velocious 1.0.201 → 1.0.203

package/README.md

@@ -243,6 +243,43 @@ npx velocious g:model Account
 npx velocious g:model Task
 ```
 
+## Frontend models from backend resources
+
+You can generate lightweight frontend model classes from resource definitions in your configuration.
+
+```js
+export default new Configuration({
+  // ...
+  backendProjects: [
+    {
+      path: "/path/to/backend-project",
+      resources: {
+        User: {
+          attributes: ["id", "name", "email"],
+          commands: {find: "find", update: "update", destroy: "destroy"},
+          path: "/api/frontend-models/users",
+          primaryKey: "id"
+        }
+      }
+    }
+  ]
+})
+```
+
+Generate classes:
+
+```bash
+npx velocious g:frontend-models
+```
+
+This creates `src/frontend-models/user.js` (and one file per configured resource). Generated classes support:
+
+- `await User.find(5)`
+- `await user.update({...})`
+- `await user.destroy()`
+- Attribute methods like `user.name()` and `user.setName(...)`
+
+
 ```js
 import Record from "velocious/build/src/database/record/index.js"
 
@@ -1159,3 +1196,54 @@ If a handed-off job does not report back within 2 hours, it is marked orphaned a
 ```bash
 npx velocious server --host 0.0.0.0 --port 8082
 ```
+
+# Authorization (CanCan-style)
+
+Define resource classes with an `abilities()` method and use `can` / `cannot` rules to constrain model access.
+
+```js
+import Ability from "velocious/build/src/authorization/ability.js"
+import BaseResource from "velocious/build/src/authorization/base-resource.js"
+import User from "@/src/models/user"
+
+class UserResource extends BaseResource {
+  static ModelClass = User
+
+  abilities() {
+    const currentUser = this.currentUser()
+
+    if (currentUser) {
+      this.can("read", User, {id: currentUser.id()})
+    }
+  }
+}
+
+export default new Configuration({
+  // ...
+  abilityResolver: ({configuration, params, request, response}) => {
+    return new Ability({
+      context: {
+        configuration,
+        currentUser: undefined, // set from your auth/session layer
+        params,
+        request,
+        response
+      },
+      resources: [UserResource]
+    })
+  }
+})
+```
+
+Then query through authorization rules:
+
+```js
+const users = await User.accessible().toArray()
+```
+
+You can also pass an ability explicitly:
+
+```js
+const ability = new Ability({context: {currentUser}, resources: [UserResource]})
+const users = await User.accessible(ability).toArray()
+```

package/build/src/authorization/ability.d.ts

@@ -0,0 +1,167 @@
+/** @typedef {Record<string, any> | string | ((query: import("../database/query/model-class-query.js").default<any>, args: {ability: VelociousAuthorizationAbility, action: string, modelClass: typeof import("../database/record/index.js").default}) => void | import("../database/query/model-class-query.js").default<any>)} AbilityConditionsType */
+/**
+ * @typedef {object} AbilityRuleType
+ * @property {string[]} actions - Actions covered by rule.
+ * @property {typeof import("../database/record/index.js").default} modelClass - Model class.
+ * @property {AbilityConditionsType | undefined} conditions - Conditions.
+ * @property {"allow" | "deny"} effect - Rule effect.
+ */
+/** CanCan-style ability object for query-level access control. */
+export default class VelociousAuthorizationAbility {
+    /** @type {string[]} */
+    static CREATE: string[];
+    /** @type {string[]} */
+    static READ: string[];
+    /** @type {string[]} */
+    static UPDATE: string[];
+    /** @type {string[]} */
+    static DESTROY: string[];
+    /** @type {string[]} */
+    static CRUD: string[];
+    /**
+     * @param {object} args - Ability args.
+     * @param {Record<string, any>} [args.context] - Ability context.
+     * @param {Record<string, any>} [args.locals] - Ability locals.
+     * @param {Array<typeof BaseResource>} [args.resources] - Resource classes.
