json-rest-api 1.0.22 → 1.0.24

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (290) hide show
  1. package/CLAUDE.md +1 -2
  2. package/JSKIT_BACKEND_MIGRATION_TRACKER.txt +180 -0
  3. package/README.md +22 -1
  4. package/SINGLE_VALIDATION_CONTRACT_TODO.txt +172 -0
  5. package/docs/API.md +196 -38
  6. package/docs/COMPARISON.md +2 -2
  7. package/docs/GUIDE/GUIDE_1_Initial_Setup.md +111 -5
  8. package/docs/GUIDE/GUIDE_2_2_Manipulating_And_Searching_Tables.md +5 -1
  9. package/docs/GUIDE/GUIDE_2_7_Pagination_And_Ordering.md +3 -1
  10. package/docs/GUIDE/GUIDE_2_8_Effects_of_PUT_and_PATCH.md +12 -60
  11. package/docs/GUIDE/GUIDE_2_Data_And_Relations.md +2 -2
  12. package/docs/GUIDE/GUIDE_3_Field_Transformations.md +5 -1
  13. package/docs/GUIDE/GUIDE_7_Hooks_Data_Management_And_Plugins.md +2 -0
  14. package/docs/GUIDE/GUIDE_X_Autofiltering.md +355 -0
  15. package/docs/GUIDE/GUIDE_X_Fastify.md +78 -0
  16. package/docs/GUIDE/GUIDE_X_Knex_Schema_And_Migrations.md +370 -0
  17. package/docs/GUIDE/GUIDE_X_Query_Projections.md +159 -0
  18. package/docs/GUIDE/GUIDE_X_Writing_Plugins.md +199 -0
  19. package/docs/GUIDE/index.md +18 -9
  20. package/docs/QUICKSTART.md +5 -1
  21. package/docs/index.md +1 -1
  22. package/index.js +3 -2
  23. package/lib/enhanced-logger.js +1 -1
  24. package/package.json +6 -2
  25. package/plugins/core/bulk-operations-plugin.js +26 -34
  26. package/plugins/core/connectors/express-plugin.js +97 -190
  27. package/plugins/core/connectors/fastify-plugin.js +206 -0
  28. package/plugins/core/connectors/lib/busboy-detector.js +4 -4
  29. package/plugins/core/connectors/lib/connector-core.js +195 -0
  30. package/plugins/core/connectors/lib/transport-http-helpers.js +122 -0
  31. package/plugins/core/connectors/lib/transport-route-schemas.js +92 -0
  32. package/plugins/core/lib/anyapi/schema-utils.js +43 -4
  33. package/plugins/core/lib/anyapi/utils/descriptor-helpers.js +4 -1
  34. package/plugins/core/lib/dbIntrospection.js +1078 -0
  35. package/plugins/core/lib/dbTablesOperations.js +1111 -160
  36. package/plugins/core/lib/querying/knex-cross-table-search.js +0 -7
  37. package/plugins/core/lib/querying/knex-json-api-transformers-querying.js +5 -3
  38. package/plugins/core/lib/querying/knex-process-includes.js +3 -4
  39. package/plugins/core/lib/querying/knex-query-helpers.js +21 -76
  40. package/plugins/core/lib/querying/knex-relationship-includes.js +468 -215
  41. package/plugins/core/lib/querying/query-builder-utils.js +19 -0
  42. package/plugins/core/lib/querying/query-field-sort-helpers.js +135 -0
  43. package/plugins/core/lib/querying/sort-helpers.js +33 -0
  44. package/plugins/core/lib/querying/storage-adapter-utils.js +51 -0
  45. package/plugins/core/lib/querying/url-helpers.js +8 -2
  46. package/plugins/core/lib/querying-writing/compile-schemas.js +20 -5
  47. package/plugins/core/lib/querying-writing/knex-field-helpers.js +83 -14
  48. package/plugins/core/lib/querying-writing/knex-json-api-transformers.js +13 -12
  49. package/plugins/core/lib/querying-writing/query-field-helpers.js +88 -0
  50. package/plugins/core/lib/querying-writing/request-contracts.js +590 -0
  51. package/plugins/core/lib/querying-writing/resource-id-normalization.js +131 -0
  52. package/plugins/core/lib/querying-writing/schema-helpers.js +0 -2
  53. package/plugins/core/lib/querying-writing/simplified-helpers.js +4 -11
  54. package/plugins/core/lib/storage/canonical-storage-mapping.js +133 -0
  55. package/plugins/core/lib/storage/storage-adapter.js +82 -4
  56. package/plugins/core/lib/storage/storage-mapping.js +274 -0
  57. package/plugins/core/lib/writing/many-to-many-manipulations.js +4 -2
  58. package/plugins/core/rest-api-anyapi-knex-plugin.js +531 -312
  59. package/plugins/core/rest-api-autofilter-plugin.js +414 -0
  60. package/plugins/core/rest-api-knex-plugin.js +271 -226
  61. package/plugins/core/rest-api-plugin-hooks/register-relationship-routes.js +10 -5
  62. package/plugins/core/rest-api-plugin-hooks/register-scope-routes.js +12 -6
  63. package/plugins/core/rest-api-plugin-hooks/turn-scope-init-into-vars.js +1 -0
  64. package/plugins/core/rest-api-plugin-methods/apply-query-filters.js +41 -0
  65. package/plugins/core/rest-api-plugin-methods/common.js +148 -92
  66. package/plugins/core/rest-api-plugin-methods/delete-relationship.js +11 -2
  67. package/plugins/core/rest-api-plugin-methods/delete.js +6 -1
  68. package/plugins/core/rest-api-plugin-methods/enrich-attributes.js +6 -1
  69. package/plugins/core/rest-api-plugin-methods/get-related.js +7 -2
