAM,EACN,OAAO,CAAC,SAAS,EACjB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,OAA2B,EAAE,KAAK,EAAE,OAAO,CAAC,EACpF,UAAU,CACb,CAAC;AACN,CAAC;AAOD,8DAA8D;AAC9D,MAAM,QAAQ,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;AAE3G,MAAM,eAAgB,SAAQ,iCAAyB;IACnD,YAAY,MAAwB,EAAE,KAAa,EAAE,OAAmC;QACpF,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,gBAAgB;IACA,cAAc,CAAC,MAA0B,EAAE,IAAS;;YAChE,IAAI,IAAI,IAAI,sCAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,MAA+B,EAAE,IAAI,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;KAAA;IAEa,sBAAsB,CAAC,KAAa,EAAE,MAA6B,EAAE,IAAS;;YACxF,MAAM,OAAO,GAAG,IAAI,0BAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;gBAC3D,KAAK,EAAE,CAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;;oBAC3C,MAAM,OAAO,GAAG,MAAA,KAAK,CAAC,UAAU,0CAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;oBAC5E,IAAI,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACrC,sBAAsB;wBACtB,IAAI,IAAI,GAAgC,MAAA,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,0CACjF,KAAe,CAAC;wBACtB,IAAI,CAAC,IAAI,EAAE,CAAC;4BACR,IAAI,GAAG,MAAA,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,0CAAE,KAAe,CAAC;wBAClF,CAAC;wBACD,IAAI,CAAC,IAAI,EAAE,CAAC;4BACR,IAAI,GAAG,wCAA4B,CAAC;wBACxC,CAAC;wBACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBAC5D,CAAC;gBACL,CAAC,CAAA;aACJ,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;KAAA;CACJ"}

package/enhancements/node/policy/check-utils.d.ts

@@ -1,5 +0,0 @@
-import { ModelMeta } from '..';
-import type { DbClientContract } from '../../../types';
-import { PermissionCheckArgs } from '../types';
-import { PolicyUtil } from './policy-utils';
-export declare function checkPermission(model: string, args: PermissionCheckArgs, modelMeta: ModelMeta, policyUtils: PolicyUtil, prisma: DbClientContract, prismaModule: any): Promise<boolean>;

package/enhancements/node/policy/check-utils.js

@@ -1,87 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.checkPermission = checkPermission;
-const ts_pattern_1 = require("ts-pattern");
-const __1 = require("..");
-const promise_1 = require("../promise");
-const utils_1 = require("../utils");
-const constraint_solver_1 = require("./constraint-solver");
-function checkPermission(model, args, modelMeta, policyUtils, prisma, 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-prismaModule) {
-    return __awaiter(this, void 0, void 0, function* () {
-        return (0, promise_1.createDeferredPromise)(() => doCheckPermission(model, args, modelMeta, policyUtils, prisma, prismaModule));
-    });
-}
-function doCheckPermission(model, args, modelMeta, policyUtils, prisma, 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-prismaModule) {
-    return __awaiter(this, void 0, void 0, function* () {
-        if (!['create', 'read', 'update', 'delete'].includes(args.operation)) {
-            throw (0, utils_1.prismaClientValidationError)(prisma, prismaModule, `Invalid "operation" ${args.operation}`);
-        }
-        let constraint = policyUtils.getCheckerConstraint(model, args.operation);
-        if (typeof constraint === 'boolean') {
-            return constraint;
-        }
-        if (args.where) {
-            // combine runtime filters with generated constraints
-            const extraConstraints = [];
-            for (const [field, value] of Object.entries(args.where)) {
-                if (value === undefined) {
-                    continue;
-                }
-                if (value === null) {
-                    throw (0, utils_1.prismaClientValidationError)(prisma, prismaModule, `Using "null" as filter value is not supported yet`);