+     */
+    constructor({ context, locals, resources }?: {
+        context?: Record<string, any>;
+        locals?: Record<string, any>;
+        resources?: Array<typeof BaseResource>;
+    });
+    context: Record<string, any>;
+    locals: Record<string, any>;
+    resources: (typeof BaseResource)[];
+    /** @type {AbilityRuleType[]} */
+    rules: AbilityRuleType[];
+    /** @type {Record<string, boolean>} */
+    loadedModelClassAbilities: Record<string, boolean>;
+    /** @returns {Record<string, any>} - Context. */
+    getContext(): Record<string, any>;
+    /** @returns {Record<string, any>} - Locals. */
+    getLocals(): Record<string, any>;
+    /** @returns {any} - Current user from context. */
+    currentUser(): any;
+    /**
+     * @param {string | string[]} actions - Action(s).
+     * @param {typeof import("../database/record/index.js").default} modelClass - Model class.
+     * @param {AbilityConditionsType} [conditions] - Conditions.
+     * @returns {void} - No return value.
+     */
+    can(actions: string | string[], modelClass: typeof import("../database/record/index.js").default, conditions?: AbilityConditionsType): void;
+    /**
+     * @param {string | string[]} actions - Action(s).
+     * @param {typeof import("../database/record/index.js").default} modelClass - Model class.
+     * @param {AbilityConditionsType} [conditions] - Conditions.
+     * @returns {void} - No return value.
+     */
+    cannot(actions: string | string[], modelClass: typeof import("../database/record/index.js").default, conditions?: AbilityConditionsType): void;
+    /**
+     * @param {object} args - Rule args.
+     * @param {string | string[]} args.actions - Action(s).
+     * @param {AbilityConditionsType} [args.conditions] - Conditions.
+     * @param {"allow" | "deny"} args.effect - Effect.
+     * @param {typeof import("../database/record/index.js").default} args.modelClass - Model class.
+     * @returns {void} - No return value.
+     */
+    addRule({ actions, conditions, effect, modelClass }: {
+        actions: string | string[];
+        conditions?: AbilityConditionsType;
+        effect: "allow" | "deny";
+        modelClass: typeof import("../database/record/index.js").default;
+    }): void;
+    /**
+     * @param {typeof import("../database/record/index.js").default} modelClass - Model class.
+     * @returns {void} - No return value.
+     */
+    loadAbilitiesForModelClass(modelClass: typeof import("../database/record/index.js").default): void;
+    /**
+     * @param {object} args - Query args.
+     * @param {string} args.action - Requested action.
+     * @param {typeof import("../database/record/index.js").default} args.modelClass - Model class.
+     * @param {import("../database/query/model-class-query.js").default<any>} args.query - Query.
+     * @returns {import("../database/query/model-class-query.js").default<any>} - Authorized query.
+     */
+    applyToQuery({ action, modelClass, query }: {
+        action: string;
+        modelClass: typeof import("../database/record/index.js").default;
+        query: import("../database/query/model-class-query.js").default<any>;
+    }): import("../database/query/model-class-query.js").default<any>;
+    /**
+     * @param {object} args - Rule lookup args.
+     * @param {string} args.action - Action.
+     * @param {typeof import("../database/record/index.js").default} args.modelClass - Model class.
+     * @returns {AbilityRuleType[]} - Matching rules.
+     */
+    rulesFor({ action, modelClass }: {
+        action: string;
+        modelClass: typeof import("../database/record/index.js").default;
+    }): AbilityRuleType[];
+    /**
+     * @param {object} args - SQL args.
+     * @param {string} args.action - Action.
+     * @param {typeof import("../database/record/index.js").default} args.modelClass - Model class.
+     * @param {import("../database/query/model-class-query.js").default<any>} args.query - Base query.
+     * @param {AbilityRuleType[]} args.rules - Rules.
+     * @returns {string[]} - SQL condition parts.
+     */
+    conditionSqlParts({ action, modelClass, query, rules }: {
+        action: string;
+        modelClass: typeof import("../database/record/index.js").default;
+        query: import("../database/query/model-class-query.js").default<any>;
+        rules: AbilityRuleType[];
+    }): string[];
+    /**
+     * @param {object} args - Deny args.
+     * @param {string} args.action - Action.
+     * @param {AbilityRuleType[]} args.denyRules - Deny rules.
+     * @param {typeof import("../database/record/index.js").default} args.modelClass - Model class.
+     * @param {import("../database/query/model-class-query.js").default<any>} args.query - Query.
+     * @returns {void} - No return value.
+     */
+    applyDenyRules({ action, denyRules, modelClass, query }: {
+        action: string;
+        denyRules: AbilityRuleType[];
+        modelClass: typeof import("../database/record/index.js").default;
+        query: import("../database/query/model-class-query.js").default<any>;
+    }): void;
+    /**
+     * @param {object} args - Condition args.
