Struct ScriptEntity 

pub struct ScriptEntity {

    pub id: String,
    pub script_type: String,
    pub has_writes: bool,
    pub has_deletes: bool,
    pub total_api_calls: u32,
    pub read_calls: u32,
    pub write_calls: u32,
    pub delete_calls: u32,
    pub accessed_paths: HashSet<String>,
    pub accessed_methods: HashSet<String>,
    pub path_patterns: HashSet<String>,
    pub called_operations: HashSet<String>,
    pub loop_iterations: u32,
    pub nesting_depth: u32,
    pub script_length: u32,
    pub accesses_sensitive_path: bool,
    pub has_unbounded_loop: bool,
    pub has_dynamic_path: bool,
    pub has_output_declaration: bool,
    pub output_fields: HashSet<String>,
    pub has_spread_in_output: bool,
}

Script entity for policy evaluation (OpenAPI Code Mode).

Unlike GraphQL’s single Operation entity, OpenAPI Code Mode validates JavaScript scripts that can contain multiple API calls with loops and logic.

Fields

id: String

Unique ID for this script validation

script_type: String

Script type: “read_only”, “mixed”, or “write_only”

has_writes: bool

Whether script contains any write operations (POST/PUT/PATCH/DELETE)

has_deletes: bool

Whether script contains DELETE operations

total_api_calls: u32

Total number of API calls in the script

read_calls: u32

Number of GET calls

write_calls: u32

Number of POST/PUT/PATCH calls

delete_calls: u32

Number of DELETE calls

accessed_paths: HashSet<String>

Set of all paths accessed

accessed_methods: HashSet<String>

Set of all HTTP methods used

path_patterns: HashSet<String>

Normalized path patterns (IDs replaced with *)

called_operations: HashSet<String>

Called operations in “METHOD:pathPattern” format for allowlist/blocklist matching

loop_iterations: u32

Maximum loop iterations (from .slice() bounds)

nesting_depth: u32

Maximum nesting depth in the AST

script_length: u32

Script length in characters

accesses_sensitive_path: bool

Whether script accesses sensitive paths (/admin, /internal, etc.)

has_unbounded_loop: bool

Whether script has an unbounded loop

has_dynamic_path: bool

Whether script uses dynamic path interpolation

has_output_declaration: bool

Whether script has a @returns output declaration

output_fields: HashSet<String>

Fields declared in the @returns annotation

has_spread_in_output: bool

Whether script uses spread operators in output (potential field leakage)

Implementations

impl ScriptEntity

pub fn from_javascript_info( info: &JavaScriptCodeInfo, sensitive_patterns: &[String], registry: Option<&OperationRegistry>, ) -> Self

Build from JavaScript code analysis.

pub fn action(&self) -> &'static str

Get the policy action for this script using unified action model.

Trait Implementations

impl Clone for ScriptEntity

fn clone(&self) -> ScriptEntity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ScriptEntity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.