prisma-guard 1.31.0 → 1.32.1

package/dist/runtime/index.js

@@ -944,40 +944,75 @@ function unsupported() {
   return marker;
 }
 
-// src/shared/match-caller.ts
-function matchCallerPattern(patterns, caller) {
-  if (typeof caller !== "string" || caller.trim().length === 0)
-    return null;
-  if (patterns.includes(caller))
-    return caller;
+// src/shared/guard-variant-routing.ts
+function matchVariantPatterns(keys, caller) {
+  const callerParts = caller.split("/");
   const matches = [];
-  for (const pattern of patterns) {
+  for (const pattern of keys) {
     if (!pattern.includes(":"))
       continue;
     const patternParts = pattern.split("/");
-    const callerParts = caller.split("/");
     if (patternParts.length !== callerParts.length)
       continue;
-    let ok = true;
-    for (let i = 0; i < patternParts.length; i++) {
-      if (patternParts[i].startsWith(":"))
+    let matchesCaller = true;
+    for (let index = 0; index < patternParts.length; index++) {
+      if (patternParts[index].startsWith(":"))
         continue;
-      if (patternParts[i] !== callerParts[i]) {
-        ok = false;
+      if (patternParts[index] !== callerParts[index]) {
+        matchesCaller = false;
         break;
       }
     }
-    if (ok)
+    if (matchesCaller)
       matches.push(pattern);
   }
-  if (matches.length === 0)
-    return null;
+  return matches;
+}
+function resolveGuardVariantKey(input) {
+  if (input.kind === "single") {
+    return { ok: true, key: "_default" };
+  }
+  const { keys, caller, reservedKeys } = input;
+  for (const key of keys) {
+    if (reservedKeys.has(key)) {
+      return {
+        ok: false,
+        code: "reserved-key",
+        key,
+        keys
+      };
+    }
+  }
+  const hasDefault = keys.includes("default");
+  if (typeof caller !== "string") {
+    if (hasDefault)
+      return { ok: true, key: "default" };
+    return { ok: false, code: "missing-caller", keys };
+  }
+  if (caller.trim().length === 0) {
+    if (hasDefault)
+      return { ok: true, key: "default" };
+    return { ok: false, code: "unknown-caller", caller, keys };
+  }
+  if (keys.includes(caller)) {
+    return { ok: true, key: caller };
+  }
+  const matches = matchVariantPatterns(keys, caller);
+  if (matches.length === 1) {
+    return { ok: true, key: matches[0] };
+  }
   if (matches.length > 1) {
-    throw new CallerError(
-      `Ambiguous caller "${caller}" matches multiple patterns: ${matches.map((p) => `"${p}"`).join(", ")}`
-    );
+    return {
+      ok: false,
+      code: "ambiguous-caller",
+      caller,
+      keys,
+      matches
+    };
   }
-  return matches[0];
+  if (hasDefault)
+    return { ok: true, key: "default" };
+  return { ok: false, code: "unknown-caller", caller, keys };
 }
 
 // src/runtime/policy.ts
@@ -1451,12 +1486,15 @@ function applyForcedCountWhere(container, forcedCountWhere) {
 }
 function resolvedWhereCoversConstraint(where, constraint) {
   if (constraint.fields.length === 1) {
-    return constraint.fields[0] in where;
+    const value2 = where[constraint.fields[0]];
+    return value2 !== null && value2 !== void 0;
   }
   const value = where[constraint.selector];
   if (!isPlainObject(value))
     return false;
-  return constraint.fields.every((field) => field in value);
+  return constraint.fields.every(
+    (field) => value[field] !== null && value[field] !== void 0
+  );
 }
 function validateResolvedUniqueWhere(model, where, method, uniqueMap) {
   const constraints = uniqueMap[model];
@@ -1483,17 +1521,16 @@ function assertDirectUniqueShapeValue(model, field, value, typeMap) {
       );
     }
   }
-  if (isForcedValue(value))
-    return;
-  if (isPlainObject(value)) {
-    const keys = Object.keys(value);
+  const actual = isForcedValue(value) ? value.value : value;
+  if (isPlainObject(actual)) {
+    const keys = Object.keys(actual);
     throw new ShapeError(