+     * @param {string} args.action - Action.
+     * @param {AbilityConditionsType} args.conditions - Rule conditions.
+     * @param {typeof import("../database/record/index.js").default} args.modelClass - Model class.
+     * @param {import("../database/query/model-class-query.js").default<any>} args.query - Query.
+     * @returns {void | import("../database/query/model-class-query.js").default<any>} - Optional replacement query.
+     */
+    applyRuleCondition({ action, conditions, modelClass, query }: {
+        action: string;
+        conditions: AbilityConditionsType;
+        modelClass: typeof import("../database/record/index.js").default;
+        query: import("../database/query/model-class-query.js").default<any>;
+    }): void | import("../database/query/model-class-query.js").default<any>;
+}
+export type AbilityConditionsType = Record<string, any> | string | ((query: import("../database/query/model-class-query.js").default<any>, args: {
+    ability: VelociousAuthorizationAbility;
+    action: string;
+    modelClass: typeof import("../database/record/index.js").default;
+}) => void | import("../database/query/model-class-query.js").default<any>);
+export type AbilityRuleType = {
+    /**
+     * - Actions covered by rule.
+     */
+    actions: string[];
+    /**
+     * - Model class.
+     */
+    modelClass: typeof import("../database/record/index.js").default;
+    /**
+     * - Conditions.
+     */
+    conditions: AbilityConditionsType | undefined;
+    /**
+     * - Rule effect.
+     */
+    effect: "allow" | "deny";
+};
+import BaseResource from "./base-resource.js";
+//# sourceMappingURL=ability.d.ts.map

package/build/src/authorization/ability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ability.d.ts","sourceRoot":"","sources":["../../../src/authorization/ability.js"],"names":[],"mappings":"AAIA,yVAAyV;AAEzV;;;;;;GAMG;AAEH,kEAAkE;AAClE;IACE,uBAAuB;IACvB,eADW,MAAM,EAAE,CACO;IAE1B,uBAAuB;IACvB,aADW,MAAM,EAAE,CACG;IAEtB,uBAAuB;IACvB,eADW,MAAM,EAAE,CACO;IAE1B,uBAAuB;IACvB,gBADW,MAAM,EAAE,CACS;IAE5B,uBAAuB;IACvB,aADW,MAAM,EAAE,CACkC;IAErD;;;;;OAKG;IACH,6CAJG;QAAmC,OAAO,GAAlC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;QACQ,MAAM,GAAjC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;QACe,SAAS,GAA3C,KAAK,CAAC,OAAO,YAAY,CAAC;KACpC,EAWA;IATC,6BAAsB;IACtB,4BAAoB;IACpB,mCAA0B;IAE1B,gCAAgC;IAChC,OADW,eAAe,EAAE,CACb;IAEf,sCAAsC;IACtC,2BADW,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CACC;IAGrC,gDAAgD;IAChD,cADc,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAGhC;IAED,+CAA+C;IAC/C,aADc,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAGhC;IAED,kDAAkD;IAClD,eADc,GAAG,CAGhB;IAED;;;;;OAKG;IACH,aALW,MAAM,GAAG,MAAM,EAAE,cACjB,cAAc,6BAA6B,EAAE,OAAO,eACpD,qBAAqB,GACnB,IAAI,CAIhB;IAED;;;;;OAKG;IACH,gBALW,MAAM,GAAG,MAAM,EAAE,cACjB,cAAc,6BAA6B,EAAE,OAAO,eACpD,qBAAqB,GACnB,IAAI,CAIhB;IAED;;;;;;;OAOG;IACH,qDANG;QAAgC,OAAO,EAA/B,MAAM,GAAG,MAAM,EAAE;QACY,UAAU,GAAvC,qBAAqB;QACE,MAAM,EAA7B,OAAO,GAAG,MAAM;QAC2C,UAAU,EAArE,cAAc,6BAA6B,EAAE,OAAO;KAC5D,GAAU,IAAI,CAMhB;IAED;;;OAGG;IACH,uCAHW,cAAc,6BAA6B,EAAE,OAAO,GAClD,IAAI,CAuBhB;IAED;;;;;;OAMG;IACH,4CALG;QAAqB,MAAM,EAAnB,MAAM;QACqD,UAAU,EAArE,cAAc,6BAA6B,EAAE,OAAO;QACgB,KAAK,EAAzE,OAAO,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC;KACrE,GAAU,OAAO,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC,CA4BzE;IAED;;;;;OAKG;IACH,iCAJG;QAAqB,MAAM,EAAnB,MAAM;QACqD,UAAU,EAArE,cAAc,6BAA6B,EAAE,OAAO;KAC5D,GAAU,eAAe,EAAE,CAQ7B;IAED;;;;;;;OAOG;IACH,wDANG;QAAqB,MAAM,EAAnB,MAAM;QACqD,UAAU,EAArE,cAAc,6BAA6B,EAAE,OAAO;QACgB,KAAK,EAAzE,OAAO,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC;QACrC,KAAK,EAA7B,eAAe,EAAE;KACzB,GAAU,MAAM,EAAE,CA2BpB;IAED;;;;;;;OAOG;IACH,yDANG;QAAqB,MAAM,EAAnB,MAAM;QACkB,SAAS,EAAjC,eAAe,EAAE;QAC0C,UAAU,EAArE,cAAc,6BAA6B,EAAE,OAAO;QACgB,KAAK,EAAzE,OAAO,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC;KACrE,GAAU,IAAI,CAehB;IAED;;;;;;;OAOG;IACH,8DANG;QAAqB,MAAM,EAAnB,MAAM;QACsB,UAAU,EAAtC,qBAAqB;QACsC,UAAU,EAArE,cAAc,6BAA6B,EAAE,OAAO;QACgB,KAAK,EAAzE,OAAO,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC;KACrE,GAAU,IAAI,GAAG,OAAO,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC,CAiBhF;CACF;oCA5Pa,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;IAAC,OAAO,EAAE,6BAA6B,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,cAAc,6BAA6B,EAAE,OAAO,CAAA;CAAC,KAAK,IAAI,GAAG,OAAO,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;;;;;aAIjT,MAAM,EAAE;;;;gBACR,cAAc,6BAA6B,EAAE,OAAO;;;;gBACpD,qBAAqB,GAAG,SAAS;;;;YACjC,OAAO,GAAG,MAAM;;yBATL,oBAAoB"}

package/build/src/authorization/ability.js

@@ -0,0 +1,216 @@
+// @ts-check
+import BaseResource from "./base-resource.js";
+/** @typedef {Record<string, any> | string | ((query: import("../database/query/model-class-query.js").default<any>, args: {ability: VelociousAuthorizationAbility, action: string, modelClass: typeof import("../database/record/index.js").default}) => void | import("../database/query/model-class-query.js").default<any>)} AbilityConditionsType */
+/**
+ * @typedef {object} AbilityRuleType
+ * @property {string[]} actions - Actions covered by rule.
+ * @property {typeof import("../database/record/index.js").default} modelClass - Model class.
+ * @property {AbilityConditionsType | undefined} conditions - Conditions.
+ * @property {"allow" | "deny"} effect - Rule effect.
+ */
+/** CanCan-style ability object for query-level access control. */
+export default class VelociousAuthorizationAbility {
+    /** @type {string[]} */
+    static CREATE = ["create"];
+    /** @type {string[]} */
+    static READ = ["read"];
+    /** @type {string[]} */
+    static UPDATE = ["update"];
+    /** @type {string[]} */
+    static DESTROY = ["destroy"];
+    /** @type {string[]} */
+    static CRUD = ["create", "read", "update", "destroy"];
+    /**
+     * @param {object} args - Ability args.
+     * @param {Record<string, any>} [args.context] - Ability context.
+     * @param {Record<string, any>} [args.locals] - Ability locals.
+     * @param {Array<typeof BaseResource>} [args.resources] - Resource classes.
+     */
+    constructor({ context = {}, locals = {}, resources = [] } = {}) {
+        this.context = context;
+        this.locals = locals;
+        this.resources = resources;
+        /** @type {AbilityRuleType[]} */
+        this.rules = [];
+        /** @type {Record<string, boolean>} */
+        this.loadedModelClassAbilities = {};
+    }
+    /** @returns {Record<string, any>} - Context. */
+    getContext() {
+        return this.context;
+    }
+    /** @returns {Record<string, any>} - Locals. */
+    getLocals() {
+        return this.locals;
+    }
+    /** @returns {any} - Current user from context. */
+    currentUser() {
+        return this.context.currentUser;
+    }
+    /**
+     * @param {string | string[]} actions - Action(s).