  70. package/plugins/core/rest-api-plugin-methods/get-relationship.js +7 -2
  71. package/plugins/core/rest-api-plugin-methods/get.js +29 -14
  72. package/plugins/core/rest-api-plugin-methods/patch-relationship.js +10 -3
  73. package/plugins/core/rest-api-plugin-methods/patch.js +56 -12
  74. package/plugins/core/rest-api-plugin-methods/post-relationship.js +11 -2
  75. package/plugins/core/rest-api-plugin-methods/post.js +21 -8
  76. package/plugins/core/rest-api-plugin-methods/put.js +73 -21
  77. package/plugins/core/rest-api-plugin-methods/query.js +15 -53
  78. package/plugins/core/rest-api-plugin-methods/release.js +0 -2
  79. package/plugins/core/rest-api-plugin.js +6 -0
  80. package/plugins/core/rest-api-positioning-plugin.js +2 -5
  81. package/plugins/core/rest-api-query-projections-plugin.js +130 -0
  82. package/plugins/core/socketio-plugin.js +1 -4
  83. package/plugins/storage/local-storage.js +1 -1
  84. package/plugins/storage/s3-storage.js +5 -2
  85. package/quickTest.js +1 -0
  86. package/scripts/run-docs.js +80 -84
  87. package/test-debug.js +1 -1
  88. package/tests/README.md +7 -0
  89. package/tests/anyapi-basic.test.js +3 -0
  90. package/tests/autofilter.test.js +463 -0
  91. package/tests/custom-id-mysql-returning-fallback.test.js +128 -0
  92. package/tests/custom-id-simplified-post.test.js +75 -0
  93. package/tests/custom-idproperty-relationships.test.js +33 -0
  94. package/tests/db-introspection.test.js +521 -0
  95. package/tests/db-table-operations.test.js +786 -0
  96. package/tests/fastify-plugin.test.js +156 -0
  97. package/tests/field-getters.test.js +1 -2
  98. package/tests/field-setters.test.js +0 -4
  99. package/tests/fixtures/api-configs.js +278 -176
  100. package/tests/helpers/fake-fastify.js +99 -0
  101. package/tests/http-connectors-parity.test.js +235 -0
  102. package/tests/id-normalization.test.js +444 -0
  103. package/tests/logical-id-write-validation.test.js +151 -0
  104. package/tests/pagination-cursor-multifield.test.js +11 -11
  105. package/tests/projected-fields.test.js +319 -0
  106. package/tests/relationships.test.js +3 -3
  107. package/tests/searchschema-knex-behavior.test.js +187 -0
  108. package/tests/searchschema-merge.test.js +21 -69
  109. package/tests/storage-mapping.test.js +259 -0
  110. package/audit/00-charter.md +0 -103
  111. package/audit/01-scope-map.md +0 -84
  112. package/audit/02-coverage-matrix.csv +0 -174
  113. package/audit/03-invariants.md +0 -123
  114. package/audit/04-standards-rubric.md +0 -56
  115. package/audit/05-competitor-rubric.md +0 -77
  116. package/audit/06-findings.md +0 -160
  117. package/audit/07-risk-register.csv +0 -10
  118. package/audit/08-remediation-roadmap.md +0 -177
  119. package/audit/09-signoff-check.md +0 -23
  120. package/audit/10-final-synthesis.md +0 -29
  121. package/audit/evidence/code/all-files-json-rest-api.txt +0 -168
  122. package/audit/evidence/code/all-files-json-rest-schema.txt +0 -12
  123. package/audit/evidence/code/boundary-leak-checks.txt +0 -72
  124. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__bulk-operations-plugin.js.txt +0 -480
  125. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__express-plugin.js.txt +0 -532
  126. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__lib__busboy-detector.js.txt +0 -175
  127. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__lib__formidable-detector.js.txt +0 -138
  128. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__lib__request-helpers.js.txt +0 -222
  129. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt +0 -342
  130. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__dbTablesOperations.js.txt +0 -304
  131. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__fractional-positioning.js.txt +0 -188
  132. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__compile-schemas.js.txt +0 -336
  133. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__connectors-query-parser.js.txt +0 -165
  134. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt +0 -265
  135. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-value-normalizers.js.txt +0 -369
  136. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__default-data-helpers.js.txt +0 -72
  137. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__field-utils.js.txt +0 -139
  138. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__knex-constants.js.txt +0 -45
  139. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__knex-field-helpers.js.txt +0 -396
  140. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__knex-json-api-transformers.js.txt +0 -162