-                }
-                const fieldInfo = (0, __1.requireField)(modelMeta, model, field);
-                // relation and array fields are not supported
-                if (fieldInfo.isDataModel || fieldInfo.isArray) {
-                    throw (0, utils_1.prismaClientValidationError)(prisma, prismaModule, `Providing filter for field "${field}" is not supported. Only scalar fields are allowed.`);
-                }
-                // map field type to constraint type
-                const fieldType = (0, ts_pattern_1.match)(fieldInfo.type)
-                    .with(ts_pattern_1.P.union('Int', 'BigInt', 'Float', 'Decimal'), () => 'number')
-                    .with('String', () => 'string')
-                    .with('Boolean', () => 'boolean')
-                    .otherwise(() => {
-                    throw (0, utils_1.prismaClientValidationError)(prisma, prismaModule, `Providing filter for field "${field}" is not supported. Only number, string, and boolean fields are allowed.`);
-                });
-                // check value type
-                const valueType = typeof value;
-                if (valueType !== 'number' && valueType !== 'string' && valueType !== 'boolean') {
-                    throw (0, utils_1.prismaClientValidationError)(prisma, prismaModule, `Invalid value type for field "${field}". Only number, string or boolean is allowed.`);
-                }
-                if (fieldType !== valueType) {
-                    throw (0, utils_1.prismaClientValidationError)(prisma, prismaModule, `Invalid value type for field "${field}". Expected "${fieldType}".`);
-                }
-                // check number validity
-                if (typeof value === 'number' && (!Number.isInteger(value) || value < 0)) {
-                    throw (0, utils_1.prismaClientValidationError)(prisma, prismaModule, `Invalid value for field "${field}". Only non-negative integers are allowed.`);
-                }
-                // build a constraint
-                extraConstraints.push({
-                    kind: 'eq',
-                    left: { kind: 'variable', name: field, type: fieldType },
-                    right: { kind: 'value', value, type: fieldType },
-                });
-            }
-            if (extraConstraints.length > 0) {
-                // combine the constraints
-                constraint = { kind: 'and', children: [constraint, ...extraConstraints] };
-            }
-        }
-        // check satisfiability
-        return new constraint_solver_1.ConstraintSolver().checkSat(constraint);
-    });
-}
-//# sourceMappingURL=check-utils.js.map

package/enhancements/node/policy/check-utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"check-utils.js","sourceRoot":"","sources":["../../../../src/enhancements/node/policy/check-utils.ts"],"names":[],"mappings":";;;;;;;;;;;AASA,0CAUC;AAnBD,2CAAsC;AACtC,0BAA6C;AAE7C,wCAAmD;AAEnD,oCAAuD;AACvD,2DAAuD;AAGvD,SAAsB,eAAe,CACjC,KAAa,EACb,IAAyB,EACzB,SAAoB,EACpB,WAAuB,EACvB,MAAwB;AACxB,8DAA8D;AAC9D,YAAiB;;QAEjB,OAAO,IAAA,+BAAqB,EAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IACrH,CAAC;CAAA;AAED,SAAe,iBAAiB,CAC5B,KAAa,EACb,IAAyB,EACzB,SAAoB,EACpB,WAAuB,EACvB,MAAwB;AACxB,8DAA8D;AAC9D,YAAiB;;QAEjB,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACnE,MAAM,IAAA,mCAA2B,EAAC,MAAM,EAAE,YAAY,EAAE,uBAAuB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACrG,CAAC;QAED,IAAI,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACzE,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,UAAU,CAAC;QACtB,