+     * @param {typeof import("../database/record/index.js").default} modelClass - Model class.
+     * @param {AbilityConditionsType} [conditions] - Conditions.
+     * @returns {void} - No return value.
+     */
+    can(actions, modelClass, conditions) {
+        this.addRule({ actions, conditions, effect: "allow", modelClass });
+    }
+    /**
+     * @param {string | string[]} actions - Action(s).
+     * @param {typeof import("../database/record/index.js").default} modelClass - Model class.
+     * @param {AbilityConditionsType} [conditions] - Conditions.
+     * @returns {void} - No return value.
+     */
+    cannot(actions, modelClass, conditions) {
+        this.addRule({ actions, conditions, effect: "deny", modelClass });
+    }
+    /**
+     * @param {object} args - Rule args.
+     * @param {string | string[]} args.actions - Action(s).
+     * @param {AbilityConditionsType} [args.conditions] - Conditions.
+     * @param {"allow" | "deny"} args.effect - Effect.
+     * @param {typeof import("../database/record/index.js").default} args.modelClass - Model class.
+     * @returns {void} - No return value.
+     */
+    addRule({ actions, conditions, effect, modelClass }) {
+        const normalizedActions = Array.isArray(actions) ? actions : [actions];
+        this.rules.push({ actions: normalizedActions, conditions, effect, modelClass });
+    }
+    /**
+     * @param {typeof import("../database/record/index.js").default} modelClass - Model class.
+     * @returns {void} - No return value.
+     */
+    loadAbilitiesForModelClass(modelClass) {
+        const key = modelClass.name;
+        if (this.loadedModelClassAbilities[key])
+            return;
+        this.loadedModelClassAbilities[key] = true;
+        for (const ResourceClass of this.resources) {
+            const resourceModelClass = ResourceClass.modelClass();
+            if (!resourceModelClass)
+                continue;
+            if (resourceModelClass !== modelClass)
+                continue;
+            const resourceInstance = new ResourceClass({
+                ability: this,
+                context: this.context,
+                locals: this.locals
+            });
+            resourceInstance.abilities();
+        }
+    }
+    /**
+     * @param {object} args - Query args.
+     * @param {string} args.action - Requested action.
+     * @param {typeof import("../database/record/index.js").default} args.modelClass - Model class.
+     * @param {import("../database/query/model-class-query.js").default<any>} args.query - Query.
+     * @returns {import("../database/query/model-class-query.js").default<any>} - Authorized query.
+     */
+    applyToQuery({ action, modelClass, query }) {
+        this.loadAbilitiesForModelClass(modelClass);
+        const applicableRules = this.rulesFor({ action, modelClass });
+        const allowRules = applicableRules.filter((rule) => rule.effect === "allow");
+        const denyRules = applicableRules.filter((rule) => rule.effect === "deny");
+        if (allowRules.length === 0) {
+            return query.where("1=0");
+        }
+        if (allowRules.some((rule) => !rule.conditions)) {
+            this.applyDenyRules({ action, denyRules, modelClass, query });
+            return query;
+        }
+        const allowSqlParts = this.conditionSqlParts({ action, modelClass, query, rules: allowRules });
+        if (allowSqlParts.length === 0) {
+            return query.where("1=0");
+        }
+        query.where(`(${allowSqlParts.join(" OR ")})`);
+        this.applyDenyRules({ action, denyRules, modelClass, query });
+        return query;
+    }
+    /**
+     * @param {object} args - Rule lookup args.
+     * @param {string} args.action - Action.
+     * @param {typeof import("../database/record/index.js").default} args.modelClass - Model class.
+     * @returns {AbilityRuleType[]} - Matching rules.
+     */
+    rulesFor({ action, modelClass }) {
+        return this.rules.filter((rule) => {
+            if (rule.modelClass !== modelClass)
+                return false;
+            return rule.actions.includes(action) || rule.actions.includes("manage");
+        });
+    }
+    /**
+     * @param {object} args - SQL args.
+     * @param {string} args.action - Action.
+     * @param {typeof import("../database/record/index.js").default} args.modelClass - Model class.
+     * @param {import("../database/query/model-class-query.js").default<any>} args.query - Base query.