  141. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__payload-validators.js.txt +0 -1314
  142. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__schema-helpers.js.txt +0 -488
  143. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__scope-validations.js.txt +0 -484
  144. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__simplified-helpers.js.txt +0 -857
  145. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt +0 -565
  146. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-json-api-transformers-querying.js.txt +0 -485
  147. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-pagination-helpers.js.txt +0 -560
  148. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-process-includes.js.txt +0 -167
  149. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers-base.js.txt +0 -109
  150. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers.js.txt +0 -1064
  151. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt +0 -1983
  152. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-window-queries.js.txt +0 -328
  153. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__url-helpers.js.txt +0 -119
  154. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__storage__storage-adapter.js.txt +0 -160
  155. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__writing__many-to-many-manipulations.js.txt +0 -300
  156. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__writing__relationship-processor.js.txt +0 -245
  157. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-access.js.txt +0 -459
  158. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-cors-plugin.js.txt +0 -237
  159. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-knex-plugin.js.txt +0 -1135
  160. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-multihome-plugin.js.txt +0 -314
  161. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__compile-resource-schemas.js.txt +0 -7
  162. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__register-relationship-routes.js.txt +0 -71
  163. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__register-scope-routes.js.txt +0 -102
  164. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__turn-scope-init-into-vars.js.txt +0 -49
  165. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__validate-include-configurations.js.txt +0 -39
  166. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__add-route.js.txt +0 -23
  167. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__check-permissions.js.txt +0 -13
  168. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__common.js.txt +0 -639
  169. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__delete-relationship.js.txt +0 -117
  170. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__delete.js.txt +0 -104
  171. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__enrich-attributes.js.txt +0 -199
  172. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__get-related.js.txt +0 -353
  173. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__get-relationship.js.txt +0 -61
  174. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__get.js.txt +0 -184
  175. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__patch-relationship.js.txt +0 -55
  176. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__patch.js.txt +0 -191
  177. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__post-relationship.js.txt +0 -110
  178. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__post.js.txt +0 -168
  179. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__put.js.txt +0 -253
  180. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__query.js.txt +0 -207
  181. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__release.js.txt +0 -12
  182. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin.js.txt +0 -165
  183. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt +0 -668
  184. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt +0 -621
  185. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__local-storage.js.txt +0 -218
  186. package/audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__s3-storage.js.txt +0 -124
  187. package/audit/evidence/code/critical-pass1/json-rest-schema__src__CorePlugin.js.txt +0 -269
  188. package/audit/evidence/code/critical-pass1/json-rest-schema__src__Schema.js.txt +0 -242
  189. package/audit/evidence/code/critical-pass1/json-rest-schema__src__index.js.txt +0 -77
  190. package/audit/evidence/code/critical-pass1-risk-keywords.txt +0 -238
  191. package/audit/evidence/code/critical-pass1-summary.csv +0 -67
  192. package/audit/evidence/code/critical-pass2-summary.csv +0 -67