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,qDAAqD;YAErD,MAAM,gBAAgB,GAAkC,EAAE,CAAC;YAC3D,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACtB,SAAS;gBACb,CAAC;gBAED,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACjB,MAAM,IAAA,mCAA2B,EAC7B,MAAM,EACN,YAAY,EACZ,mDAAmD,CACtD,CAAC;gBACN,CAAC;gBAED,MAAM,SAAS,GAAG,IAAA,gBAAY,EAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBAExD,8CAA8C;gBAC9C,IAAI,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;oBAC7C,MAAM,IAAA,mCAA2B,EAC7B,MAAM,EACN,YAAY,EACZ,+BAA+B,KAAK,qDAAqD,CAC5F,CAAC;gBACN,CAAC;gBAED,oCAAoC;gBACpC,MAAM,SAAS,GAAG,IAAA,kBAAK,EAA0C,SAAS,CAAC,IAAI,CAAC;qBAC3E,IAAI,CAAC,cAAC,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC;qBAClE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC;qBAC9B,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC;qBAChC,SAAS,CAAC,GAAG,EAAE;oBACZ,MAAM,IAAA,mCAA2B,EAC7B,MAAM,EACN,YAAY,EACZ,+BAA+B,KAAK,0EAA0E,CACjH,CAAC;gBACN,CAAC,CAAC,CAAC;gBAEP,mBAAmB;gBACnB,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;gBAC/B,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC9E,MAAM,IAAA,mCAA2B,EAC7B,MAAM,EACN,YAAY,EACZ,iCAAiC,KAAK,+CAA+C,CACxF,CAAC;gBACN,CAAC;gBAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC1B,MAAM,IAAA,mCAA2B,EAC7B,MAAM,EACN,YAAY,EACZ,iCAAiC,KAAK,gBAAgB,SAAS,IAAI,CACtE,CAAC;gBACN,CAAC;gBAED,wBAAwB;gBACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;oBACvE,MAAM,IAAA,mCAA2B,EAC7B,MAAM,EACN,YAAY,EACZ,4BAA4B,KAAK,4CAA4C,CAChF,CAAC;gBACN,CAAC;gBAED,qBAAqB;gBACrB,gBAAgB,CAAC,IAAI,CAAC;oBAClB,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE;oBACxD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE;iBACnD,CAAC,CAAC;YACP,CAAC;YAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,0BAA0B;gBAC1B,UAAU,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,GAAG,gBAAgB,CAAC,EAAE,CAAC;YAC9E,CAAC;QACL,CAAC;QAED,uBAAuB;QACvB,OAAO,IAAI,oCAAgB,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;CAAA"}

package/enhancements/node/policy/constraint-solver.d.ts

@@ -1,27 +0,0 @@
-import type { PermissionCheckerConstraint } from '../types';
-/**
- * A boolean constraint solver based on `logic-solver`. Only boolean and integer types are supported.
- */
-export declare class ConstraintSolver {
-    private stringTable;
-    private variables;
-    /**
-     * Check the satisfiability of the given constraint.
-     */
-    checkSat(constraint: PermissionCheckerConstraint): boolean;
-    private buildFormula;
-    private buildLogicalFormula;
-    private buildAndFormula;
-    private buildOrFormula;
-    private buildNotFormula;
-    private isTrue;
-    private isFalse;
-    private buildComparisonFormula;
-    private buildVariableFormula;
-    private buildValueFormula;
-    private booleanVariable;
-    private intVariable;
-    private transformEquality;
-    private transformInequality;
-    private transformComparison;
-}

package/enhancements/node/policy/constraint-solver.js

@@ -1,164 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConstraintSolver = void 0;
-const logic_solver_1 = __importDefault(require("logic-solver"));
-const ts_pattern_1 = require("ts-pattern");
-/**
- * A boolean constraint solver based on `logic-solver`. Only boolean and integer types are supported.
- */
-class ConstraintSolver {
-    constructor() {
-        // a table for internalizing string literals
-        this.stringTable = [];
-        // a map for storing variable names and their corresponding formulas
-        this.variables = new Map();
-    }
-    /**
-     * Check the satisfiability of the given constraint.
