zenstack 1.0.0 → 1.0.16

package/package.json

@@ -1,13 +1,138 @@
 {
   "name": "zenstack",
-  "version": "1.0.0",
-  "description": "",
-  "main": "index.js",
-  "keywords": [],
-  "author": "",
-  "license": "ISC",
+  "publisher": "zenstack",
+  "displayName": "ZenStack Language Tools",
+  "description": "A toolkit for building secure CRUD apps with Next.js + Typescript",
+  "version": "1.0.16",
+  "author": {
+    "name": "ZenStack Team"
+  },
+  "homepage": "https://zenstack.dev",
+  "license": "MIT",
+  "keywords": [
+    "fullstack",
+    "react",
+    "typescript",
+    "data modeling"
+  ],
+  "preview": false,
+  "icon": "asset/logo-256-bg.png",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/zenstackhq/zenstack"
+  },
+  "publishConfig": {
+    "directory": "dist",
+    "linkDirectory": true
+  },
+  "engines": {
+    "vscode": "^1.56.0"
+  },
+  "categories": [
+    "Programming Languages"
+  ],
+  "contributes": {
+    "languages": [
+      {
+        "id": "zmodel",
+        "aliases": [
+          "ZenStack Model",
+          "zmodel"
+        ],
+        "extensions": [
+          ".zmodel"
+        ],
+        "configuration": "./language-configuration.json",
+        "icon": {
+          "light": "./asset/logo-light-256.png",
+          "dark": "./asset/logo-dark-256.png"
+        }
+      }
+    ],
+    "grammars": [
+      {
+        "language": "zmodel",
+        "scopeName": "source.zmodel",
+        "path": "./syntaxes/zmodel.tmLanguage.json"
+      }
+    ]
+  },
+  "activationEvents": [
+    "onLanguage:zmodel"
+  ],
+  "bin": {
+    "zenstack": "bin/cli"
+  },
+  "main": "./bundle/extension.js",
+  "dependencies": {
+    "@prisma/generator-helper": "^4.7.1",
+    "@prisma/internals": "^4.7.1",
+    "async-exit-hook": "^2.0.1",
+    "change-case": "^4.1.2",
+    "chevrotain": "^9.1.0",
+    "colors": "1.4.0",
+    "commander": "^8.3.0",
+    "cuid": "^2.1.8",
+    "langium": "1.0.1",
+    "mixpanel": "^0.17.0",
+    "node-machine-id": "^1.1.12",
+    "ora": "^5.4.1",
+    "pluralize": "^8.0.0",
+    "prisma": "~4.7.0",
+    "promisify": "^0.0.3",
+    "semver": "^7.3.8",
+    "sleep-promise": "^9.1.0",
+    "ts-morph": "^16.0.0",
+    "uuid": "^9.0.0",
+    "vscode-jsonrpc": "^8.0.2",
+    "vscode-languageclient": "^8.0.2",
+    "vscode-languageserver": "^8.0.2",
+    "vscode-languageserver-textdocument": "^1.0.7",
+    "vscode-uri": "^3.0.6",
+    "zod": "^3.19.1",
+    "@zenstackhq/language": "1.0.0-alpha.61",
+    "@zenstackhq/runtime": "1.0.0-alpha.61",
+    "@zenstackhq/sdk": "1.0.0-alpha.61"
+  },
+  "devDependencies": {
+    "@types/async-exit-hook": "^2.0.0",
+    "@types/jest": "^29.2.0",
+    "@types/node": "^14.18.32",
+    "@types/pluralize": "^0.0.29",
+    "@types/semver": "^7.3.13",
+    "@types/tmp": "^0.2.3",
+    "@types/uuid": "^8.3.4",
+    "@types/vscode": "^1.56.0",
+    "@typescript-eslint/eslint-plugin": "^5.42.0",
+    "@typescript-eslint/parser": "^5.42.0",
+    "concurrently": "^7.4.0",
+    "copyfiles": "^2.4.1",
+    "dotenv": "^16.0.3",
+    "esbuild": "^0.15.12",
+    "eslint": "^8.27.0",
+    "eslint-plugin-jest": "^27.1.7",
+    "jest": "^29.2.1",
+    "langium-cli": "^1.0.0",
+    "renamer": "^4.0.0",
+    "rimraf": "^3.0.2",
