@holeauth/rbac-drizzle 0.0.1-alpha.0

package/dist/sqlite/index.d.ts

@@ -0,0 +1,275 @@
+import * as drizzle_orm from 'drizzle-orm';
+import * as drizzle_orm_sqlite_core from 'drizzle-orm/sqlite-core';
+import { SQLiteTableWithColumns } from 'drizzle-orm/sqlite-core';
+import { RbacAdapter } from '@holeauth/plugin-rbac';
+
+type SqliteUsersTable = SQLiteTableWithColumns<any> & {
+    id: any;
+};
+interface CreateRbacTablesOptions<U extends SqliteUsersTable> {
+    usersTable: U;
+    prefix?: string;
+    persistGroups?: boolean;
+}
+declare function createRbacTables<U extends SqliteUsersTable>(opts: CreateRbacTablesOptions<U>): {
+    tables: {
+        userGroups: SQLiteTableWithColumns<{
+            name: string;
+            schema: undefined;
+            columns: {
+                userId: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "user_id";
+                    tableName: string;
+                    dataType: "string";
+                    columnType: "SQLiteText";
+                    data: string;
+                    driverParam: string;
+                    notNull: true;
+                    hasDefault: false;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: [string, ...string[]];
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                groupId: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "group_id";
+                    tableName: string;
+                    dataType: "string";
+                    columnType: "SQLiteText";
+                    data: string;
+                    driverParam: string;
+                    notNull: true;
+                    hasDefault: false;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: [string, ...string[]];
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                assignedAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "assigned_at";
+                    tableName: string;
+                    dataType: "date";
+                    columnType: "SQLiteTimestamp";
+                    data: Date;
+                    driverParam: number;
+                    notNull: true;
+                    hasDefault: true;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: true;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+            };
+            dialect: "sqlite";
+        }>;
+        userPermissions: SQLiteTableWithColumns<{
+            name: string;
+            schema: undefined;
+            columns: {
+                userId: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "user_id";
+                    tableName: string;
+                    dataType: "string";
+                    columnType: "SQLiteText";
+                    data: string;
+                    driverParam: string;
+                    notNull: true;
+                    hasDefault: false;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: [string, ...string[]];
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                node: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "node";
+                    tableName: string;
+                    dataType: "string";
+                    columnType: "SQLiteText";
+                    data: string;
+                    driverParam: string;
+                    notNull: true;
+                    hasDefault: false;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: [string, ...string[]];
