json-rest-api 1.0.22 → 1.0.24

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (290) hide show
  1. package/CLAUDE.md +1 -2
  2. package/JSKIT_BACKEND_MIGRATION_TRACKER.txt +180 -0
  3. package/README.md +22 -1
  4. package/SINGLE_VALIDATION_CONTRACT_TODO.txt +172 -0
  5. package/docs/API.md +196 -38
  6. package/docs/COMPARISON.md +2 -2
  7. package/docs/GUIDE/GUIDE_1_Initial_Setup.md +111 -5
  8. package/docs/GUIDE/GUIDE_2_2_Manipulating_And_Searching_Tables.md +5 -1
  9. package/docs/GUIDE/GUIDE_2_7_Pagination_And_Ordering.md +3 -1
  10. package/docs/GUIDE/GUIDE_2_8_Effects_of_PUT_and_PATCH.md +12 -60
  11. package/docs/GUIDE/GUIDE_2_Data_And_Relations.md +2 -2
  12. package/docs/GUIDE/GUIDE_3_Field_Transformations.md +5 -1
  13. package/docs/GUIDE/GUIDE_7_Hooks_Data_Management_And_Plugins.md +2 -0
  14. package/docs/GUIDE/GUIDE_X_Autofiltering.md +355 -0
  15. package/docs/GUIDE/GUIDE_X_Fastify.md +78 -0
  16. package/docs/GUIDE/GUIDE_X_Knex_Schema_And_Migrations.md +370 -0
  17. package/docs/GUIDE/GUIDE_X_Query_Projections.md +159 -0
  18. package/docs/GUIDE/GUIDE_X_Writing_Plugins.md +199 -0
  19. package/docs/GUIDE/index.md +18 -9
  20. package/docs/QUICKSTART.md +5 -1
  21. package/docs/index.md +1 -1
  22. package/index.js +3 -2
  23. package/lib/enhanced-logger.js +1 -1
  24. package/package.json +6 -2
  25. package/plugins/core/bulk-operations-plugin.js +26 -34
  26. package/plugins/core/connectors/express-plugin.js +97 -190
  27. package/plugins/core/connectors/fastify-plugin.js +206 -0
  28. package/plugins/core/connectors/lib/busboy-detector.js +4 -4
  29. package/plugins/core/connectors/lib/connector-core.js +195 -0
  30. package/plugins/core/connectors/lib/transport-http-helpers.js +122 -0
  31. package/plugins/core/connectors/lib/transport-route-schemas.js +92 -0
  32. package/plugins/core/lib/anyapi/schema-utils.js +43 -4
  33. package/plugins/core/lib/anyapi/utils/descriptor-helpers.js +4 -1
  34. package/plugins/core/lib/dbIntrospection.js +1078 -0
  35. package/plugins/core/lib/dbTablesOperations.js +1111 -160
  36. package/plugins/core/lib/querying/knex-cross-table-search.js +0 -7
  37. package/plugins/core/lib/querying/knex-json-api-transformers-querying.js +5 -3
  38. package/plugins/core/lib/querying/knex-process-includes.js +3 -4
  39. package/plugins/core/lib/querying/knex-query-helpers.js +21 -76
  40. package/plugins/core/lib/querying/knex-relationship-includes.js +468 -215
  41. package/plugins/core/lib/querying/query-builder-utils.js +19 -0
  42. package/plugins/core/lib/querying/query-field-sort-helpers.js +135 -0
  43. package/plugins/core/lib/querying/sort-helpers.js +33 -0
  44. package/plugins/core/lib/querying/storage-adapter-utils.js +51 -0
  45. package/plugins/core/lib/querying/url-helpers.js +8 -2
  46. package/plugins/core/lib/querying-writing/compile-schemas.js +20 -5
  47. package/plugins/core/lib/querying-writing/knex-field-helpers.js +83 -14
  48. package/plugins/core/lib/querying-writing/knex-json-api-transformers.js +13 -12
  49. package/plugins/core/lib/querying-writing/query-field-helpers.js +88 -0
  50. package/plugins/core/lib/querying-writing/request-contracts.js +590 -0
  51. package/plugins/core/lib/querying-writing/resource-id-normalization.js +131 -0
  52. package/plugins/core/lib/querying-writing/schema-helpers.js +0 -2
  53. package/plugins/core/lib/querying-writing/simplified-helpers.js +4 -11
  54. package/plugins/core/lib/storage/canonical-storage-mapping.js +133 -0
  55. package/plugins/core/lib/storage/storage-adapter.js +82 -4
  56. package/plugins/core/lib/storage/storage-mapping.js +274 -0
  57. package/plugins/core/lib/writing/many-to-many-manipulations.js +4 -2
  58. package/plugins/core/rest-api-anyapi-knex-plugin.js +531 -312
  59. package/plugins/core/rest-api-autofilter-plugin.js +414 -0
  60. package/plugins/core/rest-api-knex-plugin.js +271 -226
  61. package/plugins/core/rest-api-plugin-hooks/register-relationship-routes.js +10 -5
  62. package/plugins/core/rest-api-plugin-hooks/register-scope-routes.js +12 -6
  63. package/plugins/core/rest-api-plugin-hooks/turn-scope-init-into-vars.js +1 -0
  64. package/plugins/core/rest-api-plugin-methods/apply-query-filters.js +41 -0