+    "tmp": "^0.2.1",
+    "ts-jest": "^29.0.3",
+    "ts-node": "^10.9.1",
+    "tsc-alias": "^1.7.0",
+    "typescript": "^4.8.4",
+    "vsce": "^2.13.0"
+  },
   "scripts": {
-    "build": "pnpm -r build",
-    "test": "pnpm -r test"
+    "vscode:publish": "vsce publish --no-dependencies",
+    "vscode:prepublish": "pnpm lint && pnpm bundle",
+    "vscode:package": "vsce package --no-dependencies",
+    "clean": "rimraf bundle dist",
+    "build": "pnpm clean && pnpm lint && tsc && copyfiles -F \"bin/*\" dist && copyfiles ./README-global.md ./LICENSE ./package.json dist && renamer --replace \"README.md\" dist/README-global.md && copyfiles -u 1 \"src/res/*\" dist && node build/post-build.js",
+    "bundle": "pnpm clean && pnpm lint && node build/bundle.js --minify",
+    "watch": "tsc --watch",
+    "lint": "eslint src tests --ext ts",
+    "test": "jest",
+    "publish-dev": "pnpm publish --tag dev",
+    "postinstall": "node bin/post-install.js"
   }
 }

package/plugins/access-policy/expression-writer.d.ts

@@ -0,0 +1,39 @@
+import { Expression } from '@zenstackhq/language/ast';
+import { CodeBlockWriter } from 'ts-morph';
+/**
+ * Utility for writing ZModel expression as Prisma query argument objects into a ts-morph writer
+ */
+export declare class ExpressionWriter {
+    private readonly writer;
+    private readonly isPostGuard;
+    private readonly plainExprBuilder;
+    /**
+     * Constructs a new ExpressionWriter
+     *
+     * @param isPostGuard indicates if we're writing for post-update conditions
+     */
+    constructor(writer: CodeBlockWriter, isPostGuard?: boolean);
+    /**
+     * Writes the given ZModel expression.
+     */
+    write(expr: Expression): void;
+    private writeReference;
+    private writeMemberAccess;
+    private writeExprList;
+    private writeBinary;
+    private writeCollectionPredicate;
+    private isFieldAccess;
+    private guard;
+    private plain;
+    private writeComparison;
+    private isAuthOrAuthMemberAccess;
+    private writeOperator;
+    private writeFieldCondition;
+    private block;
+    private isModelTyped;
+    private mapOperator;
+    private negateOperator;
+    private writeLogical;
+    private writeUnary;
+    private writeLiteral;
+}

package/plugins/access-policy/expression-writer.js

@@ -0,0 +1,361 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExpressionWriter = void 0;
+const ast_1 = require("@zenstackhq/language/ast");
+const sdk_1 = require("@zenstackhq/sdk");
+const ast_utils_1 = require("../../utils/ast-utils");
+const typescript_expression_transformer_1 = __importDefault(require("./typescript-expression-transformer"));
+const utils_1 = require("./utils");
+/**
+ * Utility for writing ZModel expression as Prisma query argument objects into a ts-morph writer
+ */
+class ExpressionWriter {
+    /**
+     * Constructs a new ExpressionWriter
+     *
+     * @param isPostGuard indicates if we're writing for post-update conditions
+     */
+    constructor(writer, isPostGuard = false) {
+        this.writer = writer;
+        this.isPostGuard = isPostGuard;
+        this.plainExprBuilder = new typescript_expression_transformer_1.default(this.isPostGuard);
+    }
+    /**
+     * Writes the given ZModel expression.