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                assignedAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "assigned_at";
+                    tableName: string;
+                    dataType: "date";
+                    columnType: "SQLiteTimestamp";
+                    data: Date;
+                    driverParam: number;
+                    notNull: true;
+                    hasDefault: true;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: true;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+            };
+            dialect: "sqlite";
+        }>;
+        groups?: NonNullable<SQLiteTableWithColumns<{
+            name: string;
+            schema: undefined;
+            columns: {
+                id: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "id";
+                    tableName: string;
+                    dataType: "string";
+                    columnType: "SQLiteText";
+                    data: string;
+                    driverParam: string;
+                    notNull: true;
+                    hasDefault: false;
+                    isPrimaryKey: true;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: [string, ...string[]];
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                displayName: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "display_name";
+                    tableName: string;
+                    dataType: "string";
+                    columnType: "SQLiteText";
+                    data: string;
+                    driverParam: string;
+                    notNull: false;
+                    hasDefault: false;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: [string, ...string[]];
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                description: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "description";
+                    tableName: string;
+                    dataType: "string";
+                    columnType: "SQLiteText";
+                    data: string;
+                    driverParam: string;
+                    notNull: false;
+                    hasDefault: false;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: [string, ...string[]];
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                priority: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "priority";
+                    tableName: string;
+                    dataType: "number";
+                    columnType: "SQLiteInteger";
+                    data: number;
+                    driverParam: number;
+                    notNull: false;
+                    hasDefault: false;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                isDefault: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "is_default";
+                    tableName: string;
+                    dataType: "boolean";
+                    columnType: "SQLiteBoolean";
+                    data: boolean;
+                    driverParam: number;
+                    notNull: true;
+                    hasDefault: true;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                effective: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "effective";
+                    tableName: string;
+                    dataType: "json";
+                    columnType: "SQLiteTextJson";
+                    data: string[];
+                    driverParam: string;