-     */
-    checkSat(constraint) {
-        // reset state
-        this.stringTable = [];
-        this.variables = new Map();
-        // convert the constraint to a "logic-solver" formula
-        const formula = this.buildFormula(constraint);
-        // solve the formula
-        const solver = new logic_solver_1.default.Solver();
-        solver.require(formula);
-        // DEBUG:
-        // const solution = solver.solve();
-        // if (solution) {
-        //     console.log('Solution:');
-        //     this.variables.forEach((v, k) => console.log(`\t${k}=${solution?.evaluate(v)}`));
-        // } else {
-        //     console.log('No solution');
-        // }
-        return !!solver.solve();
-    }
-    buildFormula(constraint) {
-        return (0, ts_pattern_1.match)(constraint)
-            .when((c) => c.kind === 'value', (c) => this.buildValueFormula(c))
-            .when((c) => c.kind === 'variable', (c) => this.buildVariableFormula(c))
-            .when((c) => ['eq', 'ne', 'gt', 'gte', 'lt', 'lte'].includes(c.kind), (c) => this.buildComparisonFormula(c))
-            .when((c) => ['and', 'or', 'not'].includes(c.kind), (c) => this.buildLogicalFormula(c))
-            .otherwise(() => {
-            throw new Error(`Unsupported constraint format: ${JSON.stringify(constraint)}`);
-        });
-    }
-    buildLogicalFormula(constraint) {
-        return (0, ts_pattern_1.match)(constraint.kind)
-            .with('and', () => this.buildAndFormula(constraint))
-            .with('or', () => this.buildOrFormula(constraint))
-            .with('not', () => this.buildNotFormula(constraint))
-            .exhaustive();
-    }
-    buildAndFormula(constraint) {
-        if (constraint.children.some((c) => this.isFalse(c))) {
-            // short-circuit
-            return logic_solver_1.default.FALSE;
-        }
-        return logic_solver_1.default.and(...constraint.children.map((c) => this.buildFormula(c)));
-    }
-    buildOrFormula(constraint) {
-        if (constraint.children.some((c) => this.isTrue(c))) {
-            // short-circuit
-            return logic_solver_1.default.TRUE;
-        }
-        return logic_solver_1.default.or(...constraint.children.map((c) => this.buildFormula(c)));
-    }
-    buildNotFormula(constraint) {
-        if (constraint.children.length !== 1) {
-            throw new Error('"not" constraint must have exactly one child');
-        }
-        return logic_solver_1.default.not(this.buildFormula(constraint.children[0]));
-    }
-    isTrue(constraint) {
-        return constraint.kind === 'value' && constraint.value === true;
-    }
-    isFalse(constraint) {
-        return constraint.kind === 'value' && constraint.value === false;
-    }
-    buildComparisonFormula(constraint) {
-        if (constraint.left.kind === 'value' && constraint.right.kind === 'value') {
-            // constant comparison
-            const left = constraint.left;
-            const right = constraint.right;
-            return (0, ts_pattern_1.match)(constraint.kind)
-                .with('eq', () => (left.value === right.value ? logic_solver_1.default.TRUE : logic_solver_1.default.FALSE))
-                .with('ne', () => (left.value !== right.value ? logic_solver_1.default.TRUE : logic_solver_1.default.FALSE))
-                .with('gt', () => (left.value > right.value ? logic_solver_1.default.TRUE : logic_solver_1.default.FALSE))
-                .with('gte', () => (left.value >= right.value ? logic_solver_1.default.TRUE : logic_solver_1.default.FALSE))
-                .with('lt', () => (left.value < right.value ? logic_solver_1.default.TRUE : logic_solver_1.default.FALSE))
-                .with('lte', () => (left.value <= right.value ? logic_solver_1.default.TRUE : logic_solver_1.default.FALSE))
-                .exhaustive();
-        }
-        return (0, ts_pattern_1.match)(constraint.kind)
-            .with('eq', () => this.transformEquality(constraint.left, constraint.right))
-            .with('ne', () => this.transformInequality(constraint.left, constraint.right))
-            .with('gt', () => this.transformComparison(constraint.left, constraint.right, (l, r) => logic_solver_1.default.greaterThan(l, r)))
-            .with('gte', () => this.transformComparison(constraint.left, constraint.right, (l, r) => logic_solver_1.default.greaterThanOrEqual(l, r)))
-            .with('lt', () => this.transformComparison(constraint.left, constraint.right, (l, r) => logic_solver_1.default.lessThan(l, r)))
-            .with('lte', () => this.transformComparison(constraint.left, constraint.right, (l, r) => logic_solver_1.default.lessThanOrEqual(l, r)))