+     */
+    write(expr) {
+        switch (expr.$type) {
+            case ast_1.LiteralExpr:
+                this.writeLiteral(expr);
+                break;
+            case ast_1.UnaryExpr:
+                this.writeUnary(expr);
+                break;
+            case ast_1.BinaryExpr:
+                this.writeBinary(expr);
+                break;
+            case ast_1.ReferenceExpr:
+                this.writeReference(expr);
+                break;
+            case ast_1.MemberAccessExpr:
+                this.writeMemberAccess(expr);
+                break;
+            default:
+                throw new Error(`Not implemented: ${expr.$type}`);
+        }
+    }
+    writeReference(expr) {
+        if ((0, ast_1.isEnumField)(expr.target.ref)) {
+            throw new Error('We should never get here');
+        }
+        else {
+            this.block(() => {
+                var _a;
+                this.writer.write(`${(_a = expr.target.ref) === null || _a === void 0 ? void 0 : _a.name}: true`);
+            });
+        }
+    }
+    writeMemberAccess(expr) {
+        this.block(() => {
+            // must be a boolean member
+            this.writeFieldCondition(expr.operand, () => {
+                this.block(() => {
+                    var _a;
+                    this.writer.write(`${(_a = expr.member.ref) === null || _a === void 0 ? void 0 : _a.name}: true`);
+                });
+            }, 'is');
+        });
+    }
+    writeExprList(exprs) {
+        this.writer.write('[');
+        for (let i = 0; i < exprs.length; i++) {
+            this.write(exprs[i]);
+            if (i !== exprs.length - 1) {
+                this.writer.write(',');
+            }
+        }
+        this.writer.write(']');
+    }
+    writeBinary(expr) {
+        switch (expr.operator) {
+            case '&&':
+            case '||':
+                this.writeLogical(expr, expr.operator);
+                break;
+            case '==':
+            case '!=':
+            case '>':
+            case '>=':
+            case '<':
+            case '<=':
+                this.writeComparison(expr, expr.operator);
+                break;
+            case '?':
+            case '!':
+            case '^':
+                this.writeCollectionPredicate(expr, expr.operator);
+                break;
+        }
+    }
+    writeCollectionPredicate(expr, operator) {
+        this.block(() => {
+            this.writeFieldCondition(expr.left, () => {
+                this.write(expr.right);
+            }, operator === '?' ? 'some' : operator === '!' ? 'every' : 'none');
+        });
+    }
+    isFieldAccess(expr) {
+        if ((0, ast_1.isThisExpr)(expr)) {
+            return true;
+        }
+        if ((0, ast_1.isMemberAccessExpr)(expr)) {
+            if ((0, utils_1.isFutureExpr)(expr.operand) && this.isPostGuard) {
+                // when writing for post-update, future().field.x is a field access
+                return true;
+            }
+            else {
+                return this.isFieldAccess(expr.operand);
+            }
+        }
+        if ((0, ast_1.isReferenceExpr)(expr) && (0, ast_1.isDataModelField)(expr.target.ref) && !this.isPostGuard) {
+            return true;
+        }
+        return false;
+    }
+    guard(write) {
+        this.writer.write(`${sdk_1.GUARD_FIELD_NAME}: `);
+        write();
+    }
+    plain(expr) {
+        this.writer.write(this.plainExprBuilder.transform(expr));
+    }
+    writeComparison(expr, operator) {
+        const leftIsFieldAccess = this.isFieldAccess(expr.left);
+        const rightIsFieldAccess = this.isFieldAccess(expr.right);
+        if (leftIsFieldAccess && rightIsFieldAccess) {
+            throw new sdk_1.PluginError(`Comparison between fields are not supported yet`);
+        }
+        if (!leftIsFieldAccess && !rightIsFieldAccess) {
+            // compile down to a plain expression
+            this.block(() => {