+                    notNull: true;
+                    hasDefault: true;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                permissions: drizzle_orm_sqlite_core.SQLiteColumn<{
+                    name: "permissions";
+                    tableName: string;
+                    dataType: "json";
+                    columnType: "SQLiteTextJson";
+                    data: string[];
+                    driverParam: string;
+                    notNull: true;
+                    hasDefault: true;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+            };
+            dialect: "sqlite";
+        }> | undefined>;
+    };
+    relations: {
+        userGroupsRelations: drizzle_orm.Relations<string, {
+            user: drizzle_orm.One<U["_"]["name"], true>;
+        }>;
+        userPermissionsRelations: drizzle_orm.Relations<string, {
+            user: drizzle_orm.One<U["_"]["name"], true>;
+        }>;
+    };
+};
+type RbacTables = ReturnType<typeof createRbacTables>['tables'];
+interface CreateRbacAdapterOptions {
+    db: any;
+    tables: RbacTables;
+}
+declare function createRbacAdapter(opts: CreateRbacAdapterOptions): RbacAdapter;
+
+export { type CreateRbacAdapterOptions, type CreateRbacTablesOptions, type SqliteUsersTable, createRbacAdapter, createRbacTables };

package/dist/sqlite/index.js

@@ -0,0 +1,96 @@
+import { sqliteTable, integer, text, index, primaryKey } from 'drizzle-orm/sqlite-core';
+import { relations, eq, and } from 'drizzle-orm';
+
+// src/sqlite/index.ts
+function createRbacTables(opts) {
+  const { usersTable, prefix = "holeauth_rbac_", persistGroups = false } = opts;
+  const p = (s) => `${prefix}${s}`;
+  const userGroups = sqliteTable(
+    p("user_group"),
+    {
+      userId: text("user_id").notNull().references(() => usersTable.id, { onDelete: "cascade" }),
+      groupId: text("group_id").notNull(),
+      assignedAt: integer("assigned_at", { mode: "timestamp_ms" }).notNull().$defaultFn(() => /* @__PURE__ */ new Date())
+    },
+    (t) => ({
+      pk: primaryKey({ columns: [t.userId, t.groupId] }),
+      groupIdx: index(`${p("user_group")}_group_idx`).on(t.groupId)
+    })
+  );
+  const userPermissions = sqliteTable(
+    p("user_permission"),
+    {
+      userId: text("user_id").notNull().references(() => usersTable.id, { onDelete: "cascade" }),
+      node: text("node").notNull(),
+      assignedAt: integer("assigned_at", { mode: "timestamp_ms" }).notNull().$defaultFn(() => /* @__PURE__ */ new Date())
+    },
+    (t) => ({ pk: primaryKey({ columns: [t.userId, t.node] }) })
+  );
+  const userGroupsRelations = relations(userGroups, ({ one }) => ({
+    user: one(usersTable, { fields: [userGroups.userId], references: [usersTable.id] })
+  }));
+  const userPermissionsRelations = relations(userPermissions, ({ one }) => ({
+    user: one(usersTable, { fields: [userPermissions.userId], references: [usersTable.id] })
+  }));
+  const groups = persistGroups ? sqliteTable(p("group"), {
+    id: text("id").primaryKey(),
+    displayName: text("display_name"),
+    description: text("description"),
+    priority: integer("priority"),
+    isDefault: integer("is_default", { mode: "boolean" }).notNull().default(false),
+    effective: text("effective", { mode: "json" }).$type().notNull().default([]),
+    permissions: text("permissions", { mode: "json" }).$type().notNull().default([])
+  }) : void 0;
+  return {
+    tables: {