  65. package/plugins/core/rest-api-plugin-methods/common.js +148 -92
  66. package/plugins/core/rest-api-plugin-methods/delete-relationship.js +11 -2
  67. package/plugins/core/rest-api-plugin-methods/delete.js +6 -1
  68. package/plugins/core/rest-api-plugin-methods/enrich-attributes.js +6 -1
  69. package/plugins/core/rest-api-plugin-methods/get-related.js +7 -2
  70. package/plugins/core/rest-api-plugin-methods/get-relationship.js +7 -2
  71. package/plugins/core/rest-api-plugin-methods/get.js +29 -14
  72. package/plugins/core/rest-api-plugin-methods/patch-relationship.js +10 -3
  73. package/plugins/core/rest-api-plugin-methods/patch.js +56 -12
  74. package/plugins/core/rest-api-plugin-methods/post-relationship.js +11 -2
  75. package/plugins/core/rest-api-plugin-methods/post.js +21 -8
  76. package/plugins/core/rest-api-plugin-methods/put.js +73 -21
  77. package/plugins/core/rest-api-plugin-methods/query.js +15 -53
  78. package/plugins/core/rest-api-plugin-methods/release.js +0 -2
  79. package/plugins/core/rest-api-plugin.js +6 -0
  80. package/plugins/core/rest-api-positioning-plugin.js +2 -5
  81. package/plugins/core/rest-api-query-projections-plugin.js +130 -0
  82. package/plugins/core/socketio-plugin.js +1 -4
  83. package/plugins/storage/local-storage.js +1 -1
  84. package/plugins/storage/s3-storage.js +5 -2
  85. package/quickTest.js +1 -0
  86. package/scripts/run-docs.js +80 -84
  87. package/test-debug.js +1 -1
  88. package/tests/README.md +7 -0
  89. package/tests/anyapi-basic.test.js +3 -0
  90. package/tests/autofilter.test.js +463 -0
  91. package/tests/custom-id-mysql-returning-fallback.test.js +128 -0
  92. package/tests/custom-id-simplified-post.test.js +75 -0
  93. package/tests/custom-idproperty-relationships.test.js +33 -0
  94. package/tests/db-introspection.test.js +521 -0
  95. package/tests/db-table-operations.test.js +786 -0
  96. package/tests/fastify-plugin.test.js +156 -0
  97. package/tests/field-getters.test.js +1 -2
  98. package/tests/field-setters.test.js +0 -4
  99. package/tests/fixtures/api-configs.js +278 -176
  100. package/tests/helpers/fake-fastify.js +99 -0
  101. package/tests/http-connectors-parity.test.js +235 -0
  102. package/tests/id-normalization.test.js +444 -0
  103. package/tests/logical-id-write-validation.test.js +151 -0
  104. package/tests/pagination-cursor-multifield.test.js +11 -11
  105. package/tests/projected-fields.test.js +319 -0
  106. package/tests/relationships.test.js +3 -3
  107. package/tests/searchschema-knex-behavior.test.js +187 -0
  108. package/tests/searchschema-merge.test.js +21 -69
  109. package/tests/storage-mapping.test.js +259 -0
  110. package/audit/00-charter.md +0 -103
  111. package/audit/01-scope-map.md +0 -84
  112. package/audit/02-coverage-matrix.csv +0 -174
  113. package/audit/03-invariants.md +0 -123
  114. package/audit/04-standards-rubric.md +0 -56
  115. package/audit/05-competitor-rubric.md +0 -77
  116. package/audit/06-findings.md +0 -160
  117. package/audit/07-risk-register.csv +0 -10
  118. package/audit/08-remediation-roadmap.md +0 -177
  119. package/audit/09-signoff-check.md +0 -23
  120. package/audit/10-final-synthesis.md +0 -29
  121. package/audit/evidence/code/all-files-json-rest-api.txt +0 -168
  122. package/audit/evidence/code/all-files-json-rest-schema.txt +0 -12
  123. package/audit/evidence/code/boundary-leak-checks.txt +0 -72
  124. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__bulk-operations-plugin.js.txt +0 -480
  125. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__express-plugin.js.txt +0 -532
  126. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__lib__busboy-detector.js.txt +0 -175
  127. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__lib__formidable-detector.js.txt +0 -138
  128. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__lib__request-helpers.js.txt +0 -222
  129. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt +0 -342
  130. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__dbTablesOperations.js.txt +0 -304
  131. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__fractional-positioning.js.txt +0 -188
