@fusebase/fusebase-gate-sdk 2.2.20-sdk.0 → 2.2.20-sdk.1

package/dist/apis/IsolatedStoresApi.d.ts

@@ -5,7 +5,7 @@
  * Domain: isolated-stores
  */
 import type { Client } from "../runtime/transport";
-import type { AdoptIsolatedStoreSqlMigrationBaselineRequestContract, AdoptIsolatedStoreSqlMigrationBaselineResponseContract, ApplyIsolatedStoreSqlMigrationsRequestContract, ApplyIsolatedStoreSqlMigrationsResponseContract, AttachIsolatedStoreSourceScopeRequestContract, AttachIsolatedStoreSourceScopeResponseContract, CreateIsolatedStoreCheckpointRequestContract, CreateIsolatedStoreCheckpointResponseContract, CreateIsolatedStoreRequestContract, CreateIsolatedStoreResponseContract, DeleteIsolatedStoreResponseContract, DeleteIsolatedStoreStageResponseContract, GetIsolatedStoreSqlMigrationStatusRequestContract, GetOrCreateIsolatedStoreRequestContract, GetOrCreateIsolatedStoreResponseContract, InitIsolatedStoreStageRequestContract, InitIsolatedStoreStageResponseContract, IsolatedStoreIdInPathRequired, IsolatedStoreListResponseContract, IsolatedStoreResponseContract, IsolatedStoreRevisionIdInPathRequired, IsolatedStoreRevisionListResponseContract, IsolatedStoreSqlBatchInsertRequestContract, IsolatedStoreSqlBatchInsertResponseContract, IsolatedStoreSqlCountRequestContract, IsolatedStoreSqlCountResponseContract, IsolatedStoreSqlDeleteRequestContract, IsolatedStoreSqlDeleteResponseContract, IsolatedStoreSqlDescribeTableResponseContract, IsolatedStoreSqlExecuteRequestContract, IsolatedStoreSqlExecuteResponseContract, IsolatedStoreSqlImportRequestContract, IsolatedStoreSqlImportResponseContract, IsolatedStoreSqlInsertRequestContract, IsolatedStoreSqlInsertResponseContract, IsolatedStoreSqlListTablesResponseContract, IsolatedStoreSqlMigrationStatusContract, IsolatedStoreSqlQueryRequestContract, IsolatedStoreSqlQueryResponseContract, IsolatedStoreSqlSchemaNameInQueryOptional, IsolatedStoreSqlSelectRequestContract, IsolatedStoreSqlSelectResponseContract, IsolatedStoreSqlStatsResponseContract, IsolatedStoreSqlTableNameInPathRequired, IsolatedStoreSqlUpdateRequestContract, IsolatedStoreSqlUpdateResponseContract, IsolatedStoreStageInPathRequired, IsolatedStoreStageListResponseContract, ListIsolatedStoresAliasLikeInQueryOptional, ListIsolatedStoresClientIdInQueryOptional, orgIdInPathRequired, RepairIsolatedStoreSqlMigrationJournalChecksumsRequestContract, RepairIsolatedStoreSqlMigrationJournalChecksumsResponseContract, RestoreIsolatedStoreRevisionResponseContract } from "../types";
+import type { AdoptIsolatedStoreSqlMigrationBaselineRequestContract, AdoptIsolatedStoreSqlMigrationBaselineResponseContract, ApplyIsolatedStoreSqlMigrationsRequestContract, ApplyIsolatedStoreSqlMigrationsResponseContract, AttachIsolatedStoreSourceScopeRequestContract, AttachIsolatedStoreSourceScopeResponseContract, CreateIsolatedStoreCheckpointRequestContract, CreateIsolatedStoreCheckpointResponseContract, CreateIsolatedStoreRequestContract, CreateIsolatedStoreResponseContract, DeleteIsolatedStoreResponseContract, DeleteIsolatedStoreStageResponseContract, GetIsolatedStoreSqlMigrationStatusRequestContract, GetOrCreateIsolatedStoreRequestContract, GetOrCreateIsolatedStoreResponseContract, InitIsolatedStoreStageRequestContract, InitIsolatedStoreStageResponseContract, IsolatedStoreIdInPathRequired, IsolatedStoreListResponseContract, IsolatedStoreResponseContract, IsolatedStoreRevisionIdInPathRequired, IsolatedStoreRevisionListResponseContract, IsolatedStoreSqlBatchInsertRequestContract, IsolatedStoreSqlBatchInsertResponseContract, IsolatedStoreSqlCountRequestContract, IsolatedStoreSqlCountResponseContract, IsolatedStoreSqlDeleteRequestContract, IsolatedStoreSqlDeleteResponseContract, IsolatedStoreSqlDescribeTableResponseContract, IsolatedStoreSqlExecuteRequestContract, IsolatedStoreSqlExecuteResponseContract, IsolatedStoreSqlImportRequestContract, IsolatedStoreSqlImportResponseContract, IsolatedStoreSqlInsertRequestContract, IsolatedStoreSqlInsertResponseContract, IsolatedStoreSqlListTablesResponseContract, IsolatedStoreSqlMigrationStatusContract, IsolatedStoreSqlQueryRequestContract, IsolatedStoreSqlQueryResponseContract, IsolatedStoreSqlRlsStatusResponseContract, IsolatedStoreSqlSchemaNameInQueryOptional, IsolatedStoreSqlSelectRequestContract, IsolatedStoreSqlSelectResponseContract, IsolatedStoreSqlStatsResponseContract, IsolatedStoreSqlTableNameInPathRequired, IsolatedStoreSqlUpdateRequestContract, IsolatedStoreSqlUpdateResponseContract, IsolatedStoreStageInPathRequired, IsolatedStoreStageListResponseContract, ListIsolatedStoresAliasLikeInQueryOptional, ListIsolatedStoresClientIdInQueryOptional, orgIdInPathRequired, RepairIsolatedStoreSqlMigrationJournalChecksumsRequestContract, RepairIsolatedStoreSqlMigrationJournalChecksumsResponseContract, RestoreIsolatedStoreRevisionResponseContract } from "../types";
 export declare class IsolatedStoresApi {
     private client;
     constructor(client: Client);
@@ -199,6 +199,21 @@ export declare class IsolatedStoresApi {
         headers?: Record<string, string>;
         body: GetIsolatedStoreSqlMigrationStatusRequestContract;
     }): Promise<IsolatedStoreSqlMigrationStatusContract>;
+    /**
+     * Get SQL RLS status
+     * Returns read-only PostgreSQL row-level security introspection for the selected isolated store stage: table RLS flags, FORCE RLS flags, policies, columns, indexes, and table-level warnings. This is intended for Studio/support visibility; policy changes must still flow through app migrations.
+     */
+    getIsolatedStoreSqlRlsStatus(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            storeId: IsolatedStoreIdInPathRequired;
+            stage: IsolatedStoreStageInPathRequired;
+        };
+        query?: {
+            schemaName?: IsolatedStoreSqlSchemaNameInQueryOptional;
+        };
+        headers?: Record<string, string>;
+    }): Promise<IsolatedStoreSqlRlsStatusResponseContract>;
     /**
      * Get SQL stats
      * Returns table-level stats for the selected isolated postgres stage, including tables, columns, row counts, and relation-size hints.