+     * @param {AbilityRuleType[]} args.rules - Rules.
+     * @returns {string[]} - SQL condition parts.
+     */
+    conditionSqlParts({ action, modelClass, query, rules }) {
+        const pk = modelClass.primaryKey();
+        const quotedBaseTable = query.driver.quoteTable(modelClass.tableName());
+        const quotedPk = query.driver.quoteColumn(pk);
+        const sqlParts = [];
+        for (const rule of rules) {
+            if (!rule.conditions)
+                continue;
+            const scopedQuery = modelClass._newQuery();
+            const resultQuery = this.applyRuleCondition({
+                action,
+                conditions: rule.conditions,
+                modelClass,
+                query: scopedQuery
+            });
+            const finalQuery = resultQuery || scopedQuery;
+            const selectedPkSql = `${quotedBaseTable}.${quotedPk}`;
+            finalQuery.select(selectedPkSql);
+            sqlParts.push(`${quotedBaseTable}.${quotedPk} IN (${finalQuery.toSql()})`);
+        }
+        return sqlParts;
+    }
+    /**
+     * @param {object} args - Deny args.
+     * @param {string} args.action - Action.
+     * @param {AbilityRuleType[]} args.denyRules - Deny rules.
+     * @param {typeof import("../database/record/index.js").default} args.modelClass - Model class.
+     * @param {import("../database/query/model-class-query.js").default<any>} args.query - Query.
+     * @returns {void} - No return value.
+     */
+    applyDenyRules({ action, denyRules, modelClass, query }) {
+        if (denyRules.length === 0)
+            return;
+        if (denyRules.some((rule) => !rule.conditions)) {
+            query.where("1=0");
+            return;
+        }
+        const denySqlParts = this.conditionSqlParts({ action, modelClass, query, rules: denyRules });
+        if (denySqlParts.length > 0) {
+            query.where(`NOT (${denySqlParts.join(" OR ")})`);
+        }
+    }
+    /**
+     * @param {object} args - Condition args.
+     * @param {string} args.action - Action.
+     * @param {AbilityConditionsType} args.conditions - Rule conditions.
+     * @param {typeof import("../database/record/index.js").default} args.modelClass - Model class.
+     * @param {import("../database/query/model-class-query.js").default<any>} args.query - Query.
+     * @returns {void | import("../database/query/model-class-query.js").default<any>} - Optional replacement query.
+     */
+    applyRuleCondition({ action, conditions, modelClass, query }) {
+        if (typeof conditions === "string") {
+            query.where(conditions);
+            return;
+        }
+        if (typeof conditions === "function") {
+            return conditions(query, {
+                ability: this,
+                action,
+                modelClass
+            });
+        }
+        query.where(conditions);
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/build/src/authorization/base-resource.d.ts

@@ -0,0 +1,58 @@
+/** Base class for authorization resources defining abilities for a model. */
+export default class AuthorizationBaseResource {
+    /** @type {typeof import("../database/record/index.js").default | undefined} */
+    static ModelClass: typeof import("../database/record/index.js").default | undefined;
+    /**
+     * @returns {typeof import("../database/record/index.js").default | undefined} - Model class handled by this resource.
+     */
+    static modelClass(): typeof import("../database/record/index.js").default | undefined;
+    /**
+     * @param {object} args - Resource args.
+     * @param {import("./ability.js").default} args.ability - Ability instance.
+     * @param {Record<string, any>} [args.context] - Ability context.
+     * @param {Record<string, any>} [args.locals] - Ability locals.
+     */
+    constructor({ ability, context, locals }: {
+        ability: import("./ability.js").default;
+        context?: Record<string, any>;
+        locals?: Record<string, any>;
+    });
+    ability: import("./ability.js").default;
+    context: Record<string, any>;
+    locals: Record<string, any>;
+    /**
+     * @param {string | string[]} actions - Ability action(s).
+     * @param {typeof import("../database/record/index.js").default} modelClass - Model class.
+     * @param {Record<string, any> | string | ((query: import("../database/query/model-class-query.js").default<any>, args: {ability: import("./ability.js").default, action: string, modelClass: typeof import("../database/record/index.js").default}) => void | import("../database/query/model-class-query.js").default<any>)} [conditions] - Conditions.
+     * @returns {void} - No return value.