  132. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__compile-schemas.js.txt +0 -336
  133. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__connectors-query-parser.js.txt +0 -165
  134. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt +0 -265
  135. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-value-normalizers.js.txt +0 -369
  136. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__default-data-helpers.js.txt +0 -72
  137. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__field-utils.js.txt +0 -139
  138. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__knex-constants.js.txt +0 -45
  139. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__knex-field-helpers.js.txt +0 -396
  140. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__knex-json-api-transformers.js.txt +0 -162
  141. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__payload-validators.js.txt +0 -1314
  142. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__schema-helpers.js.txt +0 -488
  143. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__scope-validations.js.txt +0 -484
  144. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__simplified-helpers.js.txt +0 -857
  145. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt +0 -565
  146. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-json-api-transformers-querying.js.txt +0 -485
  147. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-pagination-helpers.js.txt +0 -560
  148. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-process-includes.js.txt +0 -167
  149. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers-base.js.txt +0 -109
  150. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers.js.txt +0 -1064
  151. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt +0 -1983
  152. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-window-queries.js.txt +0 -328
  153. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__url-helpers.js.txt +0 -119
  154. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__storage__storage-adapter.js.txt +0 -160
  155. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__writing__many-to-many-manipulations.js.txt +0 -300
  156. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__writing__relationship-processor.js.txt +0 -245
  157. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-access.js.txt +0 -459
  158. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-cors-plugin.js.txt +0 -237
  159. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-knex-plugin.js.txt +0 -1135
  160. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-multihome-plugin.js.txt +0 -314
  161. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__compile-resource-schemas.js.txt +0 -7
  162. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__register-relationship-routes.js.txt +0 -71
  163. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__register-scope-routes.js.txt +0 -102
  164. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__turn-scope-init-into-vars.js.txt +0 -49
  165. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__validate-include-configurations.js.txt +0 -39
  166. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__add-route.js.txt +0 -23
  167. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__check-permissions.js.txt +0 -13
  168. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__common.js.txt +0 -639
  169. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__delete-relationship.js.txt +0 -117
  170. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__delete.js.txt +0 -104
  171. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__enrich-attributes.js.txt +0 -199
  172. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__get-related.js.txt +0 -353
  173. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__get-relationship.js.txt +0 -61
  174. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__get.js.txt +0 -184
  175. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__patch-relationship.js.txt +0 -55
  176. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__patch.js.txt +0 -191
  177. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__post-relationship.js.txt +0 -110