  193. package/audit/evidence/code/early-silent-zones-no-test-token.txt +0 -57
  194. package/audit/evidence/code/error-model-signals.txt +0 -98
  195. package/audit/evidence/code/git-files-json-rest-api.txt +0 -171
  196. package/audit/evidence/code/git-files-json-rest-schema.txt +0 -27
  197. package/audit/evidence/code/hook-flow-signals.txt +0 -282
  198. package/audit/evidence/code/idproperty-signals.txt +0 -157
  199. package/audit/evidence/code/import-cycles-non-anyapi.txt +0 -3
  200. package/audit/evidence/code/import-hotspots-non-anyapi.txt +0 -96
  201. package/audit/evidence/code/imports-json-rest-api.txt +0 -354
  202. package/audit/evidence/code/imports-json-rest-schema.txt +0 -15
  203. package/audit/evidence/code/in-scope-files-json-rest-api.txt +0 -160
  204. package/audit/evidence/code/in-scope-files-json-rest-schema.txt +0 -13
  205. package/audit/evidence/code/non-anyapi-core-files.txt +0 -101
  206. package/audit/evidence/code/permission-signals.txt +0 -193
  207. package/audit/evidence/code/query-include-signals.txt +0 -687
  208. package/audit/evidence/code/transaction-signals.txt +0 -28
  209. package/audit/evidence/code/validation-signals.txt +0 -650
  210. package/audit/evidence/code/write-path-signals.txt +0 -61
  211. package/audit/evidence/docs/docs-claims-signals.txt +0 -1075
  212. package/audit/evidence/docs/schema-docs-claims-signals.txt +0 -179
  213. package/audit/evidence/external/corpus-freeze.md +0 -21
  214. package/audit/evidence/external/npm-competitor-metadata.txt +0 -70
  215. package/audit/evidence/external/npm-download-signals.txt +0 -23
  216. package/audit/evidence/external/npm-jsonapi-server.txt +0 -8
  217. package/audit/evidence/external/npm-modern-jsonapi-metadata.txt +0 -38
  218. package/audit/evidence/external/readme-fortune-signals.txt +0 -26
  219. package/audit/evidence/external/readme-fortune.md +0 -165
  220. package/audit/evidence/external/readme-json-api-serializer-signals.txt +0 -80
  221. package/audit/evidence/external/readme-json-api-serializer.md +0 -690
  222. package/audit/evidence/external/readme-jsonapi-serde-server-signals.txt +0 -0
  223. package/audit/evidence/external/readme-jsonapi-serde-server.md +0 -22
  224. package/audit/evidence/external/readme-jsonapi-serializer-signals.txt +0 -63
  225. package/audit/evidence/external/readme-jsonapi-serializer.md +0 -315
  226. package/audit/evidence/external/readme-jsonapi-server-signals.txt +0 -19
  227. package/audit/evidence/external/readme-jsonapi-server.md +0 -104
  228. package/audit/evidence/external/readme-nestjs-json-api-signals.txt +0 -4
  229. package/audit/evidence/external/readme-nestjs-json-api.md +0 -94
  230. package/audit/evidence/external/readme-yaser-json-api-nestjs-signals.txt +0 -47
  231. package/audit/evidence/external/readme-yaser-json-api-nestjs.md +0 -447
  232. package/audit/evidence/external/standard-jsonapi-snippets.txt +0 -84
  233. package/audit/evidence/external/standard-rfc-snippets.txt +0 -168
  234. package/audit/evidence/external/standards-sources.txt +0 -6
  235. package/audit/evidence/runtime/baseline-commits.txt +0 -2
  236. package/audit/evidence/runtime/db-adapter-assumptions.txt +0 -3
  237. package/audit/evidence/runtime/environment.txt +0 -4
  238. package/audit/evidence/runtime/invariant-runtime-mapping.md +0 -38
  239. package/audit/evidence/runtime/probe-patch-relationship-error.exitcode +0 -1
  240. package/audit/evidence/runtime/probe-patch-relationship-error.log +0 -76
  241. package/audit/evidence/runtime/probe-patch-relationship-error.mjs +0 -67
  242. package/audit/evidence/runtime/probe-patch-relationship-referenceerror.exitcode +0 -1
  243. package/audit/evidence/runtime/probe-patch-relationship-referenceerror.log +0 -62
  244. package/audit/evidence/runtime/probe-patch-relationship-referenceerror.mjs +0 -47
  245. package/audit/evidence/runtime/test-exitcodes.txt +0 -4
  246. package/audit/evidence/runtime/test-summary.md +0 -107
  247. package/audit/evidence/runtime/trace-anchors.txt +0 -61
  248. package/audit/evidence/tests/access-multitenancy-test-signals.txt +0 -125
  249. package/audit/evidence/tests/failing-tests-summary.txt +0 -25
  250. package/audit/evidence/tests/npm-test-json-rest-api.exitcode +0 -1
  251. package/audit/evidence/tests/npm-test-json-rest-api.log +0 -5885
  252. package/audit/evidence/tests/npm-test-json-rest-schema.exitcode +0 -1
  253. package/audit/evidence/tests/npm-test-json-rest-schema.log +0 -356
  254. package/audit/evidence/tests/query-include-test-signals.txt +0 -948
