Function parse_value_ref

nodedb/src/control/security/predicate_parser.rs:273–341

(
    tokens: &[String],
    pos: &mut usize,
)

}

fn parse_value_ref(
    tokens: &[String],
    pos: &mut usize,
) -> Result<PredicateValue, PredicateParseError> {
    if *pos >= tokens.len() {
        return Err(PredicateParseError::UnexpectedEnd);
    }

    let token = &tokens[*pos];

    // $auth.* reference
    if let Some(field) = token.strip_prefix("$auth.") {
        *pos += 1;
        return Ok(PredicateValue::AuthRef(field.to_string()));
    }

    // Quoted string literal
    if token.starts_with('\'') && token.ends_with('\'') && token.len() >= 2 {
        *pos += 1;
        let inner = &token[1..token.len() - 1];
        return Ok(PredicateValue::Literal(serde_json::Value::String(
            inner.to_string(),
        )));
    }

    // Numeric literal
    if token.starts_with(|c: char| c.is_ascii_digit() || c == '-') {
        if let Ok(n) = token.parse::<i64>() {
            *pos += 1;
            return Ok(PredicateValue::Literal(serde_json::json!(n)));
        }
        if let Ok(f) = token.parse::<f64>() {
            *pos += 1;
            return Ok(PredicateValue::Literal(serde_json::json!(f)));
        }
    }

    // Boolean literals
    match token.to_lowercase().as_str() {
        "true" => {
            *pos += 1;
            return Ok(PredicateValue::Literal(serde_json::json!(true)));
        }
        "false" => {
            *pos += 1;
            return Ok(PredicateValue::Literal(serde_json::json!(false)));
        }
        "null" => {
            *pos += 1;
            return Ok(PredicateValue::Literal(serde_json::Value::Null));
        }
        _ => {}
    }

    // Document field identifier (anything that's not a keyword).
    let upper = token.to_uppercase();
    if !matches!(
        upper.as_str(),