+                this.guard(() => {
+                    this.plain(expr.left);
+                    this.writer.write(' ' + operator + ' ');
+                    this.plain(expr.right);
+                });
+            });
+            return;
+        }
+        let fieldAccess;
+        let operand;
+        if (leftIsFieldAccess) {
+            fieldAccess = expr.left;
+            operand = expr.right;
+        }
+        else {
+            fieldAccess = expr.right;
+            operand = expr.left;
+            operator = this.negateOperator(operator);
+        }
+        if ((0, ast_1.isMemberAccessExpr)(fieldAccess) && (0, utils_1.isFutureExpr)(fieldAccess.operand)) {
+            // future().field should be treated as the "field" directly, so we
+            // strip 'future().' and synthesize a reference expr
+            fieldAccess = {
+                $type: ast_1.ReferenceExpr,
+                $container: fieldAccess.$container,
+                target: fieldAccess.member,
+                $resolvedType: fieldAccess.$resolvedType,
+            };
+        }
+        // if the operand refers to auth(), need to build a guard to avoid
+        // using undefined user as filter (which means no filter to Prisma)
+        // if auth() evaluates falsy, just treat the condition as false
+        if (this.isAuthOrAuthMemberAccess(operand)) {
+            this.writer.write(`!user ? { ${sdk_1.GUARD_FIELD_NAME}: false } : `);
+        }
+        this.block(() => {
+            this.writeFieldCondition(fieldAccess, () => {
+                this.block(() => {
+                    const dataModel = this.isModelTyped(fieldAccess);
+                    if (dataModel) {
+                        const idField = (0, ast_utils_1.getIdField)(dataModel);
+                        if (!idField) {
+                            throw new sdk_1.PluginError(`Data model ${dataModel.name} does not have an id field`);
+                        }
+                        // comparing with an object, convert to "id" comparison instead
+                        this.writer.write(`${idField.name}: `);
+                        this.block(() => {
+                            this.writeOperator(operator, () => {
+                                // operand ? operand.field : null
+                                this.writer.write('(');
+                                this.plain(operand);
+                                this.writer.write(' ? ');
+                                this.plain(operand);
+                                this.writer.write(`.${idField.name}`);
+                                this.writer.write(' : null');
+                                this.writer.write(')');
+                            });
+                        });
+                    }
+                    else {
+                        this.writeOperator(operator, () => {
+                            this.plain(operand);
+                        });
+                    }
+                }, 
+                // "this" expression is compiled away (to .id access), so we should
+                // avoid generating a new layer
+                !(0, ast_1.isThisExpr)(fieldAccess));
+            }, 'is');
+        });
+    }
+    isAuthOrAuthMemberAccess(expr) {
+        return (0, ast_utils_1.isAuthInvocation)(expr) || ((0, ast_1.isMemberAccessExpr)(expr) && (0, ast_utils_1.isAuthInvocation)(expr.operand));
+    }
+    writeOperator(operator, writeOperand) {
+        if (operator === '!=') {
+            // wrap a 'not'
+            this.writer.write('not: ');
+            this.block(() => {
+                this.writeOperator('==', writeOperand);
+            });
+        }
+        else {
+            this.writer.write(`${this.mapOperator(operator)}: `);
+            writeOperand();
+        }
+    }
+    writeFieldCondition(fieldAccess, writeCondition, relationOp) {
+        var _a, _b, _c;
+        let selector;
+        let operand;