  178. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__post.js.txt +0 -168
  179. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__put.js.txt +0 -253
  180. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__query.js.txt +0 -207
  181. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__release.js.txt +0 -12
  182. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin.js.txt +0 -165
  183. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt +0 -668
  184. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt +0 -621
  185. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__local-storage.js.txt +0 -218
  186. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__s3-storage.js.txt +0 -124
  187. package/audit/evidence/code/critical-pass1/json-rest-schema__src__CorePlugin.js.txt +0 -269
  188. package/audit/evidence/code/critical-pass1/json-rest-schema__src__Schema.js.txt +0 -242
  189. package/audit/evidence/code/critical-pass1/json-rest-schema__src__index.js.txt +0 -77
  190. package/audit/evidence/code/critical-pass1-risk-keywords.txt +0 -238
  191. package/audit/evidence/code/critical-pass1-summary.csv +0 -67
  192. package/audit/evidence/code/critical-pass2-summary.csv +0 -67
  193. package/audit/evidence/code/early-silent-zones-no-test-token.txt +0 -57
  194. package/audit/evidence/code/error-model-signals.txt +0 -98
  195. package/audit/evidence/code/git-files-json-rest-api.txt +0 -171
  196. package/audit/evidence/code/git-files-json-rest-schema.txt +0 -27
  197. package/audit/evidence/code/hook-flow-signals.txt +0 -282
  198. package/audit/evidence/code/idproperty-signals.txt +0 -157
  199. package/audit/evidence/code/import-cycles-non-anyapi.txt +0 -3
  200. package/audit/evidence/code/import-hotspots-non-anyapi.txt +0 -96
  201. package/audit/evidence/code/imports-json-rest-api.txt +0 -354
  202. package/audit/evidence/code/imports-json-rest-schema.txt +0 -15
  203. package/audit/evidence/code/in-scope-files-json-rest-api.txt +0 -160
  204. package/audit/evidence/code/in-scope-files-json-rest-schema.txt +0 -13
  205. package/audit/evidence/code/non-anyapi-core-files.txt +0 -101
  206. package/audit/evidence/code/permission-signals.txt +0 -193
  207. package/audit/evidence/code/query-include-signals.txt +0 -687
  208. package/audit/evidence/code/transaction-signals.txt +0 -28
  209. package/audit/evidence/code/validation-signals.txt +0 -650
  210. package/audit/evidence/code/write-path-signals.txt +0 -61
  211. package/audit/evidence/docs/docs-claims-signals.txt +0 -1075
  212. package/audit/evidence/docs/schema-docs-claims-signals.txt +0 -179
  213. package/audit/evidence/external/corpus-freeze.md +0 -21
  214. package/audit/evidence/external/npm-competitor-metadata.txt +0 -70
  215. package/audit/evidence/external/npm-download-signals.txt +0 -23
  216. package/audit/evidence/external/npm-jsonapi-server.txt +0 -8
  217. package/audit/evidence/external/npm-modern-jsonapi-metadata.txt +0 -38
  218. package/audit/evidence/external/readme-fortune-signals.txt +0 -26
  219. package/audit/evidence/external/readme-fortune.md +0 -165
  220. package/audit/evidence/external/readme-json-api-serializer-signals.txt +0 -80
  221. package/audit/evidence/external/readme-json-api-serializer.md +0 -690
  222. package/audit/evidence/external/readme-jsonapi-serde-server-signals.txt +0 -0
  223. package/audit/evidence/external/readme-jsonapi-serde-server.md +0 -22
  224. package/audit/evidence/external/readme-jsonapi-serializer-signals.txt +0 -63
  225. package/audit/evidence/external/readme-jsonapi-serializer.md +0 -315
  226. package/audit/evidence/external/readme-jsonapi-server-signals.txt +0 -19
  227. package/audit/evidence/external/readme-jsonapi-server.md +0 -104
  228. package/audit/evidence/external/readme-nestjs-json-api-signals.txt +0 -4
  229. package/audit/evidence/external/readme-nestjs-json-api.md +0 -94
  230. package/audit/evidence/external/readme-yaser-json-api-nestjs-signals.txt +0 -47
  231. package/audit/evidence/external/readme-yaser-json-api-nestjs.md +0 -447
  232. package/audit/evidence/external/standard-jsonapi-snippets.txt +0 -84
  233. package/audit/evidence/external/standard-rfc-snippets.txt +0 -168