  255. package/audit/evidence/tests/relationship-test-signals.txt +0 -223
  256. package/audit/evidence/tests/skipped-tests.txt +0 -10
  257. package/audit/evidence/tests/test-suite-list-non-anyapi.txt +0 -30
  258. package/audit/evidence/tests/test-suite-list.txt +0 -32
  259. package/audit/subsystems/docs-drift.md +0 -49
  260. package/audit/subsystems/pass2-cross-review.md +0 -131
  261. package/audit/subsystems/plugins-access.md +0 -51
  262. package/audit/subsystems/plugins-bulk.md +0 -50
  263. package/audit/subsystems/plugins-cors.md +0 -48
  264. package/audit/subsystems/plugins-file.md +0 -53
  265. package/audit/subsystems/plugins-multihome.md +0 -50
  266. package/audit/subsystems/plugins-positioning.md +0 -54
  267. package/audit/subsystems/plugins-socketio.md +0 -50
  268. package/audit/subsystems/query-engine.md +0 -61
  269. package/audit/subsystems/relationships.md +0 -55
  270. package/audit/subsystems/rest-orchestration.md +0 -66
  271. package/audit/subsystems/schema-core.md +0 -64
  272. package/audit/subsystems/storage-knex.md +0 -57
  273. package/audit/subsystems/tests.md +0 -48
  274. package/audit/subsystems/transport-express.md +0 -55
  275. package/audit/traces/trace-read-get.md +0 -22
  276. package/audit/traces/trace-read-query.md +0 -25
  277. package/audit/traces/trace-relationship-endpoints.md +0 -31
  278. package/audit/traces/trace-write-delete.md +0 -17
  279. package/audit/traces/trace-write-patch.md +0 -26
  280. package/audit/traces/trace-write-post.md +0 -22
  281. package/audit/traces/trace-write-put.md +0 -23
  282. package/docs/GUIDE/GUIDE_4_Authentication_And_Permissions.md +0 -707
  283. package/docs/GUIDE/GUIDE_X_Multihome.md +0 -666
  284. package/plugins/core/lib/querying-writing/payload-validators.js +0 -1314
  285. package/plugins/core/rest-api-access.js +0 -459
  286. package/plugins/core/rest-api-multihome-plugin.js +0 -314
  287. package/tests/multihome.test.js +0 -553
  288. package/tests/multihome.test.js.bak +0 -550
  289. package/tests/ownership-optout.test.js +0 -76
  290. package/tests/rest-api-access.test.js +0 -206
@@ -0,0 +1,521 @@
1
+ import { describe, it, before, after, beforeEach, afterEach } from 'node:test'
2
+ import assert from 'node:assert/strict'
3
+ import knexLib from 'knex'
4
+
5
+ import { introspectKnexTableSnapshot } from '../plugins/core/lib/dbIntrospection.js'
6
+ import { createKnexTable } from '../plugins/core/lib/dbTablesOperations.js'
7
+ import { createBasicApi } from './fixtures/api-configs.js'
8
+ import { storageMode } from './helpers/storage-mode.js'
9
+
10
+ function createMysqlKnexRawDouble ({
11
+ schemaName = 'appdb',
12
+ tableCollation = 'utf8mb4_general_ci',
13
+ columns = [],
14
+ primaryKeyColumns = [],
15
+ indexes = [],
16
+ foreignKeys = [],
17
+ checkConstraints = []
18
+ } = {}) {
19
+ const knex = {
20
+ client: {
21
+ config: {
22
+ client: 'mysql2'
23
+ }
24
+ },
25
+ async raw (sql, bindings = []) {
26
+ const normalizedSql = String(sql || '').toLowerCase()
27
+
28
+ if (normalizedSql.includes('select database() as schemaname')) {
29
+ return [[{ schemaName }], []]
30
+ }
31
+ if (normalizedSql.includes('from information_schema.tables')) {
32
+ return [[{ tableCollation }], []]
33
+ }
34
+ if (normalizedSql.includes('from information_schema.columns')) {
35
+ return [[...columns], []]
36
+ }
37
+ if (normalizedSql.includes('information_schema.check_constraints')) {
38
+ return [[...checkConstraints], []]
39
+ }
40
+ if (normalizedSql.includes("t.constraint_type = 'primary key'")) {
41
+ return [[...primaryKeyColumns], []]
42
+ }
43
+ if (normalizedSql.includes('from information_schema.statistics')) {
44
+ return [[...indexes], []]
45
+ }
46
+ if (normalizedSql.includes('from information_schema.referential_constraints')) {
47
+ return [[...foreignKeys], []]
48
+ }
49
+
50
+ throw new Error(`Unexpected SQL in test double: ${normalizedSql} with bindings ${JSON.stringify(bindings)}`)
51
+ }
52
+ }
53
+
54
+ return knex
55
+ }
56
+
57
+ function makeSchemaInfo (tableName, idProperty = 'id') {
58
+ return { tableName, idProperty }
59
+ }
60
+
61
+ function makeTableSchema (structure) {
62
+ return { structure }
63
+ }
64
+
65
+ describe('dbIntrospection.introspectKnexTableSnapshot (sqlite)', () => {
66
+ let db
67
+
68
+ beforeEach(() => {
69
+ db = knexLib({
70
+ client: 'better-sqlite3',
71
+ connection: {
72
+ filename: ':memory:'
73
+ },
74
+ useNullAsDefault: true
75
+ })
76
+ })
77
+
78
+ afterEach(async () => {
79
+ await db.destroy()
80
+ })
81
+
82
+ it('maps SQLite table metadata to a normalized snapshot', async () => {
83