package/dist/apis/IsolatedStoresApi.js

@@ -232,6 +232,21 @@ class IsolatedStoresApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Get SQL RLS status
+     * Returns read-only PostgreSQL row-level security introspection for the selected isolated store stage: table RLS flags, FORCE RLS flags, policies, columns, indexes, and table-level warnings. This is intended for Studio/support visibility; policy changes must still flow through app migrations.
+     */
+    async getIsolatedStoreSqlRlsStatus(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/isolated-stores/:storeId/stages/:stage/sql/rls/status",
+            pathParams: params.path,
+            query: params.query,
+            headers: params.headers,
+            opId: "getIsolatedStoreSqlRlsStatus",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Get SQL stats
      * Returns table-level stats for the selected isolated postgres stage, including tables, columns, row counts, and relation-size hints.

package/dist/types/isolated-store/isolated-store.d.ts

@@ -107,6 +107,76 @@ export interface IsolatedStoreSqlStatsResponseContract {
     totalBytes?: number | null;
     tables: IsolatedStoreSqlTableStatsContract[];
 }
+export type IsolatedStoreSqlRlsWarningCodeContract = "rls_not_enabled" | "rls_not_forced" | "rls_enabled_without_policies";
+export interface IsolatedStoreSqlRlsWarningContract {
+    code: IsolatedStoreSqlRlsWarningCodeContract;
+    message: string;
+}
+export interface IsolatedStoreSqlRlsPolicyContract {
+    policyName: string;
+    command: string;
+    roles: string[];
+    usingExpression?: string | null;
+    withCheckExpression?: string | null;
+}
+export interface IsolatedStoreSqlRlsIndexContract {
+    indexName: string;
+    isUnique: boolean;
+    columnNames: string[];
+    indexDefinition: string;
+}
+export interface IsolatedStoreSqlRlsTableStatusContract {
+    schemaName: string;
+    tableName: string;
+    tableType: string;
+    rlsEnabled: boolean;
+    rlsForced: boolean;
+    columns: IsolatedStoreSqlColumnContract[];
+    indexes: IsolatedStoreSqlRlsIndexContract[];
+    policies: IsolatedStoreSqlRlsPolicyContract[];
+    warnings: IsolatedStoreSqlRlsWarningContract[];
+}
+export interface IsolatedStoreSqlRlsStatusResponseContract {
+    databaseName: string;
+    schemaName: string;
+    tableCount: number;
+    rlsEnabledCount: number;
+    rlsForcedCount: number;
+    tables: IsolatedStoreSqlRlsTableStatusContract[];
+}
+export type IsolatedStoreSqlRlsTableClassificationContract = "tenant" | "user" | "owner_collaborator" | "scoped" | "none" | "technical";
+export interface IsolatedStoreSqlRlsScopeManifestContract {
+    name: string;
+    column: string;
+    setting?: string | null;
+}
+export interface IsolatedStoreSqlRlsTableManifestContract {
+    classification: IsolatedStoreSqlRlsTableClassificationContract;
+    schemaName?: string | null;
+    orgColumn?: string | null;
+    userColumn?: string | null;
+    ownerColumn?: string | null;
+    collaboratorTable?: string | null;
+    scopes?: IsolatedStoreSqlRlsScopeManifestContract[] | null;
+    reason?: string | null;
+}
+export interface IsolatedStoreSqlRlsManifestContract {
+    tables: Record<string, IsolatedStoreSqlRlsTableManifestContract>;
+}
+export type IsolatedStoreSqlRlsValidationWarningCodeContract = "rls_manifest_table_missing" | "rls_manifest_column_missing" | "rls_manifest_index_missing" | "rls_manifest_policy_missing" | "rls_manifest_rls_not_enabled" | "rls_manifest_rls_not_forced" | "rls_manifest_exemption_reason_missing" | "rls_manifest_collaborator_table_missing";