+      userGroups,
+      userPermissions,
+      ...groups ? { groups } : {}
+    },
+    relations: { userGroupsRelations, userPermissionsRelations }
+  };
+}
+function createRbacAdapter(opts) {
+  const { db, tables } = opts;
+  const { userGroups, userPermissions } = tables;
+  return {
+    async listUserGroups(userId) {
+      const rows = await db.select({ groupId: userGroups.groupId }).from(userGroups).where(eq(userGroups.userId, userId));
+      return rows.map((r) => r.groupId);
+    },
+    async assignGroup(userId, groupId) {
+      await db.insert(userGroups).values({ userId, groupId }).onConflictDoNothing();
+    },
+    async removeGroup(userId, groupId) {
+      await db.delete(userGroups).where(and(eq(userGroups.userId, userId), eq(userGroups.groupId, groupId)));
+    },
+    async listUserPermissions(userId) {
+      const rows = await db.select({ node: userPermissions.node }).from(userPermissions).where(eq(userPermissions.userId, userId));
+      return rows.map((r) => r.node);
+    },
+    async grantPermission(userId, node) {
+      await db.insert(userPermissions).values({ userId, node }).onConflictDoNothing();
+    },
+    async revokePermission(userId, node) {
+      await db.delete(userPermissions).where(and(eq(userPermissions.userId, userId), eq(userPermissions.node, node)));
+    },
+    async listAllGroupAssignments() {
+      const rows = await db.select().from(userGroups);
+      return rows.map(
+        (r) => ({
+          userId: r.userId,
+          groupId: r.groupId,
+          assignedAt: r.assignedAt
+        })
+      );
+    },
+    async purgeUser(userId) {
+      await db.delete(userPermissions).where(eq(userPermissions.userId, userId));
+      await db.delete(userGroups).where(eq(userGroups.userId, userId));
+    }
+  };
+}
+
+export { createRbacAdapter, createRbacTables };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/sqlite/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/sqlite/index.ts"],"names":[],"mappings":";;;;AAoBO,SAAS,iBAA6C,IAAA,EAAkC;AAC7F,EAAA,MAAM,EAAE,UAAA,EAAY,MAAA,GAAS,gBAAA,EAAkB,aAAA,GAAgB,OAAM,GAAI,IAAA;AACzE,EAAA,MAAM,IAAI,CAAC,CAAA,KAAc,CAAA,EAAG,MAAM,GAAG,CAAC,CAAA,CAAA;AAEtC,EAAA,MAAM,UAAA,GAAa,WAAA;AAAA,IACjB,EAAE,YAAY,CAAA;AAAA,IACd;AAAA,MACE,MAAA,EAAQ,IAAA,CAAK,SAAS,CAAA,CACnB,OAAA,EAAQ,CACR,UAAA,CAAW,MAAM,UAAA,CAAW,EAAA,EAAI,EAAE,QAAA,EAAU,WAAW,CAAA;AAAA,MAC1D,OAAA,EAAS,IAAA,CAAK,UAAU,CAAA,CAAE,OAAA,EAAQ;AAAA,MAClC,UAAA,EAAY,OAAA,CAAQ,aAAA,EAAe,EAAE,MAAM,cAAA,EAAgB,CAAA,CACxD,OAAA,EAAQ,CACR,UAAA,CAAW,sBAAM,IAAI,MAAM;AAAA,KAChC;AAAA,IACA,CAAC,CAAA,MAAO;AAAA,MACN,EAAA,EAAI,UAAA,CAAW,EAAE,OAAA,EAAS,CAAC,EAAE,MAAA,EAAQ,CAAA,CAAE,OAAO,CAAA,EAAG,CAAA;AAAA,MACjD,QAAA,EAAU,KAAA,CAAM,CAAA,EAAG,CAAA,CAAE,YAAY,CAAC,CAAA,UAAA,CAAY,CAAA,CAAE,EAAA,CAAG,CAAA,CAAE,OAAO;AAAA,KAC9D;AAAA,GACF;AAEA,EAAA,MAAM,eAAA,GAAkB,WAAA;AAAA,IACtB,EAAE,iBAAiB,CAAA;AAAA,IACnB;AAAA,MACE,MAAA,EAAQ,IAAA,CAAK,SAAS,CAAA,CACnB,OAAA,EAAQ,CACR,UAAA,CAAW,MAAM,UAAA,CAAW,EAAA,EAAI,EAAE,QAAA,EAAU,WAAW,CAAA;AAAA,MAC1D,IAAA,EAAM,IAAA,CAAK,MAAM,CAAA,CAAE,OAAA,EAAQ;AAAA,MAC3B,UAAA,EAAY,OAAA,CAAQ,aAAA,EAAe,EAAE,MAAM,cAAA,EAAgB,CAAA,CACxD,OAAA,EAAQ,CACR,UAAA,CAAW,sBAAM,IAAI,MAAM;AAAA,KAChC;AAAA,IACA,CAAC,CAAA,MAAO,EAAE,EAAA,EAAI,WAAW,EAAE,OAAA,EAAS,CAAC,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,IAAI,CAAA,EAAG,CAAA,EAAE;AAAA,GAC5D;AAEA,EAAA,MAAM,sBAAsB,SAAA,CAAU,UAAA,EAAY,CAAC,EAAE,KAAI,MAAO;AAAA,IAC9D,IAAA,EAAM,GAAA,CAAI,UAAA,EAAY,EAAE,QAAQ,CAAC,UAAA,CAAW,MAAM,CAAA,EAAG,UAAA,EAAY,CAAC,UAAA,CAAW,EAAE,GAAG;AAAA,GACpF,CAAE,CAAA;AACF,EAAA,MAAM,2BAA2B,SAAA,CAAU,eAAA,EAAiB,CAAC,EAAE,KAAI,MAAO;AAAA,IACxE,IAAA,EAAM,GAAA,CAAI,UAAA,EAAY,EAAE,QAAQ,CAAC,eAAA,CAAgB,MAAM,CAAA,EAAG,UAAA,EAAY,CAAC,UAAA,CAAW,EAAE,GAAG;AAAA,GACzF,CAAE,CAAA;AAEF,EAAA,MAAM,MAAA,GAAS,aAAA,GACX,WAAA,CAAY,CAAA,CAAE,OAAO,CAAA,EAAG;AAAA,IACtB,EAAA,EAAI,IAAA,CAAK,IAAI,CAAA,CAAE,UAAA,EAAW;AAAA,IAC1B,WAAA,EAAa,KAAK,cAAc,CAAA;AAAA,IAChC,WAAA,EAAa,KAAK,aAAa,CAAA;AAAA,IAC/B,QAAA,EAAU,QAAQ,UAAU,CAAA;AAAA,IAC5B,SAAA,EAAW,OAAA,CAAQ,YAAA,EAAc,EAAE,IAAA,EAAM,SAAA,EAAW,CAAA,CAAE,OAAA,EAAQ,CAAE,OAAA,CAAQ,KAAK,CAAA;AAAA,IAC7E,SAAA,EAAW,IAAA,CAAK,WAAA,EAAa,EAAE,MAAM,MAAA,EAAQ,CAAA,CAAE,KAAA,EAAgB,CAAE,OAAA,EAAQ,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,IACrF,WAAA,EAAa,IAAA,CAAK,aAAA,EAAe,EAAE,MAAM,MAAA,EAAQ,CAAA,CAAE,KAAA,EAAgB,CAAE,OAAA,EAAQ,CAAE,OAAA,CAAQ,EAAE;AAAA,GAC1F,CAAA,GACD,MAAA;AAEJ,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,UAAA;AAAA,MACA,eAAA;AAAA,MACA,GAAI,MAAA,GAAS,EAAE,MAAA,KAAW;AAAC,KAC7B;AAAA,IAKA,SAAA,EAAW,EAAE,mBAAA,EAAqB,wBAAA;AAAyB,GAC7D;AACF;AAUO,SAAS,kBAAkB,IAAA,EAA6C;AAC7E,EAAA,MAAM,EAAE,EAAA,EAAI,MAAA,EAAO,GAAI,IAAA;AACvB,EAAA,MAAM,EAAE,UAAA,EAAY,eAAA,EAAgB,GAAI,MAAA;AACxC,EAAA,OAAO;AAAA,IACL,MAAM,eAAe,MAAA,EAAQ;AAC3B,MAAA,MAAM,OAAO,MAAM,EAAA,CAChB,OAAO,EAAE,OAAA,EAAS,WAAW,OAAA,EAAS,CAAA,CACtC,IAAA,CAAK,UAAU,CAAA,CACf,KAAA,CAAM,GAAG,UAAA,CAAW,MAAA,EAAQ,MAAM,CAAC,CAAA;AACtC,MAAA,OAAQ,IAAA,CAA+B,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,OAAO,CAAA;AAAA,IAC7D,CAAA;AAAA,IACA,MAAM,WAAA,CAAY,MAAA,EAAQ,OAAA,EAAS;AACjC,MAAA,MAAM,EAAA,CAAG,MAAA,CAAO,UAAU,CAAA,CAAE,MAAA,CAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,CAAA,CAAE,mBAAA,EAAoB;AAAA,IAC9E,CAAA;AAAA,IACA,MAAM,WAAA,CAAY,MAAA,EAAQ,OAAA,EAAS;AACjC,MAAA,MAAM,GACH,MAAA,CAAO,UAAU,CAAA,CACjB,KAAA,CAAM,IAAI,EAAA,CAAG,UAAA,CAAW,MAAA,EAAQ,MAAM,GAAG,EAAA,CAAG,UAAA,CAAW,OAAA,EAAS,OAAO,CAAC,CAAC,CAAA;AAAA,IAC9E,CAAA;AAAA,IACA,MAAM,oBAAoB,MAAA,EAAQ;AAChC,MAAA,MAAM,OAAO,MAAM,EAAA,CAChB,OAAO,EAAE,IAAA,EAAM,gBAAgB,IAAA,EAAM,CAAA,CACrC,IAAA,CAAK,eAAe,CAAA,CACpB,KAAA,CAAM,GAAG,eAAA,CAAgB,MAAA,EAAQ,MAAM,CAAC,CAAA;AAC3C,MAAA,OAAQ,IAAA,CAA4B,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAAA,IACvD,CAAA;AAAA,IACA,MAAM,eAAA,CAAgB,MAAA,EAAQ,IAAA,EAAM;AAClC,MAAA,MAAM,EAAA,CAAG,MAAA,CAAO,eAAe,CAAA,CAAE,MAAA,CAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA,CAAE,mBAAA,EAAoB;AAAA,IAChF,CAAA;AAAA,IACA,MAAM,gBAAA,CAAiB,MAAA,EAAQ,IAAA,EAAM;AACnC,MAAA,MAAM,GACH,MAAA,CAAO,eAAe,CAAA,CACtB,KAAA,CAAM,IAAI,EAAA,CAAG,eAAA,CAAgB,MAAA,EAAQ,MAAM,GAAG,EAAA,CAAG,eAAA,CAAgB,IAAA,EAAM,IAAI,CAAC,CAAC,CAAA;AAAA,IAClF,CAAA;AAAA,IACA,MAAM,uBAAA,GAA0B;AAC9B,MAAA,MAAM,OAAO,MAAM,EAAA,CAAG,MAAA,EAAO,CAAE,KAAK,UAAU,CAAA;AAC9C,MAAA,OAAQ,IAAA,CAAiE,GAAA;AAAA,QACvE,CAAC,CAAA,MAA4B;AAAA,UAC3B,QAAQ,CAAA,CAAE,MAAA;AAAA,UACV,SAAS,CAAA,CAAE,OAAA;AAAA,UACX,YAAY,CAAA,CAAE;AAAA,SAChB;AAAA,OACF;AAAA,IACF,CAAA;AAAA,IACA,MAAM,UAAU,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAA,CAAG,OAAO,eAAe,CAAA,CAAE,MAAM,EAAA,CAAG,eAAA,CAAgB,MAAA,EAAQ,MAAM,CAAC,CAAA;AACzE,MAAA,MAAM,EAAA,CAAG,OAAO,UAAU,CAAA,CAAE,MAAM,EAAA,CAAG,UAAA,CAAW,MAAA,EAAQ,MAAM,CAAC,CAAA;AAAA,IACjE;AAAA,GACF;AACF","file":"index.js","sourcesContent":["import {\n  sqliteTable,\n  text,\n  integer,\n  primaryKey,\n  index,\n  type SQLiteTableWithColumns,\n} from 'drizzle-orm/sqlite-core';\nimport { relations, eq, and } from 