+ await db.raw('PRAGMA foreign_keys = ON')
84
+ await db.raw(`
85
+ CREATE TABLE workspaces (
86
+ id INTEGER PRIMARY KEY AUTOINCREMENT,
87
+ name TEXT NOT NULL
88
+ )
89
+ `)
90
+ await db.raw(`
91
+ CREATE TABLE contacts (
92
+ id INTEGER PRIMARY KEY AUTOINCREMENT,
93
+ workspace_id INTEGER,
94
+ user_id INTEGER,
95
+ first_name VARCHAR(160) NOT NULL,
96
+ vip BOOLEAN NOT NULL DEFAULT 0,
97
+ balance DECIMAL(10,2),
98
+ updated_at DATETIME(3) DEFAULT CURRENT_TIMESTAMP,
99
+ settings_json TEXT,
100
+ CONSTRAINT contacts_workspace_id_foreign FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON UPDATE CASCADE ON DELETE SET NULL,
101
+ CONSTRAINT settings_json_check CHECK (settings_json IS NULL OR length(settings_json) > 0)
102
+ )
103
+ `)
104
+ await db.raw('CREATE INDEX idx_contacts_first_name ON contacts(first_name)')
105
+ await db.raw('CREATE UNIQUE INDEX uq_contacts_vip ON contacts(vip)')
106
+
107
+ const snapshot = await introspectKnexTableSnapshot(db, {
108
+ tableName: 'contacts',
109
+ idColumn: 'id'
110
+ })
111
+
112
+ assert.equal(snapshot.dialect, 'sqlite')
113
+ assert.equal(snapshot.schemaName, 'main')
114
+ assert.equal(snapshot.tableName, 'contacts')
115
+ assert.equal(snapshot.idColumn, 'id')
116
+ assert.deepEqual(snapshot.primaryKeyColumns, ['id'])
117
+ assert.equal(snapshot.hasWorkspaceIdColumn, true)
118
+ assert.equal(snapshot.hasUserIdColumn, true)
119
+
120
+ const idColumn = snapshot.columns.find((column) => column.name === 'id')
121
+ assert.ok(idColumn)
122
+ assert.equal(idColumn.typeKind, 'integer')
123
+ assert.equal(idColumn.autoIncrement, true)
124
+
125
+ const firstName = snapshot.columns.find((column) => column.name === 'first_name')
126
+ assert.ok(firstName)
127
+ assert.equal(firstName.key, 'firstName')
128
+ assert.equal(firstName.typeKind, 'string')
129
+ assert.equal(firstName.maxLength, 160)
130
+
131
+ const vip = snapshot.columns.find((column) => column.name === 'vip')
132
+ assert.ok(vip)
133
+ assert.equal(vip.typeKind, 'boolean')
134
+ assert.equal(vip.defaultValue, '0')
135
+
136
+ const balance = snapshot.columns.find((column) => column.name === 'balance')
137
+ assert.ok(balance)
138
+ assert.equal(balance.numericPrecision, 10)
139
+ assert.equal(balance.numericScale, 2)
140
+
141
+ const updatedAt = snapshot.columns.find((column) => column.name === 'updated_at')
142
+ assert.ok(updatedAt)
143
+ assert.equal(updatedAt.datetimePrecision, 3)
144
+
145
+ assert.deepEqual(snapshot.indexes, [
146
+ {
147
+ name: 'idx_contacts_first_name',
148
+ unique: false,
149
+ indexType: '',
150
+ columns: ['first_name']
151
+ },
152
+ {
153
+ name: 'uq_contacts_vip',
154
+ unique: true,
155
+ indexType: '',
156
+ columns: ['vip']
157
+ }
158
+ ])
159
+
160
+ assert.deepEqual(snapshot.foreignKeys, [
161
+ {
162
+ name: 'contacts_workspace_id_foreign',
163
+ referencedTableName: 'workspaces',
164
+ updateRule: 'CASCADE',
165
+ deleteRule: 'SET NULL',
166
+ columns: [
167
+ {
168
+ name: 'workspace_id',
169
+ referencedName: 'id'
170
+ }
171
+ ]
172
+ }
173
+ ])
174
+
175
+ assert.deepEqual(snapshot.checkConstraints, [
176
+ {
177
+ name: 'settings_json_check',
178
+ clause: 'settings_json IS NULL OR length(settings_json) > 0'
179
+ }
180
+ ])
181
+ })
182
+
183
+ it('introspects storage-mapped columns created through table helpers', async () => {
184
+ const schema = makeTableSchema({
185
+ displayName: { type: 'string', required: true, storage: { column: 'display_name' } },
186
+ lastSeenAt: { type: 'dateTime', storage: { column: 'last_seen_at' } }
187
+ })
188
+
189
+ await createKnexTable(db, makeSchemaInfo('profiles'), schema)
190
+
191
+ const snapshot = await introspectKnexTableSnapshot(db, {
192
+ tableName: 'profiles',
193
+ idColumn: 'id'
194
+ })
195
+
196
+ assert.ok(snapshot.columns.some((column) => column.name === 'display_name'))
197
+ assert.ok(snapshot.columns.some((column) => column.name === 'last_seen_at'))
198
+ assert.equal(snapshot.columns.some((column) => column.name === 'displayName'), false)
199
+ assert.equal(snapshot.columns.some((column) => column.name === 'lastSeenAt'), false)
200
+
201
+ const displayNameColumn = snapshot.columns.find((column) => column.name === 'display_name')
202
+ assert.ok(displayNameColumn)
203
+ assert.equal(displayNameColumn.key, 'displayName')
204
+ assert.equal(displayNameColumn.typeKind, 'string')
205
+
206
+ const lastSeenAtColumn = snapshot.columns.find((column) => column.name === 'last_seen_at')
207
+ assert.ok(lastSeenAtColumn)
208
+ assert.equal(lastSeenAtColumn.key, 'lastSeenAt')
209
+ assert.equal(lastSeenAtColumn.typeKind, 'datetime')