       `Invalid unique where shape for "${model ?? "unknown"}.${field}". Prisma WhereUniqueInput does not accept filter operator objects${keys.length ? `: ${keys.join(", ")}` : ""}. Use { ${field}: true } in guard shape and { ${field}: value } in request args.`
     );
   }
-  if (value === null || value === void 0) {
+  if (actual === null || actual === void 0) {
     throw new ShapeError(
-      `Invalid unique where shape for "${model ?? "unknown"}.${field}". Unique fields must use true or a forced value.`
+      `Invalid unique where shape for "${model ?? "unknown"}.${field}". Unique fields must use true or a forced non-null value.`
     );
   }
 }
@@ -1507,9 +1544,8 @@ function shapeCoversConstraint(where, constraint, model, typeMap) {
   }
   if (!(constraint.selector in where))
     return false;
-  const selectorValue = where[constraint.selector];
-  if (isForcedValue(selectorValue))
-    return true;
+  const rawSelectorValue = where[constraint.selector];
+  const selectorValue = isForcedValue(rawSelectorValue) ? rawSelectorValue.value : rawSelectorValue;
   if (!isPlainObject(selectorValue)) {
     throw new ShapeError(
       `Compound unique selector "${model}.${constraint.selector}" must be an object with fields: ${constraint.fields.join(", ")}`
@@ -2012,8 +2048,18 @@ function createWhereBuilder(typeMap, enumMap, scalarBase, uniqueMap = {}) {
       (constraint) => constraint.selector === selector
     ) ?? null;
   }
-  function parseForcedUniqueValue(model, fieldName, fieldMeta, value) {
+  function buildUniqueWhereFieldSchema(fieldMeta, allowNullableFilter) {
     const schema = buildDirectScalarSchema(fieldMeta, enumMap, scalarBase);
+    if (allowNullableFilter && !fieldMeta.isRequired) {
+      return schema.nullable();
+    }
+    return schema;
+  }
+  function parseForcedUniqueValue(model, fieldName, fieldMeta, value, allowNullableFilter) {
+    const schema = buildUniqueWhereFieldSchema(
+      fieldMeta,
+      allowNullableFilter
+    );
     const actual = isForcedValue(value) ? value.value : value;
     try {
       return schema.parse(actual);
@@ -2091,10 +2137,9 @@ function createWhereBuilder(typeMap, enumMap, scalarBase, uniqueMap = {}) {
               `Invalid compound unique where shape for "${model}.${key}.${fieldName}". Prisma compound unique selectors do not accept filter operator objects${operators.length ? `: ${operators.join(", ")}` : ""}. Use direct values only.`
             );
           }
-          const directSchema2 = buildDirectScalarSchema(
+          const directSchema2 = buildUniqueWhereFieldSchema(
             fieldMeta2,
-            enumMap,
-            scalarBase
+            false
           );
           if (fieldValue === true) {
             nestedSchemas[fieldName] = directSchema2;
@@ -2103,7 +2148,8 @@ function createWhereBuilder(typeMap, enumMap, scalarBase, uniqueMap = {}) {
               model,
               fieldName,
               fieldMeta2,
-              fieldValue
+              fieldValue,
+              false
             );
           }
         }
@@ -2142,7 +2188,7 @@ function createWhereBuilder(typeMap, enumMap, scalarBase, uniqueMap = {}) {
           `Invalid unique where shape for "${model}.${key}". Prisma WhereUniqueInput does not accept operators: ${keys.join(", ")}. Use a direct unique value shape, for example { ${key}: true }.`
         );
       }
-      const directSchema = buildDirectScalarSchema(fieldMeta, enumMap, scalarBase);
+      const directSchema = buildUniqueWhereFieldSchema(fieldMeta, true);
       if (value === true) {
         fieldSchemas[key] = directSchema;
         continue;
@@ -2151,7 +2197,8 @@ function createWhereBuilder(typeMap, enumMap, scalarBase, uniqueMap = {}) {
         model,
         key,
         fieldMeta,
-        value
+        value,
+        true
       );
       forcedOnlyKeys.add(key);
     }
@@ -3410,22 +3457,27 @@ function createQueryBuilder(typeMap, enumMap, uniqueMap, scalarBase) {
