createApplication: Alfiz Local Provider Setup Guide

import { defineCatalog, createAlfizClient, parentPointerResolver } from "@alfiz/core";
import { createApplication, memoryDriver } from "@alfiz/application";

export const catalog = defineCatalog({
  namespaces: ["docs"],
  permissions: {
    "docs.files.read": { scopes: ["docs.folder", "docs.doc"] },
    "docs.files.update_file": { scopes: ["docs.folder", "docs.doc"] },
    "docs.files.delete": { scopes: ["docs.folder"] },
  },
  scopeTypes: {
    "docs.folder": { parent: null },
    "docs.doc": { parent: "docs.folder" },
  },
});

// Stand-in for your own tables. In production this reads your rows.
const parents = new Map<string, string | null>([
  ["docs.doc:123", "docs.folder:42"],
  ["docs.folder:42", null],
]);

const app = createApplication({
  catalog,
  storage: memoryDriver(),
  // `docs.doc` declares a parent, so it IS hierarchical, and omitting `ancestry`
  // installs a resolver that returns no ancestors, and a check at
  // `docs.doc:123` would then miss a grant on its folder. Omit `ancestry`
  // only when every scope type is `parent: null`.
  ancestry: parentPointerResolver((scope) => parents.get(scope) ?? null),
});

export const alfiz = createAlfizClient({ catalog, provider: app });

import { defineCatalog, createAlfizClient, parentPointerResolver } from "@alfiz/core";
import { createApplication } from "@alfiz/application";
import { prismaDriver } from "@alfiz/prisma";
import { PrismaClient } from "@prisma/client";

const prisma = new PrismaClient();

export const catalog = defineCatalog({
  namespaces: ["docs"],
  permissions: {
    "docs.files.read": { scopes: ["docs.folder", "docs.doc"] },
    "docs.files.update_file": { scopes: ["docs.folder", "docs.doc"] },
    "docs.files.delete": { scopes: ["docs.folder"] },
  },
  scopeTypes: {
    "docs.folder": { parent: null },
    "docs.doc": { parent: "docs.folder" },
  },
});

const app = createApplication({
  catalog,
  storage: prismaDriver(prisma),
  // `parentPointerResolver` wraps a SYNCHRONOUS lookup; an async database read
  // implements `AncestryResolver` directly, which may return a promise.
  ancestry: async (scope) => {
    const ancestors: string[] = [];
    let current: string | null = scope;
    while (current) {
      const row = await prisma.resource.findUnique({
        where: { id: current.split(":")[1] },
        select: { parentId: true, parentType: true },
      });
      if (!row?.parentId) break;
      current = `${row.parentType}:${row.parentId}`;
      ancestors.push(current);
    }
    return ancestors;
  },
  orgRoot: true,
});

export const alfiz = createAlfizClient({ catalog, provider: app });