+export interface IsolatedStoreSqlRlsValidationWarningContract {
+    code: IsolatedStoreSqlRlsValidationWarningCodeContract;
+    message: string;
+    tableName: string;
+    schemaName?: string | null;
+    columnName?: string | null;
+}
+export interface IsolatedStoreSqlRlsValidationResultContract {
+    mode: "warn";
+    tableCount: number;
+    warningCount: number;
+    warnings: IsolatedStoreSqlRlsValidationWarningContract[];
+}
 export interface IsolatedStoreSqlMigrationBundleEntryContract {
     version: number;
     name: string;
@@ -173,10 +243,12 @@ export interface IsolatedStoreSqlMigrationStatusContract {
     structuredIssues: IsolatedStoreSqlMigrationIssueContract[];
     appliedMigrations: IsolatedStoreSqlAppliedMigrationContract[];
     pendingMigrations: IsolatedStoreSqlMigrationBundleEntryContract[];
+    rlsValidation?: IsolatedStoreSqlRlsValidationResultContract | null;
 }
 export interface GetIsolatedStoreSqlMigrationStatusRequestContract {
     schemaName?: IsolatedStoreSqlSchemaNameInQueryOptional;
     bundle: IsolatedStoreSqlMigrationBundleContract;
+    rlsManifest?: IsolatedStoreSqlRlsManifestContract | null;
     /** Same optimistic-lock semantics as `applyIsolatedStoreSqlMigrations`; HTTP 409 when the journal tail disagrees. */
     expectedLastAppliedVersion?: number | null;
     expectedLastAppliedChecksum?: string | null;
@@ -189,6 +261,8 @@ export interface ApplyIsolatedStoreSqlMigrationsRequestContract {
      * expected-head validation) but does not execute SQL or write the journal.
      */
     dryRun?: boolean | null;
+    /** Optional warn-only RLS manifest validation for current/post-apply database state. */
+    rlsManifest?: IsolatedStoreSqlRlsManifestContract | null;
     /**
      * Optimistic lock: last applied migration version on the server must match.
      * Omit to skip. Use `null` to require an empty journal (no rows applied).
@@ -211,6 +285,7 @@ export interface ApplyIsolatedStoreSqlMigrationsResponseContract {
 export interface AdoptIsolatedStoreSqlMigrationBaselineRequestContract {
     schemaName?: IsolatedStoreSqlSchemaNameInQueryOptional;
     bundle: IsolatedStoreSqlMigrationBundleContract;
+    rlsManifest?: IsolatedStoreSqlRlsManifestContract | null;
     /** Validate eligibility and return the projected post-adoption status without writing the journal. */
     dryRun?: boolean | null;
 }
@@ -255,6 +330,7 @@ export interface IsolatedStoreSqlDescribeTableResponseContract {
 export interface IsolatedStoreSqlQueryRequestContract {
     sql: string;
     params?: unknown[] | null;
+    rlsContext?: IsolatedStoreSqlRlsContextContract | null;
 }
 export interface IsolatedStoreSqlQueryResultContract {
     command: string;
@@ -268,7 +344,10 @@ export interface IsolatedStoreSqlQueryResponseContract {
 export interface IsolatedStoreSqlExecuteRequestContract {
     sql: string;
     params?: unknown[] | null;
+    rlsContext?: IsolatedStoreSqlRlsContextContract | null;
 }
+export type IsolatedStoreSqlRlsContextValueContract = string | number | boolean | null;
+export type IsolatedStoreSqlRlsContextContract = Record<string, IsolatedStoreSqlRlsContextValueContract>;
 export interface IsolatedStoreSqlExecuteResponseContract {
     result: IsolatedStoreSqlQueryResultContract;
 }
@@ -287,6 +366,7 @@ export interface IsolatedStoreSqlCountRequestContract {
     schemaName?: IsolatedStoreSqlSchemaNameInQueryOptional;
     tableName: string;
     filters?: IsolatedStoreSqlFilterContract[] | null;
+    rlsContext?: IsolatedStoreSqlRlsContextContract | null;
 }
 export interface IsolatedStoreSqlCountResponseContract {