-            .exhaustive();
-    }
-    buildVariableFormula(constraint) {
-        return ((0, ts_pattern_1.match)(constraint.type)
-            .with('boolean', () => this.booleanVariable(constraint.name))
-            .with('number', () => this.intVariable(constraint.name))
-            // strings are internalized and represented by their indices
-            .with('string', () => this.intVariable(constraint.name))
-            .exhaustive());
-    }
-    buildValueFormula(constraint) {
-        return (0, ts_pattern_1.match)(constraint.value)
-            .when((v) => typeof v === 'boolean', (v) => (v === true ? logic_solver_1.default.TRUE : logic_solver_1.default.FALSE))
-            .when((v) => typeof v === 'number', (v) => logic_solver_1.default.constantBits(v))
-            .when((v) => typeof v === 'string', (v) => {
-            // internalize the string and use its index as formula representation
-            const index = this.stringTable.indexOf(v);
-            if (index === -1) {
-                this.stringTable.push(v);
-                return logic_solver_1.default.constantBits(this.stringTable.length - 1);
-            }
-            else {
-                return logic_solver_1.default.constantBits(index);
-            }
-        })
-            .exhaustive();
-    }
-    booleanVariable(name) {
-        this.variables.set(name, name);
-        return name;
-    }
-    intVariable(name) {
-        const r = logic_solver_1.default.variableBits(name, 32);
-        this.variables.set(name, r);
-        return r;
-    }
-    transformEquality(left, right) {
-        if (left.type !== right.type) {
-            throw new Error(`Type mismatch in equality constraint: ${JSON.stringify(left)}, ${JSON.stringify(right)}`);
-        }
-        const leftFormula = this.buildFormula(left);
-        const rightFormula = this.buildFormula(right);
-        if (left.type === 'boolean' && right.type === 'boolean') {
-            // logical equivalence
-            return logic_solver_1.default.equiv(leftFormula, rightFormula);
-        }
-        else {
-            // integer equality
-            return logic_solver_1.default.equalBits(leftFormula, rightFormula);
-        }
-    }
-    transformInequality(left, right) {
-        return logic_solver_1.default.not(this.transformEquality(left, right));
-    }
-    transformComparison(left, right, func) {
-        return func(this.buildFormula(left), this.buildFormula(right));
-    }
-}
-exports.ConstraintSolver = ConstraintSolver;
-//# sourceMappingURL=constraint-solver.js.map

package/enhancements/node/policy/constraint-solver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"constraint-solver.js","sourceRoot":"","sources":["../../../../src/enhancements/node/policy/constraint-solver.ts"],"names":[],"mappings":";;;;;;AAAA,gEAAiC;AACjC,2CAAmC;AAUnC;;GAEG;AACH,MAAa,gBAAgB;IAA7B;QACI,4CAA4C;QACpC,gBAAW,GAAa,EAAE,CAAC;QAEnC,oEAAoE;QAC5D,cAAS,GAA+B,IAAI,GAAG,EAAyB,CAAC;IAuMrF,CAAC;IArMG;;OAEG;IACH,QAAQ,CAAC,UAAuC;QAC5C,cAAc;QACd,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;QAElD,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAE9C,oBAAoB;QACpB,MAAM,MAAM,GAAG,IAAI,sBAAK,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAExB,SAAS;QACT,mCAAmC;QACnC,kBAAkB;QAClB,gCAAgC;QAChC,wFAAwF;QACxF,WAAW;QACX,kCAAkC;QAClC,IAAI;QAEJ,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAEO,YAAY,CAAC,UAAuC;QACxD,OAAO,IAAA,kBAAK,EAAC,UAAU,CAAC;aACnB,IAAI,CACD,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,EAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CACnC;aACA,IAAI,CACD,CAAC,CAAC,EAA2B,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,EACrD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CACtC;aACA,IAAI,CACD,CAAC,CAAC,EAA6B,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EACzF,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CACxC;aACA,IAAI,CACD,CAAC,CAAC,EAA0B,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EACpE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CACrC;aACA,SAAS,CAAC,GAAG,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;IACX,CAAC;IAEO,mBAAmB,CAAC,UAA6B;QACrD,OAAO,IAAA,kBAAK,EAAC,UAAU,CAAC,IAAI,CAAC;aACxB,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;aACnD,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;aACjD,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;aACnD,UAAU,EAAE,CAAC;IACtB,CAAC;IAEO,eAAe,CAAC,UAA6B;QACjD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,gBAAgB;YAChB,OAAO,sBAAK,CAAC,KAAK,CAAC;QACvB,CAAC;QACD,OAAO,sBAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,cAAc,CAAC,UAA6B;QAChD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,gBAAgB;YAChB,OAAO,sBAAK,CAAC,IAAI,CAAC;QACtB,CAAC;QACD,OAAO,sBAAK,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAEO,eAAe,CAAC,UAA6B;QACjD,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,sBAAK,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAEO,MAAM,CAAC,UAAuC;QAClD,OAAO,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,KAAK,KAAK,IAAI,CAAC;IACpE,CAAC;IAEO,OAAO,CAAC,UAAuC;QACnD,OAAO,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,KAAK,KAAK,KAAK,CAAC;IACrE,CAAC;IAEO,sBAAsB,CAAC,UAAgC;QAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACxE,sBAAsB;YACtB,MAAM,IAAI,GAAoB,UAAU,CAAC,IAAI,CAAC;YAC9C,MAAM,KAAK,GAAoB,UAAU,CAAC,KAAK,CAAC;YAChD,OAAO,IAAA,kBAAK,EAAC,UAAU,CAAC,IAAI,CAAC;iBACxB,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAK,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAK,CAAC,KAAK,CAAC,CAAC;iBACzE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAK,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAK,CAAC,KAAK,CAAC,CAAC;iBACzE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAK,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAK,CAAC,KAAK,CAAC,CAAC;iBACvE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAK,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAK,CAAC,KAAK,CAAC,CAAC;iBACzE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAK,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAK,CAAC,KAAK,CAAC,CAAC;iBACvE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAK,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAK,CAAC,KAAK,CAAC,CAAC;iBACzE,UAAU,EAAE,CAAC;QACtB,CAAC;QAED,OAAO,IAAA,kBAAK,EAAC,UAAU,CAAC,IAAI,CAAC;aACxB,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;aAC3E,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;aAC7E,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CACb,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,sBAAK,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CACjG;aACA,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CACd,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,sBAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CACxG;aACA,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CACb,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,sBAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAC9F;aACA,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CACd,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,sBAAK,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CACrG;aACA,UAAU,EAAE,CAAC;IACtB,CAAC;IAEO,oBAAoB,CAAC,UAA8B;QACvD,OAAO,CACH,IAAA,kBAAK,EAAC,UAAU,CAAC,IAAI,CAAC;aACjB,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;aAC5D,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACxD,4DAA4D;aAC3D,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;aACvD,UAAU,EAAE,CACpB,CAAC;IACN,CAAC;IAEO,iBAAiB,CAAC,UAA2B;QACjD,OAAO,IAAA,kBAAK,EAAC,UAAU,CAAC,KAAK,CAAC;aACzB,IAAI,CACD,CAAC,CAAC,EAAgB,EAAE,CAAC,OAAO,CAAC,KAAK,SAAS,EAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,sBAAK,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAK,CAAC,KAAK,CAAC,CACjD;aACA,IAAI,CACD,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,EACzC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAC/B;aACA,IAAI,CACD,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,EACzC,CAAC,CAAC,EAAE,EAAE;YACF,qEAAqE;YACrE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACzB,OAAO,sBAAK,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACJ,OAAO,sBAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;QACL,CAAC,CACJ;aACA,UAAU,EAAE,CAAC;IACtB,CAAC;IAEO,eAAe,CAAC,IAAY;QAChC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,WAAW,CAAC,IAAY;QAC5B,MAAM,CAAC,GAAG,sBAAK,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACb,CAAC;IAEO,iBAAiB,CAAC,IAAoB,EAAE,KAAqB;QACjE,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/G,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtD,sBAAsB;YACtB,OAAO,sBAAK,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACJ,mBAAmB;YACnB,OAAO,sBAAK,CAAC,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACtD,CAAC;IACL,CAAC;IAEO,mBAAmB,CAAC,IAAoB,EAAE,KAAqB;QACnE,OAAO,sBAAK,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;IAEO,mBAAmB,CACvB,IAAoB,EACpB,KAAqB,EACrB,IAAkE;QAElE,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;CACJ;AA5MD,4CA4MC"}

package/enhancements/node/policy/handler.d.ts

@@ -1,100 +0,0 @@
-import { EnhancementContext, type DbClientContract } from '../../../types';
-import type { InternalEnhancementOptions } from '../create-enhancement';
-import { PrismaProxyHandler } from '../proxy';
-import type { PermissionCheckArgs } from '../types';
-/**
- * Prisma proxy handler for injecting access policy check.