  234. package/audit/evidence/external/standards-sources.txt +0 -6
  235. package/audit/evidence/runtime/baseline-commits.txt +0 -2
  236. package/audit/evidence/runtime/db-adapter-assumptions.txt +0 -3
  237. package/audit/evidence/runtime/environment.txt +0 -4
  238. package/audit/evidence/runtime/invariant-runtime-mapping.md +0 -38
  239. package/audit/evidence/runtime/probe-patch-relationship-error.exitcode +0 -1
  240. package/audit/evidence/runtime/probe-patch-relationship-error.log +0 -76
  241. package/audit/evidence/runtime/probe-patch-relationship-error.mjs +0 -67
  242. package/audit/evidence/runtime/probe-patch-relationship-referenceerror.exitcode +0 -1
  243. package/audit/evidence/runtime/probe-patch-relationship-referenceerror.log +0 -62
  244. package/audit/evidence/runtime/probe-patch-relationship-referenceerror.mjs +0 -47
  245. package/audit/evidence/runtime/test-exitcodes.txt +0 -4
  246. package/audit/evidence/runtime/test-summary.md +0 -107
  247. package/audit/evidence/runtime/trace-anchors.txt +0 -61
  248. package/audit/evidence/tests/access-multitenancy-test-signals.txt +0 -125
  249. package/audit/evidence/tests/failing-tests-summary.txt +0 -25
  250. package/audit/evidence/tests/npm-test-json-rest-api.exitcode +0 -1
  251. package/audit/evidence/tests/npm-test-json-rest-api.log +0 -5885
  252. package/audit/evidence/tests/npm-test-json-rest-schema.exitcode +0 -1
  253. package/audit/evidence/tests/npm-test-json-rest-schema.log +0 -356
  254. package/audit/evidence/tests/query-include-test-signals.txt +0 -948
  255. package/audit/evidence/tests/relationship-test-signals.txt +0 -223
  256. package/audit/evidence/tests/skipped-tests.txt +0 -10
  257. package/audit/evidence/tests/test-suite-list-non-anyapi.txt +0 -30
  258. package/audit/evidence/tests/test-suite-list.txt +0 -32
  259. package/audit/subsystems/docs-drift.md +0 -49
  260. package/audit/subsystems/pass2-cross-review.md +0 -131
  261. package/audit/subsystems/plugins-access.md +0 -51
  262. package/audit/subsystems/plugins-bulk.md +0 -50
  263. package/audit/subsystems/plugins-cors.md +0 -48
  264. package/audit/subsystems/plugins-file.md +0 -53
  265. package/audit/subsystems/plugins-multihome.md +0 -50
  266. package/audit/subsystems/plugins-positioning.md +0 -54
  267. package/audit/subsystems/plugins-socketio.md +0 -50
  268. package/audit/subsystems/query-engine.md +0 -61
  269. package/audit/subsystems/relationships.md +0 -55
  270. package/audit/subsystems/rest-orchestration.md +0 -66
  271. package/audit/subsystems/schema-core.md +0 -64
  272. package/audit/subsystems/storage-knex.md +0 -57
  273. package/audit/subsystems/tests.md +0 -48
  274. package/audit/subsystems/transport-express.md +0 -55
  275. package/audit/traces/trace-read-get.md +0 -22
  276. package/audit/traces/trace-read-query.md +0 -25
  277. package/audit/traces/trace-relationship-endpoints.md +0 -31
  278. package/audit/traces/trace-write-delete.md +0 -17
  279. package/audit/traces/trace-write-patch.md +0 -26
  280. package/audit/traces/trace-write-post.md +0 -22
  281. package/audit/traces/trace-write-put.md +0 -23
  282. package/docs/GUIDE/GUIDE_4_Authentication_And_Permissions.md +0 -707
  283. package/docs/GUIDE/GUIDE_X_Multihome.md +0 -666
  284. package/plugins/core/lib/querying-writing/payload-validators.js +0 -1314
  285. package/plugins/core/rest-api-access.js +0 -459
  286. package/plugins/core/rest-api-multihome-plugin.js +0 -314
  287. package/tests/multihome.test.js +0 -553
  288. package/tests/multihome.test.js.bak +0 -550
  289. package/tests/ownership-optout.test.js +0 -76
  290. package/tests/rest-api-access.test.js +0 -206
@@ -0,0 +1,414 @@
1
+ import { RestApiValidationError } from '../../lib/rest-api-errors.js'
2
+ import { createStorageAdapterUtilities } from './lib/querying/storage-adapter-utils.js'
3
+
4
+ const PUBLIC_PRESET_NAME = 'public'
5
+
6
+ function valuesEqual (left, right) {
7
+ if (left === right) return true
8
+ if (left === null || right === null) return left === right
9
+ if (left === undefined || right === undefined) return left === right
10
+ return String(left) === String(right)
11
+ }
12
+
13
+ function buildAutofilterContextError ({ scopeName, filter }) {