     count: number;
@@ -299,6 +379,7 @@ export interface IsolatedStoreSqlSelectRequestContract {
     sort?: IsolatedStoreSqlSortContract[] | null;
     limit?: number | null;
     offset?: number | null;
+    rlsContext?: IsolatedStoreSqlRlsContextContract | null;
 }
 export interface IsolatedStoreSqlSelectResponseContract {
     columns: string[];
@@ -314,6 +395,7 @@ export interface IsolatedStoreSqlInsertRequestContract {
     tableName: string;
     values: Record<string, unknown>;
     returning?: string[] | null;
+    rlsContext?: IsolatedStoreSqlRlsContextContract | null;
 }
 export interface IsolatedStoreSqlInsertResponseContract {
     rowCount: number;
@@ -324,6 +406,7 @@ export interface IsolatedStoreSqlBatchInsertRequestContract {
     tableName: string;
     rows: Record<string, unknown>[];
     returning?: string[] | null;
+    rlsContext?: IsolatedStoreSqlRlsContextContract | null;
 }
 export interface IsolatedStoreSqlBatchInsertResponseContract {
     rowCount: number;
@@ -338,6 +421,7 @@ export interface IsolatedStoreSqlImportRequestContract {
     columns?: string[] | null;
     hasHeader?: boolean | null;
     nullString?: string | null;
+    rlsContext?: IsolatedStoreSqlRlsContextContract | null;
 }
 export interface IsolatedStoreSqlImportResponseContract {
     imported: true;
@@ -352,6 +436,7 @@ export interface IsolatedStoreSqlUpdateRequestContract {
     filters?: IsolatedStoreSqlFilterContract[] | null;
     allowAll?: boolean | null;
     returning?: string[] | null;
+    rlsContext?: IsolatedStoreSqlRlsContextContract | null;
 }
 export interface IsolatedStoreSqlUpdateResponseContract {
     rowCount: number;
@@ -362,6 +447,7 @@ export interface IsolatedStoreSqlDeleteRequestContract {
     tableName: string;
     filters?: IsolatedStoreSqlFilterContract[] | null;
     allowAll?: boolean | null;
+    rlsContext?: IsolatedStoreSqlRlsContextContract | null;
 }
 export interface IsolatedStoreSqlDeleteResponseContract {
     rowCount: number;
@@ -487,6 +573,29 @@ export declare const IsolatedStoreScopeTypeContract: {
     readonly ParentRow: "parent_row";
     readonly ParentTable: "parent_table";
 };
+export declare const IsolatedStoreSqlRlsWarningCodeContract: {
+    readonly RlsNotEnabled: "rls_not_enabled";
+    readonly RlsNotForced: "rls_not_forced";
+    readonly RlsEnabledWithoutPolicies: "rls_enabled_without_policies";
+};
+export declare const IsolatedStoreSqlRlsTableClassificationContract: {
+    readonly Tenant: "tenant";
+    readonly User: "user";
+    readonly OwnerCollaborator: "owner_collaborator";
+    readonly Scoped: "scoped";
+    readonly None: "none";
+    readonly Technical: "technical";
+};
+export declare const IsolatedStoreSqlRlsValidationWarningCodeContract: {
+    readonly RlsManifestTableMissing: "rls_manifest_table_missing";
+    readonly RlsManifestColumnMissing: "rls_manifest_column_missing";
+    readonly RlsManifestIndexMissing: "rls_manifest_index_missing";
+    readonly RlsManifestPolicyMissing: "rls_manifest_policy_missing";
+    readonly RlsManifestRlsNotEnabled: "rls_manifest_rls_not_enabled";
+    readonly RlsManifestRlsNotForced: "rls_manifest_rls_not_forced";
+    readonly RlsManifestExemptionReasonMissing: "rls_manifest_exemption_reason_missing";
+    readonly RlsManifestCollaboratorTableMissing: "rls_manifest_collaborator_table_missing";
+};
 export declare const IsolatedStoreSqlMigrationIssueCodeContract: {
     readonly IsolatedSqlJournalLongerThanBundle: "isolated_sql_journal_longer_than_bundle";
     readonly IsolatedSqlVersionMismatch: "isolated_sql_version_mismatch";