+        if ((0, ast_1.isThisExpr)(fieldAccess)) {
+            // pass on
+            writeCondition();
+            return;
+        }
+        else if ((0, ast_1.isReferenceExpr)(fieldAccess)) {
+            selector = (_a = fieldAccess.target.ref) === null || _a === void 0 ? void 0 : _a.name;
+        }
+        else if ((0, ast_1.isMemberAccessExpr)(fieldAccess)) {
+            if ((0, utils_1.isFutureExpr)(fieldAccess.operand)) {
+                // future().field should be treated as the "field"
+                selector = (_b = fieldAccess.member.ref) === null || _b === void 0 ? void 0 : _b.name;
+            }
+            else {
+                selector = (_c = fieldAccess.member.ref) === null || _c === void 0 ? void 0 : _c.name;
+                operand = fieldAccess.operand;
+            }
+        }
+        else {
+            throw new sdk_1.PluginError(`Unsupported expression type: ${fieldAccess.$type}`);
+        }
+        if (!selector) {
+            throw new sdk_1.PluginError(`Failed to write FieldAccess expression`);
+        }
+        if (operand) {
+            // member access expression
+            this.writeFieldCondition(operand, () => {
+                this.block(() => {
+                    this.writer.write(selector + ': ');
+                    if (this.isModelTyped(fieldAccess)) {
+                        // expression is resolved to a model, generate relation query
+                        this.block(() => {
+                            this.writer.write(`${relationOp}: `);
+                            writeCondition();
+                        });
+                    }
+                    else {
+                        // generate plain query
+                        writeCondition();
+                    }
+                }, 
+                // if operand is "this", it doesn't really generate a new layer of query,
+                // so we should avoid generating a new block
+                !(0, ast_1.isThisExpr)(operand));
+            }, 'is');
+        }
+        else if (this.isModelTyped(fieldAccess)) {
+            // reference resolved to a model, generate relation query
+            this.writer.write(selector + ': ');
+            this.block(() => {
+                this.writer.write(`${relationOp}: `);
+                writeCondition();
+            });
+        }
+        else {
+            // generate a plain query
+            this.writer.write(selector + ': ');
+            writeCondition();
+        }
+    }
+    block(write, condition = true) {
+        if (condition) {
+            this.writer.inlineBlock(write);
+        }
+        else {
+            write();
+        }
+    }
+    isModelTyped(expr) {
+        var _a, _b;
+        return (0, ast_1.isDataModel)((_a = expr.$resolvedType) === null || _a === void 0 ? void 0 : _a.decl) ? (_b = expr.$resolvedType) === null || _b === void 0 ? void 0 : _b.decl : undefined;
+    }
+    mapOperator(operator) {
+        switch (operator) {
+            case '==':
+                return 'equals';
+            case '!=':
+                throw new Error('Operation != should have been compiled away');
+            case '>':
+                return 'gt';
+            case '>=':
+                return 'gte';
+            case '<':
+                return 'lt';
+            case '<=':
+                return 'lte';
+        }
+    }
+    negateOperator(operator) {
+        switch (operator) {
+            case '>':
+                return '<=';
+            case '<':
+                return '>=';
+            case '>=':
+                return '<';
+            case '<=':
+                return '>';
+            default:
+                return operator;
+        }
+    }
+    writeLogical(expr, operator) {
+        this.block(() => {
+            this.writer.write(`${operator === '&&' ? 'AND' : 'OR'}: `);
+            this.writeExprList([expr.left, expr.right]);
+        });
+    }
+    writeUnary(expr) {