14
+ const resolverName = filter.resolverName || '<inline>'
15
+ const error = new Error(
16
+ `Missing autofilter value for resolver '${resolverName}' on resource '${scopeName}'`
17
+ )
18
+ error.code = 'REST_API_AUTOFILTER_CONTEXT'
19
+ return error
20
+ }
21
+
22
+ function buildAutofilterConsistencyError ({ filter, resolvedValue }) {
23
+ const fieldPath = filter.inputPath
24
+ const expectedValue = resolvedValue === null ? 'null' : String(resolvedValue)
25
+
26
+ return new RestApiValidationError(
27
+ `Scoped field '${filter.field}' must match the resolved autofilter value`,
28
+ {
29
+ fields: [fieldPath],
30
+ violations: [{
31
+ field: fieldPath,
32
+ rule: 'autofilter_consistency',
33
+ message: `Field must match autofilter value '${expectedValue}'`
34
+ }]
35
+ }
36
+ )
37
+ }
38
+
39
+ function ensureResolverMap (resolverMap = {}) {
40
+ const normalized = {}
41
+
42
+ for (const [name, resolver] of Object.entries(resolverMap)) {
43
+ if (typeof resolver !== 'function') {
44
+ throw new Error(`AutoFilter resolver '${name}' must be a function.`)
45
+ }
46
+ normalized[name] = resolver
47
+ }
48
+
49
+ return normalized
50
+ }
51
+
52
+ function getPresetFilters (presetName, presets) {
53
+ const preset = presets[presetName]
54
+
55
+ if (!preset) {
56
+ throw new Error(`Unknown autofilter preset '${presetName}'.`)
57
+ }
58
+
59
+ if (Array.isArray(preset)) {
60
+ return preset
61
+ }
62
+
63
+ if (typeof preset === 'object' && preset !== null && Array.isArray(preset.filters)) {
64
+ return preset.filters
65
+ }
66
+
67
+ throw new Error(`Autofilter preset '${presetName}' must be an array or an object with a filters array.`)
68
+ }
69
+
70
+ function normalizeFilterDefinition ({ filterDef, resolvers, schemaStructure, scopeName }) {
71
+ if (!filterDef || typeof filterDef !== 'object' || Array.isArray(filterDef)) {
72
+ throw new Error(`Invalid autofilter definition on resource '${scopeName}'.`)
73
+ }
74
+
75
+ const field = String(filterDef.field || '').trim()
76
+ if (!field) {
77
+ throw new Error(`Autofilter definitions on resource '${scopeName}' must include a field.`)
78
+ }
79
+
80
+ const fieldDef = schemaStructure[field]
81
+ if (!fieldDef) {
82
+ throw new Error(`Autofilter field '${field}' does not exist on resource '${scopeName}'.`)
83
+ }
84
+
85
+ if (fieldDef.virtual === true || fieldDef.computed === true) {
86
+ throw new Error(`Autofilter field '${field}' on resource '${scopeName}' must be a persisted field.`)
87
+ }
88
+
89
+ const resolverDef = filterDef.resolve ?? filterDef.resolver
90
+ let resolve
91
+ let resolverName
92
+
93
+ if (typeof resolverDef === 'string') {
94
+ resolve = resolvers[resolverDef]
95
+ resolverName = resolverDef
96
+ if (!resolve) {
97
+ throw new Error(`Unknown autofilter resolver '${resolverDef}' on resource '${scopeName}'.`)
98
+ }
99
+ } else if (typeof resolverDef === 'function') {
100
+ resolve = resolverDef
101
+ resolverName = '<inline>'
102
+ } else {
103
+ throw new Error(`Autofilter field '${field}' on resource '${scopeName}' must define a resolver.`)
104
+ }
105
+
106
+ const relationshipName = fieldDef.belongsTo && fieldDef.as
107
+ ? fieldDef.as
108
+ : null
109
+
110
+ return {
111
+ field,
112
+ fieldDef,
113
+ resolve,
114
+ resolverName,
115
+ required: filterDef.required !== false,
116
+ relationshipName,
117
+ relationshipType: relationshipName ? fieldDef.belongsTo : null,
118
+ inputPath: relationshipName
119
+ ? `data.relationships.${relationshipName}.data.id`
120
+ : `data.attributes.${field}`
121
+ }
122
+ }
123
+
124
+ function compileAutoFilterDefinition ({ scopeName, scopeOptions = {}, schemaStructure = {}, resolvers, presets }) {
125
+ const definition = scopeOptions.autofilter
126
+
127
+ if (definition === undefined || definition === null || definition === false) {
128
+ return null
129
+ }
130
+
131
+ let presetName = null
132
+ const rawFilters = []
133
+
134
+ if (typeof definition === 'string') {
135
+ presetName = definition
136
+ rawFilters.push(...getPresetFilters(presetName, presets))
137
+ } else if (Array.isArray(definition)) {
138
+ rawFilters.push(...definition)
139
+ } else if (typeof definition === 'object') {
140