package/dist/types/isolated-store/isolated-store.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IsolatedStoreSqlImportFormatContract = exports.IsolatedStoreSqlSortDirectionContract = exports.IsolatedStoreSqlFilterOperatorContract = exports.IsolatedStoreSqlMigrationIssueFieldContract = exports.IsolatedStoreSqlMigrationIssueCodeContract = exports.IsolatedStoreScopeTypeContract = exports.IsolatedStoreRevisionKindContract = exports.IsolatedStoreStageStatusContract = exports.IsolatedStoreStatusContract = exports.IsolatedStoreEngineContract = exports.IsolatedStoreTypeContract = void 0;
+exports.IsolatedStoreSqlImportFormatContract = exports.IsolatedStoreSqlSortDirectionContract = exports.IsolatedStoreSqlFilterOperatorContract = exports.IsolatedStoreSqlMigrationIssueFieldContract = exports.IsolatedStoreSqlMigrationIssueCodeContract = exports.IsolatedStoreSqlRlsValidationWarningCodeContract = exports.IsolatedStoreSqlRlsTableClassificationContract = exports.IsolatedStoreSqlRlsWarningCodeContract = exports.IsolatedStoreScopeTypeContract = exports.IsolatedStoreRevisionKindContract = exports.IsolatedStoreStageStatusContract = exports.IsolatedStoreStatusContract = exports.IsolatedStoreEngineContract = exports.IsolatedStoreTypeContract = void 0;
 exports.IsolatedStoreTypeContract = {
     Sql: "sql"
 };
@@ -32,6 +32,29 @@ exports.IsolatedStoreScopeTypeContract = {
     ParentRow: "parent_row",
     ParentTable: "parent_table"
 };
+exports.IsolatedStoreSqlRlsWarningCodeContract = {
+    RlsNotEnabled: "rls_not_enabled",
+    RlsNotForced: "rls_not_forced",
+    RlsEnabledWithoutPolicies: "rls_enabled_without_policies"
+};
+exports.IsolatedStoreSqlRlsTableClassificationContract = {
+    Tenant: "tenant",
+    User: "user",
+    OwnerCollaborator: "owner_collaborator",
+    Scoped: "scoped",
+    None: "none",
+    Technical: "technical"
+};
+exports.IsolatedStoreSqlRlsValidationWarningCodeContract = {
+    RlsManifestTableMissing: "rls_manifest_table_missing",
+    RlsManifestColumnMissing: "rls_manifest_column_missing",
+    RlsManifestIndexMissing: "rls_manifest_index_missing",
+    RlsManifestPolicyMissing: "rls_manifest_policy_missing",
+    RlsManifestRlsNotEnabled: "rls_manifest_rls_not_enabled",
+    RlsManifestRlsNotForced: "rls_manifest_rls_not_forced",
+    RlsManifestExemptionReasonMissing: "rls_manifest_exemption_reason_missing",
+    RlsManifestCollaboratorTableMissing: "rls_manifest_collaborator_table_missing"
+};
 exports.IsolatedStoreSqlMigrationIssueCodeContract = {
     IsolatedSqlJournalLongerThanBundle: "isolated_sql_journal_longer_than_bundle",
     IsolatedSqlVersionMismatch: "isolated_sql_version_mismatch",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusebase/fusebase-gate-sdk",
-  "version": "2.2.20-sdk.0",
+  "version": "2.2.20-sdk.1",
   "description": "TypeScript SDK for Fusebase Gate APIs - Generated from contract introspection",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/release-notes/2.2.20-sdk.1.md

@@ -0,0 +1,9 @@
+# Release Notes 2.2.20-sdk.1
+
+- Current ref: `HEAD`
+- Previous tag: `v2.2.20-sdk.1`
+- Generated at: 2026-05-28T11:36:01.681Z
+
+## Included Drafts
+
+- None

package/release-notes/latest.md

@@ -1,8 +1,8 @@
-# Release Notes 2.2.20-sdk.0
+# Release Notes 2.2.20-sdk.1
 
 - Current ref: `HEAD`
-- Previous tag: `v2.2.20-sdk.0`
-- Generated at: 2026-05-28T11:23:51.209Z
+- Previous tag: `v2.2.20-sdk.1`
+- Generated at: 2026-05-28T11:36:01.681Z
 
 ## Included Drafts
 

package/release-notes/2.2.20-sdk.0.md

@@ -1,9 +0,0 @@
-# Release Notes 2.2.20-sdk.0
-
-- Current ref: `HEAD`
-- Previous tag: `v2.2.20-sdk.0`
-- Generated at: 2026-05-28T11:23:51.209Z
-
-## Included Drafts
-
-- None