+     */
+    can(actions: string | string[], modelClass: typeof import("../database/record/index.js").default, conditions?: Record<string, any> | string | ((query: import("../database/query/model-class-query.js").default<any>, args: {
+        ability: import("./ability.js").default;
+        action: string;
+        modelClass: typeof import("../database/record/index.js").default;
+    }) => void | import("../database/query/model-class-query.js").default<any>)): void;
+    /**
+     * @param {string | string[]} actions - Ability action(s).
+     * @param {typeof import("../database/record/index.js").default} modelClass - Model class.
+     * @param {Record<string, any> | string | ((query: import("../database/query/model-class-query.js").default<any>, args: {ability: import("./ability.js").default, action: string, modelClass: typeof import("../database/record/index.js").default}) => void | import("../database/query/model-class-query.js").default<any>)} [conditions] - Conditions.
+     * @returns {void} - No return value.
+     */
+    cannot(actions: string | string[], modelClass: typeof import("../database/record/index.js").default, conditions?: Record<string, any> | string | ((query: import("../database/query/model-class-query.js").default<any>, args: {
+        ability: import("./ability.js").default;
+        action: string;
+        modelClass: typeof import("../database/record/index.js").default;
+    }) => void | import("../database/query/model-class-query.js").default<any>)): void;
+    /** @returns {Record<string, any>} - Ability context. */
+    getContext(): Record<string, any>;
+    /** @returns {Record<string, any>} - Ability locals. */
+    getLocals(): Record<string, any>;
+    /** @returns {any} - Current user from context. */
+    currentUser(): any;
+    /** @returns {import("../http-server/client/request.js").default | import("../http-server/client/websocket-request.js").default | undefined} - Request from context. */
+    request(): import("../http-server/client/request.js").default | import("../http-server/client/websocket-request.js").default | undefined;
+    /** @returns {Record<string, any> | undefined} - Params from context. */
+    params(): Record<string, any> | undefined;
+    /** @returns {void} - Implement in subclasses to define abilities. */
+    abilities(): void;
+}
+//# sourceMappingURL=base-resource.d.ts.map

package/build/src/authorization/base-resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-resource.d.ts","sourceRoot":"","sources":["../../../src/authorization/base-resource.js"],"names":[],"mappings":"AAEA,6EAA6E;AAC7E;IACE,+EAA+E;IAC/E,mBADW,cAAc,6BAA6B,EAAE,OAAO,GAAG,SAAS,CAC9C;IAc7B;;OAEG;IACH,qBAFa,cAAc,6BAA6B,EAAE,OAAO,GAAG,SAAS,CAI5E;IAjBD;;;;;OAKG;IACH,0CAJG;QAA6C,OAAO,EAA5C,OAAO,cAAc,EAAE,OAAO;QACH,OAAO,GAAlC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;QACQ,MAAM,GAAjC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;KAC7B,EAKA;IAHC,wCAAsB;IACtB,6BAAsB;IACtB,4BAAoB;IAUtB;;;;;OAKG;IACH,aALW,MAAM,GAAG,MAAM,EAAE,cACjB,cAAc,6BAA6B,EAAE,OAAO,eACpD,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAAC,OAAO,EAAE,OAAO,cAAc,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,cAAc,6BAA6B,EAAE,OAAO,CAAA;KAAC,KAAK,IAAI,GAAG,OAAO,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAChT,IAAI,CAIhB;IAED;;;;;OAKG;IACH,gBALW,MAAM,GAAG,MAAM,EAAE,cACjB,cAAc,6BAA6B,EAAE,OAAO,eACpD,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAAC,OAAO,EAAE,OAAO,cAAc,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,cAAc,6BAA6B,EAAE,OAAO,CAAA;KAAC,KAAK,IAAI,GAAG,OAAO,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAChT,IAAI,CAIhB;IAED,wDAAwD;IACxD,cADc,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAGhC;IAED,uDAAuD;IACvD,aADc,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAGhC;IAED,kDAAkD;IAClD,eADc,GAAG,CAGhB;IAED,uKAAuK;IACvK,WADc,OAAO,kCAAkC,EAAE,OAAO,GAAG,OAAO,4CAA4C,EAAE,OAAO,GAAG,SAAS,CAG1I;IAED,wEAAwE;IACxE,UADc,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAG5C;IAED,qEAAqE;IACrE,aADc,IAAI,CAGjB;CACF"}