- */
-export declare class PolicyProxyHandler<DbClient extends DbClientContract> implements PrismaProxyHandler {
-    private readonly prisma;
-    private readonly options;
-    private readonly context?;
-    private readonly logger;
-    private readonly policyUtils;
-    private readonly model;
-    private readonly modelMeta;
-    private readonly prismaModule;
-    private readonly queryUtils;
-    constructor(prisma: DbClient, model: string, options: InternalEnhancementOptions, context?: EnhancementContext | undefined);
-    private get modelClient();
-    findUnique(args: any): Promise<any>;
-    findUniqueOrThrow(args: any): Promise<any>;
-    findFirst(args?: any): Promise<any>;
-    findFirstOrThrow(args: any): Promise<any>;
-    findMany(args?: any): Promise<unknown[]>;
-    private findWithFluent;
-    private doFind;
-    create(args: any): Promise<unknown>;
-    private doCreate;
-    private hasNestedCreateOrConnect;
-    private validateCreateInputSchema;
-    createMany(args: {
-        data: any;
-        skipDuplicates?: boolean;
-    }): Promise<{
-        count: number;
-    }>;
-    createManyAndReturn(args: {
-        data: any;
-        select?: any;
-        skipDuplicates?: boolean;
-    }): Promise<unknown[]>;
-    /**
-     * Preprocess the payload of `createMany` and `createManyAndReturn` and update in place if needed.
-     * @returns `true` if the operation should be converted to regular `create`s; false otherwise.
-     */
-    private preprocessCreateManyPayload;
-    private hasRelationFieldsInPayload;
-    private validateCreateInput;
-    private doCreateMany;
-    private hasDuplicatedUniqueConstraint;
-    update(args: any): Promise<unknown>;
-    private doUpdate;
-    private calculatePostUpdateIds;
-    private overrideForeignKeyFields;
-    private validateUpdateInputSchema;
-    updateMany(args: any): Promise<any>;
-    updateManyAndReturn(args: any): Promise<unknown[]>;
-    private doUpdateMany;
-    upsert(args: any): Promise<unknown>;
-    delete(args: any): Promise<unknown>;
-    deleteMany(args: any): Promise<{
-        count: number;
-    }>;
-    aggregate(args: any): Promise<any>;
-    groupBy(args: any): Promise<any>;
-    count(args: any): Promise<any>;
-    subscribe(args: any): Promise<{
-        [Symbol.asyncIterator]: () => {
-            next: () => Promise<{
-                done: any;
-                value: any;
-            }>;
-            return: () => any;
-            throw: () => any;
-        };
-    }>;
-    stream(args: any): Promise<{
-        [Symbol.asyncIterator]: () => {
-            next: () => Promise<{
-                done: any;
-                value: any;
-            }>;
-            return: () => any;
-            throw: () => any;
-        };
-    }>;
-    private handleSubscribeStream;
-    /**
-     * Checks if the given operation is possibly allowed by the policy, without querying the database.
-     * @param operation The CRUD operation.
-     * @param fieldValues Extra field value filters to be combined with the policy constraints.
-     */
-    check(args: PermissionCheckArgs): Promise<boolean>;
-    private get shouldLogQuery();
-    private runPostWriteChecks;
-    private requireBackLink;
-    private mergeToParent;
-    private removeFromParent;
-    private buildIdFilterWithEntityChecker;
-}