210
+ })
211
+
212
+ it('supports custom mapped id columns when the physical table uses that id column', async () => {
213
+ await db.raw(`
214
+ CREATE TABLE books (
215
+ book_id INTEGER PRIMARY KEY AUTOINCREMENT,
216
+ title TEXT NOT NULL
217
+ )
218
+ `)
219
+
220
+ const snapshot = await introspectKnexTableSnapshot(db, {
221
+ tableName: 'books',
222
+ idColumn: 'book_id'
223
+ })
224
+
225
+ assert.equal(snapshot.idColumn, 'book_id')
226
+ assert.deepEqual(snapshot.primaryKeyColumns, ['book_id'])
227
+ assert.ok(snapshot.columns.some((column) => column.name === 'book_id'))
228
+ assert.equal(snapshot.columns.some((column) => column.name === 'id'), false)
229
+
230
+ const bookIdColumn = snapshot.columns.find((column) => column.name === 'book_id')
231
+ assert.ok(bookIdColumn)
232
+ assert.equal(bookIdColumn.typeKind, 'integer')
233
+ assert.equal(bookIdColumn.autoIncrement, true)
234
+ assert.equal(bookIdColumn.nullable, false)
235
+ })
236
+
237
+ it('captures multiple SQLite check constraints across inline and table-level definitions', async () => {
238
+ await db.raw(`
239
+ CREATE TABLE quality_checks (
240
+ id INTEGER PRIMARY KEY AUTOINCREMENT,
241
+ rating INTEGER CHECK (rating >= 1 AND rating <= 5),
242
+ status TEXT CHECK (status IN ('active', 'inactive')),
243
+ score INTEGER,
244
+ CONSTRAINT score_non_negative CHECK (score >= 0)
245
+ )
246
+ `)
247
+
248
+ const snapshot = await introspectKnexTableSnapshot(db, {
249
+ tableName: 'quality_checks',
250
+ idColumn: 'id'
251
+ })
252
+
253
+ assert.equal(snapshot.checkConstraints.length, 3)
254
+ assert.ok(snapshot.checkConstraints.some((constraint) => (
255
+ constraint.clause === 'rating >= 1 AND rating <= 5'
256
+ )))
257
+ assert.ok(snapshot.checkConstraints.some((constraint) => (
258
+ constraint.clause === "status IN ('active', 'inactive')"
259
+ )))
260
+ assert.ok(snapshot.checkConstraints.some((constraint) => (
261
+ constraint.name === 'score_non_negative' &&
262
+ constraint.clause === 'score >= 0'
263
+ )))
264
+ })
265
+
266
+ it('preserves ordered composite indexes from SQLite metadata', async () => {
267
+ await db.raw(`
268
+ CREATE TABLE memberships (
269
+ id INTEGER PRIMARY KEY AUTOINCREMENT,
270
+ workspace_id INTEGER NOT NULL,
271
+ user_id INTEGER NOT NULL
272
+ )
273
+ `)
274
+ await db.raw('CREATE UNIQUE INDEX uq_memberships_workspace_user ON memberships(workspace_id, user_id)')
275
+
276
+ const snapshot = await introspectKnexTableSnapshot(db, {
277
+ tableName: 'memberships',
278
+ idColumn: 'id'
279
+ })
280
+
281
+ assert.deepEqual(snapshot.indexes, [
282
+ {
283
+ name: 'uq_memberships_workspace_user',
284
+ unique: true,
285
+ indexType: '',
286
+ columns: ['workspace_id', 'user_id']
287
+ }
288
+ ])
289
+ })
290
+
291
+ it('throws for empty, invalid, missing, and unsupported introspection inputs', async () => {
292
+ await assert.rejects(
293
+ () => introspectKnexTableSnapshot(db, { tableName: '' }),
294
+ /requires tableName/
295
+ )
296
+
297
+ await assert.rejects(
298
+ () => introspectKnexTableSnapshot(db, { tableName: 'users;drop_table' }),
299
+ /Invalid table name/
300
+ )
301
+
302
+ await assert.rejects(
303
+ () => introspectKnexTableSnapshot(db, { tableName: 'missing_table', idColumn: 'id' }),
304
+ /Could not introspect table "missing_table"/
305
+ )
306
+
307
+ const unsupportedKnex = {
308
+ client: {
309
+ config: {
310
+ client: 'pg'
311
+ }
312
+ },
313
+ async raw () {
314
+ return []
315
+ }
316
+ }
317
+
318
+ await assert.rejects(
319
+ () => introspectKnexTableSnapshot(unsupportedKnex, { tableName: 'users', idColumn: 'id' }),
320
+ /Unsupported knex client/
321
+ )
322
+ })
323
+ })
324
+
325
+ describe('dbIntrospection.introspectKnexTableSnapshot (mysql raw double)', () => {
326
+ it('maps MySQL table metadata to a normalized snapshot', async () => {
327
+ const knex = createMysqlKnexRawDouble({
328
+ columns: [
329
+ {
330
+ columnName: 'id',
331
+ dataType: 'int',
332
+ columnType: 'int unsigned',
333
+ isNullable: 'NO',
334
+ columnDefault: null,
335
+ extra: 'auto_increment',
336
+ numericPrecision: 10,
337
+ numericScale: 0,
338
+ datetimePrecision: null,
339
+ ordinalPosition: 1
340
+ },
341
+ {
342
+ columnName: 'workspace_id',
343
+ dataType: 'int',
344
+ columnType: 'int unsigned',
345
+ isNullable: 'YES',
346
+ columnDefault: 'NULL',
347
+ extra: '',
348
+ numericPrecision: 10,
349
+ numericScale: 0,
350
+ datetimePrecision: null,
351
+ ordinalPosition: 2
352
+ },
353
+ {
354
+ columnName: 'contact_tier',
355
+ dataType: 'enum',
356
+ columnType: "enum('VIP','New')",
357