+        if (expr.operator !== '!') {
+            throw new sdk_1.PluginError(`Unary operator "${expr.operator}" is not supported`);
+        }
+        this.block(() => {
+            this.writer.write('NOT: ');
+            this.write(expr.operand);
+        });
+    }
+    writeLiteral(expr) {
+        this.block(() => {
+            this.guard(() => {
+                this.plain(expr);
+            });
+        });
+    }
+}
+exports.ExpressionWriter = ExpressionWriter;
+//# sourceMappingURL=expression-writer.js.map

package/plugins/access-policy/expression-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression-writer.js","sourceRoot":"","sources":["../../../src/plugins/access-policy/expression-writer.ts"],"names":[],"mappings":";;;;;;AAAA,kDAckC;AAClC,yCAAgE;AAEhE,qDAAqE;AACrE,4GAAkF;AAClF,mCAAuC;AAIvC;;GAEG;AACH,MAAa,gBAAgB;IAGzB;;;;OAIG;IACH,YAA6B,MAAuB,EAAmB,cAAc,KAAK;QAA7D,WAAM,GAAN,MAAM,CAAiB;QAAmB,gBAAW,GAAX,WAAW,CAAQ;QACtF,IAAI,CAAC,gBAAgB,GAAG,IAAI,2CAA+B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAgB;QAClB,QAAQ,IAAI,CAAC,KAAK,EAAE;YAChB,KAAK,iBAAW;gBACZ,IAAI,CAAC,YAAY,CAAC,IAAmB,CAAC,CAAC;gBACvC,MAAM;YAEV,KAAK,eAAS;gBACV,IAAI,CAAC,UAAU,CAAC,IAAiB,CAAC,CAAC;gBACnC,MAAM;YAEV,KAAK,gBAAU;gBACX,IAAI,CAAC,WAAW,CAAC,IAAkB,CAAC,CAAC;gBACrC,MAAM;YAEV,KAAK,mBAAa;gBACd,IAAI,CAAC,cAAc,CAAC,IAAqB,CAAC,CAAC;gBAC3C,MAAM;YAEV,KAAK,sBAAgB;gBACjB,IAAI,CAAC,iBAAiB,CAAC,IAAwB,CAAC,CAAC;gBACjD,MAAM;YAEV;gBACI,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;SACzD;IACL,CAAC;IAEO,cAAc,CAAC,IAAmB;QACtC,IAAI,IAAA,iBAAW,EAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YAC9B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;SAC/C;aAAM;YACH,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;;gBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAA,IAAI,CAAC,MAAM,CAAC,GAAG,0CAAE,IAAI,QAAQ,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;SACN;IACL,CAAC;IAEO,iBAAiB,CAAC,IAAsB;QAC5C,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,2BAA2B;YAC3B,IAAI,CAAC,mBAAmB,CACpB,IAAI,CAAC,OAAO,EACZ,GAAG,EAAE;gBACD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;;oBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAA,IAAI,CAAC,MAAM,CAAC,GAAG,0CAAE,IAAI,QAAQ,CAAC,CAAC;gBACxD,CAAC,CAAC,CAAC;YACP,CAAC,EACD,IAAI,CACP,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,aAAa,CAAC,KAAmB;QACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACnC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE;gBACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aAC1B;SACJ;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAEO,WAAW,CAAC,IAAgB;QAChC,QAAQ,IAAI,CAAC,QAAQ,EAAE;YACnB,KAAK,IAAI,CAAC;YACV,KAAK,IAAI;gBACL,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACvC,MAAM;YAEV,KAAK,IAAI,CAAC;YACV,KAAK,IAAI,CAAC;YACV,KAAK,GAAG,CAAC;YACT,KAAK,IAAI,CAAC;YACV,KAAK,GAAG,CAAC;YACT,KAAK,IAAI;gBACL,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC1C,MAAM;YAEV,KAAK,GAAG,CAAC;YACT,KAAK,GAAG,CAAC;YACT,KAAK,GAAG;gBACJ,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACnD,MAAM;SACb;IACL,CAAC;IAEO,wBAAwB,CAAC,IAAgB,EAAE,QAAgB;QAC/D,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,mBAAmB,CACpB,IAAI,CAAC,IAAI,EACT,GAAG,EAAE;gBACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC,EACD,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAClE,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,aAAa,CAAC,IAAgB;QAClC,IAAI,IAAA,gBAAU,EAAC,IAAI,CAAC,EAAE;YAClB,OAAO,IAAI,CAAC;SACf;QAED,IAAI,IAAA,wBAAkB,EAAC,IAAI,CAAC,EAAE;YAC1B,IAAI,IAAA,oBAAY,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE;gBAChD,mEAAmE;gBACnE,OAAO,IAAI,CAAC;aACf;iBAAM;gBACH,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aAC3C;SACJ;QACD,IAAI,IAAA,qBAAe,EAAC,IAAI,CAAC,IAAI,IAAA,sBAAgB,EAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YACjF,OAAO,IAAI,CAAC;SACf;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,KAAiB;QAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,sBAAgB,IAAI,CAAC,CAAC;QAC3C,KAAK,EAAE,