+ if (definition.preset) {
141
+ presetName = definition.preset
142
+ rawFilters.push(...getPresetFilters(presetName, presets))
143
+ }
144
+
145
+ if (Array.isArray(definition.filters)) {
146
+ rawFilters.push(...definition.filters)
147
+ } else if (!definition.preset) {
148
+ throw new Error(`Autofilter definition for resource '${scopeName}' must include a filters array or preset.`)
149
+ }
150
+ } else {
151
+ throw new Error(`Invalid autofilter definition for resource '${scopeName}'.`)
152
+ }
153
+
154
+ return {
155
+ preset: presetName,
156
+ filters: rawFilters.map((filterDef) => normalizeFilterDefinition({
157
+ filterDef,
158
+ resolvers,
159
+ schemaStructure,
160
+ scopeName
161
+ }))
162
+ }
163
+ }
164
+
165
+ async function resolveFilterValue ({ filter, context, scopeName, api, helpers, scopes, vars, log }) {
166
+ const value = await filter.resolve({
167
+ context,
168
+ scopeName,
169
+ filter,
170
+ api,
171
+ helpers,
172
+ scopes,
173
+ vars,
174
+ log
175
+ })
176
+
177
+ if (value === undefined && filter.required) {
178
+ throw buildAutofilterContextError({ scopeName, filter })
179
+ }
180
+
181
+ return value
182
+ }
183
+
184
+ function ensureInputContainers (context) {
185
+ const data = context.inputRecord.data
186
+ data.attributes = data.attributes || {}
187
+ data.relationships = data.relationships || {}
188
+ return data
189
+ }
190
+
191
+ function applyResolvedInputValue ({ context, filter, resolvedValue, injectMissing }) {
192
+ const data = ensureInputContainers(context)
193
+ const { attributes, relationships } = data
194
+
195
+ if (filter.relationshipName) {
196
+ const relationship = relationships[filter.relationshipName]
197
+ const relationshipData = relationship?.data
198
+
199
+ if (relationshipData !== undefined) {
200
+ if (relationshipData === null) {
201
+ if (resolvedValue !== null) {
202
+ throw buildAutofilterConsistencyError({ filter, resolvedValue })
203
+ }
204
+ return
205
+ }
206
+
207
+ if (Array.isArray(relationshipData) || !valuesEqual(relationshipData?.id, resolvedValue)) {
208
+ throw buildAutofilterConsistencyError({ filter, resolvedValue })
209
+ }
210
+
211
+ if (relationshipData?.type && filter.relationshipType && relationshipData.type !== filter.relationshipType) {
212
+ throw buildAutofilterConsistencyError({ filter, resolvedValue })
213
+ }
214
+
215
+ return
216
+ }
217
+
218
+ if (attributes[filter.field] !== undefined && !valuesEqual(attributes[filter.field], resolvedValue)) {
219
+ throw buildAutofilterConsistencyError({ filter, resolvedValue })
220
+ }
221
+
222
+ if (injectMissing) {
223
+ relationships[filter.relationshipName] = resolvedValue === null
224
+ ? { data: null }
225
+ : {
226
+ data: {
227
+ type: filter.relationshipType,
228
+ id: String(resolvedValue)
229
+ }
230
+ }
231
+ }
232
+
233
+ return
234
+ }
235
+
236
+ const existingValue = attributes[filter.field]
237
+ if (existingValue !== undefined) {
238
+ if (!valuesEqual(existingValue, resolvedValue)) {
239
+ throw buildAutofilterConsistencyError({ filter, resolvedValue })
240
+ }
241
+ return
242
+ }
243
+
244
+ if (injectMissing) {
245
+ attributes[filter.field] = resolvedValue
246
+ }
247
+ }
248
+
249
+ async function enforceScopedInput ({ compiledConfig, context, scopeName, injectMissing, api, helpers, scopes, vars, log }) {
250
+ if (!compiledConfig || compiledConfig.filters.length === 0) return
251
+
252
+ for (const filter of compiledConfig.filters) {
253
+ const resolvedValue = await resolveFilterValue({
254
+ filter,
255
+ context,
256
+ scopeName,
257
+ api,
258
+ helpers,
259
+ scopes,
260
+ vars,
261
+ log
262
+ })
263
+
264
+ if (resolvedValue === undefined) continue
265
+
266
+ applyResolvedInputValue({
267
+ context,
268
+ filter,
269
+ resolvedValue,
270
+ injectMissing
271
+ })
272
+ }
273
+ }
274
+
275
+ export const AutoFilterPlugin = {
276
+ name: 'autofilter',
277
+ dependencies: ['rest-api', 'rest-api-knex|rest-api-anyapi-knex'],
278
+
279
+ install ({ api, addHook, vars, helpers, log, scopes, pluginOptions = {} }) {
280
+ if (!api.knex?.instance) {
281
+ throw new Error('AutoFilterPlugin requires a storage plugin with knex support (rest-api-knex or rest-api-anyapi-knex).')