       forcedSelectCountWhere
     };
   }
-  function matchCaller(shapes, caller) {
-    const matched = matchCallerPattern(Object.keys(shapes), caller);
-    if (!matched)
-      return null;
-    return { key: matched, shape: shapes[matched] };
-  }
-  function resolveDefaultShape(config, model, method, normalizedBody, opts, builtCache, isUnique) {
-    const shapeOrFn = config.default;
-    let built;
-    if (typeof shapeOrFn === "function") {
-      const resolved = resolveAndValidateShape(shapeOrFn, opts?.ctx);
-      built = buildShapeZodSchema(model, method, resolved);
-    } else {
-      built = builtCache.get("default");
+  function throwQueryVariantResolution(resolution) {
+    const keys = resolution.keys.map((key) => `"${key}"`).join(", ");
+    if (resolution.code === "reserved-key") {
+      throw new ShapeError(
+        `Caller key "${resolution.key}" collides with reserved shape config key. Rename the caller path.`
+      );
+    }
+    if (resolution.code === "missing-caller") {
+      throw new CallerError(
+        `Missing caller. This query uses named shape routing with keys: ${keys}. Provide caller via opts.caller.`
+      );
     }
-    return applyBuiltShape(built, normalizedBody, isUnique);
+    if (resolution.code === "ambiguous-caller") {
+      const matches = (resolution.matches ?? []).map((pattern) => `"${pattern}"`).join(", ");
+      throw new CallerError(
+        `Ambiguous caller "${resolution.caller}" matches multiple patterns: ${matches}`
+      );
+    }
+    throw new CallerError(
+      `Unknown caller: "${resolution.caller}". Allowed: ${keys}`
+    );
   }
   function buildQuerySchema(model, method, config) {
     const isSingle = typeof config === "function" || isShapeConfig(config);
@@ -3437,12 +3489,15 @@ function createQueryBuilder(typeMap, enumMap, uniqueMap, scalarBase) {
       );
     }
     if (!isSingle) {
-      for (const key of Object.keys(config)) {
-        if (SHAPE_CONFIG_KEYS.has(key)) {
-          throw new ShapeError(
-            `Caller key "${key}" collides with reserved shape config key. Rename the caller path.`
-          );
-        }
+      const keys = Object.keys(config);
+      const validation = resolveGuardVariantKey({
+        kind: "named",
+        keys,
+        caller: void 0,
+        reservedKeys: SHAPE_CONFIG_KEYS
+      });
+      if (!validation.ok && validation.code === "reserved-key") {
+        throwQueryVariantResolution(validation);
       }
       for (const [key, shapeOrFn] of Object.entries(
         config
@@ -3480,50 +3535,37 @@ function createQueryBuilder(typeMap, enumMap, uniqueMap, scalarBase) {
             );
           }
           const namedConfig = config;
-          const caller = opts?.caller;
-          if (typeof caller !== "string") {
-            if ("default" in namedConfig) {
-              return resolveDefaultShape(
-                namedConfig,
-                model,
-                method,
-                normalizedBody,
-                opts,
-                builtCache,
-                isUnique
-              );
-            }
-            const allowed = Object.keys(namedConfig);
-            throw new CallerError(
-              `Missing caller. This query uses named shape routing with keys: ${allowed.map((k) => `"${k}"`).join(", ")}. Provide caller via opts.caller.`
-            );
-          }
-          const matched = matchCaller(namedConfig, caller);
-          if (!matched) {
-            if ("default" in namedConfig) {
-              return resolveDefaultShape(
-                namedConfig,
-                model,
-                method,
-                normalizedBody,
-                opts,
-                builtCache,
-                isUnique
-              );
-            }
-            const allowed = Object.keys(namedConfig);
-            throw new CallerError(