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,IAAgB;QAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IAEO,eAAe,CAAC,IAAgB,EAAE,QAA4B;QAClE,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,kBAAkB,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE1D,IAAI,iBAAiB,IAAI,kBAAkB,EAAE;YACzC,MAAM,IAAI,iBAAW,CAAC,iDAAiD,CAAC,CAAC;SAC5E;QAED,IAAI,CAAC,iBAAiB,IAAI,CAAC,kBAAkB,EAAE;YAC3C,qCAAqC;YACrC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;gBACZ,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;oBACZ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC;oBACxC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YAEH,OAAO;SACV;QAED,IAAI,WAAuB,CAAC;QAC5B,IAAI,OAAmB,CAAC;QACxB,IAAI,iBAAiB,EAAE;YACnB,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;YACxB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;SACxB;aAAM;YACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;YACpB,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;SAC5C;QAED,IAAI,IAAA,wBAAkB,EAAC,WAAW,CAAC,IAAI,IAAA,oBAAY,EAAC,WAAW,CAAC,OAAO,CAAC,EAAE;YACtE,kEAAkE;YAClE,oDAAoD;YACpD,WAAW,GAAG;gBACV,KAAK,EAAE,mBAAa;gBACpB,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,aAAa,EAAE,WAAW,CAAC,aAAa;aAC1B,CAAC;SACtB;QAED,kEAAkE;QAClE,mEAAmE;QACnE,+DAA+D;QAC/D,IAAI,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE;YACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,sBAAgB,cAAc,CAAC,CAAC;SAClE;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,mBAAmB,CACpB,WAAW,EACX,GAAG,EAAE;gBACD,IAAI,CAAC,KAAK,CACN,GAAG,EAAE;oBACD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;oBACjD,IAAI,SAAS,EAAE;wBACX,MAAM,OAAO,GAAG,IAAA,sBAAU,EAAC,SAAS,CAAC,CAAC;wBACtC,IAAI,CAAC,OAAO,EAAE;4BACV,MAAM,IAAI,iBAAW,CAAC,cAAc,SAAS,CAAC,IAAI,4BAA4B,CAAC,CAAC;yBACnF;wBACD,+DAA+D;wBAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;wBACvC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;4BACZ,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE;gCAC9B,iCAAiC;gCACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gCACvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gCACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gCACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gCACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gCACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gCAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;4BAC3B,CAAC,CAAC,CAAC;wBACP,CAAC,CAAC,CAAC;qBACN;yBAAM;wBACH,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE;4BAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBACxB,CAAC,CAAC,CAAC;qBACN;gBACL,CAAC;gBACD,mEAAmE;gBACnE,+BAA+B;gBAC/B,CAAC,IAAA,gBAAU,EAAC,WAAW,CAAC,CAC3B,CAAC;YACN,CAAC,EACD,IAAI,CACP,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,wBAAwB,CAAC,IAAgB;QAC7C,OAAO,IAAA,4BAAgB,EAAC,IAAI,CAAC,IAAI,CAAC,IAAA,wBAAkB,EAAC,IAAI,CAAC,IAAI,IAAA,4BAAgB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAClG,CAAC;IAEO,aAAa,CAAC,QAA4B,EAAE,YAAwB;QACxE,IAAI,QAAQ,KAAK,IAAI,EAAE;YACnB,eAAe;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;gBACZ,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;SACN;aAAM;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrD,YAAY,EAAE,CAAC;SAClB;IACL,CAAC;IAEO,mBAAmB,CACvB,WAAuB,EACvB,cAA0B,EAC1B,UAA4C;;QAE5C,IAAI,QAA4B,CAAC;QACjC,IAAI,OAA+B,CAAC;QAEpC,IAAI,IAAA,gBAAU,EAAC,WAAW,CAAC,EAAE;YACzB,UAAU;YACV,cAAc,EAAE,CAAC;YACjB,OAAO;SACV;aAAM,IAAI,IAAA,qBAAe,EAAC,WAAW,CAAC,EAAE;YACrC,QAAQ,GAAG,MAAA,WAAW,CAAC,MAAM,CAAC,GAAG,0CAAE,IAAI,CAAC;SAC3C;aAAM,IAAI,IAAA,wBAAkB,EAAC,WAAW,CAAC,EAAE;YACxC,IAAI,IAAA,oBAAY,EAAC,WAAW,CAAC,OAAO,CAAC,EAAE;gBACnC,kDAAkD;gBAClD,QAAQ,GAAG,MAAA,WAAW,CAAC,MAAM,CAAC,GAAG,0CAAE,IAAI,CAAC;aAC3C;iBAAM;gBACH,QAAQ,GAAG,MAAA,WAAW,CAAC,MAAM,CAAC,GAAG,0CAAE,IAAI,CAAC;gBACxC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;aACjC;SACJ;aAAM;YACH,MAAM,IAAI,iBAAW,CAAC,gCAAgC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;SAC9E;QAED,IAAI,CAAC,QAAQ,EAAE;YACX,MAAM,IAAI,iBAAW,CAAC,wCAAwC,CAAC,CAAC;SACnE;QAED,IAAI,OAAO,EAAE;YACT