282
+ }
283
+
284
+ const state = {
285
+ resolvers: ensureResolverMap(pluginOptions.resolvers || {}),
286
+ presets: {
287
+ [PUBLIC_PRESET_NAME]: { filters: [] },
288
+ ...(pluginOptions.presets || {})
289
+ }
290
+ }
291
+
292
+ vars.autofilter = {
293
+ presets: Object.keys(state.presets),
294
+ resolvers: Object.keys(state.resolvers)
295
+ }
296
+
297
+ addHook('scope:added', 'compile-autofilter', {}, ({ context }) => {
298
+ const { scopeName, scopeOptions = {} } = context
299
+ const scope = scopes[scopeName]
300
+ const schemaStructure = scope?.vars?.schemaInfo?.schemaStructure || scopeOptions.schema || {}
301
+
302
+ scope.vars.autofilter = compileAutoFilterDefinition({
303
+ scopeName,
304
+ scopeOptions,
305
+ schemaStructure,
306
+ resolvers: state.resolvers,
307
+ presets: state.presets
308
+ })
309
+ })
310
+
311
+ addHook('knexQueryFiltering', 'autofilter-scope', {}, async ({ context }) => {
312
+ const { query, tableName, scopeName } = context.knexQuery || {}
313
+ if (!query || !scopeName) return
314
+
315
+ const compiledConfig = scopes[scopeName]?.vars?.autofilter
316
+ if (!compiledConfig || compiledConfig.filters.length === 0) return
317
+ const adapterUtils = createStorageAdapterUtilities({ context }, {
318
+ getStorageAdapter: helpers.getStorageAdapter
319
+ })
320
+
321
+ for (const filter of compiledConfig.filters) {
322
+ const resolvedValue = await resolveFilterValue({
323
+ filter,
324
+ context,
325
+ scopeName,
326
+ api,
327
+ helpers,
328
+ scopes,
329
+ vars,
330
+ log
331
+ })
332
+
333
+ if (resolvedValue === undefined) continue
334
+
335
+ const columnRef = adapterUtils.translateColumn(scopeName, filter.field, tableName)
336
+ const translatedValue = adapterUtils.translateFilterValue(scopeName, filter.field, resolvedValue)
337
+
338
+ if (translatedValue === null) {
339
+ query.whereNull(columnRef)
340
+ } else {
341
+ query.where(columnRef, translatedValue)
342
+ }
343
+ }
344
+ })
345
+
346
+ addHook('beforeProcessingPost', 'autofilter-stamp-post', {}, async ({ context, scopeName }) => {
347
+ await enforceScopedInput({
348
+ compiledConfig: scopes[scopeName]?.vars?.autofilter,
349
+ context,
350
+ scopeName,
351
+ injectMissing: true,
352
+ api,
353
+ helpers,
354
+ scopes,
355
+ vars,
356
+ log
357
+ })
358
+ })
359
+
360
+ addHook('beforeProcessingPut', 'autofilter-stamp-put', {}, async ({ context, scopeName }) => {
361
+ await enforceScopedInput({
362
+ compiledConfig: scopes[scopeName]?.vars?.autofilter,
363
+ context,
364
+ scopeName,
365
+ injectMissing: true,
366
+ api,
367
+ helpers,
368
+ scopes,
369
+ vars,
370
+ log
371
+ })
372
+ })
373
+
374
+ addHook('beforeProcessingPatch', 'autofilter-validate-patch', {}, async ({ context, scopeName }) => {
375
+ await enforceScopedInput({
376
+ compiledConfig: scopes[scopeName]?.vars?.autofilter,
377
+ context,
378
+ scopeName,
379
+ injectMissing: false,
380
+ api,
381
+ helpers,
382
+ scopes,
383
+ vars,
384
+ log
385
+ })
386
+ })
387
+
388
+ api.autofilter = {
389
+ getConfig: () => ({
390
+ presets: Object.keys(state.presets),
391
+ resolvers: Object.keys(state.resolvers)
392
+ }),
393
+
394
+ getScopeConfig: (scopeName) => {
395
+ const compiledConfig = scopes[scopeName]?.vars?.autofilter
396
+ if (!compiledConfig) return null
397
+
398
+ return {
399
+ preset: compiledConfig.preset,
400
+ filters: compiledConfig.filters.map((filter) => ({
401
+ field: filter.field,
402
+ resolver: filter.resolverName,
403
+ required: filter.required
404
+ }))
405
+ }
406
+ }
407
+ }
408
+
409
+ log.info('AutoFilter plugin installed', {
410
+ presets: Object.keys(state.presets),
411
+ resolvers: Object.keys(state.resolvers)
412
+ })
413
+ }
414
+ }