-              `Unknown caller: "${caller}". Allowed: ${allowed.map((k) => `"${k}"`).join(", ")}`
-            );
-          }
-          if (typeof matched.shape === "function") {
-            const resolved = resolveAndValidateShape(matched.shape, opts?.ctx);
+          const resolution = resolveGuardVariantKey({
+            kind: "named",
+            keys: Object.keys(namedConfig),
+            caller: opts?.caller,
+            reservedKeys: SHAPE_CONFIG_KEYS
+          });
+          if (!resolution.ok)
+            throwQueryVariantResolution(resolution);
+          const shapeOrFn = namedConfig[resolution.key];
+          if (typeof shapeOrFn === "function") {
+            const resolved = resolveAndValidateShape(shapeOrFn, opts?.ctx);
             built = buildShapeZodSchema(model, method, resolved);
           } else {
-            built = builtCache.get(matched.key);
+            built = builtCache.get(resolution.key);
           }
         }
-        return applyBuiltShape(built, normalizedBody, isUnique);
+        const result = applyBuiltShape(
+          built,
+          normalizedBody,
+          isUnique,
+          model
+        );
+        if (isUnique && result.where) {
+          validateResolvedUniqueWhere(
+            model,
+            result.where,
+            method,
+            uniqueMap
+          );
+        }
+        return result;
       }
     };
   }
@@ -4755,34 +4797,43 @@ function resolveDynamicShape(shapeFn, ctx, context) {
   }
   return result;
 }
-function resolveNamedShape(input, body, contextFn, explicitCaller) {
-  assertNoCallerInBody(body);
-  const caller = explicitCaller;
-  const keys = Object.keys(input);
-  for (const key of keys) {
-    if (GUARD_SHAPE_KEYS.has(key)) {
-      throw new ShapeError(
-        `Caller key "${key}" collides with reserved guard shape key. Rename the caller path.`
-      );
-    }
+function throwVariantResolution(resolution) {
+  const keys = resolution.keys.map((key) => `"${key}"`).join(", ");
+  if (resolution.code === "reserved-key") {
+    throw new ShapeError(
+      `Caller key "${resolution.key}" collides with reserved guard shape key. Rename the caller path.`
+    );
   }
-  if (typeof caller !== "string") {
-    if ("default" in input) {
-      return resolveShapeEntry(input.default, body, contextFn, "default");
-    }
+  if (resolution.code === "missing-caller") {
     throw new CallerError(
-      `Missing caller. This guard uses named shape routing with keys: ${keys.map((k) => `"${k}"`).join(", ")}. Provide caller via guard(input, caller).`
+      `Missing caller. This guard uses named shape routing with keys: ${keys}. Provide caller via guard(input, caller).`
     );
   }
-  const matched = matchCallerPattern(keys, caller);
-  if (matched) {
-    return resolveShapeEntry(input[matched], body, contextFn, matched);
-  }
-  if ("default" in input) {
-    return resolveShapeEntry(input.default, body, contextFn, "default");
+  if (resolution.code === "ambiguous-caller") {
+    const matches = (resolution.matches ?? []).map((pattern) => `"${pattern}"`).join(", ");
+    throw new CallerError(
+      `Ambiguous caller "${resolution.caller}" matches multiple patterns: ${matches}`
+    );
   }
   throw new CallerError(
-    `Unknown caller: "${caller}". Allowed: ${keys.map((k) => `"${k}"`).join(", ")}`
+    `Unknown caller: "${resolution.caller}". Allowed: ${keys}`
+  );
+}
+function resolveNamedShape(input, body, contextFn, explicitCaller) {
+  assertNoCallerInBody(body);
+  const resolution = resolveGuardVariantKey({
+    kind: "named",
+    keys: Object.keys(input),
+    caller: explicitCaller,
+    reservedKeys: GUARD_SHAPE_KEYS
+  });
+  if (!resolution.ok)
+    throwVariantResolution(resolution);
+  return resolveShapeEntry(
+    input[resolution.key],
+    body,
+    contextFn,
+    resolution.key
   );
 }
 function resolveShapeEntry(entry, body, contextFn, matchedKey) {