'drizzle-orm';\nimport type { RbacAdapter, UserGroupAssignment } from '@holeauth/plugin-rbac';\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type SqliteUsersTable = SQLiteTableWithColumns<any> & { id: any };\n\nexport interface CreateRbacTablesOptions<U extends SqliteUsersTable> {\n  usersTable: U;\n  prefix?: string;\n  persistGroups?: boolean;\n}\n\nexport function createRbacTables<U extends SqliteUsersTable>(opts: CreateRbacTablesOptions<U>) {\n  const { usersTable, prefix = 'holeauth_rbac_', persistGroups = false } = opts;\n  const p = (s: string) => `${prefix}${s}`;\n\n  const userGroups = sqliteTable(\n    p('user_group'),\n    {\n      userId: text('user_id')\n        .notNull()\n        .references(() => usersTable.id, { onDelete: 'cascade' }),\n      groupId: text('group_id').notNull(),\n      assignedAt: integer('assigned_at', { mode: 'timestamp_ms' })\n        .notNull()\n        .$defaultFn(() => new Date()),\n    },\n    (t) => ({\n      pk: primaryKey({ columns: [t.userId, t.groupId] }),\n      groupIdx: index(`${p('user_group')}_group_idx`).on(t.groupId),\n    }),\n  );\n\n  const userPermissions = sqliteTable(\n    p('user_permission'),\n    {\n      userId: text('user_id')\n        .notNull()\n        .references(() => usersTable.id, { onDelete: 'cascade' }),\n      node: text('node').notNull(),\n      assignedAt: integer('assigned_at', { mode: 'timestamp_ms' })\n        .notNull()\n        .$defaultFn(() => new Date()),\n    },\n    (t) => ({ pk: primaryKey({ columns: [t.userId, t.node] }) }),\n  );\n\n  const userGroupsRelations = relations(userGroups, ({ one }) => ({\n    user: one(usersTable, { fields: [userGroups.userId], references: [usersTable.id] }),\n  }));\n  const userPermissionsRelations = relations(userPermissions, ({ one }) => ({\n    user: one(usersTable, { fields: [userPermissions.userId], references: [usersTable.id] }),\n  }));\n\n  const groups = persistGroups\n    ? sqliteTable(p('group'), {\n        id: text('id').primaryKey(),\n        displayName: text('display_name'),\n        description: text('description'),\n        priority: integer('priority'),\n        isDefault: integer('is_default', { mode: 'boolean' }).notNull().default(false),\n        effective: text('effective', { mode: 'json' }).$type<string[]>().notNull().default([]),\n        permissions: text('permissions', { mode: 'json' }).$type<string[]>().notNull().default([]),\n      })\n    : undefined;\n\n  return {\n    tables: {\n      userGroups,\n      userPermissions,\n      ...(groups ? { groups } : {}),\n    } as {\n      userGroups: typeof userGroups;\n      userPermissions: typeof userPermissions;\n      groups?: NonNullable<typeof groups>;\n    },\n    relations: { userGroupsRelations, userPermissionsRelations },\n  };\n}\n\ntype RbacTables = ReturnType<typeof createRbacTables>['tables'];\n\nexport interface CreateRbacAdapterOptions {\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  db: any;\n  tables: RbacTables;\n}\n\nexport function createRbacAdapter(opts: CreateRbacAdapterOptions): RbacAdapter {\n  const { db, tables } = opts;\n  const { userGroups, userPermissions } = tables;\n  return {\n    async listUserGroups(userId) {\n      const rows = await db\n        .select({ groupId: userGroups.groupId })\n        .from(userGroups)\n        .where(eq(userGroups.userId, userId));\n      return (rows as { groupId: string }[]).map((r) => r.groupId);\n    },\n    async assignGroup(userId, groupId) {\n      await db.insert(userGroups).values({ userId, groupId }).onConflictDoNothing();\n    },\n    async removeGroup(userId, groupId) {\n      await db\n        .delete(userGroups)\n        .where(and(eq(userGroups.userId, userId), eq(userGroups.groupId, groupId)));\n    },\n    async listUserPermissions(userId) {\n      const rows = await db\n        .select({ node: userPermissions.node })\n        .from(userPermissions)\n        .where(eq(userPermissions.userId, userId));\n      return (rows as { node: string }[]).map((r) => r.node);\n    },\n    async grantPermission(userId, node) {\n      await db.insert(userPermissions).values({ userId, node }).onConflictDoNothing();\n    },\n    async revokePermission(userId, node) {\n      await db\n        .delete(userPermissions)\n        .where(and(eq(userPermissions.userId, userId), eq(userPermissions.node, node)));\n    },\n    async listAllGroupAssignments() {\n      const rows = await db.select().from(userGroups);\n      return (rows as { userId: string; groupId: string; assignedAt: Date }[]).map(\n        (r): UserGroupAssignment => ({\n          userId: r.userId,\n          groupId: r.groupId,\n          assignedAt: r.assignedAt,\n        }),\n      );\n    },\n    async purgeUser(userId) {\n      await db.delete(userPermissions).where(eq(userPermissions.userId, userId));\n      await db.delete(userGroups).where(eq(userGroups.userId, userId));\n    },\n  };\n}\n"]}

package/package.json

@@ -0,0 +1,79 @@
+{
+  "name": "@holeauth/rbac-drizzle",
+  "version": "0.0.1-alpha.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/robert-kratz/holeauth.git",
+    "directory": "packages/rbac-drizzle"
+  },
+  "description": "Drizzle RBAC adapter for @holeauth/plugin-rbac (user-group and user-permission assignments, optional group persistence).",
+  "license": "MIT",
+  "author": "Robert Kratz",
+  "type": "module",
+  "sideEffects": false,
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./pg": {
+      "types": "./dist/pg/index.d.ts",
+      "import": "./dist/pg/index.js",
+      "require": "./dist/pg/index.cjs"
+    },
+    "./mysql": {
+      "types": "./dist/mysql/index.d.ts",
+      "import": "./dist/mysql/index.js",
+      "require": "./dist/mysql/index.cjs"
+    },
+    "./sqlite": {
+      "types": "./dist/sqlite/index.d.ts",
+      "import": "./dist/sqlite/index.js",
+      "require": "./dist/sqlite/index.cjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "peerDependencies": {
+    "drizzle-orm": ">=0.33.0",
+    "@holeauth/plugin-rbac": "0.0.1-alpha.0"
+  },
+  "devDependencies": {
+    "@testcontainers/mysql": "^11.14.0",
+    "@testcontainers/postgresql": "^11.14.0",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^20.16.10",
+    "@types/pg": "^8.11.10",
+    "@vitest/coverage-v8": "^2.1.9",
+    "better-sqlite3": "^12.9.0",
+    "drizzle-orm": "^0.36.0",
+    "mysql2": "^3.22.2",
+    "pg": "^8.13.0",
+    "testcontainers": "^11.14.0",
+    "tsup": "^8.3.0",
+    "typescript": "^5.6.2",
+    "vitest": "^2.1.2",
+    "@holeauth/eslint-config": "0.0.0",
+    "@holeauth/plugin-rbac": "0.0.1-alpha.0",
+    "@holeauth/tsconfig": "0.0.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "clean": "rm -rf dist .turbo",
+    "lint": "echo 'lint skipped'",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests",
+    "test:coverage": "vitest run --coverage"
+  }
+}