,2BAA2B;YAC3B,IAAI,CAAC,mBAAmB,CACpB,OAAO,EACP,GAAG,EAAE;gBACD,IAAI,CAAC,KAAK,CACN,GAAG,EAAE;oBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;oBACnC,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE;wBAChC,6DAA6D;wBAC7D,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;4BACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;4BACrC,cAAc,EAAE,CAAC;wBACrB,CAAC,CAAC,CAAC;qBACN;yBAAM;wBACH,uBAAuB;wBACvB,cAAc,EAAE,CAAC;qBACpB;gBACL,CAAC;gBACD,yEAAyE;gBACzE,4CAA4C;gBAC5C,CAAC,IAAA,gBAAU,EAAC,OAAO,CAAC,CACvB,CAAC;YACN,CAAC,EACD,IAAI,CACP,CAAC;SACL;aAAM,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE;YACvC,yDAAyD;YACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;gBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;gBACrC,cAAc,EAAE,CAAC;YACrB,CAAC,CAAC,CAAC;SACN;aAAM;YACH,yBAAyB;YACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;YACnC,cAAc,EAAE,CAAC;SACpB;IACL,CAAC;IAEO,KAAK,CAAC,KAAiB,EAAE,SAAS,GAAG,IAAI;QAC7C,IAAI,SAAS,EAAE;YACX,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;SAClC;aAAM;YACH,KAAK,EAAE,CAAC;SACX;IACL,CAAC;IAEO,YAAY,CAAC,IAAgB;;QACjC,OAAO,IAAA,iBAAW,EAAC,MAAA,IAAI,CAAC,aAAa,0CAAE,IAAI,CAAC,CAAC,CAAC,CAAE,MAAA,IAAI,CAAC,aAAa,0CAAE,IAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,CAAC;IAEO,WAAW,CAAC,QAA+C;QAC/D,QAAQ,QAAQ,EAAE;YACd,KAAK,IAAI;gBACL,OAAO,QAAQ,CAAC;YACpB,KAAK,IAAI;gBACL,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACnE,KAAK,GAAG;gBACJ,OAAO,IAAI,CAAC;YAChB,KAAK,IAAI;gBACL,OAAO,KAAK,CAAC;YACjB,KAAK,GAAG;gBACJ,OAAO,IAAI,CAAC;YAChB,KAAK,IAAI;gBACL,OAAO,KAAK,CAAC;SACpB;IACL,CAAC;IAEO,cAAc,CAAC,QAA+C;QAClE,QAAQ,QAAQ,EAAE;YACd,KAAK,GAAG;gBACJ,OAAO,IAAI,CAAC;YAChB,KAAK,GAAG;gBACJ,OAAO,IAAI,CAAC;YAChB,KAAK,IAAI;gBACL,OAAO,GAAG,CAAC;YACf,KAAK,IAAI;gBACL,OAAO,GAAG,CAAC;YACf;gBACI,OAAO,QAAQ,CAAC;SACvB;IACL,CAAC;IAEO,YAAY,CAAC,IAAgB,EAAE,QAAqB;QACxD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,UAAU,CAAC,IAAe;QAC9B,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE;YACvB,MAAM,IAAI,iBAAW,CAAC,mBAAmB,IAAI,CAAC,QAAQ,oBAAoB,CAAC,CAAC;SAC/E;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,YAAY,CAAC,IAAiB;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;gBACZ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AAtYD,4CAsYC"}

package/plugins/access-policy/index.d.ts

@@ -0,0 +1,4 @@
+import { Model } from '@zenstackhq/language/ast';
+import { PluginOptions } from '@zenstackhq/sdk';
+export declare const name = "Access Policy";
+export default function run(model: Model, options: PluginOptions): Promise<void>;

package/plugins/access-policy/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.name = void 0;
+const policy_guard_generator_1 = __importDefault(require("./policy-guard-generator"));
+exports.name = 'Access Policy';
+function run(model, options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        return new policy_guard_generator_1.default().generate(model, options);
+    });
+}
+exports.default = run;
+//# sourceMappingURL=index.js.map

package/plugins/access-policy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/plugins/access-policy/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAEA,sFAAuD;AAE1C,QAAA,IAAI,GAAG,eAAe,CAAC;AAEpC,SAA8B,GAAG,CAAC,KAAY,EAAE,OAAsB;;QAClE,OAAO,IAAI,gCAAe,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;CAAA;AAFD,sBAEC"}

package/plugins/access-policy/policy-guard-generator.d.ts

@@ -0,0 +1,15 @@
+import { Model } from '@zenstackhq/language/ast';
+import { PluginOptions } from '@zenstackhq/sdk';
+/**
+ * Generates source file that contains Prisma query guard objects used for injecting database queries
+ */
+export default class PolicyGenerator {
+    generate(model: Model, options: PluginOptions): Promise<void>;
+    private getPolicyExpressions;
+    private processUpdatePolicies;
+    private visitPolicyExpression;
+    private hasFutureReference;
+    private generateQueryGuardForModel;
+    private generatePreValueSelect;
+    private generateQueryGuardFunction;
+}