+ isNullable: 'NO',
358
+ columnDefault: 'VIP',
359
+ extra: '',
360
+ characterSetName: 'utf8mb4',
361
+ collationName: 'utf8mb4_general_ci',
362
+ ordinalPosition: 3
363
+ },
364
+ {
365
+ columnName: 'contact_flags',
366
+ dataType: 'set',
367
+ columnType: "set('featured','archived')",
368
+ isNullable: 'YES',
369
+ columnDefault: null,
370
+ extra: '',
371
+ characterSetName: 'utf8mb4',
372
+ collationName: 'utf8mb4_general_ci',
373
+ ordinalPosition: 4
374
+ },
375
+ {
376
+ columnName: 'balance',
377
+ dataType: 'decimal',
378
+ columnType: 'decimal(10,2)',
379
+ isNullable: 'YES',
380
+ columnDefault: null,
381
+ extra: '',
382
+ numericPrecision: 10,
383
+ numericScale: 2,
384
+ datetimePrecision: null,
385
+ ordinalPosition: 5
386
+ },
387
+ {
388
+ columnName: 'updated_at',
389
+ dataType: 'datetime',
390
+ columnType: 'datetime(3)',
391
+ isNullable: 'NO',
392
+ columnDefault: 'CURRENT_TIMESTAMP',
393
+ extra: '',
394
+ numericPrecision: null,
395
+ numericScale: null,
396
+ datetimePrecision: 3,
397
+ ordinalPosition: 6
398
+ }
399
+ ],
400
+ primaryKeyColumns: [{ columnName: 'id' }],
401
+ indexes: [
402
+ {
403
+ indexName: 'idx_contacts_balance',
404
+ nonUnique: 1,
405
+ indexType: 'BTREE',
406
+ columnName: 'balance',
407
+ seqInIndex: 1
408
+ }
409
+ ],
410
+ foreignKeys: [
411
+ {
412
+ constraintName: 'contacts_workspace_id_foreign',
413
+ columnName: 'workspace_id',
414
+ referencedTableName: 'workspaces',
415
+ referencedColumnName: 'id',
416
+ ordinalPosition: 1,
417
+ updateRule: 'CASCADE',
418
+ deleteRule: 'SET NULL'
419
+ }
420
+ ],
421
+ checkConstraints: [
422
+ {
423
+ constraintName: 'contacts_balance_check',
424
+ checkClause: '(`balance` >= 0)'
425
+ }
426
+ ]
427
+ })
428
+
429
+ const snapshot = await introspectKnexTableSnapshot(knex, {
430
+ tableName: 'contacts',
431
+ idColumn: 'id'
432
+ })
433
+
434
+ assert.equal(snapshot.dialect, 'mysql2')
435
+ assert.equal(snapshot.tableName, 'contacts')
436
+ assert.equal(snapshot.tableCollation, 'utf8mb4_general_ci')
437
+
438
+ const contactTier = snapshot.columns.find((column) => column.name === 'contact_tier')
439
+ assert.ok(contactTier)
440
+ assert.deepEqual(contactTier.enumValues, ['VIP', 'New'])
441
+
442
+ const contactFlags = snapshot.columns.find((column) => column.name === 'contact_flags')
443
+ assert.ok(contactFlags)
444
+ assert.deepEqual(contactFlags.setValues, ['featured', 'archived'])
445
+
446
+ const balance = snapshot.columns.find((column) => column.name === 'balance')
447
+ assert.ok(balance)
448
+ assert.equal(balance.numericPrecision, 10)
449
+ assert.equal(balance.numericScale, 2)
450
+
451
+ const updatedAt = snapshot.columns.find((column) => column.name === 'updated_at')
452
+ assert.ok(updatedAt)
453
+ assert.equal(updatedAt.datetimePrecision, 3)
454
+
455
+ assert.deepEqual(snapshot.indexes, [
456
+ {
457
+ name: 'idx_contacts_balance',
458
+ unique: false,
459
+ indexType: 'BTREE',
460
+ columns: ['balance']
461
+ }
462
+ ])
463
+
464
+ assert.deepEqual(snapshot.foreignKeys, [
465
+ {
466
+ name: 'contacts_workspace_id_foreign',
467
+ referencedTableName: 'workspaces',
468
+ updateRule: 'CASCADE',
469
+ deleteRule: 'SET NULL',
470
+ columns: [
471
+ {
472
+ name: 'workspace_id',
473
+ referencedName: 'id'
474
+ }
475
+ ]
476
+ }
477
+ ])
478
+
479
+ assert.deepEqual(snapshot.checkConstraints, [
480
+ {
481
+ name: 'contacts_balance_check',
482
+ clause: '(`balance` >= 0)'
483
+ }
484
+ ])
485
+ })
486
+ })
487
+
488
+ const describeKnexIntrospection = storageMode.isAnyApi() ? describe.skip : describe
489
+
490
+ describeKnexIntrospection('RestApiKnexPlugin introspection scope method', () => {
491
+ let db
492
+ let api
493
+
494
+ before(async () => {
495
+ db = knexLib({
496
+ client: 'better-sqlite3',
497
+ connection: {
498
+ filename: ':memory:'
499
+ },
500
+ useNullAsDefault: true
501
+ })
502
+
503
+ api = await createBasicApi(db, {
504
+ tablePrefix: 'introspect'
505
+ })
506
+ })
507
+
508
+ after(async () => {
509
+ await db.destroy()
510
+ })
511
+
512
+ it('exposes a table snapshot scope method for table-backed resources', async () => {
513
+ const snapshot = await api.resources.countries.introspectKnexTableSnapshot()
514
+
515
+ assert.equal(snapshot.tableName, 'introspect_countries')
516
+ assert.deepEqual(snapshot.primaryKeyColumns, ['id'])
517
+ assert.ok(snapshot.columns.some((column) => column.name === 'name'))
518
+ assert.ok(snapshot.columns.some((column) => column.name === 'code'))
519
+ assert.ok(snapshot.indexes.some((index) => index.unique && index.columns.includes('code')))
520
+ })
521
+ })